last executing test programs:
1m16.731951571s ago: executing program 3 (id=459):
mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
get_robust_list$auto(0x0, 0x0, 0x0)
setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14)
setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14)
recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
1m15.550744199s ago: executing program 3 (id=463):
semtimedop$auto(0x9, &(0x7f0000000340)={0x2, 0x0, 0xb}, 0x2, &(0x7f0000000280)={0x1000000004, 0x7})
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
unshare$auto(0x40000080)
r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0)
sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, 0x0, 0x0)
read$auto(r0, 0x0, 0x1f40)
r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0)
writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3)
bpf$auto(0x80000000, 0x0, 0x6f3)
io_uring_register$auto(0xffffffffffffffff, 0x23, 0x0, 0x1)
openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0)
1m14.730161496s ago: executing program 3 (id=467):
mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x8080, 0x0)
r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0)
ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0xa, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0xb, 0x6d3c, 0x7, 0x2, 0x104af46a]}, 0x0)
write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x2, 0xa, 0x0)
1m13.728902084s ago: executing program 3 (id=474):
mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
open(0x0, 0x2ac41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup$auto(0x7, 0x0)
open(0x0, 0x10d543, 0x165)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x8000, 0x0)
ioctl$auto(r1, 0xc10c5541, r0)
1m13.616918931s ago: executing program 3 (id=475):
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}})
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
1m13.46716922s ago: executing program 3 (id=477):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x400, 0x7)
close_range$auto(0x2, 0x8, 0x0)
1m13.352251413s ago: executing program 0 (id=479):
mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000)
bpf$auto(0x0, 0x0, 0x6f3)
socket(0xa, 0x2, 0x88)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0)
ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0)
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0})
ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000380)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @inferred=r0}})
write$auto(r0, 0x0, 0x6)
1m13.168349313s ago: executing program 0 (id=480):
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
io_uring_setup$auto(0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0x10, 0x2, 0xc)
socket(0x2, 0x1, 0x6)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d)
listen$auto(0x3, 0x81)
accept$auto(0x3, 0x0, 0x0)
r0 = socket(0x2, 0x1, 0x0)
sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000)
1m12.764494511s ago: executing program 0 (id=489):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000)
socket(0x2, 0x3, 0x2)
socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0)
open(0x0, 0x22240, 0x155)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182400, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x1, 0x0)
setsockopt$auto(0x6, 0x8000000000000006, 0x1b, 0x0, 0x7ffffc)
1m12.646123221s ago: executing program 0 (id=482):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, 0x0, 0x54)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x2, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000)
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x40, 0x0)
ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0xc, 0x800004, 0x105})
ioctl$auto(0x3, 0x80004509, 0x10000000000402)
1m11.973739619s ago: executing program 0 (id=486):
mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000)
close_range$auto(0x2, 0xa, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}})
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0)
rename$auto(&(0x7f0000000480)='./file0\x00', 0x0)
1m11.811869335s ago: executing program 0 (id=487):
timer_create$auto(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, 0x0, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x3, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x5, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)
58.019861927s ago: executing program 32 (id=477):
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages\x00', 0xa001, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
socket(0x11, 0xa, 0x300)
sendmmsg$auto(0x4, 0x0, 0x400, 0x7)
close_range$auto(0x2, 0x8, 0x0)
56.516032523s ago: executing program 33 (id=487):
timer_create$auto(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$auto_ETHTOOL_MSG_MM_GET(r0, 0x0, 0x2004c894)
unshare$auto(0x40000080)
mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000)
openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x3, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x5, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}})
io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83)
4.036287574s ago: executing program 2 (id=744):
mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0)
read$auto(r0, 0x0, 0x7)
r1 = socket(0x10, 0x2, 0x0)
statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0)
3.90950901s ago: executing program 5 (id=745):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810)
syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0)
read$auto(r0, &(0x7f0000000040)='nl80211\x00', 0xbe62)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090)
sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000)
sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008)
3.63390881s ago: executing program 1 (id=746):
r0 = fanotify_init$auto(0x5, 0x2000000000002)
r1 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409)
fanotify_mark$auto(r0, 0x9, 0x9, r1, 0x0)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
socket(0x28, 0x1, 0x0)
socket(0x1, 0x1, 0x1)
open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
unlink$auto(&(0x7f0000000040)='./bus\x00')
3.494491266s ago: executing program 5 (id=748):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002)
fanotify_init$auto(0x6a1, 0x2000000000002)
socket(0x26, 0x80805, 0x0)
socket(0x28, 0x1, 0x0)
socket(0x1, 0x1, 0x1)
open(0x0, 0x22042, 0x45)
fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0)
close_range$auto(0x2, 0x8, 0x0)
readv$auto(0x0, 0x0, 0x3)
r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x800, 0x0)
ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0)
3.480089385s ago: executing program 1 (id=749):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0)
socket(0x10, 0x2, 0xc)
socket(0xa, 0x3, 0x3b)
openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000)
r1 = socket(0x2, 0x1, 0x0)
ioctl$auto(r0, 0x5420, r1)
ioctl$auto(0x3, 0x5403, 0x38)
3.350241707s ago: executing program 2 (id=750):
openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001)
getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x40800)
r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0)
ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7})
pread64$auto(r2, 0x0, 0x7ff, 0xd)
openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0)
3.232908421s ago: executing program 5 (id=751):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r0 = socket(0x2, 0x1, 0x106)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
open(0x0, 0x8643, 0x15e)
ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0)
fstat$auto(r0, 0x0)
3.218973286s ago: executing program 4 (id=752):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
r0 = open(0x0, 0x22240, 0x55)
socket(0x2, 0x3, 0xa)
setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8)
connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55)
statx$auto(r0, 0x0, 0x1003, 0x4005, 0x0)
setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000)
recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd)
2.472187431s ago: executing program 1 (id=753):
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x80803, 0x6)
r0 = socket(0x10, 0x2, 0x15)
close_range$auto(0x0, 0xfffffffffffff000, 0x0)
bpf$auto(0x0, &(0x7f0000000300)=@test={r0, 0x4, 0x10, 0x9, 0x133, 0x8, 0xf4, 0xec56, 0x1, 0xd0, 0x2, 0x1, 0x5, 0x7, 0x7150}, 0x10)
bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x8000000000000001, 0x1, 0x4}}, 0x92)
2.327566263s ago: executing program 4 (id=754):
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket(0xa, 0x3, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x5, 0x0)
socket(0x1d, 0x2, 0x2)
connect$auto(0x3, 0x0, 0x55)
socket(0x10, 0x3, 0x6)
socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0)
r0 = socket(0xa, 0x801, 0x84)
getsockopt$auto(r0, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a)
write$auto(0x3, 0x0, 0x5c8)
2.283067283s ago: executing program 2 (id=755):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x10)
statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x22240, 0x155)
r0 = socket(0x2, 0x80802, 0x0)
close_range$auto(0x2, 0xa, 0x0)
socket(0x18, 0xa, 0x1)
socket(0xa, 0x2, 0x0)
connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55)
setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
2.197311161s ago: executing program 1 (id=756):
mmap$auto(0xffffffffffffffff, 0x4, 0x8, 0x9b70, 0x2, 0xe8)
r0 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/uid_map\x00', 0x12000, 0x0)
setsockopt$auto_SO_NOFCS(r0, 0x3, 0x2b, &(0x7f0000000080)='+\x00', 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syslog$auto(0x3, 0x0, 0x5)
syz_open_procfs$namespace(0x0, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
bpf$auto(0x9, &(0x7f0000000100)=@token_create={0x2}, 0x9)
socket(0x2, 0x5, 0x0)
mmap$auto(0x0, 0x20007fff, 0x5, 0x100000eb1, 0x405, 0x81)
getcwd$auto(0x0, 0xffffffffffffffff)
setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8)
2.066487455s ago: executing program 2 (id=757):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x6, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
r1 = socket(0x2, 0x3, 0x6)
lsm_list_modules$auto(0x0, 0x0, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x5, 0x0)
memfd_create$auto(0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0)
ftruncate$auto(r0, 0xa0)
2.034435225s ago: executing program 4 (id=758):
open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100)
socket(0xa, 0x2, 0x88)
socket(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x801, 0x84)
mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=r0, 0x1, @old_prog_fd=r0}, 0x7)
close_range$auto(0x2, 0x8000, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1)
1.914903389s ago: executing program 4 (id=759):
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
close_range$auto(0x2, 0x8, 0x0)
close_range$auto(0x2, 0x8, 0x0)
socket(0xa, 0x1, 0x84)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
sysfs$auto(0x2, 0x23, 0x0)
r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0)
write$auto(r1, 0x0, 0x4)
1.888394292s ago: executing program 5 (id=760):
close_range$auto(0x2, 0x8, 0x0)
socket(0x15, 0x5, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0)
r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
socket(0x23, 0x80805, 0x0)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/247, 0xf7)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0)
1.47795871s ago: executing program 1 (id=761):
mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000)
r0 = socket(0x2, 0x1, 0x0)
r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x0, 0x0)
socket(0xf, 0x3, 0x2)
ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, 0x0)
r2 = socket(0x2, 0x1, 0x0)
bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a)
ioctl$auto_SNDRV_PCM_IOCTL_TSTAMP(0xffffffffffffffff, 0x40044102, 0x0)
syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff)
shutdown$auto(0x200000003, 0x2)
listen$auto(r0, 0x7)
sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x2000fdff)
1.02992375s ago: executing program 1 (id=762):
socket(0xa, 0x2, 0x3a)
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
socket(0xa, 0x5, 0x84)
read$auto(0x3, 0x0, 0x7)
mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000)
connect$auto(0x3, 0x0, 0x55)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0)
r0 = memfd_create$auto(0x0, 0x4)
r1 = socket(0xa, 0x3, 0x3a)
statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0)
setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b)
close_range$auto(0x2, 0x8, 0x0)
983.078496ms ago: executing program 2 (id=763):
io_uring_setup$auto(0x1, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
io_uring_setup$auto(0x1, 0x0)
openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1)
close_range$auto(0x2, 0x8, 0x0)
open(0x0, 0x4242, 0xe1d2b27bdc14aad4)
open(0x0, 0x0, 0x40)
socket(0x1e, 0x1, 0x0)
694.867044ms ago: executing program 4 (id=764):
r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000)
socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6)
close_range$auto(0x2, 0xa, 0x0)
io_uring_setup$auto(0x6, 0x0)
io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000)
687.334973ms ago: executing program 2 (id=765):
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
close_range$auto(0x2, 0x8, 0x0)
socket(0x2, 0x80002, 0x73)
socket(0x2, 0x1, 0x84)
socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0)
setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8)
397.70415ms ago: executing program 5 (id=766):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0)
preadv2$auto(r0, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0x2e)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/114, 0x72)
sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0)
openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0)
writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8)
266.836479ms ago: executing program 5 (id=767):
unshare$auto(0x40000080)
mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e)
mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000)
r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0)
write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f)
r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0)
read$auto(r1, 0x0, 0x1f40)
r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0)
write$auto(r2, 0x0, 0x1)
0s ago: executing program 4 (id=768):
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800)
close_range$auto(0x2, 0x8, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080004000900000008000200", @ANYRES32=0x0, @ANYBLOB="08000400f3f2c2"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090)
socket(0x2, 0x3, 0x100)
socket(0x10, 0x2, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40)
sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004)
sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0)
kernel console output (not intermixed with test programs):
netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.090358][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 89.142848][ T979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.156853][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.164697][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.191322][ T979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.206088][ T979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.292908][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 89.321105][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.332525][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.361655][ T5922] RDS: rds_bind could not find a transport for fe80::6664:5f6e:6f65:7865, load rds_tcp or rds_rdma?
[ 89.373874][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 89.427696][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.444153][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.571380][ T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 89.585014][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 89.975699][ T5845] Bluetooth: hci1: command tx timeout
[ 90.056145][ T5845] Bluetooth: hci3: command tx timeout
[ 90.061666][ T5843] Bluetooth: hci2: command tx timeout
[ 90.061713][ T52] Bluetooth: hci0: command tx timeout
[ 90.345349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.486665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 90.545284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.613115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[ 90.765243][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.773819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.782878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.795221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 90.817972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[ 90.835349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 91.900085][ T982] cfg80211: failed to load regulatory.db
[ 92.056571][ T52] Bluetooth: hci1: command tx timeout
[ 92.135812][ T52] Bluetooth: hci3: command tx timeout
[ 92.139213][ T5845] Bluetooth: hci2: command tx timeout
[ 92.141914][ T52] Bluetooth: hci0: command tx timeout
[ 92.691301][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'.
[ 93.047913][ T6006] netlink: 342 bytes leftover after parsing attributes in process `syz.3.34'.
[ 93.076483][ T6006] netlink: 274 bytes leftover after parsing attributes in process `syz.3.34'.
[ 93.464574][ T6017] netlink: 25 bytes leftover after parsing attributes in process `syz.2.39'.
[ 93.517377][ T6014] netlink: 18 bytes leftover after parsing attributes in process `syz.0.38'.
[ 94.112623][ T6027] zswap: compressor not available
[ 94.539827][ T6040] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 94.551688][ T6040] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 94.564115][ T6040] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 94.572105][ T6040] page_type: f5(slab)
[ 94.576433][ T6040] raw: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000
[ 94.592817][ T6040] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 94.607180][ T6040] head: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000
[ 94.626220][ T6040] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 94.648098][ T6040] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 94.658284][ T6040] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 94.668455][ T6040] page dumped because: unmovable page
[ 94.677620][ T6040] page_owner tracks the page as allocated
[ 94.687459][ T6040] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 83869323448, free_ts 83792528565
[ 94.711683][ C0] vkms_vblank_simulate: vblank timer overrun
[ 94.721941][ T6040] post_alloc_hook+0x1c0/0x230
[ 94.730535][ T6040] get_page_from_freelist+0x10a3/0x3a30
[ 94.739703][ T6040] __alloc_frozen_pages_noprof+0x25f/0x2470
[ 94.749870][ T6040] alloc_pages_mpol+0x1fb/0x550
[ 94.756102][ T6040] new_slab+0x24a/0x360
[ 94.762418][ T6040] ___slab_alloc+0xdae/0x1a60
[ 94.770532][ T6040] __slab_alloc.constprop.0+0x63/0x110
[ 94.777272][ T6040] __kvmalloc_node_noprof+0x5aa/0x9c0
[ 94.784478][ T6040] alloc_netdev_mqs+0xd7/0x1550
[ 94.793179][ T6040] __ip_tunnel_create+0x3ad/0x6e0
[ 94.799847][ T6040] ip_tunnel_init_net+0x22f/0x7d0
[ 94.806439][ T6040] ops_init+0x1e2/0x5f0
[ 94.813226][ T6040] setup_net+0x100/0x390
[ 94.819868][ T6040] copy_net_ns+0x2f8/0x690
[ 94.826466][ T6040] create_new_namespaces+0x3ea/0xa90
[ 94.833041][ T6040] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 94.841230][ T6040] page last free pid 5845 tgid 5845 stack trace:
[ 94.851773][ T6040] __free_frozen_pages+0x7df/0x1160
[ 94.857226][ T6040] __put_partials+0x130/0x170
[ 94.861975][ T6040] qlist_free_all+0x4d/0x120
[ 94.866648][ T6040] kasan_quarantine_reduce+0x195/0x1e0
[ 94.872158][ T6040] __kasan_slab_alloc+0x69/0x90
[ 94.877136][ T6040] kmem_cache_alloc_noprof+0x250/0x6e0
[ 94.882659][ T6040] skb_clone+0x190/0x3f0
[ 94.887179][ T6040] hci_cmd_work+0x1c5/0x7a0
[ 94.891736][ T6040] process_one_work+0x9cf/0x1b70
[ 94.896880][ T6040] worker_thread+0x6c8/0xf10
[ 94.901530][ T6040] kthread+0x3c5/0x780
[ 94.905943][ T6040] ret_from_fork+0x675/0x7d0
[ 94.910794][ T6040] ret_from_fork_asm+0x1a/0x30
[ 95.024037][ T52] Bluetooth: hci2: unexpected event 0x04 length: 64 > 10
[ 95.024231][ T52] Bluetooth: hci2: connection err: -111
[ 95.166146][ T6051] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 97.836151][ T6100] 0x000200000001-0xa29656a63616329 : ""
[ 97.865053][ T6100] mtd: partition "" is out of reach -- disabled
[ 97.925009][ T6100] ftl_cs: FTL header not found.
