last executing test programs: 2m44.070362984s ago: executing program 3 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd0100fddbdf251900000018000180140002006d6163766c616e3000000000000000003c0007800800010005000000080001000600004008000100ff0100000800010005000000080002000000000008000100ff00000008000100"], 0x68}, 0x1, 0x0, 0x0, 0x4054}, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) 2m43.201837089s ago: executing program 3 (id=473): syslog$auto(0x3, &(0x7f00000004c0)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1(\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x88#\tV\x1d.\xdc\x0f\f\xe7\x00\xa3Qk\xa7\x8e_\xf8\xb3\xf1\xa1\xa7\xc4\xd7Z\x87\xe2%\xebO\x80\xa0\x1e\xfb;U3}s\xfe=2\x00'/160, 0xffffffb9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000380)='/dev/tty12\x00', 0x0, 0x0) (async) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0x0) (async) r3 = socket(0x11, 0x2, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x5, 0x37, 0x10000}) (async) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) (async) madvise$auto(0x0, 0x7f, 0xe) (async) ioctl$auto(r1, 0x4b67, r2) (async) sendmsg$auto(r0, &(0x7f0000000140)={&(0x7f0000000080)="6fea8fa554efc54038ca8f6be557150c0193d2f9dbc325a11b7342a997fc519e8faca201899cb36bff8957f7689d7a4f404bdbf5afe0da5b3b4eeefcce483f5adb7b16fb9222e306df1be4852de71b919baa0d9b6a6ef81dc2bf8f1cc0e8144287ad4aea9eb616aaeae4887f2dc395f913447db0fec33a40992f652dfabfa169838a275f21ebdf1f65", 0x4, &(0x7f0000000000)={&(0x7f00000001c0)="aafc0b7f41d86a12c9f1ae8816d6639e8b52b983a6bff6ff3d4f6e5b2f693faa255964c985b57b5b1cfc2b45d724231570ff8bb1b235a5425b6edbe7f0f424fcd3d7b555c9e47f6f842b74cfa27c5fe997ba15de67914c558972650b12da3eff260259b2477411cb979d63bd29e35661277a8d373eb7b43a0a9d6502922a84ee23581547e8e956264c958a4750cf95d0c7a00eb6b86d26ec68723ecabc904ffe3628df0885c230c3e0894f711d8b529d66df3bf51d2c", 0x8}, 0x10, &(0x7f0000000280)="d7e3f08328d6433b214fa17faa5e0ed7a0a2d5eab9a0f8a58a5e4eb35ac5bc69ecc4eb7398a94d59e7ba11be1a8fe75eae83a19c89cf0cc126747323b6237193e66d899cf79c75fc709d9b7110ff9eed6692fec3bae7c2c34167b445a4e0e8a34629fdb5d2ff8d93", 0x95ac, 0x80000001}, 0xfffff9c9) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000340), r0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x8000, 0x0) (async) r4 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x3) mmap$auto(0xfffffffffffffffc, 0x20006, 0x5, 0x50, r4, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) shutdown$auto(r1, 0x4) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) write$auto(0xffffffffffffffff, 0x0, 0xff) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 2m42.847675413s ago: executing program 3 (id=474): syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) shmctl$auto_IPC_SET(0x10000, 0x1, &(0x7f0000000380)={{0x2, 0xee00, 0xee01, 0x0, 0x9, 0x9, 0x9}, 0xb20, 0xfffffffffffffffe, 0x9f51, 0xfffffffffffffffd, @raw=0x7, @raw=0x200000, 0x200, 0x0, &(0x7f0000000840), 0x0}) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/devlink/:ata1--scsi:0:0:0:0/status\x00', 0x202240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @fd}, @typed={0x8, 0x23, 0x0, 0x0, @uid=r0}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xbc, 0xbd, "077654b2f2bbd8d7141e1ae8e3cb242a7f84d4aaaf7882bbc1e06b776aee42ba2b22ec3e5f105cc9dcc7a07681014466444d0f5d0aa1fe95919a7542f3fa6d7127b8feaa81bba78c7e1ad2f6f7067f77ee4d62aa11a410e05e69e852da0a3424203c39b9246b03a754bf57ee97c7275befb35a1cec5addf7ccf2cd79124cbe95c43b83a941bd0e45b04fc683b2f29a1d4a1a38247c7fbe45f0a37acb91106cf0d8c15d6ad8dc08b3aaa41c897a38352e6f57fa3b98016dfb"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @fd}, @typed={0x8, 0x23, 0x0, 0x0, @uid=r0}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xbc, 0xbd, "077654b2f2bbd8d7141e1ae8e3cb242a7f84d4aaaf7882bbc1e06b776aee42ba2b22ec3e5f105cc9dcc7a07681014466444d0f5d0aa1fe95919a7542f3fa6d7127b8feaa81bba78c7e1ad2f6f7067f77ee4d62aa11a410e05e69e852da0a3424203c39b9246b03a754bf57ee97c7275befb35a1cec5addf7ccf2cd79124cbe95c43b83a941bd0e45b04fc683b2f29a1d4a1a38247c7fbe45f0a37acb91106cf0d8c15d6ad8dc08b3aaa41c897a38352e6f57fa3b98016dfb"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x4) sendfile$auto(r3, r3, 0x0, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) 2m42.309534622s ago: executing program 3 (id=475): socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, r1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x100000, 0x806121, 0x6) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40c00, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x7fffffe}, 0x3, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x109000, 0x0) pidfd_send_signal$auto_SIGCONT(r2, 0x12, &(0x7f0000000040)={@_si_pad}, 0x0) 2m41.132335416s ago: executing program 3 (id=477): mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0x8000) (async) socket(0xa, 0x2, 0x73) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000373578bff36d8ccf7cb9", @ANYRES8=r0, @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x4000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000300)='*o\xd3\xa49.\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\x01\xff\xff\xffp\x0e\xd4C\xdc\x84\v\xafz\xfd\r\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x9) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = getpid() sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0xc0) (async) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x41}, 0x6, 0x0) (async) ioctl$auto(r3, 0x40246f4c, 0x38) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) sendmmsg$auto(r1, 0x0, 0x6, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) 2m40.656713661s ago: executing program 3 (id=480): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = setfsuid$auto(0xee00) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x587980, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_CREATE_VM(r1, 0x4048ae9b, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) mremap$auto(0x0, 0x7, 0x3fd8, 0x4e0, 0x200000) write$auto(0x3, 0x0, 0xfdf3) (async) setreuid$auto(r0, r0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) write$auto(r3, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) (async) read$auto(r3, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) (async) rmdir$auto(&(0x7f00000000c0)='./cgroup/file0\x00') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x284101, 0x0) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) 2m25.415757772s ago: executing program 32 (id=480): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = setfsuid$auto(0xee00) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x2, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x587980, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_CREATE_VM(r1, 0x4048ae9b, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) mremap$auto(0x0, 0x7, 0x3fd8, 0x4e0, 0x200000) write$auto(0x3, 0x0, 0xfdf3) (async) setreuid$auto(r0, r0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) write$auto(r3, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x80002, 0x0) (async) read$auto(r3, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_rate\x00', 0x34e6) (async) rmdir$auto(&(0x7f00000000c0)='./cgroup/file0\x00') openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x284101, 0x0) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000040)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) 6.879792868s ago: executing program 1 (id=1037): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf252f000000050013000500000005001500850000000500360004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) 5.848794563s ago: executing program 1 (id=1042): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) timer_gettime$auto(0x10, &(0x7f00000001c0)={{0x0, 0xcd}}) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000300)="8ce968f6d33e1d1a4f6a2f12f470f8cdb7dfeaf02768589362668247de44a359e8d9c13d4e52cc42ef43f1d4c965d3d505ad05f2c97a5541863adc5154e4028bdf351c0900000421cd3d73083f859a25a8b713916bb90e14883914f1b33ebd88ce433cff55ac") r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8740, 0x0) ioctl$auto(r2, 0xc08c5102, 0xffffffffffffffff) socket(0x26, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) mmap$auto(0x38, 0x400008, 0x1, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xfffffffffffff001, 0x4000000000df, 0xeb1, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x18b101, 0x0) ioctl$auto_FS_IOC_ENABLE_VERITY3(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1c0, 0x3, 0x9, 0x6, 0x1, 0xa, 0x0, 0x1}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x400, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab897811056b0001ac097e0a070700000000000000e9ff00", @inferred=r4}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x1, "36a2662b59209f6b791daf044ae6ff089930def80ce2899900", @inferred=0xffffffffffffffff}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) ioctl$auto_SW_SYNC_IOC_INC(r7, 0x40045701, &(0x7f0000000040)=0x44) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) 5.409313623s ago: executing program 1 (id=1046): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x54) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_init$auto(0x5, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 4.770109327s ago: executing program 2 (id=1049): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x161342, 0x100) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6) 4.607495105s ago: executing program 2 (id=1050): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x40, 0x4, 0x62, 0x180000000, 0x9, 0x6d3f, 0x9, 0x0, 0x95]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x3}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000380)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r0}}) socket(0x11, 0x3, 0x8) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0) io_submit$auto(0x2, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x2, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0x1001, 0x0, 0x6}) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0) 4.202452948s ago: executing program 4 (id=1051): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e26, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x8) bind$auto(r1, 0x0, 0x7fffffff) recvmmsg$auto(r1, 0x0, 0x2, 0x2, 0x0) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(0x0, r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, 0x0, 0x20000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc084}, 0x8001) socket(0x2, 0x3, 0xa) bind$auto(0x3, 0x0, 0x7) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0xc0) 4.083728213s ago: executing program 2 (id=1053): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon36\x00', 0x400, 0x0) r0 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) pread64$auto(r0, &(0x7f0000000000)='/sy\x00\x80\x00\x00\x00\x00\x00\x00/de`ug/kfence/\x00\x00\x00\x00cts\x00', 0x1000000008, 0x800) (async) pread64$auto(r0, &(0x7f0000000000)='/sy\x00\x80\x00\x00\x00\x00\x00\x00/de`ug/kfence/\x00\x00\x00\x00cts\x00', 0x1000000008, 0x800) unshare$auto(0x40000080) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r1) ioperm$auto(0x1, 0x1004, 0x7f) (async) ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r2, &(0x7f0000000240)='!', 0x1) r3 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181d01, 0x0) write$auto(r3, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x16) prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) (async) r4 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r4) (async) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xffffffffffff5f53, 0xeb0, r5, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff) (async) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x181201, 0x0) ioctl$auto_SNAPSHOT_AVAIL_SWAP_SIZE(r7, 0x80083313, &(0x7f0000000080)=0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) 3.871024503s ago: executing program 0 (id=1054): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_CLEAR_HALT(r0, 0x4004550e, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) 3.34827241s ago: executing program 4 (id=1055): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf252f000000050013000500000005001500850000000500360004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) 3.342011967s ago: executing program 0 (id=1063): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64ce, 0xffffffffffffd4b4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d2) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x4) socketpair$auto(0x419, 0x400, 0x6, &(0x7f0000000100)=0x6) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/pcm0p/oss\x00', 0x8f3b7a51b80ebc01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f00000001c0)="745782e45027360572000000000000003df6aef92430ffccfbeda49b937f2ce0fef7a84524efd7cb22614a52d672bbc8cae064c97cb1ebd28ed8cba5c103e643ece3dd34a3f8bc7b0fcfa8d999e43684c5cdcbaf31c0540a3869a375835a04febb015d3ba5318fe5811e04228eed4fcaa65149b9da9545fbd323a9547e6436547791a9b4598a1167a4fc6a51d12634b076ae97d819689f9194a8c7f5bbc72599907fba9b16e47492d8c80e6c11448b83ccd6953e6c74", 0xb6) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 3.031613636s ago: executing program 1 (id=1056): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) r1 = io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty41\x00', 0x2800, 0x0) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x80002688, 0x5, 0x0, 0x7) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000000c0), r1) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r3, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x6}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0x9}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x1c, r5, 0xb01, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x117, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000c00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000280)={0x93c, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0xd1}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x5}, @NL80211_ATTR_IE={0x904, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x84, 0x4}}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xd}, @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x93c}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) read$auto(0x3, 0x0, 0x80) 2.761672476s ago: executing program 0 (id=1057): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x9, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xa, 0x8000) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/available_events\x00', 0xa2787, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r2, 0x0, 0x200001) read$auto(r1, 0x0, 0x7) r3 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 2.698027679s ago: executing program 4 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) msgctl$auto_MSG_STAT(0xfffffff8, 0xb, &(0x7f0000000180)={{0x5, 0xee01, 0x0, 0x9, 0xa31, 0xa, 0x7}, &(0x7f00000000c0)=0x4c, &(0x7f0000000100)=0x7, 0xfffffffffffffff7, 0xffffffffffffff13, 0x7fff, 0x1, 0xc5f, 0x90c0, 0x8000, 0x0, @raw=0x8, @raw=0x3}) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000ffdbdf250e00000024000180080062000600000008003700", @ANYRES32=r2, @ANYBLOB="08001b00070000000800d100", @ANYRES32=r0, @ANYBLOB="f41053f01b963556ba230c5afd906a03cfe79de2a94ba22fdbb0f5ca8c8366396688d0dc59283c4b3fe0d98aa730ed072f68f46311a380078fb1969785dcdffdc94d56317c785a58b3d80061166eeedb9aff7797427e"], 0x38}, 0x1, 0x0, 0x0, 0x20008090}, 0x814) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvtap0/disable_policy\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) 2.500987614s ago: executing program 1 (id=1059): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x161342, 0x100) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x112) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x6) 2.330136402s ago: executing program 4 (id=1060): mmap$auto(0x0, 0x6, 0xe0, 0x9b72, 0x2, 0x8002) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x594d0417, 0x0, 0x1000004, &(0x7f0000000080)={{0x20000009, 0x4}, {0x4, 0xfffffffffffffff9}, 0x3ff, 0x281, 0x8000000000000000, 0xffffffffffffffff, 0x7f, 0x9, 0x1, 0x0, 0x4, 0x8000, 0x2, 0x6, 0x8, 0x12}) mmap$auto(0x0, 0x400005, 0x840000000000df, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip6_tables_matches\x00', 0x20000, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x20000001002}, 0x1, &(0x7f0000000040)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) rename$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x20, &(0x7f0000000080)={0x0, 0xfffc}, 0x4, 0x0, 0x5, 0x20b}, 0xfff}, 0x8, 0x311) ioctl$auto(r0, 0x541b, r0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYRES32=r2], 0x2a8}}, 0x40000) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf253f0000000400870005007400020000000b001800f5d341ab1f91fc00"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) sendfile$auto(r2, r2, 0x0, 0x9) fanotify_mark$auto(0xffffffffffffffff, 0x72d, 0x800, 0xffffffffffffffff, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(r0, 0x0, 0x2) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc9, 0xfffffffffffffffc, 0xfd72) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11FCSErrorCount\x00', 0x100, 0x0) write$auto(r4, 0x0, 0x9) 1.875553635s ago: executing program 1 (id=1061): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf252f000000050013000500000005001500850000000500360004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) 1.874220265s ago: executing program 0 (id=1070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r0) msgctl$auto_MSG_STAT(0xfffffff8, 0xb, &(0x7f0000000180)={{0x5, 0xee01, 0x0, 0x9, 0xa31, 0xa, 0x7}, &(0x7f00000000c0)=0x4c, &(0x7f0000000100)=0x7, 0xfffffffffffffff7, 0xffffffffffffff13, 0x7fff, 0x1, 0xc5f, 0x90c0, 0x8000, 0x0, @raw=0x8, @raw=0x3}) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000ffdbdf250e00000024000180080062000600000008003700", @ANYRES32=r2, @ANYBLOB="08001b00070000000800d100", @ANYRES32=r0, @ANYBLOB="f41053f01b963556ba230c5afd906a03cfe79de2a94ba22fdbb0f5ca8c8366396688d0dc59283c4b3fe0d98aa730ed072f68f46311a380078fb1969785dcdffdc94d56317c785a58b3d80061166eeedb9aff7797427e"], 0x38}, 0x1, 0x0, 0x0, 0x20008090}, 0x814) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvtap0/disable_policy\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xca, 0x0, 0x2d9) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) 1.755440981s ago: executing program 2 (id=1062): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffd45, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) mmap$auto(0x0, 