[ 98.009339][ T6107] FAULT_INJECTION: forcing a failure.
[ 98.009339][ T6107] name failslab, interval 1, probability 0, space 0, times 1
[ 98.058539][ T6107] CPU: 0 UID: 0 PID: 6107 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full)
[ 98.058568][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 98.058587][ T6107] Call Trace:
[ 98.058596][ T6107]
[ 98.058605][ T6107] dump_stack_lvl+0x16c/0x1f0
[ 98.058640][ T6107] should_fail_ex+0x512/0x640
[ 98.058676][ T6107] ? __kmalloc_cache_noprof+0x5f/0x780
[ 98.058712][ T6107] should_failslab+0xc2/0x120
[ 98.058750][ T6107] __kmalloc_cache_noprof+0x72/0x780
[ 98.058789][ T6107] ? snd_timer_user_open+0x6b/0x180
[ 98.058826][ T6107] ? snd_timer_user_open+0x6b/0x180
[ 98.058856][ T6107] ? stream_open+0xd/0x50
[ 98.058877][ T6107] ? __pfx_snd_timer_user_open+0x10/0x10
[ 98.058906][ T6107] snd_timer_user_open+0x6b/0x180
[ 98.058937][ T6107] snd_open+0x22d/0x4c0
[ 98.058965][ T6107] ? __pfx_snd_open+0x10/0x10
[ 98.058991][ T6107] chrdev_open+0x234/0x6a0
[ 98.059031][ T6107] ? __pfx_chrdev_open+0x10/0x10
[ 98.059059][ T6107] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 98.059092][ T6107] do_dentry_open+0x982/0x1530
[ 98.059118][ T6107] ? __pfx_chrdev_open+0x10/0x10
[ 98.059151][ T6107] vfs_open+0x82/0x3f0
[ 98.059186][ T6107] path_openat+0x1de4/0x2cb0
[ 98.059217][ T6107] ? __pfx_path_openat+0x10/0x10
[ 98.059243][ T6107] ? __lock_acquire+0xb8a/0x1c90
[ 98.059279][ T6107] do_filp_open+0x20b/0x470
[ 98.059299][ T6107] ? __pfx_do_filp_open+0x10/0x10
[ 98.059346][ T6107] ? alloc_fd+0x471/0x7d0
[ 98.059380][ T6107] do_sys_openat2+0x11b/0x1d0
[ 98.059414][ T6107] ? __pfx_do_sys_openat2+0x10/0x10
[ 98.059453][ T6107] __x64_sys_openat+0x174/0x210
[ 98.059484][ T6107] ? __pfx___x64_sys_openat+0x10/0x10
[ 98.059533][ T6107] do_syscall_64+0xcd/0xfa0
[ 98.059562][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 98.059585][ T6107] RIP: 0033:0x7f92aa98efc9
[ 98.059610][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 98.059634][ T6107] RSP: 002b:00007f92ab8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 98.059655][ T6107] RAX: ffffffffffffffda RBX: 00007f92aabe6090 RCX: 00007f92aa98efc9
[ 98.059669][ T6107] RDX: 0000000000101802 RSI: 0000200000000200 RDI: ffffffffffffff9c
[ 98.059685][ T6107] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 98.059698][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 98.059711][ T6107] R13: 00007f92aabe6128 R14: 00007f92aabe6090 R15: 00007fffea5f9888
[ 98.059746][ T6107]
[ 98.312373][ C0] vkms_vblank_simulate: vblank timer overrun
[ 99.060797][ T6118] FAULT_INJECTION: forcing a failure.
[ 99.060797][ T6118] name failslab, interval 1, probability 0, space 0, times 0
[ 99.109277][ T6118] CPU: 1 UID: 0 PID: 6118 Comm: syz.2.67 Not tainted syzkaller #0 PREEMPT(full)
[ 99.109314][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 99.109329][ T6118] Call Trace:
[ 99.109338][ T6118]
[ 99.109348][ T6118] dump_stack_lvl+0x16c/0x1f0
[ 99.109382][ T6118] should_fail_ex+0x512/0x640
[ 99.109417][ T6118] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 99.109446][ T6118] should_failslab+0xc2/0x120
[ 99.109480][ T6118] kmem_cache_alloc_noprof+0x75/0x6e0
[ 99.109507][ T6118] ? cred_alloc_blank+0x1c/0xa0
[ 99.109555][ T6118] ? cred_alloc_blank+0x1c/0xa0
[ 99.109589][ T6118] cred_alloc_blank+0x1c/0xa0
[ 99.109624][ T6118] keyctl_session_to_parent+0x55/0xaf0
[ 99.109666][ T6118] __do_sys_keyctl+0x25c/0x590
[ 99.109703][ T6118] do_syscall_64+0xcd/0xfa0
[ 99.109733][ T6118] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.109758][ T6118] RIP: 0033:0x7f92aa98efc9
[ 99.109780][ T6118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.109802][ T6118] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 99.109826][ T6118] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 99.109843][ T6118] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012
[ 99.109859][ T6118] RBP: 00007f92aaa11f91 R08: 0000000000000001 R09: 0000000000000000
[ 99.109873][ T6118] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000
[ 99.109888][ T6118] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 99.109923][ T6118]
[ 99.358755][ T6122] 0x000200000001-0xa29656a63616329 : ""
[ 99.364435][ T6122] mtd: partition "" is out of reach -- disabled
[ 99.377145][ T6122] ftl_cs: FTL header not found.
[ 99.831523][ T6136] netlink: 338 bytes leftover after parsing attributes in process `syz.2.73'.
[ 99.847660][ T6136] Zero length message leads to an empty skb
[ 99.864172][ T6136] netlink: 338 bytes leftover after parsing attributes in process `syz.2.73'.
[ 100.664283][ T6159] netlink: 186 bytes leftover after parsing attributes in process `syz.3.82'.
[ 101.046911][ T6162] mkiss: ax0: crc mode is auto.
[ 101.228955][ T6162] capability: warning: `syz.0.84' uses 32-bit capabilities (legacy support in use)
[ 101.566750][ T6176] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 101.624283][ T6178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 103.805569][ T52] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7
[ 104.993105][ T6246] FAULT_INJECTION: forcing a failure.
[ 104.993105][ T6246] name failslab, interval 1, probability 0, space 0, times 0
[ 105.018411][ T6246] CPU: 0 UID: 0 PID: 6246 Comm: syz.1.112 Not tainted syzkaller #0 PREEMPT(full)
[ 105.018446][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 105.018460][ T6246] Call Trace:
[ 105.018469][ T6246]
[ 105.018480][ T6246] dump_stack_lvl+0x16c/0x1f0
[ 105.018512][ T6246] should_fail_ex+0x512/0x640
[ 105.018547][ T6246] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[ 105.018583][ T6246] should_failslab+0xc2/0x120
[ 105.018615][ T6246] __kmalloc_node_track_caller_noprof+0xde/0x8a0
[ 105.018645][ T6246] ? apply_subsystem_event_filter+0x47f/0x17e0
[ 105.018689][ T6246] ? kstrdup+0x53/0x100
[ 105.018714][ T6246] kstrdup+0x53/0x100
[ 105.018741][ T6246] apply_subsystem_event_filter+0x47f/0x17e0
[ 105.018793][ T6246] ? __pfx_apply_subsystem_event_filter+0x10/0x10
[ 105.018837][ T6246] ? _copy_from_user+0x59/0xd0
[ 105.018877][ T6246] subsystem_filter_write+0x95/0x120
[ 105.018916][ T6246] ? __pfx_subsystem_filter_write+0x10/0x10
[ 105.018949][ T6246] vfs_write+0x2a0/0x11d0
[ 105.018983][ T6246] ? __pfx___mutex_lock+0x10/0x10
[ 105.019011][ T6246] ? __pfx_vfs_write+0x10/0x10
[ 105.019049][ T6246] ? __fget_files+0x20e/0x3c0
[ 105.019086][ T6246] ksys_write+0x12a/0x250
[ 105.019112][ T6246] ? __pfx_ksys_write+0x10/0x10
[ 105.019151][ T6246] do_syscall_64+0xcd/0xfa0
[ 105.019181][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 105.019206][ T6246] RIP: 0033:0x7f364b18efc9
[ 105.019227][ T6246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 105.019250][ T6246] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 105.019274][ T6246] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 105.019291][ T6246] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006
[ 105.019306][ T6246] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 105.019322][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.019337][ T6246] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 105.019381][ T6246]
[ 105.250897][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'.
[ 108.455067][ T6329] sp0: Synchronizing with TNC
[ 109.152197][ T6353] FAULT_INJECTION: forcing a failure.
[ 109.152197][ T6353] name failslab, interval 1, probability 0, space 0, times 0
[ 109.184995][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.2.152 Not tainted syzkaller #0 PREEMPT(full)
[ 109.185030][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 109.185047][ T6353] Call Trace:
[ 109.185056][ T6353]
[ 109.185067][ T6353] dump_stack_lvl+0x16c/0x1f0
[ 109.185101][ T6353] should_fail_ex+0x512/0x640
[ 109.185142][ T6353] ? __kmalloc_noprof+0xca/0x880
[ 109.185183][ T6353] should_failslab+0xc2/0x120
[ 109.185216][ T6353] __kmalloc_noprof+0xdd/0x880
[ 109.185253][ T6353] ? realloc_user_queue+0x288/0x320
[ 109.185300][ T6353] ? realloc_user_queue+0x288/0x320
[ 109.185333][ T6353] realloc_user_queue+0x288/0x320
[ 109.185369][ T6353] ? __pfx_snd_timer_user_open+0x10/0x10
[ 109.185402][ T6353] snd_timer_user_open+0xfc/0x180
[ 109.185435][ T6353] snd_open+0x22d/0x4c0
[ 109.185462][ T6353] ? __pfx_snd_open+0x10/0x10
[ 109.185490][ T6353] chrdev_open+0x234/0x6a0
[ 109.185518][ T6353] ? __pfx_apparmor_file_open+0x10/0x10
[ 109.185552][ T6353] ? __pfx_chrdev_open+0x10/0x10
[ 109.185583][ T6353] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 109.185617][ T6353] do_dentry_open+0x982/0x1530
[ 109.185646][ T6353] ? __pfx_chrdev_open+0x10/0x10
[ 109.185678][ T6353] vfs_open+0x82/0x3f0
[ 109.185714][ T6353] path_openat+0x1de4/0x2cb0
[ 109.185751][ T6353] ? __pfx_path_openat+0x10/0x10
[ 109.185776][ T6353] ? __lock_acquire+0xb8a/0x1c90
[ 109.185810][ T6353] do_filp_open+0x20b/0x470
[ 109.185844][ T6353] ? __pfx_do_filp_open+0x10/0x10
[ 109.185899][ T6353] ? alloc_fd+0x471/0x7d0
[ 109.185936][ T6353] do_sys_openat2+0x11b/0x1d0
[ 109.185972][ T6353] ? __pfx_do_sys_openat2+0x10/0x10
[ 109.186021][ T6353] __x64_sys_openat+0x174/0x210
[ 109.186052][ T6353] ? __pfx___x64_sys_openat+0x10/0x10
[ 109.186101][ T6353] do_syscall_64+0xcd/0xfa0
[ 109.186133][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.186159][ T6353] RIP: 0033:0x7f92aa98efc9
[ 109.186181][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 109.186205][ T6353] RSP: 002b:00007f92ab8a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 109.186238][ T6353] RAX: ffffffffffffffda RBX: 00007f92aabe6090 RCX: 00007f92aa98efc9
[ 109.186255][ T6353] RDX: 0000000000101802 RSI: 0000200000000200 RDI: ffffffffffffff9c
[ 109.186272][ T6353] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 109.186295][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.186311][ T6353] R13: 00007f92aabe6128 R14: 00007f92aabe6090 R15: 00007fffea5f9888
[ 109.186348][ T6353]
[ 109.915192][ T6368] vivid-003: ================= START STATUS =================
[ 109.942554][ T6368] vivid-003: Radio HW Seek Mode: Bounded
[ 109.959403][ T6366] sp0: Synchronizing with TNC
[ 109.978780][ T6368] vivid-003: Radio Programmable HW Seek: false
[ 110.012141][ T6368] vivid-003: RDS Rx I/O Mode: Block I/O
[ 110.022482][ T6368] vivid-003: Generate RBDS Instead of RDS: false
[ 110.034985][ T6368] vivid-003: RDS Reception: true
[ 110.043708][ T6368] vivid-003: RDS Program Type: 0 inactive
[ 110.067936][ T6368] vivid-003: RDS PS Name: inactive
[ 110.093436][ T6368] vivid-003: RDS Radio Text: inactive
[ 110.126921][ T6368] vivid-003: RDS Traffic Announcement: false inactive
[ 110.133874][ T6368] vivid-003: RDS Traffic Program: false inactive
[ 110.143561][ T6368] vivid-003: RDS Music: false inactive
[ 110.174983][ T6368] vivid-003: ================== END STATUS ==================
[ 110.213340][ T6377] FAULT_INJECTION: forcing a failure.
[ 110.213340][ T6377] name failslab, interval 1, probability 0, space 0, times 0
[ 110.227561][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full)
[ 110.227596][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 110.227608][ T6377] Call Trace:
[ 110.227615][ T6377]
[ 110.227625][ T6377] dump_stack_lvl+0x16c/0x1f0
[ 110.227656][ T6377] should_fail_ex+0x512/0x640
[ 110.227689][ T6377] ? __kmalloc_cache_noprof+0x5f/0x780
[ 110.227729][ T6377] should_failslab+0xc2/0x120
[ 110.227761][ T6377] __kmalloc_cache_noprof+0x72/0x780
[ 110.227796][ T6377] ? snd_midi_event_new+0x6f/0x210
[ 110.227828][ T6377] ? snd_midi_event_new+0x6f/0x210
[ 110.227852][ T6377] ? kasan_save_track+0x14/0x30
[ 110.227880][ T6377] snd_midi_event_new+0x6f/0x210
[ 110.227908][ T6377] snd_virmidi_output_open+0x106/0x670
[ 110.227940][ T6377] open_substream+0x480/0x990
[ 110.227977][ T6377] rawmidi_open_priv+0x543/0x6e0
[ 110.228016][ T6377] snd_rawmidi_open+0x4cb/0xbf0
[ 110.228056][ T6377] ? __pfx_snd_rawmidi_open+0x10/0x10
[ 110.228091][ T6377] ? __pfx_default_wake_function+0x10/0x10
[ 110.228122][ T6377] ? kobject_get_unless_zero+0x156/0x1e0
[ 110.228157][ T6377] ? __pfx_snd_rawmidi_open+0x10/0x10
[ 110.228190][ T6377] snd_open+0x22d/0x4c0
[ 110.228230][ T6377] ? __pfx_snd_open+0x10/0x10
[ 110.228258][ T6377] chrdev_open+0x234/0x6a0
[ 110.228284][ T6377] ? __pfx_apparmor_file_open+0x10/0x10
[ 110.228318][ T6377] ? __pfx_chrdev_open+0x10/0x10
[ 110.228346][ T6377] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 110.228379][ T6377] do_dentry_open+0x982/0x1530
[ 110.228406][ T6377] ? __pfx_chrdev_open+0x10/0x10
[ 110.228441][ T6377] vfs_open+0x82/0x3f0
[ 110.228478][ T6377] path_openat+0x1de4/0x2cb0
[ 110.228516][ T6377] ? __pfx_path_openat+0x10/0x10
[ 110.228544][ T6377] ? __lock_acquire+0xb8a/0x1c90
[ 110.228581][ T6377] do_filp_open+0x20b/0x470
[ 110.228608][ T6377] ? __pfx_do_filp_open+0x10/0x10
[ 110.228661][ T6377] ? alloc_fd+0x471/0x7d0
[ 110.228697][ T6377] do_sys_openat2+0x11b/0x1d0
[ 110.228730][ T6377] ? __pfx_do_sys_openat2+0x10/0x10
[ 110.228777][ T6377] __x64_sys_openat+0x174/0x210
[ 110.228812][ T6377] ? __pfx___x64_sys_openat+0x10/0x10
[ 110.228861][ T6377] do_syscall_64+0xcd/0xfa0
[ 110.228889][ T6377] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.228914][ T6377] RIP: 0033:0x7f92aa98efc9
[ 110.228934][ T6377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.228957][ T6377] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 110.228979][ T6377] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 110.228995][ T6377] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 110.229009][ T6377] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 110.229023][ T6377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.229036][ T6377] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 110.229070][ T6377]
[ 110.875597][ T6389] sp0: Synchronizing with TNC
[ 110.925001][ T6393] FAULT_INJECTION: forcing a failure.
[ 110.925001][ T6393] name failslab, interval 1, probability 0, space 0, times 0
[ 110.948950][ T6393] CPU: 1 UID: 0 PID: 6393 Comm: syz.2.168 Not tainted syzkaller #0 PREEMPT(full)
[ 110.948984][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 110.948999][ T6393] Call Trace:
[ 110.949007][ T6393]
[ 110.949017][ T6393] dump_stack_lvl+0x16c/0x1f0
[ 110.949051][ T6393] should_fail_ex+0x512/0x640
[ 110.949088][ T6393] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 110.949118][ T6393] should_failslab+0xc2/0x120
[ 110.949149][ T6393] kmem_cache_alloc_noprof+0x75/0x6e0
[ 110.949175][ T6393] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 110.949198][ T6393] ? acpi_ut_create_generic_state+0x61/0xc0
[ 110.949241][ T6393] ? acpi_ut_create_generic_state+0x61/0xc0
[ 110.949275][ T6393] acpi_ut_create_generic_state+0x61/0xc0
[ 110.949309][ T6393] acpi_ds_scope_stack_push+0x70/0x790
[ 110.949351][ T6393] acpi_ds_init_aml_walk+0x2d8/0x680
[ 110.949392][ T6393] acpi_ps_execute_method+0x39d/0xe90
[ 110.949427][ T6393] acpi_ns_evaluate+0x98c/0x16d0
[ 110.949464][ T6393] acpi_evaluate_object+0x4ca/0xdf0
[ 110.949506][ T6393] ? __pfx_acpi_evaluate_object+0x10/0x10
[ 110.949540][ T6393] ? __mutex_trylock_common+0xe9/0x250
[ 110.949580][ T6393] acpi_evaluate_integer+0xdd/0x200
[ 110.949609][ T6393] ? __pfx_acpi_evaluate_integer+0x10/0x10
[ 110.949655][ T6393] ? __pfx_status_show+0x10/0x10
[ 110.949686][ T6393] status_show+0xa0/0x120
[ 110.949719][ T6393] ? __pfx_status_show+0x10/0x10
[ 110.949760][ T6393] dev_attr_show+0x56/0xe0
[ 110.949796][ T6393] ? __pfx_dev_attr_show+0x10/0x10
[ 110.949829][ T6393] sysfs_kf_seq_show+0x216/0x3e0
[ 110.949866][ T6393] seq_read_iter+0x50e/0x12d0
[ 110.949979][ T6393] kernfs_fop_read_iter+0x46c/0x610
[ 110.950006][ T6393] ? rw_verify_area+0xcf/0x6c0
[ 110.950033][ T6393] vfs_read+0x8bf/0xcf0
[ 110.950064][ T6393] ? __pfx___mutex_lock+0x10/0x10
[ 110.950093][ T6393] ? __pfx_vfs_read+0x10/0x10
[ 110.950145][ T6393] ksys_read+0x12a/0x250
[ 110.950170][ T6393] ? __pfx_ksys_read+0x10/0x10
[ 110.950207][ T6393] do_syscall_64+0xcd/0xfa0
[ 110.950236][ T6393] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 110.950262][ T6393] RIP: 0033:0x7f92aa98efc9
[ 110.950282][ T6393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.950305][ T6393] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 110.950329][ T6393] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 110.950346][ T6393] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003
[ 110.950363][ T6393] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 110.950378][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.950393][ T6393] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 110.950430][ T6393]
[ 110.950459][ T6393] ACPI Error: ffff8880780fe000 walk still has a scope list (20250807/dswstate-694)
[ 111.339924][ T6400] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 111.514224][ T6405] process 'syz.2.172' launched ':,' with NULL argv: empty string added
[ 112.712057][ T6420] mkiss: ax0: crc mode is auto.
[ 113.103893][ T6437] kvm_intel: kvm [6436]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1
[ 113.180270][ T6439] FAULT_INJECTION: forcing a failure.
[ 113.180270][ T6439] name failslab, interval 1, probability 0, space 0, times 0
[ 113.207242][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.2.185 Not tainted syzkaller #0 PREEMPT(full)
[ 113.207281][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 113.207296][ T6439] Call Trace:
[ 113.207305][ T6439]
[ 113.207315][ T6439] dump_stack_lvl+0x16c/0x1f0
[ 113.207351][ T6439] should_fail_ex+0x512/0x640
[ 113.207386][ T6439] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 113.207418][ T6439] should_failslab+0xc2/0x120
[ 113.207451][ T6439] kmem_cache_alloc_noprof+0x75/0x6e0
[ 113.207474][ T6439] ? seq_open+0x55/0x170
[ 113.207508][ T6439] ? __pfx_snd_info_seq_show+0x10/0x10
[ 113.207542][ T6439] ? seq_open+0x55/0x170
[ 113.207571][ T6439] seq_open+0x55/0x170
[ 113.207601][ T6439] ? __pfx_snd_info_seq_show+0x10/0x10
[ 113.207630][ T6439] single_open+0xfc/0x1f0
[ 113.207663][ T6439] snd_info_text_entry_open+0x179/0x2e0
[ 113.207696][ T6439] ? __pfx_snd_info_text_entry_open+0x10/0x10
[ 113.207727][ T6439] ? proc_reg_open+0x23f/0x5f0
[ 113.207762][ T6439] ? __pfx_snd_info_text_entry_open+0x10/0x10
[ 113.207795][ T6439] proc_reg_open+0x2ab/0x5f0
[ 113.207829][ T6439] do_dentry_open+0x982/0x1530
[ 113.207858][ T6439] ? __pfx_proc_reg_open+0x10/0x10
[ 113.207901][ T6439] vfs_open+0x82/0x3f0
[ 113.207939][ T6439] path_openat+0x1de4/0x2cb0
[ 113.207986][ T6439] ? __pfx_path_openat+0x10/0x10
[ 113.208013][ T6439] ? __lock_acquire+0xb8a/0x1c90
[ 113.208051][ T6439] do_filp_open+0x20b/0x470
[ 113.208078][ T6439] ? __pfx_do_filp_open+0x10/0x10
[ 113.208133][ T6439] ? alloc_fd+0x471/0x7d0
[ 113.208169][ T6439] do_sys_openat2+0x11b/0x1d0
[ 113.208200][ T6439] ? __pfx_do_sys_openat2+0x10/0x10
[ 113.208243][ T6439] __x64_sys_openat+0x174/0x210
[ 113.208279][ T6439] ? __pfx___x64_sys_openat+0x10/0x10
[ 113.208327][ T6439] do_syscall_64+0xcd/0xfa0
[ 113.208357][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.208382][ T6439] RIP: 0033:0x7f92aa98efc9
[ 113.208405][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.208429][ T6439] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 113.208454][ T6439] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 113.208471][ T6439] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 113.208487][ T6439] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 113.208503][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.208518][ T6439] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 113.208556][ T6439]
[ 113.329391][ T6442] random: crng reseeded on system resumption
[ 113.844434][ T6457] FAULT_INJECTION: forcing a failure.
[ 113.844434][ T6457] name failslab, interval 1, probability 0, space 0, times 0
[ 113.859637][ T6457] CPU: 1 UID: 0 PID: 6457 Comm: syz.1.190 Not tainted syzkaller #0 PREEMPT(full)
[ 113.859674][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 113.859689][ T6457] Call Trace:
[ 113.859698][ T6457]
[ 113.859708][ T6457] dump_stack_lvl+0x16c/0x1f0
[ 113.859741][ T6457] should_fail_ex+0x512/0x640
[ 113.859775][ T6457] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 113.859805][ T6457] should_failslab+0xc2/0x120
[ 113.859837][ T6457] kmem_cache_alloc_noprof+0x75/0x6e0
[ 113.859862][ T6457] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 113.859886][ T6457] ? acpi_ps_alloc_op+0x29d/0x360
[ 113.859923][ T6457] ? acpi_ps_alloc_op+0x29d/0x360
[ 113.859944][ T6457] acpi_ps_alloc_op+0x29d/0x360
[ 113.859966][ T6457] ? acpi_ut_status_exit+0x103/0x1c0
[ 113.860008][ T6457] acpi_ps_create_op+0x4bd/0xd30
[ 113.860043][ T6457] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 113.860068][ T6457] ? __pfx_acpi_ps_create_op+0x10/0x10
[ 113.860105][ T6457] ? acpi_ut_status_exit+0x103/0x1c0
[ 113.860152][ T6457] acpi_ps_parse_loop+0xf06/0x2470
[ 113.860199][ T6457] ? __pfx_acpi_ps_parse_loop+0x10/0x10
[ 113.860232][ T6457] ? kmem_cache_alloc_noprof+0x2a1/0x6e0
[ 113.860255][ T6457] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10
[ 113.860279][ T6457] ? acpi_ut_create_thread_state+0x6d/0x170
[ 113.860326][ T6457] acpi_ps_parse_aml+0x817/0x1170
[ 113.860369][ T6457] acpi_ps_execute_method+0x5c4/0xe90
[ 113.860403][ T6457] acpi_ns_evaluate+0x98c/0x16d0
[ 113.860439][ T6457] acpi_evaluate_object+0x4ca/0xdf0
[ 113.860481][ T6457] ? __pfx_acpi_evaluate_object+0x10/0x10
[ 113.860515][ T6457] ? __mutex_trylock_common+0xe9/0x250
[ 113.860557][ T6457] acpi_evaluate_integer+0xdd/0x200
[ 113.860586][ T6457] ? __pfx_acpi_evaluate_integer+0x10/0x10
[ 113.860632][ T6457] ? __pfx_status_show+0x10/0x10
[ 113.860662][ T6457] status_show+0xa0/0x120
[ 113.860693][ T6457] ? __pfx_status_show+0x10/0x10
[ 113.860735][ T6457] dev_attr_show+0x56/0xe0
[ 113.860771][ T6457] ? __pfx_dev_attr_show+0x10/0x10
[ 113.860803][ T6457] sysfs_kf_seq_show+0x216/0x3e0
[ 113.860835][ T6457] seq_read_iter+0x50e/0x12d0
[ 113.860880][ T6457] kernfs_fop_read_iter+0x46c/0x610
[ 113.860903][ T6457] ? rw_verify_area+0xcf/0x6c0
[ 113.860938][ T6457] vfs_read+0x8bf/0xcf0
[ 113.860968][ T6457] ? __pfx___mutex_lock+0x10/0x10
[ 113.860995][ T6457] ? __pfx_vfs_read+0x10/0x10
[ 113.861040][ T6457] ksys_read+0x12a/0x250
[ 113.861061][ T6457] ? __pfx_ksys_read+0x10/0x10
[ 113.861093][ T6457] do_syscall_64+0xcd/0xfa0
[ 113.861118][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 113.861138][ T6457] RIP: 0033:0x7f364b18efc9
[ 113.861154][ T6457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 113.861171][ T6457] RSP: 002b:00007f364c0d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 113.861190][ T6457] RAX: ffffffffffffffda RBX: 00007f364b3e6090 RCX: 00007f364b18efc9
[ 113.861204][ T6457] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005
[ 113.861215][ T6457] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 113.861227][ T6457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 113.861238][ T6457] R13: 00007f364b3e6128 R14: 00007f364b3e6090 R15: 00007fffe944ca68
[ 113.861266][ T6457]
[ 113.861341][ T6457] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529)
[ 114.302816][ T6464] netlink: 146 bytes leftover after parsing attributes in process `syz.2.193'.