0x20009, 0x1003, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x80805, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(r5, 0x10000000084, 0x64, 0x0, 0x2) ioctl$auto(0x3, 0x4020565b, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/net/ip_mr_vif\x00', 0x40900, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/gs_usb/uevent\x00', 0x800, 0x0) pread64$auto(r7, 0x0, 0x594c, 0x9fffffffd) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a8935ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) read$auto_nvram_misc_fops_nvram(r0, 0x0, 0x0) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x2140, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r9, 0x40284504, &(0x7f0000000040)={0x3, 0x4, 0x5, 0x2, "582f742644b9cc811cbc78f6896cbc4402e8fd29489dfc6941ee6d502cf71c88"}) 1.537266288s ago: executing program 2 (id=1064): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/libceph/parameters/supported_features\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003940)=""/4121, 0x1019) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) socket(0x21, 0x1, 0xe) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000280)="9176220242b0d009bcc220ff494a1b72f92d3be7831bd5e17244dbb1bc94f99fc9131574e42d1fe6587a16a0b7a9d6a2a4275451d12aebea26ee659565dc38aaf1993d09fe758228d4cf2e29e683a5", 0xffffffffffffffef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munlock$auto(0xffff, 0x1) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) 1.40406882s ago: executing program 0 (id=1065): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/suid_dumpable\x00', 0x1a9442, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="00082abd7000fddbdf251a00000050000180080004000fb0000008000300f9000000080003000800000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200626f6e645f736c6176655f31000000000800040002000000080003000100000048000180140002007866726d30000000000000000000000008000400020000001400020065727370616e3000000000000000000014000200768b7468315f746f5f627269646765000c00018008000300485900001400018008000100", @ANYRES32=r5, @ANYBLOB="0800040000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8081}, 0x20000880) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000380)='/dev/usbmon14\x00', 0x101000, 0x0) ioctl$auto_VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) 977.146659ms ago: executing program 0 (id=1066): read$auto(0xffffffffffffffff, 0x0, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_rt={0xffffffffffffffff, 0xee00, @sival_ptr=&(0x7f0000000200)="d6d36a9264dc4e5dc340"}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0xf0}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0xa000, 0xffffffffffffffff, 0x3, 0xf8c5, 0x1000, 0x81, 0x9, 0xd}) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\xfc\x00/\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x01\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea!,[\x91\x8e\x1b\x95\xafQ?CL\"\x01\x0e#\xae\xa9|8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0\x12\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12mwU&[\xde?\x9a$\xb2\xd5\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00', 0xfdee, 0x1) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 944.284689ms ago: executing program 4 (id=1067): write$auto(0xffffffffffffffff, &(0x7f0000000180)='7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,X\xb9\x0e\x11\xfb\x00\x00\x00\x00&!\x8f-\xfb\xea=\xc0\\\xec\xe7D\xe5V\xf1b\xa0\x9a\xa1\x88\xb4\x96\xf5\\\xad4\t\xca\x03\xe4\x15\v]\x00'/67, 0x81) (async) r0 = timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) (async) r1 = mq_open$auto(0x0, 0x7d, 0x9, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0800250a00000041de00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r4 = open_by_handle_at$auto(r3, &(0x7f0000000000)={0x8, 0x2, "8b00000000000000"}, 0x370) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/split_deferred\x00', 0x80404, 0x0) read$auto(r5, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26odescri\x00\x00\x00\x00s\x00', 0x7) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000000), 0x2}, 0x6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/tables/WAET\x00', 0x14b142, 0x0) (async) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\#[./\',-\x00', 0x7d, 0x9, 0x0) socket(0x1d, 0x2, 0x0) (async) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) (async) ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)=0x4) (async) setsockopt$auto_SO_ATTACH_FILTER(r7, 0x100, 0x1a, &(0x7f0000000000)='@*!:}\xc1-.!\\#[./\',-\x00', 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44895}, 0x200480d4) sendfile$auto(r7, r7, 0x0, 0x2f2) mmap$auto(0x8, 0x4020009, 0xe3, 0x13, 0x401, 0x8) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) mknod$auto(0x0, 0x1001, 0x804) socket(0x1f, 0x6, 0x0) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) 255.704µs ago: executing program 2 (id=1068): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf252f000000050013000500000005001500850000000500360004"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) 0s ago: executing program 4 (id=1069): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/snd-usb-hiface/remove_id\x00', 0x103841, 0x0) write$auto(r0, &(0x7f0000003080)='/sys/devices/virtual/tty/ptyw9/power/runtime_status\x00', 0x13) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket(0x11, 0x3, 0x2) getsockopt$auto(r2, 0x107, 0xc, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000300)="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", 0x17d) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.7/usb8/power/active_duration\x00', 0xc8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000001c0)=""/26, 0x1a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x23, 0x2, 0x0) ioctl$auto(r6, 0x89ef, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) pipe$auto(&(0x7f0000000180)=r1) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/kvm/blocking\x00', 0x1, 0x0) r8 = openat2$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x8001, 0x1, 0x7fff}, 0xa3) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000000c0)="335875cd18d50530a7c830ca9b1b8c7c4f8184eceeaf9dbb4e6d036332e8f5944cf6847a525edc", 0x101) memfd_create$auto(&(0x7f0000000080)='\x00', 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r9, r9, 0x0, 0x1) r10 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r10, 0x0, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="151f2cbd7000fbdbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000540)={{0x7fffffffffffffff, 0x6}, {0x1, 0x6}}, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r8, 0x878, &(0x7f0000000200)={@siginfo_0_0={0xf0, 0x7, 0x59dcfd81, @_sigfault={&(0x7f00000001c0), @_addr_lsb=0x2}}}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/link_mode\x00', 0x80102, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): 0279][ T5986] RSP: 002b:00007fe2a07050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 102.600307][ T5986] RAX: ffffffffffffffda RBX: 00007fe29f9e5fa8 RCX: 00007fe29f78f749 [ 102.600325][ T5986] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe29f9e5fac [ 102.600340][ T5986] RBP: 00007fe29f9e5fa0 R08: 00007fe2a0706000 R09: 0000000000000000 [ 102.600357][ T5986] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 102.600373][ T5986] R13: 00007fe29f9e6038 R14: 00007ffc47fed360 R15: 00007ffc47fed448 [ 102.600415][ T5986] [ 104.663240][ T6032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.194546][ T6022] syz.2.21 (6022) used greatest stack depth: 19720 bytes left [ 105.586802][ T6044] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 108.201830][ T6072] QAT: failed to copy from user. [ 109.460020][ T6096] netlink: 342 bytes leftover after parsing attributes in process `syz.0.39'. [ 109.492043][ T6096] IPv6: NLM_F_CREATE should be specified when creating new route [ 109.762662][ T30] audit: type=1800 audit(1763702657.726:2): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.41" name="dbroot" dev="configfs" ino=8982 res=0 errno=0 [ 110.521599][ T6103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.320886][ T6144] random: crng reseeded on system resumption [ 113.596374][ T6150] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 113.600872][ T6151] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 113.621868][ T6152] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 114.435684][ T30] audit: type=1800 audit(1763702662.406:3): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.54" name="dbroot" dev="configfs" ino=9357 res=0 errno=0 [ 115.471167][ T6189] netlink: 504 bytes leftover after parsing attributes in process `syz.3.56'. [ 115.634594][ T6194] sd 0:0:1:0: PR command failed: 1026 [ 115.655166][ T6194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 115.687307][ T6194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 116.648632][ T6204] zswap: compressor not available [ 117.367150][ T6241] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 117.966312][ T6253] zram0: detected capacity change from 0 to 8 [ 117.999083][ T30] audit: type=1800 audit(1763702665.966:4): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.73" name="dbroot" dev="configfs" ino=9588 res=0 errno=0 [ 119.227448][ T6278] FAULT_INJECTION: forcing a failure. [ 119.227448][ T6278] name fail_futex, interval 1, probability 0, space 0, times 0 [ 119.250011][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.1.79 Not tainted syzkaller #0 PREEMPT(full) [ 119.250056][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.250072][ T6278] Call Trace: [ 119.250081][ T6278] [ 119.250092][ T6278] dump_stack_lvl+0x16c/0x1f0 [ 119.250132][ T6278] should_fail_ex+0x512/0x640 [ 119.250175][ T6278] ? kfree+0x2b8/0x6d0 [ 119.250207][ T6278] get_futex_key+0x1d0/0x1560 [ 119.250256][ T6278] ? __pfx_get_futex_key+0x10/0x10 [ 119.250307][ T6278] futex_wake+0xea/0x530 [ 119.250358][ T6278] ? __pfx_futex_wake+0x10/0x10 [ 119.250420][ T6278] ? rcu_is_watching+0x12/0xc0 [ 119.250453][ T6278] ? kasan_quarantine_put+0x10a/0x240 [ 119.250489][ T6278] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.250533][ T6278] do_futex+0x1e3/0x350 [ 119.250576][ T6278] ? __pfx_do_futex+0x10/0x10 [ 119.250615][ T6278] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 119.250665][ T6278] ? snd_ctl_ioctl+0x2c9/0xf80 [ 119.250705][ T6278] __x64_sys_futex+0x1e0/0x4c0 [ 119.250751][ T6278] ? __fget_files+0x20e/0x3c0 [ 119.250782][ T6278] ? __pfx___x64_sys_futex+0x10/0x10 [ 119.250830][ T6278] ? fput+0x9b/0xd0 [ 119.250879][ T6278] do_syscall_64+0xcd/0xfa0 [ 119.250922][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.250950][ T6278] RIP: 0033:0x7f3f8c78f749 [ 119.250976][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.251006][ T6278] RSP: 002b:00007f3f8d6010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.251037][ T6278] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa8 RCX: 00007f3f8c78f749 [ 119.251055][ T6278] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3f8c9e5fac [ 119.251072][ T6278] RBP: 00007f3f8c9e5fa0 R08: 00007f3f8d602000 R09: 0000000000000000 [ 119.251090][ T6278] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.251107][ T6278] R13: 00007f3f8c9e6038 R14: 00007ffe808d01a0 R15: 00007ffe808d0288 [ 119.251148][ T6278] [ 119.468822][ T6282] netlink: 342 bytes leftover after parsing attributes in process `syz.1.79'. [ 119.468854][ T6282] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.638544][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 120.041310][ T6302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.231048][ T6317] ptrace attach of ""[6325] was attempted by "./syz-executor exec"[6317] [ 121.357715][ T6327] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 122.192370][ T6342] netlink: 146 bytes leftover after parsing attributes in process `syz.1.90'. [ 122.206556][ T6346] usb usb8: usbfs: process 6346 (syz.2.91) did not claim interface 9 before use [ 122.908443][ T6358] FAULT_INJECTION: forcing a failure. [ 122.908443][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 122.922211][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 122.922231][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.922240][ T6358] Call Trace: [ 122.922247][ T6358] [ 122.922253][ T6358] dump_stack_lvl+0x16c/0x1f0 [ 122.922276][ T6358] should_fail_ex+0x512/0x640 [ 122.922298][ T6358] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 122.922316][ T6358] should_failslab+0xc2/0x120 [ 122.922337][ T6358] kmem_cache_alloc_noprof+0x75/0x6e0 [ 122.922350][ T6358] ? copy_time_ns+0x346/0x510 [ 122.922366][ T6358] ? copy_net_ns+0x31f/0x690 [ 122.922382][ T6358] ? copy_fs_struct+0x49/0x340 [ 122.922425][ T6358] ? copy_fs_struct+0x49/0x340 [ 122.922445][ T6358] copy_fs_struct+0x49/0x340 [ 122.922466][ T6358] __do_sys_setns+0x50e/0x1920 [ 122.922484][ T6358] ? fput+0x9b/0xd0 [ 122.922503][ T6358] ? __pfx___do_sys_setns+0x10/0x10 [ 122.922526][ T6358] do_syscall_64+0xcd/0xfa0 [ 122.922545][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.922560][ T6358] RIP: 0033:0x7fe16cd8f749 [ 122.922578][ T6358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.922592][ T6358] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 122.922605][ T6358] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 122.922614][ T6358] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000007 [ 122.922622][ T6358] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.922631][ T6358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.922639][ T6358] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 122.922662][ T6358] [ 125.338872][ T6421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.229277][ T52] Bluetooth: hci2: Malformed Event: 0x02 [ 128.009374][ T6471] ubi0: attaching mtd0 [ 128.033732][ T6471] ubi0: scanning is finished [ 128.038400][ T6471] ubi0: empty MTD device detected [ 128.069502][ T6485] program syz.1.113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.371916][ T6471] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 128.396662][ T6471] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 128.410351][ T6471] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 128.475677][ T6471] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 128.484222][ T6471] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 128.491281][ T6471] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 128.500141][ T6471] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1777521036 [ 128.512374][ T6471] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 128.524022][ T6479] ubi0: detaching mtd0 [ 128.664767][ T6479] ubi0: mtd0 is detached [ 129.519545][ T6498] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.542035][ T6496] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 129.742686][ T6498] TCP: TCP_TX_DELAY enabled [ 129.911465][ T6503] queue_state_write: operation too long [ 129.940852][ T6503] queue_state_write: use 'run', 'start' or 'kick' [ 132.128334][ T6546] netlink: 252 bytes leftover after parsing attributes in process `syz.3.122'. [ 133.201327][ T6568] mmap: syz.1.129 (6568) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.845465][ T6581] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.397352][ T6636] binder: 6633:6636 ioctl c0306201 0 returned -14 [ 135.515064][ T6641] FAULT_INJECTION: forcing a failure. [ 135.515064][ T6641] name failslab, interval 1, probability 0, space 0, times 0 [ 135.606757][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(full) [ 135.606787][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.606800][ T6641] Call Trace: [ 135.606806][ T6641] [ 135.606814][ T6641] dump_stack_lvl+0x16c/0x1f0 [ 135.606850][ T6641] should_fail_ex+0x512/0x640 [ 135.606882][ T6641] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 135.606906][ T6641] should_failslab+0xc2/0x120 [ 135.606935][ T6641] kmem_cache_alloc_noprof+0x75/0x6e0 [ 135.606954][ T6641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.606987][ T6641] ? mas_preallocate+0xe6a/0x11f0 [ 135.607022][ T6641] ? mas_preallocate+0xe6a/0x11f0 [ 135.607049][ T6641] mas_preallocate+0xe6a/0x11f0 [ 135.607082][ T6641] ? __pfx_mas_preallocate+0x10/0x10 [ 135.607109][ T6641] ? rcu_is_watching+0x12/0xc0 [ 135.607142][ T6641] ? anon_vma_name+0x81/0x2f0 [ 135.607178][ T6641] __split_vma+0x34a/0x1070 [ 135.607203][ T6641] ? __pfx___split_vma+0x10/0x10 [ 135.607237][ T6641] ? __pfx_mas_prev+0x10/0x10 [ 135.607282][ T6641] vms_gather_munmap_vmas+0x3aa/0x1340 [ 135.607318][ T6641] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 135.607365][ T6641] ? __lock_acquire+0xb8a/0x1c90 [ 135.607409][ T6641] ? kvm_sched_clock_read+0x11/0x20 [ 135.607441][ T6641] ? sched_clock+0x38/0x60 [ 135.607481][ T6641] do_vmi_align_munmap+0x286/0x7e0 [ 135.607516][ T6641] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 135.607602][ T6641] do_vmi_munmap+0x204/0x3e0 [ 135.607636][ T6641] do_munmap+0xb6/0xf0 [ 135.607674][ T6641] ? __pfx_do_munmap+0x10/0x10 [ 135.607719][ T6641] ? may_expand_vm+0xe8/0x430 [ 135.607767][ T6641] mremap_to+0x236/0x450 [ 135.607798][ T6641] do_mremap+0xd89/0x2020 [ 135.607830][ T6641] ? futex_private_hash_put+0xd5/0x190 [ 135.607869][ T6641] ? futex_hash_put+0x3e/0x50 [ 135.607902][ T6641] ? futex_wake+0x1ad/0x530 [ 135.607949][ T6641] ? __pfx_do_mremap+0x10/0x10 [ 135.607975][ T6641] ? __pfx_futex_wake+0x10/0x10 [ 135.608042][ T6641] __do_sys_mremap+0x119/0x170 [ 135.608071][ T6641] ? __pfx___do_sys_mremap+0x10/0x10 [ 135.608110][ T6641] ? __x64_sys_futex+0x1e0/0x4c0 [ 135.608177][ T6641] do_syscall_64+0xcd/0xfa0 [ 135.608217][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.608248][ T6641] RIP: 0033:0x7f3f8c78f749 [ 135.608271][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.608316][ T6641] RSP: 002b:00007f3f8d5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 135.608353][ T6641] RAX: ffffffffffffffda RBX: 00007f3f8c9e6090 RCX: 00007f3f8c78f749 [ 135.608371][ T6641] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 000000110c230000 [ 135.608388][ T6641] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 135.608404][ T6641] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 135.608421][ T6641] R13: 00007f3f8c9e6128 R14: 00007f3f8c9e6090 R15: 00007ffe808d0288 [ 135.608459][ T6641] [ 137.463769][ T6696] process 'syz.0.158' launched ':,' with NULL argv: empty string added [ 137.488621][ T52] Bluetooth: hci1: Malformed Event: 0x02 [ 138.170128][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 138.179808][ T6715] netlink: 25 bytes leftover after parsing attributes in process `syz.0.162'. [ 138.185161][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.196256][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.475177][ T6719] futex_wake_op: syz.0.164 tries to shift op by -2048; fix this program [ 139.289089][ T6735] Format for linking two devices is "netnsfd_a:ifidx_a netnsfd_b:ifidx_b" (int uint int uint). [ 141.087093][ T6779] netlink: 17 bytes leftover after parsing attributes in process `syz.2.178'. [ 141.488406][ T6791] FAULT_INJECTION: forcing a failure. [ 141.488406][ T6791] name failslab, interval 1, probability 0, space 0, times 0 [ 141.538340][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT(full) [ 141.538388][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 141.538403][ T6791] Call Trace: [ 141.538412][ T6791] [ 141.538424][ T6791] dump_stack_lvl+0x16c/0x1f0 [ 141.538465][ T6791] should_fail_ex+0x512/0x640 [ 141.538507][ T6791] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 141.538542][ T6791] should_failslab+0xc2/0x120 [ 141.538580][ T6791] kmem_cache_alloc_noprof+0x75/0x6e0 [ 141.538611][ T6791] ? alloc_empty_file+0x55/0x1e0 [ 141.538657][ T6791] ? alloc_empty_file+0x55/0x1e0 [ 141.538694][ T6791] ? _raw_spin_unlock+0x28/0x50 [ 141.538722][ T6791] alloc_empty_file+0x55/0x1e0 [ 141.538760][ T6791] alloc_file_pseudo+0x13a/0x230 [ 141.538803][ T6791] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 141.538846][ T6791] ? do_raw_spin_unlock+0x172/0x230 [ 141.538878][ T6791] __anon_inode_getfile+0xe8/0x280 [ 141.538919][ T6791] anon_inode_getfile_fmode+0x37/0xa0 [ 141.538956][ T6791] __do_sys_fanotify_init+0x9da/0xc80 [ 141.539005][ T6791] do_syscall_64+0xcd/0xfa0 [ 141.539043][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.539073][ T6791] RIP: 0033:0x7fb1d7f8f749 [ 141.539097][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.539124][ T6791] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 141.539152][ T6791] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 141.539171][ T6791] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 141.539188][ T6791] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.539206][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.539223][ T6791] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 141.539262][ T6791] [ 142.544826][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.185'. [ 142.576464][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.701380][ T6813] bridge_slave_1 (unregistering): left allmulticast mode [ 142.713055][ T6813] bridge_slave_1 (unregistering): left promiscuous mode [ 142.749434][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.854335][ T6824] capability: warning: `syz.3.187' uses 32-bit capabilities (legacy support in use) [ 143.269936][ T6839] input:  as /devices/virtual/input/input6 [ 144.383144][ T6849] program syz.3.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.718818][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 152.845765][ T7003] random: crng reseeded on system resumption [ 153.318681][ T7018] FAULT_INJECTION: forcing a failure. [ 153.318681][ T7018] name failslab, interval 1, probability 0, space 0, times 0 [ 153.337379][ T7017] CIFS: VFS: Invalid SecurityFlags: [ 153.347069][ T7018] CPU: 0 UID: 0 PID: 7018 Comm: syz.0.225 Not tainted syzkaller #0 PREEMPT(full) [ 153.347090][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.347098][ T7018] Call Trace: [ 153.347103][ T7018] [ 153.347108][ T7018] dump_stack_lvl+0x16c/0x1f0 [ 153.347131][ T7018] should_fail_ex+0x512/0x640 [ 153.347154][ T7018] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 153.347172][ T7018] should_failslab+0xc2/0x120 [ 153.347192][ T7018] kmem_cache_alloc_noprof+0x75/0x6e0 [ 153.347206][ T7018] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 153.347221][ T7018] ? alloc_empty_file+0x55/0x1e0 [ 153.347249][ T7018] ? alloc_empty_file+0x55/0x1e0 [ 153.347275][ T7018] alloc_empty_file+0x55/0x1e0 [ 153.347304][ T7018] path_openat+0xda/0x2cb0 [ 153.347344][ T7018] ? __pfx_path_openat+0x10/0x10 [ 153.347365][ T7018] ? __lock_acquire+0xb8a/0x1c90 [ 153.347388][ T7018] do_filp_open+0x20b/0x470 [ 153.347404][ T7018] ? __pfx_do_filp_open+0x10/0x10 [ 153.347433][ T7018] ? alloc_fd+0x471/0x7d0 [ 153.347453][ T7018] do_sys_openat2+0x11b/0x1d0 [ 153.347474][ T7018] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.347494][ T7018] ? putname+0x154/0x1a0 [ 153.347518][ T7018] __x64_sys_openat+0x174/0x210 [ 153.347540][ T7018] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.347569][ T7018] do_syscall_64+0xcd/0xfa0 [ 153.347591][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.347605][ T7018] RIP: 0033:0x7fb1d7f8f749 [ 153.347617][ T7018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.347630][ T7018] RSP: 002b:00007fb1d8deb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.347644][ T7018] RAX: ffffffffffffffda RBX: 00007fb1d81e6180 RCX: 00007fb1d7f8f749 [ 153.347653][ T7018] RDX: 0000000000000040 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 153.347661][ T7018] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.347669][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.347677][ T7018] R13: 00007fb1d81e6218 R14: 00007fb1d81e6180 R15: 00007ffcaebbac58 [ 153.347695][ T7018] [ 154.866850][ T7038] kAFS: No cell specified [ 161.037880][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 161.461060][ T7096] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 161.467943][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.150130][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.160578][ T7096] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 162.168545][ T7096] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.175144][ T7096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.183271][ T7096] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 162.199032][ T7096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.205462][ T7096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.213627][ T7096] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.222964][ T7096] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.229421][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.237534][ T7096] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.540613][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.814453][ T7156] cifs: Unknown parameter 'T.ŸÜÛæ¨Å¼c[ŸÐê€$âæµÈ)ü±UóÑnEó-Ê™¾l®öÚ-ºŒ -¾_€™¯Ôåáª5Z äoåé¢mžÐfwYÍhº*/ÿxDlÝ©Š×ígÕkÇAí³ùÏ7ÍØØ9’ôXöa/fê_ÿAR£ˆ™‘ÈxM ‚v¬—pÿ±$^;ôØq‡3±«£n졵-6©+e„k„¾ñÇ<°kœcÔ)n.üeMÍ÷Na¨t®ÐSMÎÆ1,' [ 163.924342][ T7156] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 164.182569][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.260587][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.267339][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.594424][ T7184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'. [ 165.211025][ T7191] binder: 7188:7191 ioctl c018620c 0 returned -14 [ 165.453560][ T7204] netlink: 'syz.1.266': attribute type 15 has an invalid length. [ 165.484080][ T7204] netlink: 186 bytes leftover after parsing attributes in process `syz.1.266'. [ 165.620386][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.277106][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.344066][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.350381][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.526066][ T30] audit: type=1800 audit(42001.234:5): pid=7247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.275" name="trace_pipe" dev="tracefs" ino=1287 res=0 errno=0 [ 167.773059][ T7247] GUP no longer grows the stack in syz.1.275 (7247): 14000-18000 (4000) [ 167.783003][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.1.275 Not tainted syzkaller #0 PREEMPT(full) [ 167.783045][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.783062][ T7247] Call Trace: [ 167.783072][ T7247] [ 167.783082][ T7247] dump_stack_lvl+0x16c/0x1f0 [ 167.783124][ T7247] gup_vma_lookup+0x1d2/0x220 [ 167.783166][ T7247] __get_user_pages+0x241/0x3530 [ 167.783218][ T7247] ? find_held_lock+0x2b/0x80 [ 167.783250][ T7247] ? __pfx___get_user_pages+0x10/0x10 [ 167.783302][ T7247] get_user_pages_remote+0x243/0xab0 [ 167.783352][ T7247] ? __pfx_get_user_pages_remote+0x10/0x10 [ 167.783395][ T7247] ? __pfx___might_resched+0x10/0x10 [ 167.783428][ T7247] ? noop_dirty_folio+0x5e/0xb0 [ 167.783470][ T7247] __access_remote_vm+0x250/0xaa0 [ 167.783520][ T7247] ? __pfx___access_remote_vm+0x10/0x10 [ 167.783572][ T7247] mem_rw+0x20e/0x640 [ 167.783605][ T7247] ? __pfx_mem_write+0x10/0x10 [ 167.783628][ T7247] vfs_write+0x2a0/0x11d0 [ 167.783668][ T7247] ? __pfx___mutex_lock+0x10/0x10 [ 167.783708][ T7247] ? __pfx_vfs_write+0x10/0x10 [ 167.783755][ T7247] ? __fget_files+0x20e/0x3c0 [ 167.783800][ T7247] ksys_write+0x12a/0x250 [ 167.783833][ T7247] ? __pfx_ksys_write+0x10/0x10 [ 167.783880][ T7247] do_syscall_64+0xcd/0xfa0 [ 167.783921][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.783952][ T7247] RIP: 0033:0x7f3f8c78f749 [ 167.783976][ T7247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.784003][ T7247] RSP: 002b:00007f3f8d601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.784032][ T7247] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78f749 [ 167.784051][ T7247] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 167.784066][ T7247] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.784083][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.784100][ T7247] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 167.784140][ T7247] [ 168.010557][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.382820][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 168.424786][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.430447][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.919172][ T7264] block2mtd: illegal erase size [ 168.925967][ T7265] block2mtd: illegal erase size [ 169.169311][ T7250] Process accounting resumed [ 170.322453][ T7274] FAULT_INJECTION: forcing a failure. [ 170.322453][ T7274] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.415840][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) [ 170.415885][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.415903][ T7274] Call Trace: [ 170.415913][ T7274] [ 170.415926][ T7274] dump_stack_lvl+0x16c/0x1f0 [ 170.415972][ T7274] should_fail_ex+0x512/0x640 [ 170.416024][ T7274] strncpy_from_user+0x3b/0x2e0 [ 170.416073][ T7274] getname_flags.part.0+0x8f/0x550 [ 170.416122][ T7274] getname_flags+0x93/0xf0 [ 170.416153][ T7274] __x64_sys_symlink+0x65/0x90 [ 170.416192][ T7274] do_syscall_64+0xcd/0xfa0 [ 170.416235][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.416275][ T7274] RIP: 0033:0x7fe16cd8f749 [ 170.416300][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.416329][ T7274] RSP: 002b:00007fe16dcb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 170.416358][ T7274] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd8f749 [ 170.416378][ T7274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 170.416396][ T7274] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 170.416414][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.416432][ T7274] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 170.416486][ T7274] [ 170.808253][ T7297] netlink: 330 bytes leftover after parsing attributes in process `syz.3.286'. [ 170.920052][ T7297] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 171.674555][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'. [ 172.529186][ T7328] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 172.975825][ T7346] random: crng reseeded on system resumption [ 175.492604][ T7405] zswap: compressor not available [ 175.731083][ T7405] zswap: compressor not available [ 175.907535][ T7405] zswap: compressor not available [ 175.921395][ T7413] netlink: 'syz.1.311': attribute type 1 has an invalid length. [ 176.257892][ T7408] zswap: compressor not available [ 176.350941][ T7405] zswap: compressor not available [ 176.362403][ T7437] program syz.0.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.944040][ T7470] netlink: 'syz.3.322': attribute type 2 has an invalid length. [ 178.243733][ T7473] ima: policy update failed [ 178.249876][ T30] audit: type=1802 audit(42011.954:6): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.323" res=0 errno=0 [ 181.333157][ T7519] FAULT_INJECTION: forcing a failure. [ 181.333157][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 181.391901][ T7519] CPU: 0 UID: 0 PID: 7519 Comm: syz.3.334 Not tainted syzkaller #0 PREEMPT(full) [ 181.391937][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.391952][ T7519] Call Trace: [ 181.391961][ T7519] [ 181.391972][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 181.392010][ T7519] should_fail_ex+0x512/0x640 [ 181.392052][ T7519] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 181.392085][ T7519] should_failslab+0xc2/0x120 [ 181.392123][ T7519] kmem_cache_alloc_noprof+0x75/0x6e0 [ 181.392154][ T7519] ? security_file_alloc+0x34/0x2b0 [ 181.392194][ T7519] ? security_file_alloc+0x34/0x2b0 [ 181.392223][ T7519] security_file_alloc+0x34/0x2b0 [ 181.392253][ T7519] init_file+0x93/0x4c0 [ 181.392293][ T7519] alloc_empty_file+0x73/0x1e0 [ 181.392335][ T7519] alloc_file_pseudo+0x13a/0x230 [ 181.392378][ T7519] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 181.392420][ T7519] ? alloc_fd+0x471/0x7d0 [ 181.392457][ T7519] sock_alloc_file+0x50/0x210 [ 181.392502][ T7519] __sys_socket+0x1c0/0x260 [ 181.392543][ T7519] ? __pfx___sys_socket+0x10/0x10 [ 181.392581][ T7519] ? xfd_validate_state+0x61/0x180 [ 181.392620][ T7519] ? __pfx_do_writev+0x10/0x10 [ 181.392659][ T7519] __x64_sys_socket+0x72/0xb0 [ 181.392696][ T7519] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.392731][ T7519] do_syscall_64+0xcd/0xfa0 [ 181.392771][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.392799][ T7519] RIP: 0033:0x7fe29f78f749 [ 181.392823][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.392849][ T7519] RSP: 002b:00007fe2a0705038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 181.392878][ T7519] RAX: ffffffffffffffda RBX: 00007fe29f9e5fa0 RCX: 00007fe29f78f749 [ 181.392898][ T7519] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 181.392915][ T7519] RBP: 00007fe29f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.392932][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.392947][ T7519] R13: 00007fe29f9e6038 R14: 00007fe29f9e5fa0 R15: 00007ffc47fed448 [ 181.392983][ T7519] [ 182.013993][ T7538] vhci_hcd: invalid port number 16 [ 185.122007][ T7609] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 187.972742][ T52] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 188.597725][ T7653] netlink: 62 bytes leftover after parsing attributes in process `syz.2.362'. [ 189.385548][ T7682] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 190.475689][ T7702] random: crng reseeded on system resumption [ 190.554028][ T7702] Restarting kernel threads ... [ 190.612204][ T7702] Done restarting kernel threads. [ 190.850778][ T7709] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 191.010961][ T7707] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 191.926737][ T7740] FAULT_INJECTION: forcing a failure. [ 191.926737][ T7740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.941027][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) [ 191.941066][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.941082][ T7740] Call Trace: [ 191.941092][ T7740] [ 191.941103][ T7740] dump_stack_lvl+0x16c/0x1f0 [ 191.941144][ T7740] should_fail_ex+0x512/0x640 [ 191.941194][ T7740] _copy_from_user+0x2e/0xd0 [ 191.941241][ T7740] copy_msghdr_from_user+0x98/0x160 [ 191.941273][ T7740] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 191.941312][ T7740] ? __pfx__kstrtoull+0x10/0x10 [ 191.941355][ T7740] ___sys_sendmsg+0xfe/0x1d0 [ 191.941396][ T7740] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.941450][ T7740] ? find_held_lock+0x2b/0x80 [ 191.941513][ T7740] __sys_sendmmsg+0x200/0x420 [ 191.941550][ T7740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.941597][ T7740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.941655][ T7740] ? fput+0x9b/0xd0 [ 191.941694][ T7740] ? ksys_write+0x1ac/0x250 [ 191.941726][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 191.941767][ T7740] __x64_sys_sendmmsg+0x9c/0x100 [ 191.941795][ T7740] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.941830][ T7740] do_syscall_64+0xcd/0xfa0 [ 191.941868][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.941898][ T7740] RIP: 0033:0x7fb1d7f8f749 [ 191.941921][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.941947][ T7740] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.941975][ T7740] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 191.941994][ T7740] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 191.942016][ T7740] RBP: 00007fb1d8e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 191.942034][ T7740] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 191.942051][ T7740] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 191.942092][ T7740] [ 192.815483][ T7757] netlink: 62 bytes leftover after parsing attributes in process `syz.1.386'. [ 192.919288][ T7765] netlink: 342 bytes leftover after parsing attributes in process `syz.3.390'. [ 192.935493][ T7765] FAULT_INJECTION: forcing a failure. [ 192.935493][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 192.951971][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) [ 192.952016][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.952031][ T7765] Call Trace: [ 192.952040][ T7765] [ 192.952051][ T7765] dump_stack_lvl+0x16c/0x1f0 [ 192.952099][ T7765] should_fail_ex+0x512/0x640 [ 192.952141][ T7765] ? __kmalloc_noprof+0xca/0x880 [ 192.952188][ T7765] should_failslab+0xc2/0x120 [ 192.952225][ T7765] __kmalloc_noprof+0xdd/0x880 [ 192.952264][ T7765] ? tnode_new+0x25a/0x340 [ 192.952294][ T7765] ? tnode_new+0x25a/0x340 [ 192.952318][ T7765] tnode_new+0x25a/0x340 [ 192.952348][ T7765] resize+0x7a9/0x22a0 [ 192.952398][ T7765] fib_insert_alias+0x9b9/0xe30 [ 192.952427][ T7765] ? lockdep_rtnl_is_held+0x2/0x40 [ 192.952473][ T7765] fib_trie_unmerge+0x2f9/0xcb0 [ 192.952512][ T7765] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 192.952547][ T7765] ? __pfx___mutex_lock+0x10/0x10 [ 192.952597][ T7765] fib_unmerge+0xf8/0x520 [ 192.952636][ T7765] ? __pfx_fib4_rule_delete+0x10/0x10 [ 192.952680][ T7765] fib4_rule_delete+0x3f/0x380 [ 192.952723][ T7765] ? __pfx_fib4_rule_delete+0x10/0x10 [ 192.952764][ T7765] fib_delrule+0x1041/0x1bd0 [ 192.952809][ T7765] ? __pfx_fib_delrule+0x10/0x10 [ 192.952877][ T7765] ? find_held_lock+0x2b/0x80 [ 192.952905][ T7765] ? __pfx_fib_nl_delrule+0x10/0x10 [ 192.952934][ T7765] ? __pfx_fib_nl_delrule+0x10/0x10 [ 192.952962][ T7765] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 192.952993][ T7765] ? __pfx_fib_nl_delrule+0x10/0x10 [ 192.953025][ T7765] rtnetlink_rcv_msg+0x95e/0xe90 [ 192.953059][ T7765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.953112][ T7765] ? ref_tracker_free+0x37c/0x830 [ 192.953145][ T7765] netlink_rcv_skb+0x158/0x420 [ 192.953178][ T7765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.953212][ T7765] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.953259][ T7765] ? netlink_deliver_tap+0x1ae/0xd30 [ 192.953297][ T7765] netlink_unicast+0x5aa/0x870 [ 192.953334][ T7765] ? __pfx_netlink_unicast+0x10/0x10 [ 192.953364][ T7765] ? __pfx___might_resched+0x10/0x10 [ 192.953409][ T7765] netlink_sendmsg+0x8c8/0xdd0 [ 192.953448][ T7765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.953483][ T7765] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 192.953533][ T7765] ____sys_sendmsg+0xa98/0xc70 [ 192.953572][ T7765] ? copy_msghdr_from_user+0x10a/0x160 [ 192.953599][ T7765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.953642][ T7765] ? kfree+0x252/0x6d0 [ 192.953677][ T7765] ___sys_sendmsg+0x134/0x1d0 [ 192.953708][ T7765] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.953776][ T7765] ? __pfx___might_resched+0x10/0x10 [ 192.953814][ T7765] __sys_sendmmsg+0x200/0x420 [ 192.953847][ T7765] ? __pfx___sys_sendmmsg+0x10/0x10 [ 192.953889][ T7765] ? __pfx_do_futex+0x10/0x10 [ 192.953944][ T7765] ? __sys_socket+0xac/0x260 [ 192.953984][ T7765] ? xfd_validate_state+0x61/0x180 [ 192.954035][ T7765] __x64_sys_sendmmsg+0x9c/0x100 [ 192.954063][ T7765] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.954107][ T7765] do_syscall_64+0xcd/0xfa0 [ 192.954145][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.954175][ T7765] RIP: 0033:0x7fe29f78f749 [ 192.954200][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.954227][ T7765] RSP: 002b:00007fe2a0705038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 192.954256][ T7765] RAX: ffffffffffffffda RBX: 00007fe29f9e5fa0 RCX: 00007fe29f78f749 [ 192.954276][ T7765] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000008 [ 192.954292][ T7765] RBP: 00007fe29f813f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.954310][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.954327][ T7765] R13: 00007fe29f9e6038 R14: 00007fe29f9e5fa0 R15: 00007ffc47fed448 [ 192.954366][ T7765] [ 194.013172][ T7775] FAULT_INJECTION: forcing a failure. [ 194.013172][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 194.031137][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 194.031189][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.031205][ T7775] Call Trace: [ 194.031215][ T7775] [ 194.031227][ T7775] dump_stack_lvl+0x16c/0x1f0 [ 194.031268][ T7775] should_fail_ex+0x512/0x640 [ 194.031320][ T7775] should_failslab+0xc2/0x120 [ 194.031360][ T7775] kmem_cache_alloc_noprof+0x75/0x6e0 [ 194.031390][ T7775] ? do_raw_spin_lock+0x12c/0x2b0 [ 194.031431][ T7775] ? dst_alloc+0x99/0x1a0 [ 194.031481][ T7775] ? dst_alloc+0x99/0x1a0 [ 194.031519][ T7775] dst_alloc+0x99/0x1a0 [ 194.031565][ T7775] rt_dst_alloc+0x35/0x3a0 [ 194.031603][ T7775] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 194.031660][ T7775] ip_route_output_key_hash+0x10f/0x2b0 [ 194.031704][ T7775] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 194.031760][ T7775] ? find_held_lock+0x2b/0x80 [ 194.031795][ T7775] ip_route_output_flow+0x27/0x150 [ 194.031842][ T7775] raw_sendmsg+0xd5b/0x38b0 [ 194.031899][ T7775] ? __pfx_raw_sendmsg+0x10/0x10 [ 194.031941][ T7775] ? __lock_acquire+0x622/0x1c90 [ 194.031990][ T7775] ? __lock_acquire+0x622/0x1c90 [ 194.032080][ T7775] ? __pfx_raw_sendmsg+0x10/0x10 [ 194.032125][ T7775] inet_sendmsg+0x11c/0x140 [ 194.032180][ T7775] ____sys_sendmsg+0x973/0xc70 [ 194.032221][ T7775] ? copy_msghdr_from_user+0x10a/0x160 [ 194.032250][ T7775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.032295][ T7775] ? __pfx__kstrtoull+0x10/0x10 [ 194.032340][ T7775] ___sys_sendmsg+0x134/0x1d0 [ 194.032373][ T7775] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.032422][ T7775] ? find_held_lock+0x2b/0x80 [ 194.032481][ T7775] __sys_sendmmsg+0x200/0x420 [ 194.032517][ T7775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 194.032562][ T7775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.032617][ T7775] ? fput+0x9b/0xd0 [ 194.032656][ T7775] ? ksys_write+0x1ac/0x250 [ 194.032688][ T7775] ? __pfx_ksys_write+0x10/0x10 [ 194.032728][ T7775] __x64_sys_sendmmsg+0x9c/0x100 [ 194.032757][ T7775] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.032791][ T7775] do_syscall_64+0xcd/0xfa0 [ 194.032830][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.032860][ T7775] RIP: 0033:0x7fb1d7f8f749 [ 194.032884][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.032910][ T7775] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 194.032939][ T7775] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 194.032959][ T7775] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 194.032976][ T7775] RBP: 00007fb1d8e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 194.032993][ T7775] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 194.033010][ T7775] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 194.033052][ T7775] [ 194.594786][ T7782] mkiss: ax0: crc mode is auto. [ 195.545981][ T7807] netlink: 62 bytes leftover after parsing attributes in process `syz.0.401'. [ 195.823946][ T7823] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 197.985754][ T7850] zswap: compressor not available [ 199.578528][ T7902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.430'. [ 199.600505][ T7902] vlan1: entered promiscuous mode [ 199.625624][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.632273][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.638970][ T7902] vlan1: entered allmulticast mode [ 199.647412][ T7902] veth0_vlan: entered allmulticast mode [ 199.935074][ T7897] ptrace attach of ""[7907] was attempted by "./syz-executor exec"[7897] [ 200.085466][ T7907] Process accounting paused [ 200.454190][ T7912] netlink: 330 bytes leftover after parsing attributes in process `syz.0.423'. [ 200.466579][ T7916] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 201.866916][ T7941] bond0: invalid ARP target specified [ 203.658567][ T30] audit: type=1800 audit(4294967303.995:7): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.439" name="discovery_nqn" dev="configfs" ino=19289 res=0 errno=0 [ 203.823870][ T7977] netlink: 342 bytes leftover after parsing attributes in process `syz.1.440'. [ 203.852220][ T7977] random: crng reseeded on system resumption [ 205.802059][ T8014] netlink: 330 bytes leftover after parsing attributes in process `syz.1.447'. [ 206.111599][ T8022] FAULT_INJECTION: forcing a failure. [ 206.111599][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 206.125857][ T8022] CPU: 0 UID: 0 PID: 8022 Comm: syz.0.451 Not tainted syzkaller #0 PREEMPT(full) [ 206.125892][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.125906][ T8022] Call Trace: [ 206.125914][ T8022] [ 206.125923][ T8022] dump_stack_lvl+0x16c/0x1f0 [ 206.125959][ T8022] should_fail_ex+0x512/0x640 [ 206.125992][ T8022] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 206.126019][ T8022] should_failslab+0xc2/0x120 [ 206.126041][ T8022] kmem_cache_alloc_noprof+0x75/0x6e0 [ 206.126055][ T8022] ? __kernfs_new_node+0xd2/0x8e0 [ 206.126076][ T8022] ? __kernfs_new_node+0xd2/0x8e0 [ 206.126100][ T8022] __kernfs_new_node+0xd2/0x8e0 [ 206.126120][ T8022] ? __pfx___kernfs_new_node+0x10/0x10 [ 206.126142][ T8022] ? find_held_lock+0x2b/0x80 [ 206.126158][ T8022] ? kernfs_root+0xee/0x2a0 [ 206.126181][ T8022] kernfs_new_node+0x13c/0x1e0 [ 206.126205][ T8022] __kernfs_create_file+0x53/0x350 [ 206.126222][ T8022] sysfs_add_file_mode_ns+0x207/0x3c0 [ 206.126244][ T8022] internal_create_group+0x578/0xf30 [ 206.126268][ T8022] ? __pfx_internal_create_group+0x10/0x10 [ 206.126292][ T8022] ? kernfs_create_link+0x1bd/0x240 [ 206.126309][ T8022] internal_create_groups+0x9d/0x150 [ 206.126330][ T8022] device_add+0x731/0x1aa0 [ 206.126347][ T8022] ? __pfx_device_add+0x10/0x10 [ 206.126359][ T8022] ? rcu_is_watching+0x12/0xc0 [ 206.126377][ T8022] ? lockdep_init_map_type+0x5c/0x280 [ 206.126413][ T8022] input_register_device+0x7e8/0x1180 [ 206.126439][ T8022] ? input_ff_create+0x256/0x350 [ 206.126470][ T8022] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 206.126497][ T8022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 206.126522][ T8022] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 206.126551][ T8022] ? find_held_lock+0x2b/0x80 [ 206.126584][ T8022] ? __pfx_uinput_ioctl+0x10/0x10 [ 206.126606][ T8022] __x64_sys_ioctl+0x18e/0x210 [ 206.126628][ T8022] do_syscall_64+0xcd/0xfa0 [ 206.126648][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.126662][ T8022] RIP: 0033:0x7fb1d7f8f749 [ 206.126676][ T8022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.126689][ T8022] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.126703][ T8022] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 206.126712][ T8022] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 206.126720][ T8022] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.126729][ T8022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.126739][ T8022] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 206.126758][ T8022] [ 206.404770][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.978433][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.041007][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.076790][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.180831][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.338670][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.456468][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.481170][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.492254][ T8054] netlink: zone id is out of range [ 207.497883][ T8054] netlink: zone id is out of range [ 207.503492][ T8054] netlink: zone id is out of range [ 207.509073][ T8054] netlink: zone id is out of range [ 207.515378][ T8035] netlink: 62 bytes leftover after parsing attributes in process `syz.1.453'. [ 207.525649][ T8054] netlink: zone id is out of range [ 207.534698][ T8054] netlink: zone id is out of range [ 207.539992][ T8054] netlink: zone id is out of range [ 207.575450][ T8054] netlink: zone id is out of range [ 207.581348][ T8054] netlink: zone id is out of range [ 207.587667][ T8054] netlink: zone id is out of range [ 210.071750][ T8098] FAULT_INJECTION: forcing a failure. [ 210.071750][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 210.088141][ T8098] CPU: 0 UID: 0 PID: 8098 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(full) [ 210.088168][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.088179][ T8098] Call Trace: [ 210.088185][ T8098] [ 210.088193][ T8098] dump_stack_lvl+0x16c/0x1f0 [ 210.088221][ T8098] should_fail_ex+0x512/0x640 [ 210.088248][ T8098] ? __kmalloc_noprof+0xca/0x880 [ 210.088281][ T8098] should_failslab+0xc2/0x120 [ 210.088306][ T8098] __kmalloc_noprof+0xdd/0x880 [ 210.088343][ T8098] ? __register_sysctl_table+0xea2/0x1900 [ 210.088375][ T8098] ? __register_sysctl_table+0xea2/0x1900 [ 210.088401][ T8098] __register_sysctl_table+0xea2/0x1900 [ 210.088434][ T8098] ? __pfx___register_sysctl_table+0x10/0x10 [ 210.088465][ T8098] ? __asan_memcpy+0x3c/0x60 [ 210.088486][ T8098] register_pidns_sysctls+0x119/0x1b0 [ 210.088520][ T8098] ? __ns_common_init+0x2a4/0x3b0 [ 210.088537][ T8098] copy_pid_ns+0x548/0xca0 [ 210.088555][ T8098] ? __pfx_copy_pid_ns+0x10/0x10 [ 210.088572][ T8098] ? rcu_is_watching+0x12/0xc0 [ 210.088587][ T8098] ? copy_mnt_ns+0xac/0xac0 [ 210.088603][ T8098] ? rcu_is_watching+0x12/0xc0 [ 210.088619][ T8098] ? copy_ipcs+0xb6/0x550 [ 210.088644][ T8098] create_new_namespaces+0x2aa/0xa90 [ 210.088664][ T8098] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 210.088682][ T8098] ksys_unshare+0x45b/0xa40 [ 210.088701][ T8098] ? __pfx_ksys_unshare+0x10/0x10 [ 210.088720][ T8098] ? xfd_validate_state+0x61/0x180 [ 210.088745][ T8098] __x64_sys_unshare+0x31/0x40 [ 210.088763][ T8098] do_syscall_64+0xcd/0xfa0 [ 210.088782][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.088796][ T8098] RIP: 0033:0x7fe16cd8f749 [ 210.088808][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.088822][ T8098] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 210.088836][ T8098] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 210.088844][ T8098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 210.088852][ T8098] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 210.088860][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.088868][ T8098] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 210.088886][ T8098] [ 210.088910][ T8098] sysctl could not get directory: [ 210.286900][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.353721][ T8098] /kernel -12 [ 210.462992][ T8102] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 211.091428][ T8105] __nla_validate_parse: 18 callbacks suppressed [ 211.091442][ T8105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'. [ 211.138450][ T8116] hub 1-0:1.0: USB hub found [ 211.168727][ T8116] hub 1-0:1.0: 1 port detected [ 211.276710][ T8118] hub 1-0:1.0: USB hub found [ 211.305418][ T8118] hub 1-0:1.0: 1 port detected [ 213.206128][ T8138] FAULT_INJECTION: forcing a failure. [ 213.206128][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 213.298374][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.1.478 Not tainted syzkaller #0 PREEMPT(full) [ 213.298416][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.298433][ T8138] Call Trace: [ 213.298443][ T8138] [ 213.298455][ T8138] dump_stack_lvl+0x16c/0x1f0 [ 213.298500][ T8138] should_fail_ex+0x512/0x640 [ 213.298545][ T8138] ? __kmalloc_cache_noprof+0x5f/0x780 [ 213.298580][ T8138] should_failslab+0xc2/0x120 [ 213.298621][ T8138] __kmalloc_cache_noprof+0x72/0x780 [ 213.298652][ T8138] ? snd_pcm_oss_open+0x5eb/0x1400 [ 213.298694][ T8138] ? rcu_is_watching+0x12/0xc0 [ 213.298731][ T8138] ? snd_pcm_oss_open+0x5eb/0x1400 [ 213.298771][ T8138] snd_pcm_oss_open+0x5eb/0x1400 [ 213.298826][ T8138] ? tomoyo_check_open_permission+0x1d8/0x3c0 [ 213.298857][ T8138] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 213.298900][ T8138] ? __lock_acquire+0xb8a/0x1c90 [ 213.298942][ T8138] ? __pfx_default_wake_function+0x10/0x10 [ 213.298979][ T8138] ? __lock_acquire+0xb8a/0x1c90 [ 213.299029][ T8138] ? do_raw_spin_lock+0x12c/0x2b0 [ 213.299078][ T8138] ? soundcore_open+0x35a/0x580 [ 213.299118][ T8138] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 213.299161][ T8138] soundcore_open+0x40c/0x580 [ 213.299202][ T8138] ? __pfx_soundcore_open+0x10/0x10 [ 213.299238][ T8138] chrdev_open+0x234/0x6a0 [ 213.299275][ T8138] ? __pfx_apparmor_file_open+0x10/0x10 [ 213.299329][ T8138] ? __pfx_chrdev_open+0x10/0x10 [ 213.299368][ T8138] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 213.299409][ T8138] do_dentry_open+0x982/0x1530 [ 213.299446][ T8138] ? __pfx_chrdev_open+0x10/0x10 [ 213.299492][ T8138] vfs_open+0x82/0x3f0 [ 213.299540][ T8138] path_openat+0x1de4/0x2cb0 [ 213.299588][ T8138] ? __pfx_path_openat+0x10/0x10 [ 213.299625][ T8138] ? __lock_acquire+0xb8a/0x1c90 [ 213.299670][ T8138] do_filp_open+0x20b/0x470 [ 213.299706][ T8138] ? __pfx_do_filp_open+0x10/0x10 [ 213.299772][ T8138] ? alloc_fd+0x471/0x7d0 [ 213.299816][ T8138] do_sys_openat2+0x11b/0x1d0 [ 213.299861][ T8138] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.299924][ T8138] __x64_sys_openat+0x174/0x210 [ 213.299970][ T8138] ? __pfx___x64_sys_openat+0x10/0x10 [ 213.300031][ T8138] do_syscall_64+0xcd/0xfa0 [ 213.300071][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.300101][ T8138] RIP: 0033:0x7f3f8c78f749 [ 213.300126][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.300151][ T8138] RSP: 002b:00007f3f8d601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.300181][ T8138] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78f749 [ 213.300205][ T8138] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 213.300222][ T8138] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 213.300239][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.300256][ T8138] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 213.300307][ T8138] [ 213.602251][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.939756][ T8160] FAULT_INJECTION: forcing a failure. [ 215.939756][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 216.012953][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.2.484 Not tainted syzkaller #0 PREEMPT(full) [ 216.012986][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.012999][ T8160] Call Trace: [ 216.013007][ T8160] [ 216.013016][ T8160] dump_stack_lvl+0x16c/0x1f0 [ 216.013051][ T8160] should_fail_ex+0x512/0x640 [ 216.013085][ T8160] ? fs_reclaim_acquire+0xae/0x150 [ 216.013119][ T8160] should_failslab+0xc2/0x120 [ 216.013152][ T8160] kmem_cache_alloc_noprof+0x75/0x6e0 [ 216.013178][ T8160] ? __pfx_map_id_range_down+0x10/0x10 [ 216.013200][ T8160] ? security_inode_alloc+0x3b/0x2b0 [ 216.013254][ T8160] ? security_inode_alloc+0x3b/0x2b0 [ 216.013298][ T8160] security_inode_alloc+0x3b/0x2b0 [ 216.013344][ T8160] inode_init_always_gfp+0xce4/0x1030 [ 216.013394][ T8160] alloc_inode+0x86/0x240 [ 216.013435][ T8160] new_inode+0x22/0x1c0 [ 216.013482][ T8160] __debugfs_create_file+0x11c/0x6b0 [ 216.013522][ T8160] debugfs_create_file_full+0x41/0x60 [ 216.013559][ T8160] kvm_dev_ioctl+0x14ca/0x1a80 [ 216.013611][ T8160] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 216.013663][ T8160] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 216.013701][ T8160] __x64_sys_ioctl+0x18e/0x210 [ 216.013748][ T8160] do_syscall_64+0xcd/0xfa0 [ 216.013789][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.013818][ T8160] RIP: 0033:0x7fe16cd8f749 [ 216.013843][ T8160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.013871][ T8160] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.013901][ T8160] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 216.013921][ T8160] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 216.013937][ T8160] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.013955][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.013972][ T8160] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 216.014027][ T8160] [ 216.014150][ T8160] debugfs: out of free dentries, can not create file 'nx_lpage_splits' [ 217.105945][ T8171] FAULT_INJECTION: forcing a failure. [ 217.105945][ T8171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.192208][ T8171] CPU: 1 UID: 0 PID: 8171 Comm: syz.2.488 Not tainted syzkaller #0 PREEMPT(full) [ 217.192249][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.192265][ T8171] Call Trace: [ 217.192340][ T8171] [ 217.192358][ T8171] dump_stack_lvl+0x16c/0x1f0 [ 217.192400][ T8171] should_fail_ex+0x512/0x640 [ 217.192450][ T8171] _copy_to_iter+0x29f/0x1710 [ 217.192482][ T8171] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 217.192526][ T8171] ? __pfx__copy_to_iter+0x10/0x10 [ 217.192556][ T8171] ? kernfs_seq_stop+0xcd/0x120 [ 217.192586][ T8171] ? kernfs_put_active+0x86/0xe0 [ 217.192629][ T8171] seq_read_iter+0xd02/0x12d0 [ 217.192692][ T8171] kernfs_fop_read_iter+0x46c/0x610 [ 217.192723][ T8171] ? rw_verify_area+0xcf/0x6c0 [ 217.192757][ T8171] vfs_read+0x8bf/0xcf0 [ 217.192805][ T8171] ? __pfx___mutex_lock+0x10/0x10 [ 217.192844][ T8171] ? __pfx_vfs_read+0x10/0x10 [ 217.192911][ T8171] ksys_read+0x12a/0x250 [ 217.192944][ T8171] ? __pfx_ksys_read+0x10/0x10 [ 217.192989][ T8171] do_syscall_64+0xcd/0xfa0 [ 217.193028][ T8171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.193059][ T8171] RIP: 0033:0x7fe16cd8f749 [ 217.193084][ T8171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.193132][ T8171] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.193161][ T8171] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 217.193180][ T8171] RDX: 0000000000000009 RSI: 0000200000000040 RDI: 0000000000000003 [ 217.193198][ T8171] RBP: 00007fe16dcd1090 R08: 0000000000000000 R09: 0000000000000000 [ 217.193216][ T8171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.193234][ T8171] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 217.193281][ T8171] [ 217.753136][ T8182] nfs: Unknown parameter 'nl802154' [ 218.117090][ T8195] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.742416][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 219.391597][ T8215] FAULT_INJECTION: forcing a failure. [ 219.391597][ T8215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.440536][ T8215] CPU: 0 UID: 0 PID: 8215 Comm: syz.1.498 Not tainted syzkaller #0 PREEMPT(full) [ 219.440575][ T8215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.440591][ T8215] Call Trace: [ 219.440601][ T8215] [ 219.440611][ T8215] dump_stack_lvl+0x16c/0x1f0 [ 219.440657][ T8215] should_fail_ex+0x512/0x640 [ 219.440706][ T8215] _copy_to_user+0x32/0xd0 [ 219.440736][ T8215] simple_read_from_buffer+0xcb/0x170 [ 219.440784][ T8215] proc_fail_nth_read+0x197/0x240 [ 219.440818][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.440854][ T8215] ? rw_verify_area+0xcf/0x6c0 [ 219.440883][ T8215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.440915][ T8215] vfs_read+0x1e4/0xcf0 [ 219.440953][ T8215] ? __pfx___mutex_lock+0x10/0x10 [ 219.440990][ T8215] ? __pfx_vfs_read+0x10/0x10 [ 219.441043][ T8215] ? __fget_files+0x20e/0x3c0 [ 219.441087][ T8215] ksys_read+0x12a/0x250 [ 219.441117][ T8215] ? __pfx_ksys_read+0x10/0x10 [ 219.441161][ T8215] do_syscall_64+0xcd/0xfa0 [ 219.441199][ T8215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.441227][ T8215] RIP: 0033:0x7f3f8c78e15c [ 219.441251][ T8215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.441276][ T8215] RSP: 002b:00007f3f8d601030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.441303][ T8215] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78e15c [ 219.441322][ T8215] RDX: 000000000000000f RSI: 00007f3f8d6010a0 RDI: 0000000000000004 [ 219.441338][ T8215] RBP: 00007f3f8d601090 R08: 0000000000000000 R09: 0000000000000000 [ 219.441355][ T8215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.441371][ T8215] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 219.441413][ T8215] [ 220.145950][ T8225] Line length is too long: Should be less than 4094 [ 220.648916][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.2.505'. [ 222.933654][ T8276] warning: `syz.2.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 225.792972][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 226.067530][ T8338] FAULT_INJECTION: forcing a failure. [ 226.067530][ T8338] name failslab, interval 1, probability 0, space 0, times 0 [ 226.095201][ T8330] bond0: (slave bond_slave_0): Releasing backup interface [ 226.115648][ T8338] CPU: 0 UID: 0 PID: 8338 Comm: syz.2.526 Not tainted syzkaller #0 PREEMPT(full) [ 226.115694][ T8338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.115712][ T8338] Call Trace: [ 226.115721][ T8338] [ 226.115734][ T8338] dump_stack_lvl+0x16c/0x1f0 [ 226.115778][ T8338] should_fail_ex+0x512/0x640 [ 226.115824][ T8338] ? __kmalloc_cache_noprof+0x5f/0x780 [ 226.115859][ T8338] should_failslab+0xc2/0x120 [ 226.115899][ T8338] __kmalloc_cache_noprof+0x72/0x780 [ 226.115926][ T8338] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.115962][ T8338] ? sctp_endpoint_new+0xfc/0xb20 [ 226.116018][ T8338] ? sctp_endpoint_new+0xfc/0xb20 [ 226.116055][ T8338] sctp_endpoint_new+0xfc/0xb20 [ 226.116098][ T8338] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 226.116140][ T8338] ? lockdep_init_map_type+0x5c/0x280 [ 226.116183][ T8338] ? lockdep_init_map_type+0x5c/0x280 [ 226.116232][ T8338] sctp_init_sock+0xe2b/0x12f0 [ 226.116265][ T8338] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 226.116302][ T8338] sctp_v6_init_sock+0x16/0x70 [ 226.116335][ T8338] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 226.116370][ T8338] inet6_create+0xb30/0x12b0 [ 226.116408][ T8338] ? inet6_create+0x7f/0x12b0 [ 226.116447][ T8338] __sock_create+0x338/0x8d0 [ 226.116496][ T8338] __sys_socket+0x14d/0x260 [ 226.116537][ T8338] ? __pfx___sys_socket+0x10/0x10 [ 226.116577][ T8338] ? xfd_validate_state+0x61/0x180 [ 226.116616][ T8338] ? __pfx_ksys_write+0x10/0x10 [ 226.116669][ T8338] __x64_sys_socket+0x72/0xb0 [ 226.116715][ T8338] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.116751][ T8338] do_syscall_64+0xcd/0xfa0 [ 226.116794][ T8338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.116825][ T8338] RIP: 0033:0x7fe16cd8f749 [ 226.116851][ T8338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.116878][ T8338] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.116907][ T8338] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 226.116927][ T8338] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 226.116944][ T8338] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 226.116961][ T8338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.116979][ T8338] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 226.117107][ T8338] [ 229.407160][ T5150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.417860][ T5150] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.428723][ T5150] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.446950][ T5150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.455721][ T5150] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.110991][ T52] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 230.469816][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 230.912402][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.940769][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.948203][ T8372] bridge_slave_0: entered allmulticast mode [ 230.966756][ T8372] bridge_slave_0: entered promiscuous mode [ 230.992517][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.010463][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.017981][ T8372] bridge_slave_1: entered allmulticast mode [ 231.054556][ T8372] bridge_slave_1: entered promiscuous mode [ 231.206315][ T8378] Process accounting resumed [ 231.242215][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.276207][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.395193][ T8372] team0: Port device team_slave_0 added [ 231.405065][ T8372] team0: Port device team_slave_1 added [ 231.493251][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.510282][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.540458][ T52] Bluetooth: hci0: command tx timeout [ 231.546731][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.614521][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.641171][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.678428][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.784073][ T8372] hsr_slave_0: entered promiscuous mode [ 231.801968][ T8372] hsr_slave_1: entered promiscuous mode [ 231.809776][ T8372] debugfs: 'hsr0' already exists in 'hsr' [ 231.818595][ T8372] Cannot create hsr debugfs directory [ 232.485393][ T8372] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 232.524984][ T8372] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 232.558066][ T8372] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.575290][ T8372] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.589375][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.618396][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.627542][ T52] Bluetooth: hci0: command tx timeout [ 233.652399][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.659869][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.672806][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.680151][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.004627][ T8437] netlink: 186 bytes leftover after parsing attributes in process `syz.0.547'. [ 234.630092][ T8442] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 234.805802][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.672416][ T8372] veth0_vlan: entered promiscuous mode [ 235.693899][ T8372] veth1_vlan: entered promiscuous mode [ 235.701072][ T5150] Bluetooth: hci0: command tx timeout [ 235.794153][ T8372] veth0_macvtap: entered promiscuous mode [ 235.809339][ T8372] veth1_macvtap: entered promiscuous mode [ 235.849023][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.886231][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.946355][ T6631] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.957829][ T6631] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.018692][ T6631] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.060662][ T6631] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.333311][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.362059][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.439187][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.457632][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.596754][ T8497] hub 1-0:1.0: USB hub found [ 237.602599][ T8497] hub 1-0:1.0: 1 port detected [ 237.688224][ T8496] hub 1-0:1.0: USB hub found [ 237.701642][ T8496] hub 1-0:1.0: 1 port detected [ 237.783437][ T5150] Bluetooth: hci0: command tx timeout [ 238.486132][ T8518] random: crng reseeded on system resumption [ 239.872505][ T8536] FAULT_INJECTION: forcing a failure. [ 239.872505][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 239.888555][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.1.566 Not tainted syzkaller #0 PREEMPT(full) [ 239.888597][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.888614][ T8536] Call Trace: [ 239.888624][ T8536] [ 239.888636][ T8536] dump_stack_lvl+0x16c/0x1f0 [ 239.888681][ T8536] should_fail_ex+0x512/0x640 [ 239.888727][ T8536] ? __kmalloc_cache_noprof+0x5f/0x780 [ 239.888761][ T8536] should_failslab+0xc2/0x120 [ 239.888803][ T8536] __kmalloc_cache_noprof+0x72/0x780 [ 239.888829][ T8536] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.888861][ T8536] ? sctp_endpoint_new+0xfc/0xb20 [ 239.888903][ T8536] ? sctp_endpoint_new+0xfc/0xb20 [ 239.888936][ T8536] sctp_endpoint_new+0xfc/0xb20 [ 239.888974][ T8536] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 239.889013][ T8536] ? lockdep_init_map_type+0x5c/0x280 [ 239.889054][ T8536] ? lockdep_init_map_type+0x5c/0x280 [ 239.889096][ T8536] sctp_init_sock+0xe2b/0x12f0 [ 239.889127][ T8536] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 239.889160][ T8536] sctp_v6_init_sock+0x16/0x70 [ 239.889186][ T8536] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 239.889223][ T8536] inet6_create+0xb30/0x12b0 [ 239.889254][ T8536] ? inet6_create+0x7f/0x12b0 [ 239.889285][ T8536] __sock_create+0x338/0x8d0 [ 239.889324][ T8536] __sys_socket+0x14d/0x260 [ 239.889357][ T8536] ? __pfx___sys_socket+0x10/0x10 [ 239.889389][ T8536] ? xfd_validate_state+0x61/0x180 [ 239.889422][ T8536] ? __pfx_ksys_write+0x10/0x10 [ 239.889455][ T8536] __x64_sys_socket+0x72/0xb0 [ 239.889484][ T8536] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.889512][ T8536] do_syscall_64+0xcd/0xfa0 [ 239.889543][ T8536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.889566][ T8536] RIP: 0033:0x7f3f8c78f749 [ 239.889586][ T8536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.889608][ T8536] RSP: 002b:00007f3f8d601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 239.889631][ T8536] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78f749 [ 239.889646][ T8536] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 239.889659][ T8536] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.889673][ T8536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.889693][ T8536] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 239.889725][ T8536] [ 240.402556][ T8545] synth uevent: /devices/platform/vivid.0/video4linux/video70: unknown uevent action string [ 240.414207][ T8545] video4linux video70: uevent: failed to send synthetic uevent: -22 [ 242.107433][ T8570] FAULT_INJECTION: forcing a failure. [ 242.107433][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 242.126345][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.4.575 Not tainted syzkaller #0 PREEMPT(full) [ 242.126378][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.126393][ T8570] Call Trace: [ 242.126401][ T8570] [ 242.126411][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 242.126453][ T8570] should_fail_ex+0x512/0x640 [ 242.126492][ T8570] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 242.126530][ T8570] should_failslab+0xc2/0x120 [ 242.126572][ T8570] kmem_cache_alloc_noprof+0x75/0x6e0 [ 242.126604][ T8570] ? alloc_empty_file+0x55/0x1e0 [ 242.126654][ T8570] ? alloc_empty_file+0x55/0x1e0 [ 242.126692][ T8570] ? _raw_spin_unlock+0x28/0x50 [ 242.126722][ T8570] alloc_empty_file+0x55/0x1e0 [ 242.126767][ T8570] alloc_file_pseudo+0x13a/0x230 [ 242.126813][ T8570] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 242.126861][ T8570] ? do_raw_spin_unlock+0x172/0x230 [ 242.126894][ T8570] __anon_inode_getfile+0xe8/0x280 [ 242.126937][ T8570] anon_inode_getfile_fmode+0x37/0xa0 [ 242.126975][ T8570] __do_sys_fanotify_init+0x9da/0xc80 [ 242.127028][ T8570] do_syscall_64+0xcd/0xfa0 [ 242.127067][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.127099][ T8570] RIP: 0033:0x7f3dad78f749 [ 242.127124][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.127150][ T8570] RSP: 002b:00007f3dae695038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 242.127178][ T8570] RAX: ffffffffffffffda RBX: 00007f3dad9e5fa0 RCX: 00007f3dad78f749 [ 242.127197][ T8570] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000c00 [ 242.127215][ T8570] RBP: 00007f3dad813f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.127244][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.127261][ T8570] R13: 00007f3dad9e6038 R14: 00007f3dad9e5fa0 R15: 00007ffe7dac1a18 [ 242.127309][ T8570] [ 244.024647][ T8595] ptp ptp0: max value is 20 [ 244.417486][ T8609] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 245.749531][ T8636] FAULT_INJECTION: forcing a failure. [ 245.749531][ T8636] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 245.766497][ T8636] CPU: 1 UID: 0 PID: 8636 Comm: syz.0.587 Not tainted syzkaller #0 PREEMPT(full) [ 245.766540][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.766558][ T8636] Call Trace: [ 245.766568][ T8636] [ 245.766580][ T8636] dump_stack_lvl+0x16c/0x1f0 [ 245.766624][ T8636] should_fail_ex+0x512/0x640 [ 245.766677][ T8636] should_fail_alloc_page+0xe7/0x130 [ 245.766718][ T8636] prepare_alloc_pages+0x3c2/0x610 [ 245.766761][ T8636] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 245.766791][ T8636] ? finish_task_switch.isra.0+0x21c/0xc10 [ 245.766822][ T8636] ? rcu_is_watching+0x12/0xc0 [ 245.766851][ T8636] ? finish_task_switch.isra.0+0x221/0xc10 [ 245.766879][ T8636] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.766913][ T8636] ? finish_task_switch.isra.0+0x221/0xc10 [ 245.766943][ T8636] ? rcu_is_watching+0x12/0xc0 [ 245.766972][ T8636] ? trace_sched_exit_tp+0xd1/0x120 [ 245.767016][ T8636] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 245.767063][ T8636] ? __lock_acquire+0x622/0x1c90 [ 245.767106][ T8636] ? __pfx___schedule+0x10/0x10 [ 245.767134][ T8636] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.767184][ T8636] ? policy_nodemask+0xea/0x4e0 [ 245.767235][ T8636] alloc_pages_mpol+0x1fb/0x550 [ 245.767275][ T8636] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 245.767326][ T8636] folio_alloc_mpol_noprof+0x36/0x2f0 [ 245.767374][ T8636] vma_alloc_folio_noprof+0xed/0x1e0 [ 245.767417][ T8636] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 245.767473][ T8636] do_pte_missing+0x2202/0x3ba0 [ 245.767517][ T8636] ? find_held_lock+0x2b/0x80 [ 245.767556][ T8636] __handle_mm_fault+0x1556/0x2aa0 [ 245.767610][ T8636] ? __pfx___handle_mm_fault+0x10/0x10 [ 245.767660][ T8636] ? lock_vma_under_rcu+0x176/0x530 [ 245.767715][ T8636] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 245.767768][ T8636] handle_mm_fault+0x589/0xd10 [ 245.767812][ T8636] ? __pkru_allows_pkey+0x21/0xb0 [ 245.767860][ T8636] do_user_addr_fault+0x60c/0x1370 [ 245.767912][ T8636] ? rcu_is_watching+0x12/0xc0 [ 245.767949][ T8636] exc_page_fault+0x64/0xc0 [ 245.767987][ T8636] asm_exc_page_fault+0x26/0x30 [ 245.768014][ T8636] RIP: 0033:0x7fb1d7e5a65b [ 245.768039][ T8636] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 245.768066][ T8636] RSP: 002b:00007fb1d8e2bfb0 EFLAGS: 00010202 [ 245.768088][ T8636] RAX: 0000000000000000 RBX: 00007fb1d81e5fa0 RCX: 0000000000000000 [ 245.768105][ T8636] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000009c0 [ 245.768122][ T8636] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 245.768139][ T8636] R10: 00002000000009c0 R11: 0000000000000000 R12: 0000000000000000 [ 245.768155][ T8636] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 245.768204][ T8636] [ 245.768429][ T8636] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 249.666392][ T8700] random: crng reseeded on system resumption [ 249.673633][ T8688] [U]  [ 250.199106][ T8708] FAULT_INJECTION: forcing a failure. [ 250.199106][ T8708] name failslab, interval 1, probability 0, space 0, times 0 [ 250.213668][ T8708] CPU: 0 UID: 0 PID: 8708 Comm: syz.2.602 Not tainted syzkaller #0 PREEMPT(full) [ 250.213712][ T8708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.213731][ T8708] Call Trace: [ 250.213741][ T8708] [ 250.213755][ T8708] dump_stack_lvl+0x16c/0x1f0 [ 250.213802][ T8708] should_fail_ex+0x512/0x640 [ 250.213850][ T8708] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 250.213889][ T8708] should_failslab+0xc2/0x120 [ 250.213942][ T8708] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 250.213973][ T8708] ? __pfx___might_resched+0x10/0x10 [ 250.214008][ T8708] ? sock_alloc_inode+0x25/0x1c0 [ 250.214055][ T8708] ? __pfx_sock_alloc_inode+0x10/0x10 [ 250.214092][ T8708] ? sock_alloc_inode+0x25/0x1c0 [ 250.214127][ T8708] sock_alloc_inode+0x25/0x1c0 [ 250.214163][ T8708] alloc_inode+0x64/0x240 [ 250.214204][ T8708] sock_alloc+0x40/0x280 [ 250.214240][ T8708] __sock_create+0xc1/0x8d0 [ 250.214288][ T8708] __sys_socket+0x14d/0x260 [ 250.214330][ T8708] ? __pfx___sys_socket+0x10/0x10 [ 250.214374][ T8708] ? do_user_addr_fault+0x843/0x1370 [ 250.214411][ T8708] __x64_sys_socket+0x72/0xb0 [ 250.214450][ T8708] ? lockdep_hardirqs_on+0x7c/0x110 [ 250.214487][ T8708] do_syscall_64+0xcd/0xfa0 [ 250.214527][ T8708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.214557][ T8708] RIP: 0033:0x7fe16cd91667 [ 250.214582][ T8708] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.214610][ T8708] RSP: 002b:00007fe16dcaefa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 250.214640][ T8708] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd91667 [ 250.214660][ T8708] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 250.214677][ T8708] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 250.214695][ T8708] R10: 00002000000009c0 R11: 0000000000000286 R12: 0000000000000000 [ 250.214712][ T8708] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 250.214749][ T8708] [ 250.214763][ T8708] net_ratelimit: 47 callbacks suppressed [ 250.214777][ T8708] socket: no more sockets [ 251.741519][ T8732] QAT: failed to copy from user. [ 253.207526][ T8756] netlink: 146 bytes leftover after parsing attributes in process `syz.2.613'. [ 254.185030][ T8780] QAT: failed to copy from user. [ 255.755615][ T8825] FAULT_INJECTION: forcing a failure. [ 255.755615][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 255.852207][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 255.852248][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.852263][ T8825] Call Trace: [ 255.852273][ T8825] [ 255.852284][ T8825] dump_stack_lvl+0x16c/0x1f0 [ 255.852326][ T8825] should_fail_ex+0x512/0x640 [ 255.852368][ T8825] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 255.852412][ T8825] should_failslab+0xc2/0x120 [ 255.852451][ T8825] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 255.852481][ T8825] ? __debug_object_init+0x2de/0x3d0 [ 255.852517][ T8825] ? sock_alloc_inode+0x25/0x1c0 [ 255.852559][ T8825] ? __pfx_sock_alloc_inode+0x10/0x10 [ 255.852590][ T8825] ? sock_alloc_inode+0x25/0x1c0 [ 255.852621][ T8825] sock_alloc_inode+0x25/0x1c0 [ 255.852652][ T8825] alloc_inode+0x64/0x240 [ 255.852693][ T8825] sock_alloc+0x40/0x280 [ 255.852726][ T8825] __sock_create+0xc1/0x8d0 [ 255.852762][ T8825] ? lockdep_init_map_type+0x5c/0x280 [ 255.852808][ T8825] smc_create+0x15d/0x2a0 [ 255.852849][ T8825] __sock_create+0x338/0x8d0 [ 255.852904][ T8825] __sys_socket+0x14d/0x260 [ 255.852943][ T8825] ? __pfx___sys_socket+0x10/0x10 [ 255.852979][ T8825] ? xfd_validate_state+0x61/0x180 [ 255.853018][ T8825] ? __pfx___do_sys_close_range+0x10/0x10 [ 255.853059][ T8825] __x64_sys_socket+0x72/0xb0 [ 255.853094][ T8825] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.853124][ T8825] do_syscall_64+0xcd/0xfa0 [ 255.853156][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.853179][ T8825] RIP: 0033:0x7fe16cd8f749 [ 255.853200][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.853226][ T8825] RSP: 002b:00007fe16dcb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 255.853254][ T8825] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd8f749 [ 255.853272][ T8825] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 255.853288][ T8825] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.853305][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.853321][ T8825] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 255.853362][ T8825] [ 256.130564][ T8825] socket: no more sockets [ 257.855130][ T8874] netlink: 146 bytes leftover after parsing attributes in process `syz.1.641'. [ 259.157676][ T8902] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 259.199410][ T8902] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 259.208285][ T8892] zswap: compressor not available [ 259.217616][ T8902] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 261.091123][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.097789][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.281453][ T8939] netlink: 146 bytes leftover after parsing attributes in process `syz.0.657'. [ 261.626739][ T8945] Process accounting paused [ 263.846782][ T8994] netlink: 146 bytes leftover after parsing attributes in process `syz.4.669'. [ 264.482482][ T9008] random: crng reseeded on system resumption [ 264.573598][ T9008] netlink: 62 bytes leftover after parsing attributes in process `syz.1.672'. [ 265.410533][ T9014] zswap: compressor not available [ 266.589953][ T9032] ptrace attach of ""[9043] was attempted by "./syz-executor exec"[9032] [ 267.075899][ T9045] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 267.922957][ T9052] FAULT_INJECTION: forcing a failure. [ 267.922957][ T9052] name failslab, interval 1, probability 0, space 0, times 0 [ 267.938053][ T9052] CPU: 1 UID: 0 PID: 9052 Comm: syz.0.681 Not tainted syzkaller #0 PREEMPT(full) [ 267.938097][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.938113][ T9052] Call Trace: [ 267.938122][ T9052] [ 267.938132][ T9052] dump_stack_lvl+0x16c/0x1f0 [ 267.938174][ T9052] should_fail_ex+0x512/0x640 [ 267.938215][ T9052] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 267.938249][ T9052] should_failslab+0xc2/0x120 [ 267.938286][ T9052] kmem_cache_alloc_noprof+0x75/0x6e0 [ 267.938310][ T9052] ? copy_time_ns+0x346/0x510 [ 267.938340][ T9052] ? copy_net_ns+0x31f/0x690 [ 267.938371][ T9052] ? copy_fs_struct+0x49/0x340 [ 267.938419][ T9052] ? copy_fs_struct+0x49/0x340 [ 267.938461][ T9052] copy_fs_struct+0x49/0x340 [ 267.938508][ T9052] __do_sys_setns+0x50e/0x1920 [ 267.938544][ T9052] ? fput+0x9b/0xd0 [ 267.938585][ T9052] ? __pfx___do_sys_setns+0x10/0x10 [ 267.938645][ T9052] do_syscall_64+0xcd/0xfa0 [ 267.938688][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.938719][ T9052] RIP: 0033:0x7fb1d7f8f749 [ 267.938744][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.938771][ T9052] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 267.938802][ T9052] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 267.938821][ T9052] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000007 [ 267.938838][ T9052] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.938856][ T9052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.938882][ T9052] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 267.938924][ T9052] [ 268.221611][ T9059] FAULT_INJECTION: forcing a failure. [ 268.221611][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 268.247581][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.2.683 Not tainted syzkaller #0 PREEMPT(full) [ 268.247626][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.247645][ T9059] Call Trace: [ 268.247655][ T9059] [ 268.247667][ T9059] dump_stack_lvl+0x16c/0x1f0 [ 268.247714][ T9059] should_fail_ex+0x512/0x640 [ 268.247761][ T9059] ? __kmalloc_noprof+0xca/0x880 [ 268.247833][ T9059] should_failslab+0xc2/0x120 [ 268.247875][ T9059] __kmalloc_noprof+0xdd/0x880 [ 268.247923][ T9059] ? __register_sysctl_table+0xb3/0x1900 [ 268.247979][ T9059] ? __register_sysctl_table+0xb3/0x1900 [ 268.248024][ T9059] __register_sysctl_table+0xb3/0x1900 [ 268.248070][ T9059] ? is_module_address+0x5f/0xf0 [ 268.248133][ T9059] ? __pfx___register_sysctl_table+0x10/0x10 [ 268.248177][ T9059] ? is_module_address+0x69/0xf0 [ 268.248221][ T9059] ? register_net_sysctl_sz+0x228/0x3e0 [ 268.248272][ T9059] ? __asan_memcpy+0x3c/0x60 [ 268.248311][ T9059] xfrm4_net_init+0xf0/0x1c0 [ 268.248358][ T9059] ? __pfx_xfrm4_net_init+0x10/0x10 [ 268.248399][ T9059] ops_init+0x1e2/0x5f0 [ 268.248438][ T9059] setup_net+0x100/0x390 [ 268.248474][ T9059] ? __pfx_setup_net+0x10/0x10 [ 268.248510][ T9059] ? debug_mutex_init+0x37/0x70 [ 268.248549][ T9059] copy_net_ns+0x2f8/0x690 [ 268.248591][ T9059] create_new_namespaces+0x3ea/0xa90 [ 268.248640][ T9059] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 268.248681][ T9059] ksys_unshare+0x45b/0xa40 [ 268.248723][ T9059] ? __pfx_ksys_unshare+0x10/0x10 [ 268.248766][ T9059] ? xfd_validate_state+0x61/0x180 [ 268.248824][ T9059] __x64_sys_unshare+0x31/0x40 [ 268.248862][ T9059] do_syscall_64+0xcd/0xfa0 [ 268.248904][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.248934][ T9059] RIP: 0033:0x7fe16cd8f749 [ 268.248960][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.248989][ T9059] RSP: 002b:00007fe16dcd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 268.249018][ T9059] RAX: ffffffffffffffda RBX: 00007fe16cfe5fa0 RCX: 00007fe16cd8f749 [ 268.249039][ T9059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 268.249056][ T9059] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.249075][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.249094][ T9059] R13: 00007fe16cfe6038 R14: 00007fe16cfe5fa0 R15: 00007fffe182ccc8 [ 268.249150][ T9059] [ 268.501027][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.085789][ T9069] program syz.0.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.652270][ T9094] ptrace attach of ""[9108] was attempted by "./syz-executor exec"[9094] [ 271.999816][ T6631] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.379103][ T6631] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.933880][ T6631] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.063101][ T9105] bond0: no command found in slaves file - use +ifname or -ifname [ 273.338145][ T6631] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.856249][ T6631] bridge_slave_1: left allmulticast mode [ 273.891194][ T6631] bridge_slave_1: left promiscuous mode [ 273.924172][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.058121][ T6631] bridge_slave_0: left allmulticast mode [ 274.077735][ T6631] bridge_slave_0: left promiscuous mode [ 274.093221][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.816940][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.908139][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.958485][ T9193] program syz.0.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.984538][ T6631] bond0 (unregistering): Released all slaves [ 278.715779][ T9218] FAULT_INJECTION: forcing a failure. [ 278.715779][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 278.748054][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.1.716 Not tainted syzkaller #0 PREEMPT(full) [ 278.748105][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.748121][ T9218] Call Trace: [ 278.748131][ T9218] [ 278.748143][ T9218] dump_stack_lvl+0x16c/0x1f0 [ 278.748184][ T9218] should_fail_ex+0x512/0x640 [ 278.748230][ T9218] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 278.748266][ T9218] should_failslab+0xc2/0x120 [ 278.748304][ T9218] kmem_cache_alloc_noprof+0x75/0x6e0 [ 278.748334][ T9218] ? security_file_alloc+0x34/0x2b0 [ 278.748372][ T9218] ? security_file_alloc+0x34/0x2b0 [ 278.748401][ T9218] security_file_alloc+0x34/0x2b0 [ 278.748431][ T9218] init_file+0x93/0x4c0 [ 278.748471][ T9218] alloc_empty_file+0x73/0x1e0 [ 278.748515][ T9218] alloc_file_pseudo+0x13a/0x230 [ 278.748555][ T9218] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 278.748608][ T9218] __shmem_file_setup+0x1a3/0x330 [ 278.748655][ T9218] shmem_zero_setup+0x93/0x1a0 [ 278.748688][ T9218] __mmap_region+0x2076/0x27a0 [ 278.748724][ T9218] ? __pfx___mmap_region+0x10/0x10 [ 278.748751][ T9218] ? lock_acquire+0x179/0x350 [ 278.748791][ T9218] ? find_held_lock+0x2b/0x80 [ 278.748821][ T9218] ? finish_task_switch.isra.0+0x21c/0xc10 [ 278.748853][ T9218] ? rcu_is_watching+0x12/0xc0 [ 278.748883][ T9218] ? finish_task_switch.isra.0+0x221/0xc10 [ 278.748924][ T9218] ? trace_sched_exit_tp+0xd1/0x120 [ 278.748969][ T9218] ? __schedule+0x11a3/0x5de0 [ 278.749082][ T9218] ? trace_cap_capable+0x18d/0x200 [ 278.749141][ T9218] mmap_region+0x1ab/0x3f0 [ 278.749171][ T9218] ? __get_unmapped_area+0x267/0x440 [ 278.749214][ T9218] do_mmap+0xa3e/0x1210 [ 278.749256][ T9218] ? __pfx_do_mmap+0x10/0x10 [ 278.749291][ T9218] ? __pfx_down_write_killable+0x10/0x10 [ 278.749338][ T9218] vm_mmap_pgoff+0x29e/0x470 [ 278.749380][ T9218] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 278.749413][ T9218] ? do_linkat+0x340/0x5a0 [ 278.749452][ T9218] ? __x64_sys_futex+0x1e0/0x4c0 [ 278.749486][ T9218] ? __x64_sys_futex+0x1e9/0x4c0 [ 278.749528][ T9218] ksys_mmap_pgoff+0x7d/0x5c0 [ 278.749561][ T9218] ? xfd_validate_state+0x61/0x180 [ 278.749615][ T9218] __x64_sys_mmap+0x125/0x190 [ 278.749664][ T9218] do_syscall_64+0xcd/0xfa0 [ 278.749707][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.749735][ T9218] RIP: 0033:0x7f3f8c78f749 [ 278.749761][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.749787][ T9218] RSP: 002b:00007f3f8d601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 278.749816][ T9218] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78f749 [ 278.749834][ T9218] RDX: 00000000000000df RSI: 00000000000000f4 RDI: 0000000000000000 [ 278.749851][ T9218] RBP: 00007f3f8c813f91 R08: 00000000000069a5 R09: a800000000000000 [ 278.749870][ T9218] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 278.749887][ T9218] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 278.749929][ T9218] [ 279.407626][ T9231] FAULT_INJECTION: forcing a failure. [ 279.407626][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 279.421136][ T9231] CPU: 1 UID: 0 PID: 9231 Comm: syz.1.718 Not tainted syzkaller #0 PREEMPT(full) [ 279.421157][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.421165][ T9231] Call Trace: [ 279.421170][ T9231] [ 279.421176][ T9231] dump_stack_lvl+0x16c/0x1f0 [ 279.421200][ T9231] should_fail_ex+0x512/0x640 [ 279.421223][ T9231] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 279.421241][ T9231] should_failslab+0xc2/0x120 [ 279.421262][ T9231] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 279.421279][ T9231] ? __d_alloc+0x32/0xae0 [ 279.421298][ T9231] ? __d_alloc+0x32/0xae0 [ 279.421313][ T9231] __d_alloc+0x32/0xae0 [ 279.421332][ T9231] d_alloc_pseudo+0x1c/0xc0 [ 279.421353][ T9231] alloc_file_pseudo+0xcf/0x230 [ 279.421375][ T9231] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 279.421395][ T9231] ? alloc_fd+0x471/0x7d0 [ 279.421412][ T9231] sock_alloc_file+0x50/0x210 [ 279.421428][ T9231] __sys_socket+0x1c0/0x260 [ 279.421447][ T9231] ? __pfx___sys_socket+0x10/0x10 [ 279.421465][ T9231] ? xfd_validate_state+0x61/0x180 [ 279.421484][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 279.421503][ T9231] __x64_sys_socket+0x72/0xb0 [ 279.421521][ T9231] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.421538][ T9231] do_syscall_64+0xcd/0xfa0 [ 279.421557][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.421571][ T9231] RIP: 0033:0x7f3f8c78f749 [ 279.421584][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.421597][ T9231] RSP: 002b:00007f3f8d5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 279.421611][ T9231] RAX: ffffffffffffffda RBX: 00007f3f8c9e6090 RCX: 00007f3f8c78f749 [ 279.421620][ T9231] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 279.421627][ T9231] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 279.421635][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.421643][ T9231] R13: 00007f3f8c9e6128 R14: 00007f3f8c9e6090 R15: 00007ffe808d0288 [ 279.421661][ T9231] [ 279.712431][ T6631] hsr_slave_0: left promiscuous mode [ 279.718998][ T6631] hsr_slave_1: left promiscuous mode [ 279.738748][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.747143][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.766030][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.774197][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.808536][ T6631] veth1_macvtap: left promiscuous mode [ 279.815151][ T6631] veth0_macvtap: left promiscuous mode [ 279.821613][ T6631] veth1_vlan: left promiscuous mode [ 279.829151][ T6631] veth0_vlan: left promiscuous mode [ 280.415874][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 280.453411][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 281.886141][ T9249] FAULT_INJECTION: forcing a failure. [ 281.886141][ T9249] name fail_futex, interval 1, probability 0, space 0, times 0 [ 281.933677][ T9249] CPU: 1 UID: 0 PID: 9249 Comm: syz.2.720 Not tainted syzkaller #0 PREEMPT(full) [ 281.933719][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.933735][ T9249] Call Trace: [ 281.933744][ T9249] [ 281.933755][ T9249] dump_stack_lvl+0x16c/0x1f0 [ 281.933794][ T9249] should_fail_ex+0x512/0x640 [ 281.933834][ T9249] get_futex_key+0x1d0/0x1560 [ 281.933870][ T9249] ? __pfx_get_futex_key+0x10/0x10 [ 281.933900][ T9249] ? __mutex_trylock_common+0xe9/0x250 [ 281.933949][ T9249] futex_wake+0xea/0x530 [ 281.933995][ T9249] ? __pfx_futex_wake+0x10/0x10 [ 281.934043][ T9249] ? __lock_acquire+0xb8a/0x1c90 [ 281.934102][ T9249] do_futex+0x1e3/0x350 [ 281.934140][ T9249] ? __pfx_do_futex+0x10/0x10 [ 281.934175][ T9249] ? __might_fault+0xe3/0x190 [ 281.934217][ T9249] mm_release+0x24e/0x300 [ 281.934250][ T9249] do_exit+0x68e/0x2bf0 [ 281.934295][ T9249] ? __pfx_do_exit+0x10/0x10 [ 281.934332][ T9249] ? do_raw_spin_lock+0x12c/0x2b0 [ 281.934378][ T9249] ? find_held_lock+0x2b/0x80 [ 281.934413][ T9249] do_group_exit+0xd3/0x2a0 [ 281.934456][ T9249] get_signal+0x2671/0x26d0 [ 281.934505][ T9249] ? __pfx_get_signal+0x10/0x10 [ 281.934536][ T9249] ? do_futex+0x122/0x350 [ 281.934573][ T9249] ? __pfx_do_futex+0x10/0x10 [ 281.934634][ T9249] arch_do_signal_or_restart+0x8f/0x790 [ 281.934674][ T9249] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 281.934721][ T9249] ? xfd_validate_state+0x61/0x180 [ 281.934758][ T9249] ? __sys_setsockopt+0x140/0x1a0 [ 281.934790][ T9249] exit_to_user_mode_loop+0x85/0x130 [ 281.934835][ T9249] do_syscall_64+0x426/0xfa0 [ 281.934875][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.934904][ T9249] RIP: 0033:0x7fe16cd8f749 [ 281.934929][ T9249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.934956][ T9249] RSP: 002b:00007fe16dcd10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.934984][ T9249] RAX: fffffffffffffe00 RBX: 00007fe16cfe5fa8 RCX: 00007fe16cd8f749 [ 281.935001][ T9249] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe16cfe5fa8 [ 281.935026][ T9249] RBP: 00007fe16cfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 281.935044][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.935061][ T9249] R13: 00007fe16cfe6038 R14: 00007fffe182cbe0 R15: 00007fffe182ccc8 [ 281.935107][ T9249] [ 283.751625][ T9287] FAULT_INJECTION: forcing a failure. [ 283.751625][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 283.770339][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.4.726 Not tainted syzkaller #0 PREEMPT(full) [ 283.770376][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.770388][ T9287] Call Trace: [ 283.770396][ T9287] [ 283.770405][ T9287] dump_stack_lvl+0x16c/0x1f0 [ 283.770440][ T9287] should_fail_ex+0x512/0x640 [ 283.770473][ T9287] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 283.770501][ T9287] should_failslab+0xc2/0x120 [ 283.770531][ T9287] kmem_cache_alloc_node_noprof+0x78/0x770 [ 283.770551][ T9287] ? __alloc_skb+0x2b2/0x380 [ 283.770581][ T9287] ? __pfx_tcp_current_mss+0x10/0x10 [ 283.770621][ T9287] ? __alloc_skb+0x2b2/0x380 [ 283.770650][ T9287] __alloc_skb+0x2b2/0x380 [ 283.770672][ T9287] ? __pfx___alloc_skb+0x10/0x10 [ 283.770697][ T9287] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.770720][ T9287] tcp_stream_alloc_skb+0x34/0x560 [ 283.770742][ T9287] tcp_sendmsg_locked+0x12d9/0x42e0 [ 283.770776][ T9287] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 283.770798][ T9287] ? do_raw_spin_lock+0x12c/0x2b0 [ 283.770828][ T9287] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 283.770855][ T9287] ? __local_bh_enable_ip+0xa4/0x120 [ 283.770874][ T9287] tcp_sendmsg+0x2e/0x50 [ 283.770893][ T9287] ? __pfx_tcp_sendmsg+0x10/0x10 [ 283.770912][ T9287] inet_sendmsg+0xb9/0x140 [ 283.770936][ T9287] sock_write_iter+0x509/0x610 [ 283.770955][ T9287] ? __pfx_sock_write_iter+0x10/0x10 [ 283.770981][ T9287] ? bpf_lsm_file_permission+0x9/0x10 [ 283.770998][ T9287] ? security_file_permission+0x71/0x210 [ 283.771015][ T9287] ? rw_verify_area+0xcf/0x6c0 [ 283.771031][ T9287] vfs_write+0x7d3/0x11d0 [ 283.771047][ T9287] ? __pfx_sock_write_iter+0x10/0x10 [ 283.771068][ T9287] ? __pfx_vfs_write+0x10/0x10 [ 283.771082][ T9287] ? find_held_lock+0x2b/0x80 [ 283.771109][ T9287] ksys_write+0x1f8/0x250 [ 283.771124][ T9287] ? __pfx_ksys_write+0x10/0x10 [ 283.771145][ T9287] do_syscall_64+0xcd/0xfa0 [ 283.771165][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.771179][ T9287] RIP: 0033:0x7f3dad78f749 [ 283.771191][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.771205][ T9287] RSP: 002b:00007f3dae674038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.771218][ T9287] RAX: ffffffffffffffda RBX: 00007f3dad9e6090 RCX: 00007f3dad78f749 [ 283.771227][ T9287] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 283.771235][ T9287] RBP: 00007f3dae674090 R08: 0000000000000000 R09: 0000000000000000 [ 283.771243][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.771251][ T9287] R13: 00007f3dad9e6128 R14: 00007f3dad9e6090 R15: 00007ffe7dac1a18 [ 283.771269][ T9287] [ 284.421614][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'. [ 284.457492][ T9313] netlink: 25 bytes leftover after parsing attributes in process `syz.1.733'. [ 284.521928][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 287.763053][ T9386] netlink: 342 bytes leftover after parsing attributes in process `syz.1.753'. [ 288.838250][ T9409] program syz.4.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.077369][ T9403] netlink: zone id is out of range [ 289.096097][ T9403] netlink: zone id is out of range [ 289.170275][ T9403] netlink: zone id is out of range [ 289.175568][ T9403] netlink: zone id is out of range [ 289.182400][ T9403] netlink: zone id is out of range [ 289.187714][ T9403] netlink: zone id is out of range [ 289.194862][ T9403] netlink: zone id is out of range [ 289.302404][ T9403] netlink: zone id is out of range [ 289.307599][ T9403] netlink: zone id is out of range [ 289.428513][ T9403] netlink: zone id is out of range [ 290.909127][ T9442] ovs_ÿþ: entered promiscuous mode [ 293.263844][ T9349] Process accounting resumed [ 295.394058][ T9513] FAULT_INJECTION: forcing a failure. [ 295.394058][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.440804][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.1.770 Not tainted syzkaller #0 PREEMPT(full) [ 295.440902][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.440911][ T9513] Call Trace: [ 295.440919][ T9513] [ 295.440925][ T9513] dump_stack_lvl+0x16c/0x1f0 [ 295.440949][ T9513] should_fail_ex+0x512/0x640 [ 295.440975][ T9513] _copy_from_iter+0x29f/0x1720 [ 295.440999][ T9513] ? tcp_leave_memory_pressure+0x1f/0x100 [ 295.441027][ T9513] ? sk_leave_memory_pressure+0x7c/0x130 [ 295.441049][ T9513] ? __pfx__copy_from_iter+0x10/0x10 [ 295.441072][ T9513] ? alloc_pages_noprof+0x23c/0x390 [ 295.441095][ T9513] ? __sk_mem_schedule+0xd0/0x100 [ 295.441114][ T9513] tcp_sendmsg_locked+0x2900/0x42e0 [ 295.441148][ T9513] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 295.441171][ T9513] ? do_raw_spin_lock+0x12c/0x2b0 [ 295.441196][ T9513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.441224][ T9513] ? __local_bh_enable_ip+0xa4/0x120 [ 295.441244][ T9513] tcp_sendmsg+0x2e/0x50 [ 295.441263][ T9513] ? __pfx_tcp_sendmsg+0x10/0x10 [ 295.441283][ T9513] inet_sendmsg+0xb9/0x140 [ 295.441307][ T9513] sock_write_iter+0x509/0x610 [ 295.441327][ T9513] ? __pfx_sock_write_iter+0x10/0x10 [ 295.441353][ T9513] ? bpf_lsm_file_permission+0x9/0x10 [ 295.441371][ T9513] ? security_file_permission+0x71/0x210 [ 295.441388][ T9513] ? rw_verify_area+0xcf/0x6c0 [ 295.441404][ T9513] vfs_write+0x7d3/0x11d0 [ 295.441421][ T9513] ? __pfx_sock_write_iter+0x10/0x10 [ 295.441442][ T9513] ? __pfx_vfs_write+0x10/0x10 [ 295.441457][ T9513] ? find_held_lock+0x2b/0x80 [ 295.441484][ T9513] ksys_write+0x1f8/0x250 [ 295.441500][ T9513] ? __pfx_ksys_write+0x10/0x10 [ 295.441522][ T9513] do_syscall_64+0xcd/0xfa0 [ 295.441542][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.441557][ T9513] RIP: 0033:0x7f3f8c78f749 [ 295.441571][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.441586][ T9513] RSP: 002b:00007f3f8d601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.441600][ T9513] RAX: ffffffffffffffda RBX: 00007f3f8c9e5fa0 RCX: 00007f3f8c78f749 [ 295.441610][ T9513] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 295.441618][ T9513] RBP: 00007f3f8d601090 R08: 0000000000000000 R09: 0000000000000000 [ 295.441627][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.441635][ T9513] R13: 00007f3f8c9e6038 R14: 00007f3f8c9e5fa0 R15: 00007ffe808d0288 [ 295.441654][ T9513] [ 297.280113][ T9547] netlink: 186 bytes leftover after parsing attributes in process `syz.1.775'. [ 300.169864][ T9603] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 300.507489][ T9610] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 301.775575][ T9617] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 303.756853][ T9669] FAULT_INJECTION: forcing a failure. [ 303.756853][ T9669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 303.788815][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.0.795 Not tainted syzkaller #0 PREEMPT(full) [ 303.788858][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.788875][ T9669] Call Trace: [ 303.788884][ T9669] [ 303.788896][ T9669] dump_stack_lvl+0x16c/0x1f0 [ 303.788938][ T9669] should_fail_ex+0x512/0x640 [ 303.788986][ T9669] should_fail_alloc_page+0xe7/0x130 [ 303.789030][ T9669] prepare_alloc_pages+0x3c2/0x610 [ 303.789067][ T9669] ? rcu_is_watching+0x12/0xc0 [ 303.789100][ T9669] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 303.789132][ T9669] ? rcu_is_watching+0x12/0xc0 [ 303.789160][ T9669] ? trace_sched_exit_tp+0xd1/0x120 [ 303.789202][ T9669] ? __schedule+0x11a3/0x5de0 [ 303.789242][ T9669] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 303.789274][ T9669] ? __lock_acquire+0x622/0x1c90 [ 303.789328][ T9669] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 303.789375][ T9669] ? policy_nodemask+0xea/0x4e0 [ 303.789413][ T9669] alloc_pages_mpol+0x1fb/0x550 [ 303.789450][ T9669] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 303.789483][ T9669] ? __futex_wait+0x24b/0x2f0 [ 303.789508][ T9669] ? __pfx___futex_wait+0x10/0x10 [ 303.789538][ T9669] ___kmalloc_large_node+0xed/0x160 [ 303.789581][ T9669] __kmalloc_large_node_noprof+0x1c/0x70 [ 303.789623][ T9669] __kmalloc_noprof.cold+0xc/0x62 [ 303.789665][ T9669] ? iovec_from_user+0x108/0x140 [ 303.789696][ T9669] ? iovec_from_user+0x108/0x140 [ 303.789736][ T9669] iovec_from_user+0x108/0x140 [ 303.789768][ T9669] __import_iovec+0x88/0x650 [ 303.789804][ T9669] import_iovec+0x86/0xb0 [ 303.789837][ T9669] __do_sys_process_madvise+0x121/0x3c0 [ 303.789883][ T9669] ? __pfx___do_sys_process_madvise+0x10/0x10 [ 303.789928][ T9669] ? __pfx_do_futex+0x10/0x10 [ 303.790007][ T9669] do_syscall_64+0xcd/0xfa0 [ 303.790045][ T9669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.790073][ T9669] RIP: 0033:0x7fb1d7f8f749 [ 303.790097][ T9669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.790126][ T9669] RSP: 002b:00007fb1d8e2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b8 [ 303.790162][ T9669] RAX: ffffffffffffffda RBX: 00007fb1d81e5fa0 RCX: 00007fb1d7f8f749 [ 303.790179][ T9669] RDX: 00000000000002e5 RSI: 0000000000000000 RDI: ffffffffffffffff [ 303.790197][ T9669] RBP: 00007fb1d8013f91 R08: 0000000000000000 R09: 0000000000000000 [ 303.790214][ T9669] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 303.790230][ T9669] R13: 00007fb1d81e6038 R14: 00007fb1d81e5fa0 R15: 00007ffcaebbac58 [ 303.790274][ T9669] [ 309.087732][ T9754] kAFS: No cell specified [ 309.272305][ T5150] Bluetooth: hci2: unexpected event 0x03 length: 725 > 11 [ 310.596915][ T9780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.818'. [ 313.626805][ T9826] kAFS: No cell specified [ 314.788490][ T9845] kAFS: No cell specified [ 319.196232][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.843'. [ 319.471169][ T9910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.846'. [ 321.994439][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.852'. [ 322.507867][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.514851][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.748762][ T9967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 322.768248][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 323.515625][ T9962] Process accounting paused [ 327.794895][T10027] zswap: compressor 000 not available [ 328.093153][T10044] FAULT_INJECTION: forcing a failure. [ 328.093153][T10044] name failslab, interval 1, probability 0, space 0, times 0 [ 328.130240][T10044] CPU: 1 UID: 0 PID: 10044 Comm: syz.2.874 Not tainted syzkaller #0 PREEMPT(full) [ 328.130281][T10044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.130296][T10044] Call Trace: [ 328.130305][T10044] [ 328.130316][T10044] dump_stack_lvl+0x16c/0x1f0 [ 328.130357][T10044] should_fail_ex+0x512/0x640 [ 328.130399][T10044] ? __kmalloc_noprof+0xca/0x880 [ 328.130445][T10044] should_failslab+0xc2/0x120 [ 328.130484][T10044] __kmalloc_noprof+0xdd/0x880 [ 328.130528][T10044] ? copy_splice_read+0x1a8/0xc20 [ 328.130561][T10044] ? copy_splice_read+0x1a8/0xc20 [ 328.130587][T10044] copy_splice_read+0x1a8/0xc20 [ 328.130624][T10044] ? __pfx_copy_splice_read+0x10/0x10 [ 328.130801][T10044] ? look_up_lock_class+0x59/0x150 [ 328.130837][T10044] ? lockdep_init_map_type+0x5c/0x280 [ 328.130871][T10044] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 328.130899][T10044] ? __pfx_copy_splice_read+0x10/0x10 [ 328.130919][T10044] do_splice_read+0x285/0x370 [ 328.130944][T10044] splice_direct_to_actor+0x2a1/0xa30 [ 328.130967][T10044] ? __pfx_direct_splice_actor+0x10/0x10 [ 328.130995][T10044] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 328.131015][T10044] ? get_pid_task+0xfc/0x250 [ 328.131054][T10044] do_splice_direct+0x174/0x240 [ 328.131077][T10044] ? __pfx_do_splice_direct+0x10/0x10 [ 328.131100][T10044] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 328.131143][T10044] ? rw_verify_area+0xcf/0x6c0 [ 328.131172][T10044] do_sendfile+0xb06/0xe50 [ 328.131210][T10044] ? __pfx_do_sendfile+0x10/0x10 [ 328.131244][T10044] ? __fget_files+0x20e/0x3c0 [ 328.131282][T10044] __x64_sys_sendfile64+0x1d8/0x220 [ 328.131317][T10044] ? ksys_write+0x1ac/0x250 [ 328.131342][T10044] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 328.131390][T10044] do_syscall_64+0xcd/0xfa0 [ 328.131426][T10044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.131455][T10044] RIP: 0033:0x7fe16cd8f749 [ 328.131482][T10044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.131512][T10044] RSP: 002b:00007fe16dcb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.131542][T10044] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd8f749 [ 328.131561][T10044] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 328.131579][T10044] RBP: 00007fe16dcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 328.131597][T10044] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 328.131615][T10044] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 328.131840][T10044] [ 328.655548][T10040] zswap: compressor not available [ 329.431766][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 329.443351][T10057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 331.316237][T10079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 331.766625][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.883'. [ 331.982127][T10090] zswap: compressor not available [ 332.060471][T10097] netlink: 288 bytes leftover after parsing attributes in process `syz.1.884'. [ 332.128270][T10103] FAULT_INJECTION: forcing a failure. [ 332.128270][T10103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.194321][T10103] CPU: 0 UID: 0 PID: 10103 Comm: syz.2.886 Not tainted syzkaller #0 PREEMPT(full) [ 332.194366][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 332.194383][T10103] Call Trace: [ 332.194394][T10103] [ 332.194406][T10103] dump_stack_lvl+0x16c/0x1f0 [ 332.194454][T10103] should_fail_ex+0x512/0x640 [ 332.194506][T10103] should_fail_alloc_page+0xe7/0x130 [ 332.194549][T10103] prepare_alloc_pages+0x3c2/0x610 [ 332.194593][T10103] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 332.194625][T10103] ? stack_trace_save+0x8e/0xc0 [ 332.194655][T10103] ? __pfx_stack_trace_save+0x10/0x10 [ 332.194685][T10103] ? stack_depot_save_flags+0x29/0x9c0 [ 332.194735][T10103] ? __lock_acquire+0x622/0x1c90 [ 332.194852][T10103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 332.194890][T10103] ? __kasan_kmalloc+0xaa/0xb0 [ 332.194912][T10103] ? copy_splice_read+0x1a8/0xc20 [ 332.194930][T10103] ? splice_direct_to_actor+0x2a1/0xa30 [ 332.194947][T10103] ? do_splice_direct+0x174/0x240 [ 332.194966][T10103] ? do_sendfile+0xb06/0xe50 [ 332.194990][T10103] ? __x64_sys_sendfile64+0x1d8/0x220 [ 332.195013][T10103] ? do_syscall_64+0xcd/0xfa0 [ 332.195036][T10103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.195075][T10103] alloc_pages_bulk_noprof+0x77a/0x1410 [ 332.195111][T10103] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 332.195140][T10103] ? copy_splice_read+0x1a8/0xc20 [ 332.195165][T10103] copy_splice_read+0x1e1/0xc20 [ 332.195192][T10103] ? __pfx_copy_splice_read+0x10/0x10 [ 332.195221][T10103] ? look_up_lock_class+0x59/0x150 [ 332.195264][T10103] ? lockdep_init_map_type+0x5c/0x280 [ 332.195307][T10103] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 332.195341][T10103] ? __pfx_copy_splice_read+0x10/0x10 [ 332.195367][T10103] do_splice_read+0x285/0x370 [ 332.195398][T10103] splice_direct_to_actor+0x2a1/0xa30 [ 332.195428][T10103] ? __pfx_direct_splice_actor+0x10/0x10 [ 332.195463][T10103] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 332.195503][T10103] ? get_pid_task+0xfc/0x250 [ 332.195552][T10103] do_splice_direct+0x174/0x240 [ 332.195580][T10103] ? __pfx_do_splice_direct+0x10/0x10 [ 332.195606][T10103] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 332.195668][T10103] ? rw_verify_area+0xcf/0x6c0 [ 332.195698][T10103] do_sendfile+0xb06/0xe50 [ 332.195801][T10103] ? __pfx_do_sendfile+0x10/0x10 [ 332.195828][T10103] ? __fget_files+0x20e/0x3c0 [ 332.195858][T10103] __x64_sys_sendfile64+0x1d8/0x220 [ 332.195884][T10103] ? ksys_write+0x1ac/0x250 [ 332.195976][T10103] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 332.196015][T10103] do_syscall_64+0xcd/0xfa0 [ 332.196046][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.196069][T10103] RIP: 0033:0x7fe16cd8f749 [ 332.196088][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.196109][T10103] RSP: 