[ 114.459677][ T6466] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 115.859609][ T6487] size and base must be multiples of 4 kiB
[ 115.865561][ T6487] CPU: 0 UID: 0 PID: 6487 Comm: syz.0.200 Not tainted syzkaller #0 PREEMPT(full)
[ 115.865596][ T6487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 115.865612][ T6487] Call Trace:
[ 115.865621][ T6487]
[ 115.865632][ T6487] dump_stack_lvl+0x16c/0x1f0
[ 115.865666][ T6487] mtrr_del+0xd1/0x110
[ 115.865702][ T6487] mtrr_ioctl+0x922/0xcf0
[ 115.865738][ T6487] ? __pfx_mtrr_ioctl+0x10/0x10
[ 115.865786][ T6487] ? find_held_lock+0x2b/0x80
[ 115.865823][ T6487] ? __fget_files+0x20e/0x3c0
[ 115.865855][ T6487] ? __pfx_mtrr_ioctl+0x10/0x10
[ 115.865890][ T6487] proc_reg_unlocked_ioctl+0x229/0x320
[ 115.865923][ T6487] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 115.865960][ T6487] __x64_sys_ioctl+0x18e/0x210
[ 115.866000][ T6487] do_syscall_64+0xcd/0xfa0
[ 115.866030][ T6487] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.866056][ T6487] RIP: 0033:0x7f107298efc9
[ 115.866077][ T6487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 115.866100][ T6487] RSP: 002b:00007f10738a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 115.866125][ T6487] RAX: ffffffffffffffda RBX: 00007f1072be5fa0 RCX: 00007f107298efc9
[ 115.866143][ T6487] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005
[ 115.866158][ T6487] RBP: 00007f1072a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 115.866173][ T6487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 115.866188][ T6487] R13: 00007f1072be6038 R14: 00007f1072be5fa0 R15: 00007ffcf3986d48
[ 115.866225][ T6487]
[ 119.835057][ T30] audit: type=1800 audit(8277292047.750:2): pid=6581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.219" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 120.232664][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'.
[ 121.168343][ T6605] FAULT_INJECTION: forcing a failure.
[ 121.168343][ T6605] name failslab, interval 1, probability 0, space 0, times 0
[ 121.181983][ T6605] CPU: 0 UID: 0 PID: 6605 Comm: syz.1.226 Not tainted syzkaller #0 PREEMPT(full)
[ 121.182019][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 121.182050][ T6605] Call Trace:
[ 121.182060][ T6605]
[ 121.182070][ T6605] dump_stack_lvl+0x16c/0x1f0
[ 121.182118][ T6605] should_fail_ex+0x512/0x640
[ 121.182155][ T6605] ? __kmalloc_noprof+0xca/0x880
[ 121.182198][ T6605] should_failslab+0xc2/0x120
[ 121.182231][ T6605] __kmalloc_noprof+0xdd/0x880
[ 121.182269][ T6605] ? vkms_crtc_atomic_check+0x3c5/0x880
[ 121.182303][ T6605] ? vkms_crtc_atomic_check+0x3c5/0x880
[ 121.182328][ T6605] vkms_crtc_atomic_check+0x3c5/0x880
[ 121.182365][ T6605] ? __pfx_vkms_crtc_atomic_check+0x10/0x10
[ 121.182391][ T6605] drm_atomic_helper_check_planes+0x4dd/0x900
[ 121.182434][ T6605] drm_atomic_helper_check+0xae/0x190
[ 121.182470][ T6605] vkms_atomic_check+0x1d9/0x250
[ 121.182503][ T6605] ? __pfx_vkms_atomic_check+0x10/0x10
[ 121.182538][ T6605] drm_atomic_check_only+0x19ca/0x3130
[ 121.182593][ T6605] drm_atomic_commit+0x136/0x300
[ 121.182627][ T6605] ? __pfx_drm_atomic_commit+0x10/0x10
[ 121.182659][ T6605] ? __pfx___drm_printfn_info+0x10/0x10
[ 121.182691][ T6605] ? drm_client_rotation+0x4da/0x6a0
[ 121.182732][ T6605] drm_client_modeset_commit_atomic+0x69d/0x7e0
[ 121.182781][ T6605] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 121.182818][ T6605] ? rcu_is_watching+0x12/0xc0
[ 121.182882][ T6605] drm_client_modeset_commit_locked+0x14d/0x580
[ 121.182923][ T6605] drm_client_modeset_commit+0x4f/0x80
[ 121.182961][ T6605] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[ 121.182998][ T6605] ? __pfx_drm_fbdev_client_restore+0x10/0x10
[ 121.183029][ T6605] drm_fbdev_client_restore+0x2c/0x40
[ 121.183064][ T6605] drm_client_dev_restore+0x1f6/0x2a0
[ 121.183108][ T6605] drm_release+0x2c4/0x360
[ 121.183144][ T6605] ? __pfx_drm_release+0x10/0x10
[ 121.183174][ T6605] __fput+0x402/0xb70
[ 121.183217][ T6605] task_work_run+0x150/0x240
[ 121.183255][ T6605] ? __pfx_task_work_run+0x10/0x10
[ 121.183292][ T6605] ? __pfx___do_sys_close_range+0x10/0x10
[ 121.183329][ T6605] exit_to_user_mode_loop+0xec/0x130
[ 121.183367][ T6605] do_syscall_64+0x426/0xfa0
[ 121.183398][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.183424][ T6605] RIP: 0033:0x7f364b18efc9
[ 121.183452][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 121.183477][ T6605] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 121.183506][ T6605] RAX: 0000000000000000 RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 121.183523][ T6605] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[ 121.183538][ T6605] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 121.183553][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 121.183568][ T6605] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 121.183607][ T6605]
[ 122.492347][ T6623] FAULT_INJECTION: forcing a failure.
[ 122.492347][ T6623] name failslab, interval 1, probability 0, space 0, times 0
[ 122.655675][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.1.233 Not tainted syzkaller #0 PREEMPT(full)
[ 122.655710][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 122.655726][ T6623] Call Trace:
[ 122.655735][ T6623]
[ 122.655746][ T6623] dump_stack_lvl+0x16c/0x1f0
[ 122.655782][ T6623] should_fail_ex+0x512/0x640
[ 122.655820][ T6623] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 122.655858][ T6623] should_failslab+0xc2/0x120
[ 122.655892][ T6623] kmem_cache_alloc_noprof+0x75/0x6e0
[ 122.655918][ T6623] ? __kernfs_new_node+0xd2/0x8e0
[ 122.655956][ T6623] ? __kernfs_new_node+0xd2/0x8e0
[ 122.655986][ T6623] __kernfs_new_node+0xd2/0x8e0
[ 122.656024][ T6623] ? __pfx___kernfs_new_node+0x10/0x10
[ 122.656066][ T6623] ? find_held_lock+0x2b/0x80
[ 122.656093][ T6623] ? kernfs_root+0xee/0x2a0
[ 122.656131][ T6623] kernfs_new_node+0x13c/0x1e0
[ 122.656180][ T6623] __kernfs_create_file+0x53/0x350
[ 122.656212][ T6623] sysfs_add_file_mode_ns+0x207/0x3c0
[ 122.656259][ T6623] internal_create_group+0x578/0xf30
[ 122.656303][ T6623] ? __pfx_internal_create_group+0x10/0x10
[ 122.656343][ T6623] ? kernfs_create_link+0x1bd/0x240
[ 122.656376][ T6623] internal_create_groups+0x9d/0x150
[ 122.656413][ T6623] device_add+0x6d1/0x1aa0
[ 122.656454][ T6623] ? __pfx_device_add+0x10/0x10
[ 122.656490][ T6623] ? lockdep_init_map_type+0x5c/0x280
[ 122.656524][ T6623] ? __init_waitqueue_head+0xca/0x150
[ 122.656569][ T6623] netdev_register_kobject+0x1a9/0x3d0
[ 122.656605][ T6623] register_netdevice+0x13dc/0x2270
[ 122.656641][ T6623] ? __pfx_register_netdevice+0x10/0x10
[ 122.656678][ T6623] internal_dev_create+0x2d3/0x520
[ 122.656710][ T6623] ovs_vport_add+0x147/0x4d0
[ 122.656738][ T6623] new_vport+0x16/0x1d0
[ 122.656769][ T6623] ovs_dp_cmd_new+0x6ba/0xe60
[ 122.656816][ T6623] ? __pfx_ovs_dp_cmd_new+0x10/0x10
[ 122.656861][ T6623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290
[ 122.656893][ T6623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290
[ 122.656935][ T6623] genl_family_rcv_msg_doit+0x209/0x2f0
[ 122.656970][ T6623] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 122.657014][ T6623] ? bpf_lsm_capable+0x9/0x10
[ 122.657046][ T6623] ? security_capable+0x7e/0x260
[ 122.657079][ T6623] ? ns_capable+0xd7/0x110
[ 122.657109][ T6623] genl_rcv_msg+0x55c/0x800
[ 122.657144][ T6623] ? __pfx_genl_rcv_msg+0x10/0x10
[ 122.657184][ T6623] ? __pfx_ovs_dp_cmd_new+0x10/0x10
[ 122.657237][ T6623] netlink_rcv_skb+0x158/0x420
[ 122.657265][ T6623] ? __pfx_genl_rcv_msg+0x10/0x10
[ 122.657296][ T6623] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 122.657338][ T6623] ? netlink_deliver_tap+0x1ae/0xd30
[ 122.657383][ T6623] genl_rcv+0x28/0x40
[ 122.657408][ T6623] netlink_unicast+0x5aa/0x870
[ 122.657440][ T6623] ? __pfx_netlink_unicast+0x10/0x10
[ 122.657481][ T6623] netlink_sendmsg+0x8c8/0xdd0
[ 122.657514][ T6623] ? __pfx_netlink_sendmsg+0x10/0x10
[ 122.657545][ T6623] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0
[ 122.657587][ T6623] ____sys_sendmsg+0xa98/0xc70
[ 122.657619][ T6623] ? copy_msghdr_from_user+0x10a/0x160
[ 122.657642][ T6623] ? __pfx_____sys_sendmsg+0x10/0x10
[ 122.657682][ T6623] ? __pfx_futex_wake_mark+0x10/0x10
[ 122.657725][ T6623] ___sys_sendmsg+0x134/0x1d0
[ 122.657746][ T6623] ? futex_private_hash_put+0x176/0x300
[ 122.657779][ T6623] ? __pfx____sys_sendmsg+0x10/0x10
[ 122.657798][ T6623] ? __lock_acquire+0x622/0x1c90
[ 122.657872][ T6623] __sys_sendmsg+0x16d/0x220
[ 122.657898][ T6623] ? __pfx___sys_sendmsg+0x10/0x10
[ 122.657920][ T6623] ? __x64_sys_futex+0x1e0/0x4c0
[ 122.657976][ T6623] do_syscall_64+0xcd/0xfa0
[ 122.658007][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.658033][ T6623] RIP: 0033:0x7f364b18efc9
[ 122.658054][ T6623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 122.658079][ T6623] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 122.658103][ T6623] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 122.658120][ T6623] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006
[ 122.658136][ T6623] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 122.658151][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 122.658175][ T6623] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 122.658214][ T6623]
[ 123.383114][ T6628] syz.3.235 uses obsolete (PF_INET,SOCK_PACKET)
[ 123.750237][ T6637] netlink: 330 bytes leftover after parsing attributes in process `syz.1.238'.
[ 125.809291][ T6677] FAULT_INJECTION: forcing a failure.
[ 125.809291][ T6677] name failslab, interval 1, probability 0, space 0, times 0
[ 125.873039][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.3.253 Not tainted syzkaller #0 PREEMPT(full)
[ 125.873076][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 125.873091][ T6677] Call Trace:
[ 125.873100][ T6677]
[ 125.873114][ T6677] dump_stack_lvl+0x16c/0x1f0
[ 125.873151][ T6677] should_fail_ex+0x512/0x640
[ 125.873186][ T6677] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[ 125.873225][ T6677] should_failslab+0xc2/0x120
[ 125.873258][ T6677] __kmalloc_node_track_caller_noprof+0xde/0x8a0
[ 125.873290][ T6677] ? drm_stub_open+0x20f/0x380
[ 125.873321][ T6677] ? kasprintf+0xc7/0x100
[ 125.873343][ T6677] ? do_dentry_open+0x982/0x1530
[ 125.873376][ T6677] ? kvasprintf+0xbc/0x160
[ 125.873397][ T6677] kvasprintf+0xbc/0x160
[ 125.873421][ T6677] ? __pfx_kvasprintf+0x10/0x10
[ 125.873458][ T6677] kasprintf+0xc7/0x100
[ 125.873482][ T6677] ? __pfx_kasprintf+0x10/0x10
[ 125.873508][ T6677] ? aa_get_newest_label+0xd2/0x250
[ 125.873544][ T6677] ? lockdep_init_map_type+0x5c/0x280
[ 125.873586][ T6677] drm_debugfs_clients_add+0x48/0x200
[ 125.873620][ T6677] drm_file_alloc+0x5c6/0xb40
[ 125.873667][ T6677] drm_open_helper+0x204/0x550
[ 125.873706][ T6677] drm_open+0x1a0/0x3e0
[ 125.873741][ T6677] ? __pfx_drm_open+0x10/0x10
[ 125.873773][ T6677] drm_stub_open+0x20f/0x380
[ 125.873808][ T6677] ? __pfx_drm_stub_open+0x10/0x10
[ 125.873840][ T6677] chrdev_open+0x234/0x6a0
[ 125.873869][ T6677] ? __pfx_apparmor_file_open+0x10/0x10
[ 125.873903][ T6677] ? __pfx_chrdev_open+0x10/0x10
[ 125.873934][ T6677] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 125.873969][ T6677] do_dentry_open+0x982/0x1530
[ 125.873998][ T6677] ? __pfx_chrdev_open+0x10/0x10
[ 125.874034][ T6677] vfs_open+0x82/0x3f0
[ 125.874072][ T6677] path_openat+0x1de4/0x2cb0
[ 125.874111][ T6677] ? __pfx_path_openat+0x10/0x10
[ 125.874141][ T6677] ? __lock_acquire+0xb8a/0x1c90
[ 125.874177][ T6677] do_filp_open+0x20b/0x470
[ 125.874205][ T6677] ? __pfx_do_filp_open+0x10/0x10
[ 125.874257][ T6677] ? alloc_fd+0x471/0x7d0
[ 125.874292][ T6677] do_sys_openat2+0x11b/0x1d0
[ 125.874326][ T6677] ? __pfx_do_sys_openat2+0x10/0x10
[ 125.874374][ T6677] __x64_sys_openat+0x174/0x210
[ 125.874410][ T6677] ? __pfx___x64_sys_openat+0x10/0x10
[ 125.874459][ T6677] do_syscall_64+0xcd/0xfa0
[ 125.874490][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 125.874516][ T6677] RIP: 0033:0x7f8c1358efc9
[ 125.874536][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 125.874559][ T6677] RSP: 002b:00007f8c117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 125.874584][ T6677] RAX: ffffffffffffffda RBX: 00007f8c137e5fa0 RCX: 00007f8c1358efc9
[ 125.874600][ T6677] RDX: 0000000000129843 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 125.874617][ T6677] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 125.874632][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 125.874656][ T6677] R13: 00007f8c137e6038 R14: 00007f8c137e5fa0 R15: 00007ffd4e81e8f8
[ 125.874692][ T6677]
[ 126.918446][ T6686] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 126.974179][ T6686] FAULT_INJECTION: forcing a failure.
[ 126.974179][ T6686] name failslab, interval 1, probability 0, space 0, times 0
[ 126.994995][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.1.256 Not tainted syzkaller #0 PREEMPT(full)
[ 126.995029][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 126.995043][ T6686] Call Trace:
[ 126.995051][ T6686]
[ 126.995059][ T6686] dump_stack_lvl+0x16c/0x1f0
[ 126.995091][ T6686] should_fail_ex+0x512/0x640
[ 126.995125][ T6686] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[ 126.995162][ T6686] should_failslab+0xc2/0x120
[ 126.995192][ T6686] __kmalloc_node_track_caller_noprof+0xde/0x8a0
[ 126.995226][ T6686] ? register_pidns_sysctls+0x4b/0x1b0
[ 126.995269][ T6686] ? kmemdup_noprof+0x29/0x60
[ 126.995293][ T6686] ? __pfx_set_is_seen+0x10/0x10
[ 126.995320][ T6686] kmemdup_noprof+0x29/0x60
[ 126.995347][ T6686] register_pidns_sysctls+0x4b/0x1b0
[ 126.995381][ T6686] ? __ns_common_init+0x2a4/0x3b0
[ 126.995410][ T6686] copy_pid_ns+0x548/0xca0
[ 126.995441][ T6686] ? __pfx_copy_pid_ns+0x10/0x10
[ 126.995472][ T6686] ? rcu_is_watching+0x12/0xc0
[ 126.995498][ T6686] ? copy_mnt_ns+0xac/0xac0
[ 126.995524][ T6686] ? rcu_is_watching+0x12/0xc0
[ 126.995553][ T6686] ? copy_ipcs+0xb6/0x550
[ 126.995601][ T6686] create_new_namespaces+0x2aa/0xa90
[ 126.995638][ T6686] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 126.995671][ T6686] ksys_unshare+0x45b/0xa40
[ 126.995704][ T6686] ? __pfx_ksys_unshare+0x10/0x10
[ 126.995736][ T6686] ? xfd_validate_state+0x61/0x180
[ 126.995779][ T6686] __x64_sys_unshare+0x31/0x40
[ 126.995811][ T6686] do_syscall_64+0xcd/0xfa0
[ 126.995844][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.995869][ T6686] RIP: 0033:0x7f364b18efc9
[ 126.995890][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 126.995914][ T6686] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 126.995938][ T6686] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 126.995955][ T6686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[ 126.995969][ T6686] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 126.995984][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 126.995999][ T6686] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 126.996035][ T6686]
[ 127.230380][ C0] vkms_vblank_simulate: vblank timer overrun
[ 127.993487][ T6696] FAULT_INJECTION: forcing a failure.
[ 127.993487][ T6696] name failslab, interval 1, probability 0, space 0, times 0
[ 128.011815][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.2.260 Not tainted syzkaller #0 PREEMPT(full)
[ 128.011851][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 128.011866][ T6696] Call Trace:
[ 128.011875][ T6696]
[ 128.011885][ T6696] dump_stack_lvl+0x16c/0x1f0
[ 128.011918][ T6696] should_fail_ex+0x512/0x640
[ 128.011954][ T6696] ? __kmalloc_noprof+0xca/0x880
[ 128.011997][ T6696] should_failslab+0xc2/0x120
[ 128.012032][ T6696] __kmalloc_noprof+0xdd/0x880
[ 128.012069][ T6696] ? __pfx___mutex_lock+0x10/0x10
[ 128.012099][ T6696] ? kvm_io_bus_register_dev+0x1cf/0x720
[ 128.012135][ T6696] ? kvm_io_bus_register_dev+0x1cf/0x720
[ 128.012164][ T6696] kvm_io_bus_register_dev+0x1cf/0x720
[ 128.012206][ T6696] kvm_ioapic_init+0x429/0x590
[ 128.012238][ T6696] kvm_arch_vm_ioctl+0x912/0x18b0
[ 128.012267][ T6696] ? register_lock_class+0x41/0x4c0
[ 128.012299][ T6696] ? find_held_lock+0x2b/0x80
[ 128.012325][ T6696] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 128.012353][ T6696] ? ima_match_policy+0x7f9/0x22e0
[ 128.012383][ T6696] ? __lock_acquire+0x622/0x1c90
[ 128.012422][ T6696] ? __lock_acquire+0x622/0x1c90
[ 128.012464][ T6696] ? __lock_acquire+0x622/0x1c90
[ 128.012503][ T6696] ? __lock_acquire+0x622/0x1c90
[ 128.012560][ T6696] ? bpf_ksym_find+0x124/0x1c0
[ 128.012589][ T6696] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 128.012619][ T6696] ? is_bpf_text_address+0x94/0x1a0
[ 128.012653][ T6696] ? kernel_text_address+0x8d/0x100
[ 128.012687][ T6696] ? widen_string+0xdc/0x2d0
[ 128.012718][ T6696] ? __kernel_text_address+0xd/0x40
[ 128.012746][ T6696] ? unwind_get_return_address+0x59/0xa0
[ 128.012775][ T6696] ? arch_stack_walk+0xa6/0x100
[ 128.012817][ T6696] ? stack_trace_save+0x8e/0xc0
[ 128.012846][ T6696] ? __pfx_stack_trace_save+0x10/0x10
[ 128.012876][ T6696] ? stack_depot_save_flags+0x29/0x9c0
[ 128.012914][ T6696] ? __lock_acquire+0xb8a/0x1c90
[ 128.012949][ T6696] ? kasan_save_stack+0x42/0x60
[ 128.012976][ T6696] ? kasan_save_stack+0x33/0x60
[ 128.013003][ T6696] ? kasan_save_track+0x14/0x30
[ 128.013028][ T6696] ? __kasan_save_free_info+0x3b/0x60
[ 128.013050][ T6696] ? __kasan_slab_free+0x5f/0x80
[ 128.013077][ T6696] ? kfree+0x2b8/0x6d0
[ 128.013095][ T6696] ? tomoyo_path_number_perm+0x470/0x580
[ 128.013137][ T6696] kvm_vm_ioctl+0x1a91/0x3fd0
[ 128.013179][ T6696] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 128.013231][ T6696] ? kasan_quarantine_put+0x10a/0x240
[ 128.013258][ T6696] ? lockdep_hardirqs_on+0x7c/0x110
[ 128.013289][ T6696] ? find_held_lock+0x2b/0x80
[ 128.013315][ T6696] ? tomoyo_path_number_perm+0x295/0x580
[ 128.013358][ T6696] ? tomoyo_path_number_perm+0x18d/0x580
[ 128.013398][ T6696] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 128.013449][ T6696] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 128.013490][ T6696] ? do_vfs_ioctl+0x128/0x14f0
[ 128.013526][ T6696] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 128.013572][ T6696] ? find_held_lock+0x2b/0x80
[ 128.013597][ T6696] ? hook_file_ioctl_common+0x145/0x410
[ 128.013632][ T6696] ? __fget_files+0x20e/0x3c0
[ 128.013662][ T6696] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 128.013691][ T6696] __x64_sys_ioctl+0x18e/0x210
[ 128.013728][ T6696] do_syscall_64+0xcd/0xfa0
[ 128.013765][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.013792][ T6696] RIP: 0033:0x7f92aa98efc9
[ 128.013813][ T6696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 128.013836][ T6696] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 128.013860][ T6696] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 128.013877][ T6696] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003
[ 128.013892][ T6696] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 128.013908][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 128.013922][ T6696] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 128.013959][ T6696]
[ 129.528436][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'.
[ 129.691291][ T6718] bond0: (slave bond_slave_1): Releasing backup interface
[ 130.511698][ T6740] netlink: 252 bytes leftover after parsing attributes in process `syz.1.275'.
[ 130.524241][ T6740] netlink: 252 bytes leftover after parsing attributes in process `syz.1.275'.
[ 132.438140][ T6783] FAULT_INJECTION: forcing a failure.
[ 132.438140][ T6783] name failslab, interval 1, probability 0, space 0, times 0
[ 132.451255][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT(full)
[ 132.451291][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 132.451307][ T6783] Call Trace:
[ 132.451316][ T6783]
[ 132.451326][ T6783] dump_stack_lvl+0x16c/0x1f0
[ 132.451362][ T6783] should_fail_ex+0x512/0x640
[ 132.451400][ T6783] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 132.451431][ T6783] should_failslab+0xc2/0x120
[ 132.451464][ T6783] kmem_cache_alloc_noprof+0x75/0x6e0
[ 132.451491][ T6783] ? security_file_alloc+0x34/0x2b0
[ 132.451524][ T6783] ? security_file_alloc+0x34/0x2b0
[ 132.451549][ T6783] security_file_alloc+0x34/0x2b0
[ 132.451576][ T6783] init_file+0x93/0x4c0
[ 132.451609][ T6783] alloc_empty_file+0x73/0x1e0
[ 132.451643][ T6783] alloc_file_pseudo+0x13a/0x230
[ 132.451679][ T6783] ? __pfx_alloc_file_pseudo+0x10/0x10
[ 132.451714][ T6783] ? security_inode_init_security_anon+0x79/0x240
[ 132.451759][ T6783] __anon_inode_getfile+0xe8/0x280
[ 132.451788][ T6783] ? _copy_to_user+0x48/0xd0
[ 132.451826][ T6783] io_uring_setup+0x153f/0x20e0
[ 132.451859][ T6783] ? __pfx_io_uring_setup+0x10/0x10
[ 132.451913][ T6783] ? xfd_validate_state+0x61/0x180
[ 132.451945][ T6783] ? __pfx_do_writev+0x10/0x10
[ 132.451977][ T6783] __x64_sys_io_uring_setup+0xc2/0x170
[ 132.452009][ T6783] do_syscall_64+0xcd/0xfa0
[ 132.452039][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.452065][ T6783] RIP: 0033:0x7f107298efc9
[ 132.452091][ T6783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 132.452125][ T6783] RSP: 002b:00007f10738a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[ 132.452151][ T6783] RAX: ffffffffffffffda RBX: 00007f1072be5fa0 RCX: 00007f107298efc9
[ 132.452169][ T6783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[ 132.452184][ T6783] RBP: 00007f1072a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 132.452200][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 132.452215][ T6783] R13: 00007f1072be6038 R14: 00007f1072be5fa0 R15: 00007ffcf3986d48
[ 132.452251][ T6783]
[ 132.865001][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.874609][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.977443][ T6790] FAULT_INJECTION: forcing a failure.
[ 132.977443][ T6790] name failslab, interval 1, probability 0, space 0, times 0
[ 133.021360][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT(full)
[ 133.021395][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 133.021410][ T6790] Call Trace:
[ 133.021418][ T6790]
[ 133.021428][ T6790] dump_stack_lvl+0x16c/0x1f0
[ 133.021458][ T6790] should_fail_ex+0x512/0x640
[ 133.021495][ T6790] ? __kmalloc_cache_noprof+0x5f/0x780
[ 133.021542][ T6790] should_failslab+0xc2/0x120
[ 133.021578][ T6790] __kmalloc_cache_noprof+0x72/0x780
[ 133.021622][ T6790] ? create_filter_start.constprop.0+0xa5/0x300
[ 133.021666][ T6790] ? create_filter_start.constprop.0+0xa5/0x300
[ 133.021699][ T6790] create_filter_start.constprop.0+0xa5/0x300
[ 133.021734][ T6790] create_filter+0xb5/0x210
[ 133.021773][ T6790] ? __pfx_create_filter+0x10/0x10
[ 133.021809][ T6790] ? __pfx___mutex_lock+0x10/0x10
[ 133.021835][ T6790] ? find_held_lock+0x2b/0x80
[ 133.021862][ T6790] apply_event_filter+0x220/0x500
[ 133.021895][ T6790] ? __pfx_apply_event_filter+0x10/0x10
[ 133.021938][ T6790] event_filter_write+0x16d/0x290
[ 133.021961][ T6790] ? __pfx_event_filter_write+0x10/0x10
[ 133.021983][ T6790] vfs_write+0x2a0/0x11d0
[ 133.022013][ T6790] ? __pfx___mutex_lock+0x10/0x10
[ 133.022038][ T6790] ? __pfx_vfs_write+0x10/0x10
[ 133.022083][ T6790] ? __fget_files+0x20e/0x3c0
[ 133.022118][ T6790] ksys_write+0x12a/0x250
[ 133.022142][ T6790] ? __pfx_ksys_write+0x10/0x10
[ 133.022177][ T6790] do_syscall_64+0xcd/0xfa0
[ 133.022204][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.022229][ T6790] RIP: 0033:0x7f92aa98efc9
[ 133.022250][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 133.022271][ T6790] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 133.022294][ T6790] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 133.022310][ T6790] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[ 133.022322][ T6790] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 133.022410][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 133.022425][ T6790] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 133.022462][ T6790]
[ 133.941240][ T6810] netlink: 18 bytes leftover after parsing attributes in process `syz.1.301'.
[ 134.028974][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'.
[ 135.826629][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'.
[ 135.849155][ T6851] netlink: 13 bytes leftover after parsing attributes in process `syz.0.314'.
[ 135.970525][ T6854] ima: policy update failed
[ 135.977399][ T30] audit: type=1802 audit(8277292063.900:3): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.316" res=0 errno=0
[ 137.236763][ T6880] FAULT_INJECTION: forcing a failure.
[ 137.236763][ T6880] name failslab, interval 1, probability 0, space 0, times 0
[ 137.288292][ T6880] CPU: 0 UID: 0 PID: 6880 Comm: syz.3.324 Not tainted syzkaller #0 PREEMPT(full)
[ 137.288329][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 137.288343][ T6880] Call Trace:
[ 137.288352][ T6880]
[ 137.288361][ T6880] dump_stack_lvl+0x16c/0x1f0
[ 137.288394][ T6880] should_fail_ex+0x512/0x640
[ 137.288429][ T6880] ? fs_reclaim_acquire+0xae/0x150
[ 137.288463][ T6880] should_failslab+0xc2/0x120
[ 137.288495][ T6880] kmem_cache_alloc_noprof+0x75/0x6e0
[ 137.288520][ T6880] ? __pfx_map_id_range_down+0x10/0x10
[ 137.288555][ T6880] ? security_inode_alloc+0x3b/0x2b0
[ 137.288597][ T6880] ? security_inode_alloc+0x3b/0x2b0
[ 137.288630][ T6880] security_inode_alloc+0x3b/0x2b0
[ 137.288666][ T6880] inode_init_always_gfp+0xce4/0x1030
[ 137.288697][ T6880] alloc_inode+0x86/0x240
[ 137.288728][ T6880] sock_alloc+0x40/0x280
[ 137.288755][ T6880] __sock_create+0xc1/0x8d0
[ 137.288792][ T6880] smc_create_clcsk+0x37/0xd0
[ 137.288815][ T6880] ? __pfx_smc_inet_init_sock+0x10/0x10
[ 137.288846][ T6880] inet6_create+0xb30/0x12b0
[ 137.288877][ T6880] ? inet6_create+0x7f/0x12b0
[ 137.288909][ T6880] __sock_create+0x338/0x8d0
[ 137.288952][ T6880] __sys_socket+0x14d/0x260
[ 137.288982][ T6880] ? __fget_files+0x20e/0x3c0
[ 137.289007][ T6880] ? __pfx___sys_socket+0x10/0x10
[ 137.289038][ T6880] ? xfd_validate_state+0x61/0x180
[ 137.289080][ T6880] __x64_sys_socket+0x72/0xb0
[ 137.289109][ T6880] ? lockdep_hardirqs_on+0x7c/0x110
[ 137.289136][ T6880] do_syscall_64+0xcd/0xfa0
[ 137.289165][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.289189][ T6880] RIP: 0033:0x7f8c1358efc9
[ 137.289214][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 137.289236][ T6880] RSP: 002b:00007f8c117d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 137.289260][ T6880] RAX: ffffffffffffffda RBX: 00007f8c137e6090 RCX: 00007f8c1358efc9
[ 137.289278][ T6880] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a
[ 137.289293][ T6880] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 137.289308][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 137.289324][ T6880] R13: 00007f8c137e6128 R14: 00007f8c137e6090 R15: 00007ffd4e81e8f8
[ 137.289361][ T6880]
[ 137.289781][ T6880] socket: no more sockets
[ 137.630094][ T6886] FAULT_INJECTION: forcing a failure.