002b:00007fe16dcb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.196131][T10103] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd8f749 [ 332.196145][T10103] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 332.196159][T10103] RBP: 00007fe16dcb0090 R08: 0000000000000000 R09: 0000000000000000 [ 332.196172][T10103] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 332.196184][T10103] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 332.196216][T10103] [ 332.617477][T10099] zswap: compressor not available [ 332.980499][T10115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.987478][T10115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.993999][T10115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.001083][T10115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.007436][T10115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 333.171473][T10115] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 334.900519][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 335.062513][ T5150] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.068662][ T5150] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.070514][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.210531][T10167] zswap: compressor not available [ 336.261270][T10177] Line length is too long: Should be less than 4094 [ 336.613884][T10186] Line length is too long: Should be less than 4094 [ 337.140310][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.220965][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.240091][T10255] HSR: entered promiscuous mode [ 339.308177][T10220] cgroup: fork rejected by pids controller in /syz4 [ 339.600639][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 341.871196][T10347] netlink: 'syz.1.926': attribute type 2 has an invalid length. [ 341.880259][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 342.088586][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 342.293563][T10360] dyndbg: expected <4096 bytes into control [ 343.027365][T10370] svc: failed to register nfsdv3 RPC service (errno 111). [ 343.042235][T10370] svc: failed to register nfsaclv3 RPC service (errno 111). [ 343.870277][ T30] audit: type=1800 audit(42028.084:8): pid=10400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.940" name="dbroot" dev="configfs" ino=32493 res=0 errno=0 [ 344.485076][T10418] netlink: 'syz.4.942': attribute type 1 has an invalid length. [ 345.754724][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.949'. [ 347.424697][T10507] FAULT_INJECTION: forcing a failure. [ 347.424697][T10507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 347.448742][T10507] CPU: 1 UID: 0 PID: 10507 Comm: syz.2.963 Not tainted syzkaller #0 PREEMPT(full) [ 347.448785][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.448802][T10507] Call Trace: [ 347.448812][T10507] [ 347.448833][T10507] dump_stack_lvl+0x16c/0x1f0 [ 347.448876][T10507] should_fail_ex+0x512/0x640 [ 347.448929][T10507] should_fail_alloc_page+0xe7/0x130 [ 347.448973][T10507] prepare_alloc_pages+0x3c2/0x610 [ 347.449012][T10507] ? rcu_is_watching+0x12/0xc0 [ 347.449046][T10507] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 347.449084][T10507] ? stack_trace_save+0x8e/0xc0 [ 347.449118][T10507] ? __pfx_stack_trace_save+0x10/0x10 [ 347.449148][T10507] ? is_bpf_text_address+0x94/0x1a0 [ 347.449189][T10507] ? stack_depot_save_flags+0x29/0x9c0 [ 347.449234][T10507] ? __kernel_text_address+0xd/0x40 [ 347.449265][T10507] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 347.449301][T10507] ? __lock_acquire+0x622/0x1c90 [ 347.449344][T10507] ? xa_find_after+0x2d2/0x470 [ 347.449389][T10507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.449431][T10507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 347.449483][T10507] ? policy_nodemask+0xea/0x4e0 [ 347.449526][T10507] alloc_pages_mpol+0x1fb/0x550 [ 347.449567][T10507] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 347.449620][T10507] alloc_pages_noprof+0x131/0x390 [ 347.449659][T10507] alloc_pages_exact_noprof+0x37/0xe0 [ 347.449699][T10507] ? __asan_memset+0x23/0x50 [ 347.449739][T10507] snd_pcm_attach_substream+0x4bb/0xd60 [ 347.449784][T10507] snd_pcm_open_substream+0x8d/0x17f0 [ 347.449816][T10507] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 347.449868][T10507] snd_pcm_oss_open+0x735/0x1400 [ 347.449928][T10507] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 347.449969][T10507] ? __lock_acquire+0xb8a/0x1c90 [ 347.450010][T10507] ? __pfx_default_wake_function+0x10/0x10 [ 347.450045][T10507] ? __lock_acquire+0xb8a/0x1c90 [ 347.450095][T10507] ? do_raw_spin_lock+0x12c/0x2b0 [ 347.450145][T10507] ? soundcore_open+0x35a/0x580 [ 347.450182][T10507] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 347.450221][T10507] soundcore_open+0x40c/0x580 [ 347.450257][T10507] ? __pfx_soundcore_open+0x10/0x10 [ 347.450287][T10507] chrdev_open+0x234/0x6a0 [ 347.450319][T10507] ? __pfx_apparmor_file_open+0x10/0x10 [ 347.450360][T10507] ? __pfx_chrdev_open+0x10/0x10 [ 347.450395][T10507] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 347.450437][T10507] do_dentry_open+0x982/0x1530 [ 347.450474][T10507] ? __pfx_chrdev_open+0x10/0x10 [ 347.450520][T10507] vfs_open+0x82/0x3f0 [ 347.450570][T10507] path_openat+0x1de4/0x2cb0 [ 347.450675][T10507] ? __pfx_path_openat+0x10/0x10 [ 347.450703][T10507] ? __lock_acquire+0xb8a/0x1c90 [ 347.450738][T10507] do_filp_open+0x20b/0x470 [ 347.450765][T10507] ? __pfx_do_filp_open+0x10/0x10 [ 347.450816][T10507] ? alloc_fd+0x471/0x7d0 [ 347.450863][T10507] do_sys_openat2+0x11b/0x1d0 [ 347.450900][T10507] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.450950][T10507] __x64_sys_openat+0x174/0x210 [ 347.450988][T10507] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.451037][T10507] do_syscall_64+0xcd/0xfa0 [ 347.451071][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.451096][T10507] RIP: 0033:0x7fe16cd8f749 [ 347.451117][T10507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.451139][T10507] RSP: 002b:00007fe16dcb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.451165][T10507] RAX: ffffffffffffffda RBX: 00007fe16cfe6090 RCX: 00007fe16cd8f749 [ 347.451183][T10507] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 347.451199][T10507] RBP: 00007fe16ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 347.451214][T10507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.451228][T10507] R13: 00007fe16cfe6128 R14: 00007fe16cfe6090 R15: 00007fffe182ccc8 [ 347.451272][T10507] [ 348.236636][T10503] zswap: compressor not available [ 350.494171][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 351.604324][T10561] zswap: compressor not available [ 353.280415][T10580] sp0: Synchronizing with TNC [ 353.541124][T10597] Process accounting resumed [ 354.420080][T10614] zswap: compressor not available [ 355.179335][T10630] zswap: compressor not available [ 356.201321][T10651] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 357.048916][T10662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 357.548659][T10672] zswap: compressor not available [ 358.655616][T10696] FAULT_INJECTION: forcing a failure. [ 358.655616][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 358.680107][T10696] CPU: 0 UID: 0 PID: 10696 Comm: syz.1.1007 Not tainted syzkaller #0 PREEMPT(full) [ 358.680147][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.680162][T10696] Call Trace: [ 358.680172][T10696] [ 358.680183][T10696] dump_stack_lvl+0x16c/0x1f0 [ 358.680231][T10696] should_fail_ex+0x512/0x640 [ 358.680273][T10696] ? __kmalloc_cache_noprof+0x5f/0x780 [ 358.680300][T10696] should_failslab+0xc2/0x120 [ 358.680335][T10696] __kmalloc_cache_noprof+0x72/0x780 [ 358.680362][T10696] ? net_generic+0xf4/0x2a0 [ 358.680391][T10696] ? fib_net_init+0x1a4/0x3f0 [ 358.680432][T10696] ? fib_net_init+0x1a4/0x3f0 [ 358.680464][T10696] fib_net_init+0x1a4/0x3f0 [ 358.680494][T10696] ? __pfx___register_sysctl_table+0x10/0x10 [ 358.680535][T10696] ? __pfx_fib_net_init+0x10/0x10 [ 358.680581][T10696] ? lockdep_init_map_type+0x5c/0x280 [ 358.680624][T10696] ? do_init_timer+0xc9/0x110 [ 358.680663][T10696] ? devinet_init_net+0x5c2/0x910 [ 358.680707][T10696] ? __pfx_fib_net_init+0x10/0x10 [ 358.680741][T10696] ops_init+0x1e2/0x5f0 [ 358.680777][T10696] setup_net+0x100/0x390 [ 358.680805][T10696] ? __pfx_setup_net+0x10/0x10 [ 358.680832][T10696] ? debug_mutex_init+0x37/0x70 [ 358.680862][T10696] copy_net_ns+0x2f8/0x690 [ 358.680899][T10696] create_new_namespaces+0x3ea/0xa90 [ 358.680940][T10696] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 358.680977][T10696] ksys_unshare+0x45b/0xa40 [ 358.681014][T10696] ? __pfx_ksys_unshare+0x10/0x10 [ 358.681060][T10696] ? xfd_validate_state+0x61/0x180 [ 358.681115][T10696] __x64_sys_unshare+0x31/0x40 [ 358.681152][T10696] do_syscall_64+0xcd/0xfa0 [ 358.681193][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.681224][T10696] RIP: 0033:0x7f3f8c78f749 [ 358.681246][T10696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.681272][T10696] RSP: 002b:00007f3f8d5e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 358.681301][T10696] RAX: ffffffffffffffda RBX: 00007f3f8c9e6090 RCX: 00007f3f8c78f749 [ 358.681321][T10696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 358.681339][T10696] RBP: 00007f3f8c813f91 R08: 0000000000000000 R09: 0000000000000000 [ 358.681356][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.681374][T10696] R13: 00007f3f8c9e6128 R14: 00007f3f8c9e6090 R15: 00007ffe808d0288 [ 358.681414][T10696] [ 359.559591][T10702] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 359.837068][T10708] zswap: compressor not available [ 361.200552][T10727] zswap: compressor not available [ 362.762734][T10743] zswap: compressor not available [ 364.624263][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.841460][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.849729][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.858004][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.865881][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.873888][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.890476][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.928086][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.970512][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.980407][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 364.990495][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 365.000492][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 365.030434][T10778] blktrace: Concurrent blktraces are not allowed on loop5 [ 366.446711][T10828] net_ratelimit: 48 callbacks suppressed [ 366.446738][T10828] openvswitch: netlink: Message has 566 unknown bytes. [ 367.188761][T10841] HSR: entered promiscuous mode [ 367.231999][T10845] zswap: compressor not available [ 367.510516][T10852] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 367.623150][T10850] zswap: compressor not available [ 370.304532][T10905] zswap: compressor not available [ 370.338586][T10917] random: crng reseeded on system resumption [ 370.939639][T10924] zswap: compressor not available [ 371.630801][T10940] Invalid ELF header magic: != ELF [ 373.074931][T10973] can: request_module (can-proto-0) failed. [ 373.848071][T10983] ================================================================== [ 373.848096][T10983] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 373.848139][T10983] Write of size 8 at addr ffffc900039e9000 by task syz.4.1069/10983 [ 373.848163][T10983] [ 373.848176][T10983] CPU: 0 UID: 0 PID: 10983 Comm: syz.4.1069 Not tainted syzkaller #0 PREEMPT(full) [ 373.848210][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.848226][T10983] Call Trace: [ 373.848237][T10983] [ 373.848248][T10983] dump_stack_lvl+0x116/0x1f0 [ 373.848283][T10983] print_report+0xcd/0x630 [ 373.848317][T10983] ? __virt_addr_valid+0x81/0x610 [ 373.848355][T10983] ? sys_fillrect+0x15d4/0x17b0 [ 373.848385][T10983] kasan_report+0xe0/0x110 [ 373.848419][T10983] ? sys_fillrect+0x15d4/0x17b0 [ 373.848463][T10983] sys_fillrect+0x15d4/0x17b0 [ 373.848498][T10983] ? __pfx_sys_fillrect+0x10/0x10 [ 373.848530][T10983] ? __pfx_bit_putcs+0x10/0x10 [ 373.848572][T10983] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 373.848605][T10983] bit_clear+0x17d/0x220 [ 373.848644][T10983] ? __pfx_bit_clear+0x10/0x10 [ 373.848682][T10983] ? __pfx___might_resched+0x10/0x10 [ 373.848792][T10983] ? fb_get_color_depth+0x120/0x250 [ 373.848830][T10983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 373.848888][T10983] ? __pfx_bit_clear+0x10/0x10 [ 373.848930][T10983] __fbcon_clear+0x603/0x720 [ 373.848974][T10983] fbcon_scroll+0x48b/0x640 [ 373.849016][T10983] con_scroll+0x45f/0x690 [ 373.849050][T10983] do_con_write+0x5575/0x8290 [ 373.849084][T10983] ? srcu_barrier+0x2f0/0x7a0 [ 373.849132][T10983] ? __pfx___mutex_lock+0x10/0x10 [ 373.849169][T10983] ? __pfx_do_con_write+0x10/0x10 [ 373.849209][T10983] con_write+0x23/0xb0 [ 373.849240][T10983] n_tty_write+0x41e/0x11e0 [ 373.849286][T10983] ? __pfx_n_tty_write+0x10/0x10 [ 373.849323][T10983] ? trace_kmalloc+0x2b/0xd0 [ 373.849360][T10983] ? __pfx_woken_wake_function+0x10/0x10 [ 373.849387][T10983] ? kfree+0x252/0x6d0 [ 373.849413][T10983] ? __pfx_n_tty_write+0x10/0x10 [ 373.849450][T10983] file_tty_write.constprop.0+0x503/0x9b0 [ 373.849503][T10983] redirected_tty_write+0xd4/0x150 [ 373.849536][T10983] vfs_write+0x7d3/0x11d0 [ 373.849569][T10983] ? __pfx_redirected_tty_write+0x10/0x10 [ 373.849604][T10983] ? __pfx_vfs_write+0x10/0x10 [ 373.849631][T10983] ? find_held_lock+0x2b/0x80 [ 373.849669][T10983] ksys_write+0x12a/0x250 [ 373.849699][T10983] ? __pfx_ksys_write+0x10/0x10 [ 373.849733][T10983] do_syscall_64+0xcd/0xfa0 [ 373.849766][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.849798][T10983] RIP: 0033:0x7f3dad78f749 [ 373.849822][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.849850][T10983] RSP: 002b:00007f3dae695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.849879][T10983] RAX: ffffffffffffffda RBX: 00007f3dad9e5fa0 RCX: 00007f3dad78f749 [ 373.849899][T10983] RDX: 000000000000017d RSI: 0000200000000300 RDI: 0000000000000006 [ 373.849918][T10983] RBP: 00007f3dad813f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.849935][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.849953][T10983] R13: 00007f3dad9e6038 R14: 00007f3dad9e5fa0 R15: 00007ffe7dac1a18 [ 373.849981][T10983] [ 373.849990][T10983] [ 373.850010][T10983] The buggy address belongs to a vmalloc virtual mapping [ 373.850033][T10983] Memory state around the buggy address: [ 373.850050][T10983] ffffc900039e8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.850070][T10983] ffffc900039e8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.850091][T10983] >ffffc900039e9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.850106][T10983] ^ [ 373.850120][T10983] ffffc900039e9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.850139][T10983] ffffc900039e9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 373.850155][T10983] ================================================================== [ 373.856607][T10983] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 373.856637][T10983] CPU: 0 UID: 0 PID: 10983 Comm: syz.4.1069 Not tainted syzkaller #0 PREEMPT(full) [ 373.856677][T10983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.856695][T10983] Call Trace: [ 373.856706][T10983] [ 373.856719][T10983] dump_stack_lvl+0x3d/0x1f0 [ 373.856761][T10983] vpanic+0x640/0x6f0 [ 373.856803][T10983] panic+0xca/0xd0 [ 373.856844][T10983] ? __pfx_panic+0x10/0x10 [ 373.856888][T10983] ? sys_fillrect+0x15d4/0x17b0 [ 373.856923][T10983] ? preempt_schedule_common+0x44/0xc0 [ 373.856959][T10983] ? preempt_schedule_thunk+0x16/0x30 [ 373.857006][T10983] check_panic_on_warn+0xab/0xb0 [ 373.857051][T10983] end_report+0x107/0x170 [ 373.857089][T10983] kasan_report+0xee/0x110 [ 373.857128][T10983] ? sys_fillrect+0x15d4/0x17b0 [ 373.857163][T10983] sys_fillrect+0x15d4/0x17b0 [ 373.857198][T10983] ? __pfx_sys_fillrect+0x10/0x10 [ 373.857231][T10983] ? __pfx_bit_putcs+0x10/0x10 [ 373.857279][T10983] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 373.857316][T10983] bit_clear+0x17d/0x220 [ 373.857361][T10983] ? __pfx_bit_clear+0x10/0x10 [ 373.857402][T10983] ? __pfx___might_resched+0x10/0x10 [ 373.857429][T10983] ? fb_get_color_depth+0x120/0x250 [ 373.857465][T10983] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 373.857510][T10983] ? __pfx_bit_clear+0x10/0x10 [ 373.857564][T10983] __fbcon_clear+0x603/0x720 [ 373.857610][T10983] fbcon_scroll+0x48b/0x640 [ 373.857651][T10983] con_scroll+0x45f/0x690 [ 373.857686][T10983] do_con_write+0x5575/0x8290 [ 373.857718][T10983] ? srcu_barrier+0x2f0/0x7a0 [ 373.857767][T10983] ? __pfx___mutex_lock+0x10/0x10 [ 373.857801][T10983] ? __pfx_do_con_write+0x10/0x10 [ 373.857839][T10983] con_write+0x23/0xb0 [ 373.857871][T10983] n_tty_write+0x41e/0x11e0 [ 373.857917][T10983] ? __pfx_n_tty_write+0x10/0x10 [ 373.857954][T10983] ? trace_kmalloc+0x2b/0xd0 [ 373.857992][T10983] ? __pfx_woken_wake_function+0x10/0x10 [ 373.858022][T10983] ? kfree+0x252/0x6d0 [ 373.858046][T10983] ? __pfx_n_tty_write+0x10/0x10 [ 373.858083][T10983] file_tty_write.constprop.0+0x503/0x9b0 [ 373.858120][T10983] redirected_tty_write+0xd4/0x150 [ 373.858151][T10983] vfs_write+0x7d3/0x11d0 [ 373.858181][T10983] ? __pfx_redirected_tty_write+0x10/0x10 [ 373.858218][T10983] ? __pfx_vfs_write+0x10/0x10 [ 373.858245][T10983] ? find_held_lock+0x2b/0x80 [ 373.858285][T10983] ksys_write+0x12a/0x250 [ 373.858316][T10983] ? __pfx_ksys_write+0x10/0x10 [ 373.858355][T10983] do_syscall_64+0xcd/0xfa0 [ 373.858393][T10983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.858423][T10983] RIP: 0033:0x7f3dad78f749 [ 373.858451][T10983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.858479][T10983] RSP: 002b:00007f3dae695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 373.858509][T10983] RAX: ffffffffffffffda RBX: 00007f3dad9e5fa0 RCX: 00007f3dad78f749 [ 373.858543][T10983] RDX: 000000000000017d RSI: 0000200000000300 RDI: 0000000000000006 [ 373.858561][T10983] RBP: 00007f3dad813f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.858578][T10983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.858597][T10983] R13: 00007f3dad9e6038 R14: 00007f3dad9e5fa0 R15: 00007ffe7dac1a18 [ 373.858630][T10983] [ 373.859032][T10983] Kernel Offset: disabled