[ 137.630094][ T6886] name failslab, interval 1, probability 0, space 0, times 0
[ 137.662585][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.2.325 Not tainted syzkaller #0 PREEMPT(full)
[ 137.662621][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 137.662637][ T6886] Call Trace:
[ 137.662645][ T6886]
[ 137.662655][ T6886] dump_stack_lvl+0x16c/0x1f0
[ 137.662690][ T6886] should_fail_ex+0x512/0x640
[ 137.662725][ T6886] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0
[ 137.662762][ T6886] should_failslab+0xc2/0x120
[ 137.662795][ T6886] __kmalloc_node_track_caller_noprof+0xde/0x8a0
[ 137.662829][ T6886] ? create_filter_start.constprop.0+0x16a/0x300
[ 137.662873][ T6886] ? kstrdup+0x53/0x100
[ 137.662898][ T6886] kstrdup+0x53/0x100
[ 137.662927][ T6886] create_filter_start.constprop.0+0x16a/0x300
[ 137.662975][ T6886] create_filter+0xb5/0x210
[ 137.663012][ T6886] ? __pfx_create_filter+0x10/0x10
[ 137.663050][ T6886] ? __pfx___mutex_lock+0x10/0x10
[ 137.663079][ T6886] ? find_held_lock+0x2b/0x80
[ 137.663109][ T6886] apply_event_filter+0x220/0x500
[ 137.663144][ T6886] ? __pfx_apply_event_filter+0x10/0x10
[ 137.663190][ T6886] event_filter_write+0x16d/0x290
[ 137.663218][ T6886] ? __pfx_event_filter_write+0x10/0x10
[ 137.663242][ T6886] vfs_write+0x2a0/0x11d0
[ 137.663278][ T6886] ? __pfx___mutex_lock+0x10/0x10
[ 137.663308][ T6886] ? __pfx_vfs_write+0x10/0x10
[ 137.663346][ T6886] ? __fget_files+0x20e/0x3c0
[ 137.663382][ T6886] ksys_write+0x12a/0x250
[ 137.663409][ T6886] ? __pfx_ksys_write+0x10/0x10
[ 137.663446][ T6886] do_syscall_64+0xcd/0xfa0
[ 137.663476][ T6886] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.663503][ T6886] RIP: 0033:0x7f92aa98efc9
[ 137.663524][ T6886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 137.663546][ T6886] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 137.663571][ T6886] RAX: ffffffffffffffda RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 137.663589][ T6886] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[ 137.663605][ T6886] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 137.663620][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 137.663635][ T6886] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 137.663672][ T6886]
[ 139.704821][ T52] Bluetooth: hci2: unexpected event 0x07 length: 435 > 255
[ 141.756995][ T6972] sp0: Synchronizing with TNC
[ 141.924189][ T6977] sp0: Synchronizing with TNC
[ 142.408907][ T6986] netlink: 138 bytes leftover after parsing attributes in process `syz.3.349'.
[ 143.190485][ T7005] FAULT_INJECTION: forcing a failure.
[ 143.190485][ T7005] name failslab, interval 1, probability 0, space 0, times 0
[ 143.238848][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.2.355 Not tainted syzkaller #0 PREEMPT(full)
[ 143.238882][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 143.238895][ T7005] Call Trace:
[ 143.238903][ T7005]
[ 143.238913][ T7005] dump_stack_lvl+0x16c/0x1f0
[ 143.238946][ T7005] should_fail_ex+0x512/0x640
[ 143.238982][ T7005] ? __kmalloc_noprof+0xca/0x880
[ 143.239024][ T7005] should_failslab+0xc2/0x120
[ 143.239056][ T7005] __kmalloc_noprof+0xdd/0x880
[ 143.239092][ T7005] ? drm_atomic_state_init+0x17b/0x320
[ 143.239133][ T7005] ? drm_atomic_state_init+0x17b/0x320
[ 143.239166][ T7005] drm_atomic_state_init+0x17b/0x320
[ 143.239197][ T7005] ? __kasan_kmalloc+0xaa/0xb0
[ 143.239223][ T7005] drm_atomic_state_alloc+0xd3/0x120
[ 143.239256][ T7005] drm_client_modeset_commit_atomic+0xcc/0x7e0
[ 143.239291][ T7005] ? __pfx___might_resched+0x10/0x10
[ 143.239330][ T7005] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 143.239366][ T7005] ? __mutex_lock+0x1c5/0x1060
[ 143.239392][ T7005] ? rcu_is_watching+0x12/0xc0
[ 143.239452][ T7005] drm_client_modeset_commit_locked+0x14d/0x580
[ 143.239505][ T7005] drm_client_modeset_commit+0x4f/0x80
[ 143.239541][ T7005] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[ 143.239574][ T7005] ? __pfx_drm_fbdev_client_restore+0x10/0x10
[ 143.239604][ T7005] drm_fbdev_client_restore+0x2c/0x40
[ 143.239631][ T7005] drm_client_dev_restore+0x1f6/0x2a0
[ 143.239673][ T7005] drm_release+0x2c4/0x360
[ 143.239709][ T7005] ? __pfx_drm_release+0x10/0x10
[ 143.239739][ T7005] __fput+0x402/0xb70
[ 143.239781][ T7005] task_work_run+0x150/0x240
[ 143.239820][ T7005] ? __pfx_task_work_run+0x10/0x10
[ 143.239856][ T7005] ? __pfx___do_sys_close_range+0x10/0x10
[ 143.239892][ T7005] exit_to_user_mode_loop+0xec/0x130
[ 143.239929][ T7005] do_syscall_64+0x426/0xfa0
[ 143.239960][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.239985][ T7005] RIP: 0033:0x7f92aa98efc9
[ 143.240006][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 143.240029][ T7005] RSP: 002b:00007f92ab8c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 143.240053][ T7005] RAX: 0000000000000000 RBX: 00007f92aabe5fa0 RCX: 00007f92aa98efc9
[ 143.240069][ T7005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[ 143.240084][ T7005] RBP: 00007f92aaa11f91 R08: 0000000000000000 R09: 0000000000000000
[ 143.240100][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 143.240115][ T7005] R13: 00007f92aabe6038 R14: 00007f92aabe5fa0 R15: 00007fffea5f9888
[ 143.240155][ T7005]
[ 144.529796][ T7034] FAULT_INJECTION: forcing a failure.
[ 144.529796][ T7034] name failslab, interval 1, probability 0, space 0, times 0
[ 144.550627][ T7034] CPU: 1 UID: 0 PID: 7034 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full)
[ 144.550665][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 144.550681][ T7034] Call Trace:
[ 144.550689][ T7034]
[ 144.550700][ T7034] dump_stack_lvl+0x16c/0x1f0
[ 144.550735][ T7034] should_fail_ex+0x512/0x640
[ 144.550771][ T7034] ? __kmalloc_noprof+0xca/0x880
[ 144.550813][ T7034] should_failslab+0xc2/0x120
[ 144.550845][ T7034] __kmalloc_noprof+0xdd/0x880
[ 144.550883][ T7034] ? kernfs_fop_write_iter+0x237/0x570
[ 144.550928][ T7034] ? kernfs_fop_write_iter+0x237/0x570
[ 144.550963][ T7034] kernfs_fop_write_iter+0x237/0x570
[ 144.551006][ T7034] do_iter_readv_writev+0x662/0x9e0
[ 144.551036][ T7034] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 144.551080][ T7034] vfs_writev+0x35f/0xde0
[ 144.551122][ T7034] ? __pfx_vfs_writev+0x10/0x10
[ 144.551145][ T7034] ? __mutex_lock+0x1c5/0x1060
[ 144.551186][ T7034] ? __pfx___mutex_lock+0x10/0x10
[ 144.551229][ T7034] ? __fget_files+0x20e/0x3c0
[ 144.551266][ T7034] ? do_writev+0x132/0x340
[ 144.551288][ T7034] do_writev+0x132/0x340
[ 144.551313][ T7034] ? __pfx_do_writev+0x10/0x10
[ 144.551350][ T7034] do_syscall_64+0xcd/0xfa0
[ 144.551380][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 144.551406][ T7034] RIP: 0033:0x7f8c1358efc9
[ 144.551427][ T7034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 144.551450][ T7034] RSP: 002b:00007f8c117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 144.551475][ T7034] RAX: ffffffffffffffda RBX: 00007f8c137e5fa0 RCX: 00007f8c1358efc9
[ 144.551492][ T7034] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[ 144.551507][ T7034] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 144.551522][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 144.551537][ T7034] R13: 00007f8c137e6038 R14: 00007f8c137e5fa0 R15: 00007ffd4e81e8f8
[ 144.551574][ T7034]
[ 145.443851][ T7045] zswap: compressor not available
[ 147.673169][ T7103] FAULT_INJECTION: forcing a failure.
[ 147.673169][ T7103] name failslab, interval 1, probability 0, space 0, times 0
[ 147.763644][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full)
[ 147.763680][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 147.763696][ T7103] Call Trace:
[ 147.763705][ T7103]
[ 147.763715][ T7103] dump_stack_lvl+0x16c/0x1f0
[ 147.763752][ T7103] should_fail_ex+0x512/0x640
[ 147.763804][ T7103] ? __kmalloc_cache_noprof+0x5f/0x780
[ 147.763846][ T7103] should_failslab+0xc2/0x120
[ 147.763878][ T7103] __kmalloc_cache_noprof+0x72/0x780
[ 147.763917][ T7103] ? vkms_plane_duplicate_state+0x45/0x130
[ 147.763959][ T7103] ? vkms_plane_duplicate_state+0x45/0x130
[ 147.763993][ T7103] vkms_plane_duplicate_state+0x45/0x130
[ 147.764031][ T7103] drm_atomic_get_plane_state+0x20e/0x590
[ 147.764069][ T7103] drm_client_modeset_commit_atomic+0x237/0x7e0
[ 147.764106][ T7103] ? __pfx___might_resched+0x10/0x10
[ 147.764151][ T7103] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 147.764189][ T7103] ? __mutex_lock+0x1c5/0x1060
[ 147.764217][ T7103] ? rcu_is_watching+0x12/0xc0
[ 147.764282][ T7103] drm_client_modeset_commit_locked+0x14d/0x580
[ 147.764325][ T7103] drm_client_modeset_commit+0x4f/0x80
[ 147.764363][ T7103] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200
[ 147.764400][ T7103] ? __pfx_drm_fbdev_client_restore+0x10/0x10
[ 147.764431][ T7103] drm_fbdev_client_restore+0x2c/0x40
[ 147.764460][ T7103] drm_client_dev_restore+0x1f6/0x2a0
[ 147.764502][ T7103] drm_release+0x2c4/0x360
[ 147.764538][ T7103] ? __pfx_drm_release+0x10/0x10
[ 147.764569][ T7103] __fput+0x402/0xb70
[ 147.764611][ T7103] task_work_run+0x150/0x240
[ 147.764650][ T7103] ? __pfx_task_work_run+0x10/0x10
[ 147.764690][ T7103] ? __pfx___do_sys_close_range+0x10/0x10
[ 147.764727][ T7103] exit_to_user_mode_loop+0xec/0x130
[ 147.764767][ T7103] do_syscall_64+0x426/0xfa0
[ 147.764798][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 147.764824][ T7103] RIP: 0033:0x7f8c1358efc9
[ 147.764845][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 147.764869][ T7103] RSP: 002b:00007f8c117f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 147.764892][ T7103] RAX: 0000000000000000 RBX: 00007f8c137e5fa0 RCX: 00007f8c1358efc9
[ 147.764905][ T7103] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002
[ 147.764919][ T7103] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 147.764933][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 147.764946][ T7103] R13: 00007f8c137e6038 R14: 00007f8c137e5fa0 R15: 00007ffd4e81e8f8
[ 147.764978][ T7103]
[ 148.043403][ T7098] zswap: compressor not available
[ 149.610721][ T7134] FAULT_INJECTION: forcing a failure.
[ 149.610721][ T7134] name failslab, interval 1, probability 0, space 0, times 0
[ 149.665065][ T7134] CPU: 1 UID: 0 PID: 7134 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full)
[ 149.665101][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 149.665115][ T7134] Call Trace:
[ 149.665124][ T7134]
[ 149.665133][ T7134] dump_stack_lvl+0x16c/0x1f0
[ 149.665168][ T7134] should_fail_ex+0x512/0x640
[ 149.665201][ T7134] ? __kmalloc_noprof+0xca/0x880
[ 149.665240][ T7134] should_failslab+0xc2/0x120
[ 149.665274][ T7134] __kmalloc_noprof+0xdd/0x880
[ 149.665308][ T7134] ? __pfx___mutex_lock+0x10/0x10
[ 149.665337][ T7134] ? kvm_io_bus_register_dev+0x1cf/0x720
[ 149.665374][ T7134] ? kvm_io_bus_register_dev+0x1cf/0x720
[ 149.665402][ T7134] kvm_io_bus_register_dev+0x1cf/0x720
[ 149.665444][ T7134] kvm_ioapic_init+0x429/0x590
[ 149.665476][ T7134] kvm_arch_vm_ioctl+0x912/0x18b0
[ 149.665505][ T7134] ? register_lock_class+0x41/0x4c0
[ 149.665537][ T7134] ? find_held_lock+0x2b/0x80
[ 149.665561][ T7134] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[ 149.665587][ T7134] ? ima_match_policy+0x7f9/0x22e0
[ 149.665617][ T7134] ? __lock_acquire+0x622/0x1c90
[ 149.665655][ T7134] ? __lock_acquire+0x622/0x1c90
[ 149.665698][ T7134] ? __lock_acquire+0x622/0x1c90
[ 149.665737][ T7134] ? __lock_acquire+0x622/0x1c90
[ 149.665795][ T7134] ? bpf_ksym_find+0x124/0x1c0
[ 149.665823][ T7134] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 149.665853][ T7134] ? is_bpf_text_address+0x94/0x1a0
[ 149.665887][ T7134] ? kernel_text_address+0x8d/0x100
[ 149.665921][ T7134] ? widen_string+0xdc/0x2d0
[ 149.665959][ T7134] ? __kernel_text_address+0xd/0x40
[ 149.665982][ T7134] ? unwind_get_return_address+0x59/0xa0
[ 149.666009][ T7134] ? arch_stack_walk+0xa6/0x100
[ 149.666046][ T7134] ? stack_trace_save+0x8e/0xc0
[ 149.666071][ T7134] ? __pfx_stack_trace_save+0x10/0x10
[ 149.666096][ T7134] ? stack_depot_save_flags+0x29/0x9c0
[ 149.666132][ T7134] ? __lock_acquire+0xb8a/0x1c90
[ 149.666164][ T7134] ? kasan_save_stack+0x42/0x60
[ 149.666203][ T7134] ? kasan_save_stack+0x33/0x60
[ 149.666227][ T7134] ? kasan_save_track+0x14/0x30
[ 149.666251][ T7134] ? __kasan_save_free_info+0x3b/0x60
[ 149.666270][ T7134] ? __kasan_slab_free+0x5f/0x80
[ 149.666294][ T7134] ? kfree+0x2b8/0x6d0
[ 149.666310][ T7134] ? tomoyo_path_number_perm+0x470/0x580
[ 149.666348][ T7134] kvm_vm_ioctl+0x1a91/0x3fd0
[ 149.666390][ T7134] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 149.666449][ T7134] ? kasan_quarantine_put+0x10a/0x240
[ 149.666476][ T7134] ? lockdep_hardirqs_on+0x7c/0x110
[ 149.666508][ T7134] ? find_held_lock+0x2b/0x80
[ 149.666534][ T7134] ? tomoyo_path_number_perm+0x295/0x580
[ 149.666575][ T7134] ? tomoyo_path_number_perm+0x18d/0x580
[ 149.666612][ T7134] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 149.666660][ T7134] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 149.666699][ T7134] ? do_vfs_ioctl+0x128/0x14f0
[ 149.666733][ T7134] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 149.666777][ T7134] ? find_held_lock+0x2b/0x80
[ 149.666801][ T7134] ? hook_file_ioctl_common+0x145/0x410
[ 149.666834][ T7134] ? __fget_files+0x20e/0x3c0
[ 149.666864][ T7134] ? __pfx_kvm_vm_ioctl+0x10/0x10
[ 149.666892][ T7134] __x64_sys_ioctl+0x18e/0x210
[ 149.666929][ T7134] do_syscall_64+0xcd/0xfa0
[ 149.666967][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 149.666993][ T7134] RIP: 0033:0x7f364b18efc9
[ 149.667015][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 149.667039][ T7134] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 149.667062][ T7134] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 149.667093][ T7134] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003
[ 149.667108][ T7134] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 149.667124][ T7134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 149.667139][ T7134] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 149.667176][ T7134]
[ 150.801405][ T7160] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000
[ 150.811274][ T7160] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 150.820200][ T7160] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 150.829138][ T7160] page_type: f5(slab)
[ 150.833298][ T7160] raw: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000
[ 150.842211][ T7160] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 150.856996][ T7160] head: 00fff00000000040 ffff88813ffb0500 dead000000000122 0000000000000000
[ 150.868838][ T7160] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[ 150.878955][ T7160] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff
[ 150.889050][ T7160] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 150.898721][ T7160] page dumped because: unmovable page
[ 150.904471][ T7160] page_owner tracks the page as allocated
[ 150.915448][ T7160] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 83869323448, free_ts 83792528565
[ 150.944965][ T7160] post_alloc_hook+0x1c0/0x230
[ 150.950546][ T7160] get_page_from_freelist+0x10a3/0x3a30
[ 150.959620][ T7160] __alloc_frozen_pages_noprof+0x25f/0x2470
[ 150.967041][ T7160] alloc_pages_mpol+0x1fb/0x550
[ 150.973767][ T7160] new_slab+0x24a/0x360
[ 150.980631][ T7160] ___slab_alloc+0xdae/0x1a60
[ 150.986909][ T7160] __slab_alloc.constprop.0+0x63/0x110
[ 150.992641][ T7160] __kvmalloc_node_noprof+0x5aa/0x9c0
[ 150.998592][ T7160] alloc_netdev_mqs+0xd7/0x1550
[ 151.003818][ T7160] __ip_tunnel_create+0x3ad/0x6e0
[ 151.009333][ T7160] ip_tunnel_init_net+0x22f/0x7d0
[ 151.014593][ T7160] ops_init+0x1e2/0x5f0
[ 151.019501][ T7160] setup_net+0x100/0x390
[ 151.023966][ T7160] copy_net_ns+0x2f8/0x690
[ 151.032275][ T7160] create_new_namespaces+0x3ea/0xa90
[ 151.038505][ T7160] unshare_nsproxy_namespaces+0xc0/0x1f0
[ 151.044392][ T7160] page last free pid 5845 tgid 5845 stack trace:
[ 151.051265][ T7160] __free_frozen_pages+0x7df/0x1160
[ 151.058103][ T7160] __put_partials+0x130/0x170
[ 151.062904][ T7160] qlist_free_all+0x4d/0x120
[ 151.069789][ T7160] kasan_quarantine_reduce+0x195/0x1e0
[ 151.076244][ T7160] __kasan_slab_alloc+0x69/0x90
[ 151.081352][ T7160] kmem_cache_alloc_noprof+0x250/0x6e0
[ 151.089718][ T7160] skb_clone+0x190/0x3f0
[ 151.097516][ T7160] hci_cmd_work+0x1c5/0x7a0
[ 151.102263][ T7160] process_one_work+0x9cf/0x1b70
[ 151.108052][ T7165] =======================================================
[ 151.108052][ T7165] WARNING: The mand mount option has been deprecated and
[ 151.108052][ T7165] and is ignored by this kernel. Remove the mand
[ 151.108052][ T7165] option from the mount to silence this warning.
[ 151.108052][ T7165] =======================================================
[ 151.114554][ T7160] worker_thread+0x6c8/0xf10
[ 151.149322][ T7160] kthread+0x3c5/0x780
[ 151.153468][ T7160] ret_from_fork+0x675/0x7d0
[ 151.158208][ T7160] ret_from_fork_asm+0x1a/0x30
[ 151.436499][ T7167] FAULT_INJECTION: forcing a failure.
[ 151.436499][ T7167] name failslab, interval 1, probability 0, space 0, times 0
[ 151.450678][ T7167] CPU: 1 UID: 0 PID: 7167 Comm: syz.0.406 Not tainted syzkaller #0 PREEMPT(full)
[ 151.450710][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 151.450719][ T7167] Call Trace:
[ 151.450725][ T7167]
[ 151.450732][ T7167] dump_stack_lvl+0x16c/0x1f0
[ 151.450754][ T7167] should_fail_ex+0x512/0x640
[ 151.450778][ T7167] ? fs_reclaim_acquire+0xae/0x150
[ 151.450799][ T7167] should_failslab+0xc2/0x120
[ 151.450818][ T7167] kmem_cache_alloc_noprof+0x75/0x6e0
[ 151.450831][ T7167] ? __pfx_map_id_range_down+0x10/0x10
[ 151.450853][ T7167] ? security_inode_alloc+0x3b/0x2b0
[ 151.450877][ T7167] ? security_inode_alloc+0x3b/0x2b0
[ 151.450895][ T7167] security_inode_alloc+0x3b/0x2b0
[ 151.450916][ T7167] inode_init_always_gfp+0xce4/0x1030
[ 151.450934][ T7167] alloc_inode+0x86/0x240
[ 151.450952][ T7167] new_inode+0x22/0x1c0
[ 151.450971][ T7167] debugfs_create_dir+0xdd/0x5f0
[ 151.450987][ T7167] ptp_open+0x334/0x550
[ 151.451011][ T7167] ? __pfx_ptp_open+0x10/0x10
[ 151.451037][ T7167] ? __pfx_ptp_open+0x10/0x10
[ 151.451057][ T7167] posix_clock_open+0x17b/0x290
[ 151.451076][ T7167] ? __pfx_posix_clock_open+0x10/0x10
[ 151.451092][ T7167] chrdev_open+0x234/0x6a0
[ 151.451110][ T7167] ? __pfx_chrdev_open+0x10/0x10
[ 151.451127][ T7167] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 151.451146][ T7167] do_dentry_open+0x982/0x1530
[ 151.451162][ T7167] ? __pfx_chrdev_open+0x10/0x10
[ 151.451182][ T7167] vfs_open+0x82/0x3f0
[ 151.451203][ T7167] path_openat+0x1de4/0x2cb0
[ 151.451232][ T7167] ? __pfx_path_openat+0x10/0x10
[ 151.451258][ T7167] ? __lock_acquire+0xb8a/0x1c90
[ 151.451292][ T7167] do_filp_open+0x20b/0x470
[ 151.451317][ T7167] ? __pfx_do_filp_open+0x10/0x10
[ 151.451367][ T7167] ? alloc_fd+0x471/0x7d0
[ 151.451402][ T7167] do_sys_openat2+0x11b/0x1d0
[ 151.451435][ T7167] ? __pfx_do_sys_openat2+0x10/0x10
[ 151.451481][ T7167] __x64_sys_openat+0x174/0x210
[ 151.451556][ T7167] ? __pfx___x64_sys_openat+0x10/0x10
[ 151.451609][ T7167] do_syscall_64+0xcd/0xfa0
[ 151.451640][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 151.451667][ T7167] RIP: 0033:0x7f107298efc9
[ 151.451688][ T7167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 151.451710][ T7167] RSP: 002b:00007f10738a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 151.451734][ T7167] RAX: ffffffffffffffda RBX: 00007f1072be5fa0 RCX: 00007f107298efc9
[ 151.451751][ T7167] RDX: 0000000000000080 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 151.451767][ T7167] RBP: 00007f1072a11f91 R08: 0000000000000000 R09: 0000000000000000
[ 151.451781][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 151.451796][ T7167] R13: 00007f1072be6038 R14: 00007f1072be5fa0 R15: 00007ffcf3986d48
[ 151.451832][ T7167]
[ 151.493766][ T7167] debugfs: out of free dentries, can not create directory '0xffff888057d10000'
[ 151.943502][ T7180] netlink: 146 bytes leftover after parsing attributes in process `syz.1.411'.
[ 152.157551][ T7190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'.
[ 152.158938][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'.
[ 152.336482][ T7190] bond0: (slave bond_slave_0): Releasing backup interface
[ 152.571841][ T7205] netlink: 342 bytes leftover after parsing attributes in process `syz.1.417'.
[ 152.606011][ T7205] netlink: 342 bytes leftover after parsing attributes in process `syz.1.417'.
[ 152.615608][ T7205] netlink: 342 bytes leftover after parsing attributes in process `syz.1.417'.
[ 152.634495][ T7205] netlink: 342 bytes leftover after parsing attributes in process `syz.1.417'.
[ 152.650051][ T7205] netlink: 218 bytes leftover after parsing attributes in process `syz.1.417'.
[ 152.814280][ T7211] netlink: 'syz.1.418': attribute type 35 has an invalid length.
[ 152.892853][ T7214] netlink: 25 bytes leftover after parsing attributes in process `syz.0.419'.
[ 154.097032][ T7250] FAULT_INJECTION: forcing a failure.
[ 154.097032][ T7250] name failslab, interval 1, probability 0, space 0, times 0
[ 154.112967][ T7250] CPU: 1 UID: 0 PID: 7250 Comm: syz.3.427 Not tainted syzkaller #0 PREEMPT(full)
[ 154.113004][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 154.113018][ T7250] Call Trace:
[ 154.113027][ T7250]
[ 154.113037][ T7250] dump_stack_lvl+0x16c/0x1f0
[ 154.113070][ T7250] should_fail_ex+0x512/0x640
[ 154.113106][ T7250] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 154.113136][ T7250] should_failslab+0xc2/0x120
[ 154.113167][ T7250] kmem_cache_alloc_noprof+0x75/0x6e0
[ 154.113192][ T7250] ? can_rx_register+0x582/0x6f0
[ 154.113225][ T7250] ? can_rx_register+0x582/0x6f0
[ 154.113251][ T7250] can_rx_register+0x582/0x6f0
[ 154.113278][ T7250] ? __pfx_raw_rcv+0x10/0x10
[ 154.113311][ T7250] ? __pfx_can_rx_register+0x10/0x10
[ 154.113348][ T7250] ? rawv6_sendmsg+0x1614/0x4860
[ 154.113393][ T7250] raw_enable_filters+0xe0/0x210
[ 154.113432][ T7250] raw_enable_allfilters+0x8b/0x2b0
[ 154.113460][ T7250] ? __local_bh_enable_ip+0xa4/0x120
[ 154.113492][ T7250] raw_bind+0x48b/0xe40
[ 154.113519][ T7250] ? apparmor_socket_bind+0x105/0x200
[ 154.113557][ T7250] __sys_bind+0x1a7/0x260
[ 154.113593][ T7250] ? __pfx___sys_bind+0x10/0x10
[ 154.113638][ T7250] ? xfd_validate_state+0x61/0x180
[ 154.113671][ T7250] ? __sys_setsockopt+0x140/0x1a0
[ 154.113714][ T7250] __x64_sys_bind+0x72/0xb0
[ 154.113742][ T7250] ? lockdep_hardirqs_on+0x7c/0x110
[ 154.113768][ T7250] do_syscall_64+0xcd/0xfa0
[ 154.113799][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 154.113824][ T7250] RIP: 0033:0x7f8c1358efc9
[ 154.113844][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 154.113867][ T7250] RSP: 002b:00007f8c117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 154.113896][ T7250] RAX: ffffffffffffffda RBX: 00007f8c137e5fa0 RCX: 00007f8c1358efc9
[ 154.113913][ T7250] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003
[ 154.113929][ T7250] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 154.113945][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 154.113960][ T7250] R13: 00007f8c137e6038 R14: 00007f8c137e5fa0 R15: 00007ffd4e81e8f8
[ 154.113997][ T7250]
[ 154.980266][ T7258] zswap: compressor not available
[ 156.735757][ T7311] random: crng reseeded on system resumption
[ 157.059336][ T7315] mkiss: ax0: crc mode is auto.
[ 159.384238][ T7365] vivid-003: ================= START STATUS =================
[ 159.422719][ T7365] vivid-003: Radio HW Seek Mode: Bounded
[ 159.448487][ T7365] vivid-003: Radio Programmable HW Seek: false
[ 159.475330][ T7365] vivid-003: RDS Rx I/O Mode: Block I/O
[ 159.568816][ T7365] vivid-003: Generate RBDS Instead of RDS: false
[ 159.636852][ T7365] vivid-003: RDS Reception: true
[ 159.641870][ T7365] vivid-003: RDS Program Type: 0 inactive
[ 159.647703][ T7365] vivid-003: RDS PS Name: inactive
[ 159.652941][ T7365] vivid-003: RDS Radio Text: inactive
[ 159.658567][ T7365] vivid-003: RDS Traffic Announcement: false inactive
[ 159.665742][ T7365] vivid-003: RDS Traffic Program: false inactive
[ 159.672132][ T7365] vivid-003: RDS Music: false inactive
[ 159.679498][ T7365] vivid-003: ================== END STATUS ==================
[ 160.022471][ T7373] FAULT_INJECTION: forcing a failure.
[ 160.022471][ T7373] name failslab, interval 1, probability 0, space 0, times 0
[ 160.041570][ T7373] CPU: 0 UID: 0 PID: 7373 Comm: syz.3.463 Not tainted syzkaller #0 PREEMPT(full)
[ 160.041604][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 160.041619][ T7373] Call Trace:
[ 160.041627][ T7373]
[ 160.041637][ T7373] dump_stack_lvl+0x16c/0x1f0
[ 160.041669][ T7373] should_fail_ex+0x512/0x640
[ 160.041705][ T7373] ? __kmalloc_noprof+0xca/0x880
[ 160.041742][ T7373] should_failslab+0xc2/0x120
[ 160.041775][ T7373] __kmalloc_noprof+0xdd/0x880
[ 160.041820][ T7373] ? realloc_user_queue+0x288/0x320
[ 160.041862][ T7373] ? realloc_user_queue+0x288/0x320
[ 160.041893][ T7373] realloc_user_queue+0x288/0x320
[ 160.041928][ T7373] ? __pfx_snd_timer_user_open+0x10/0x10
[ 160.041960][ T7373] snd_timer_user_open+0xfc/0x180
[ 160.041993][ T7373] snd_open+0x22d/0x4c0
[ 160.042022][ T7373] ? __pfx_snd_open+0x10/0x10
[ 160.042048][ T7373] chrdev_open+0x234/0x6a0
[ 160.042075][ T7373] ? __pfx_apparmor_file_open+0x10/0x10
[ 160.042109][ T7373] ? __pfx_chrdev_open+0x10/0x10
[ 160.042141][ T7373] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 160.042175][ T7373] do_dentry_open+0x982/0x1530
[ 160.042203][ T7373] ? __pfx_chrdev_open+0x10/0x10
[ 160.042238][ T7373] vfs_open+0x82/0x3f0
[ 160.042276][ T7373] path_openat+0x1de4/0x2cb0
[ 160.042312][ T7373] ? __pfx_path_openat+0x10/0x10
[ 160.042341][ T7373] ? __lock_acquire+0xb8a/0x1c90
[ 160.042378][ T7373] do_filp_open+0x20b/0x470
[ 160.042405][ T7373] ? __pfx_do_filp_open+0x10/0x10
[ 160.042457][ T7373] ? alloc_fd+0x471/0x7d0
[ 160.042492][ T7373] do_sys_openat2+0x11b/0x1d0
[ 160.042527][ T7373] ? __pfx_do_sys_openat2+0x10/0x10
[ 160.042574][ T7373] __x64_sys_openat+0x174/0x210
[ 160.042610][ T7373] ? __pfx___x64_sys_openat+0x10/0x10
[ 160.042659][ T7373] do_syscall_64+0xcd/0xfa0
[ 160.042690][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 160.042717][ T7373] RIP: 0033:0x7f8c1358efc9
[ 160.042737][ T7373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 160.042760][ T7373] RSP: 002b:00007f8c117d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 160.042785][ T7373] RAX: ffffffffffffffda RBX: 00007f8c137e6090 RCX: 00007f8c1358efc9
[ 160.042802][ T7373] RDX: 0000000000101802 RSI: 0000200000000200 RDI: ffffffffffffff9c
[ 160.042862][ T7373] RBP: 00007f8c13611f91 R08: 0000000000000000 R09: 0000000000000000
[ 160.042877][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 160.042892][ T7373] R13: 00007f8c137e6128 R14: 00007f8c137e6090 R15: 00007ffd4e81e8f8
[ 160.042929][ T7373]
[ 163.909377][ T7435] sg_read: process 347 (syz.1.490) changed security contexts after opening file descriptor, this is not allowed.
[ 164.537690][ T7450] FAULT_INJECTION: forcing a failure.
[ 164.537690][ T7450] name failslab, interval 1, probability 0, space 0, times 0
[ 164.595359][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.1.495 Not tainted syzkaller #0 PREEMPT(full)
[ 164.595394][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 164.595409][ T7450] Call Trace:
[ 164.595418][ T7450]
[ 164.595436][ T7450] dump_stack_lvl+0x16c/0x1f0
[ 164.595470][ T7450] should_fail_ex+0x512/0x640
[ 164.595506][ T7450] ? __kmalloc_noprof+0xca/0x880
[ 164.595545][ T7450] should_failslab+0xc2/0x120
[ 164.595577][ T7450] __kmalloc_noprof+0xdd/0x880
[ 164.595613][ T7450] ? process_preds+0x46c/0x1c50
[ 164.595650][ T7450] ? process_preds+0x46c/0x1c50
[ 164.595678][ T7450] process_preds+0x46c/0x1c50
[ 164.595715][ T7450] ? create_filter_start.constprop.0+0x56/0x300
[ 164.595752][ T7450] create_filter+0x140/0x210
[ 164.595786][ T7450] ? __pfx_create_filter+0x10/0x10
[ 164.595821][ T7450] ? __pfx___mutex_lock+0x10/0x10
[ 164.595852][ T7450] ? find_held_lock+0x2b/0x80
[ 164.595881][ T7450] apply_event_filter+0x220/0x500
[ 164.595916][ T7450] ? __pfx_apply_event_filter+0x10/0x10
[ 164.595958][ T7450] event_filter_write+0x16d/0x290
[ 164.595984][ T7450] ? __pfx_event_filter_write+0x10/0x10
[ 164.596008][ T7450] vfs_write+0x2a0/0x11d0
[ 164.596041][ T7450] ? __pfx___mutex_lock+0x10/0x10
[ 164.596068][ T7450] ? __pfx_vfs_write+0x10/0x10
[ 164.596102][ T7450] ? __fget_files+0x20e/0x3c0
[ 164.596138][ T7450] ksys_write+0x12a/0x250
[ 164.596164][ T7450] ? __pfx_ksys_write+0x10/0x10
[ 164.596202][ T7450] do_syscall_64+0xcd/0xfa0
[ 164.596232][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 164.596256][ T7450] RIP: 0033:0x7f364b18efc9
[ 164.596276][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 164.596299][ T7450] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 164.596323][ T7450] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 164.596341][ T7450] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003
[ 164.596355][ T7450] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 164.596369][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 164.596384][ T7450] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 164.596420][ T7450]
[ 166.027455][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.502'.
[ 166.059705][ T7471] FAULT_INJECTION: forcing a failure.
[ 166.059705][ T7471] name failslab, interval 1, probability 0, space 0, times 0
[ 166.095548][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.1.501 Not tainted syzkaller #0 PREEMPT(full)
[ 166.095582][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 166.095596][ T7471] Call Trace:
[ 166.095604][ T7471]
[ 166.095613][ T7471] dump_stack_lvl+0x16c/0x1f0
[ 166.095647][ T7471] should_fail_ex+0x512/0x640
[ 166.095681][ T7471] ? __kmalloc_cache_noprof+0x5f/0x780
[ 166.095723][ T7471] should_failslab+0xc2/0x120
[ 166.095755][ T7471] __kmalloc_cache_noprof+0x72/0x780
[ 166.095788][ T7471] ? fuse_dev_alloc_install+0x2b/0x40
[ 166.095816][ T7471] ? cuse_channel_open+0x1de/0x7f0
[ 166.095855][ T7471] ? cuse_channel_open+0x1de/0x7f0
[ 166.095883][ T7471] cuse_channel_open+0x1de/0x7f0
[ 166.095912][ T7471] ? __pfx_cuse_channel_open+0x10/0x10
[ 166.095941][ T7471] misc_open+0x26d/0x450
[ 166.095974][ T7471] ? __pfx_misc_open+0x10/0x10
[ 166.096007][ T7471] chrdev_open+0x234/0x6a0
[ 166.096033][ T7471] ? __pfx_apparmor_file_open+0x10/0x10
[ 166.096067][ T7471] ? __pfx_chrdev_open+0x10/0x10
[ 166.096098][ T7471] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[ 166.096133][ T7471] do_dentry_open+0x982/0x1530
[ 166.096161][ T7471] ? __pfx_chrdev_open+0x10/0x10
[ 166.096195][ T7471] vfs_open+0x82/0x3f0
[ 166.096232][ T7471] path_openat+0x1de4/0x2cb0
[ 166.096272][ T7471] ? __pfx_path_openat+0x10/0x10
[ 166.096308][ T7471] ? __lock_acquire+0xb8a/0x1c90
[ 166.096348][ T7471] do_filp_open+0x20b/0x470
[ 166.096376][ T7471] ? __pfx_do_filp_open+0x10/0x10
[ 166.096430][ T7471] ? alloc_fd+0x471/0x7d0
[ 166.096465][ T7471] do_sys_openat2+0x11b/0x1d0
[ 166.096499][ T7471] ? __pfx_do_sys_openat2+0x10/0x10
[ 166.096535][ T7471] ? __sys_sendmsg+0x18c/0x220
[ 166.096568][ T7471] __x64_sys_openat+0x174/0x210
[ 166.096601][ T7471] ? __pfx___x64_sys_openat+0x10/0x10
[ 166.096653][ T7471] do_syscall_64+0xcd/0xfa0
[ 166.096683][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 166.096709][ T7471] RIP: 0033:0x7f364b18efc9
[ 166.096729][ T7471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 166.096753][ T7471] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 166.096777][ T7471] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 166.096794][ T7471] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c
[ 166.096809][ T7471] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 166.096824][ T7471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 166.096838][ T7471] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 166.096875][ T7471]
[ 167.035735][ T7478] FAULT_INJECTION: forcing a failure.
[ 167.035735][ T7478] name failslab, interval 1, probability 0, space 0, times 0
[ 167.072457][ T7478] CPU: 1 UID: 0 PID: 7478 Comm: syz.1.504 Not tainted syzkaller #0 PREEMPT(full)
[ 167.072502][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 167.072517][ T7478] Call Trace:
[ 167.072526][ T7478]
[ 167.072537][ T7478] dump_stack_lvl+0x16c/0x1f0
[ 167.072570][ T7478] should_fail_ex+0x512/0x640
[ 167.072605][ T7478] ? kmem_cache_alloc_noprof+0x62/0x6e0
[ 167.072636][ T7478] should_failslab+0xc2/0x120
[ 167.072668][ T7478] kmem_cache_alloc_noprof+0x75/0x6e0
[ 167.072693][ T7478] ? __kernfs_new_node+0xd2/0x8e0
[ 167.072730][ T7478] ? __kernfs_new_node+0xd2/0x8e0
[ 167.072758][ T7478] __kernfs_new_node+0xd2/0x8e0
[ 167.072793][ T7478] ? __pfx___kernfs_new_node+0x10/0x10
[ 167.072838][ T7478] ? find_held_lock+0x2b/0x80
[ 167.072865][ T7478] ? kernfs_root+0xee/0x2a0
[ 167.072903][ T7478] kernfs_new_node+0x13c/0x1e0
[ 167.072949][ T7478] __kernfs_create_file+0x53/0x350
[ 167.072979][ T7478] sysfs_add_file_mode_ns+0x207/0x3c0
[ 167.073019][ T7478] internal_create_group+0x578/0xf30
[ 167.073060][ T7478] ? __pfx_internal_create_group+0x10/0x10
[ 167.073098][ T7478] ? kernfs_create_link+0x1bd/0x240
[ 167.073127][ T7478] internal_create_groups+0x9d/0x150
[ 167.073162][ T7478] device_add+0x731/0x1aa0
[ 167.073203][ T7478] ? __pfx_device_add+0x10/0x10
[ 167.073234][ T7478] ? __pfx___mutex_lock+0x10/0x10
[ 167.073277][ T7478] input_register_device+0x7e8/0x1180
[ 167.073313][ T7478] uinput_ioctl_handler.isra.0+0x1357/0x1df0
[ 167.073349][ T7478] ? __pfx_do_vfs_ioctl+0x10/0x10
[ 167.073385][ T7478] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[ 167.073431][ T7478] ? find_held_lock+0x2b/0x80
[ 167.073487][ T7478] ? __pfx_uinput_ioctl+0x10/0x10
[ 167.073522][ T7478] __x64_sys_ioctl+0x18e/0x210
[ 167.073561][ T7478] do_syscall_64+0xcd/0xfa0
[ 167.073592][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 167.073618][ T7478] RIP: 0033:0x7f364b18efc9
[ 167.073638][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 167.073662][ T7478] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 167.073686][ T7478] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 167.073703][ T7478] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006
[ 167.073717][ T7478] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 167.073732][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 167.073747][ T7478] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 167.073783][ T7478]
[ 177.985464][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 177.995616][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 178.003819][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 178.012900][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 178.022018][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 178.239147][ T979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.401366][ T979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.737631][ T979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 178.927505][ T979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 179.005760][ T7512] FAULT_INJECTION: forcing a failure.
[ 179.005760][ T7512] name failslab, interval 1, probability 0, space 0, times 0
[ 179.035019][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: syz.1.512 Not tainted syzkaller #0 PREEMPT(full)
[ 179.035057][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 179.035072][ T7512] Call Trace:
[ 179.035082][ T7512]
[ 179.035093][ T7512] dump_stack_lvl+0x16c/0x1f0
[ 179.035128][ T7512] should_fail_ex+0x512/0x640
[ 179.035165][ T7512] ? kmem_cache_alloc_node_noprof+0x65/0x770
[ 179.035196][ T7512] should_failslab+0xc2/0x120
[ 179.035229][ T7512] kmem_cache_alloc_node_noprof+0x78/0x770
[ 179.035256][ T7512] ? __alloc_skb+0x2b2/0x380
[ 179.035299][ T7512] ? __alloc_skb+0x2b2/0x380
[ 179.035332][ T7512] __alloc_skb+0x2b2/0x380
[ 179.035368][ T7512] ? __pfx___alloc_skb+0x10/0x10
[ 179.035411][ T7512] ? find_held_lock+0x2b/0x80
[ 179.035441][ T7512] __ip6_append_data+0x2b74/0x4740
[ 179.035500][ T7512] ? __pfx_raw6_getfrag+0x10/0x10
[ 179.035547][ T7512] ? __pfx___ip6_append_data+0x10/0x10
[ 179.035582][ T7512] ? __pfx_ip6_mtu+0x10/0x10
[ 179.035609][ T7512] ? ip6_setup_cork+0xc51/0x1530
[ 179.035646][ T7512] ip6_append_data+0x1ba/0x4c0
[ 179.035681][ T7512] ? __pfx_raw6_getfrag+0x10/0x10
[ 179.035716][ T7512] rawv6_sendmsg+0x163e/0x4860
[ 179.035747][ T7512] ? aa_label_sk_perm+0x195/0x600
[ 179.035779][ T7512] ? aa_profile_af_perm+0x2f0/0x3a0
[ 179.035809][ T7512] ? __pfx_rawv6_sendmsg+0x10/0x10
[ 179.035899][ T7512] ? __pfx_rawv6_sendmsg+0x10/0x10
[ 179.035942][ T7512] ? inet_sendmsg+0x11c/0x140
[ 179.035976][ T7512] inet_sendmsg+0x11c/0x140
[ 179.036012][ T7512] sock_write_iter+0x509/0x610
[ 179.036045][ T7512] ? __pfx_sock_write_iter+0x10/0x10
[ 179.036090][ T7512] ? __futex_wait+0x24b/0x2f0
[ 179.036128][ T7512] ? copy_iovec_from_user+0x131/0x170
[ 179.036168][ T7512] do_iter_readv_writev+0x662/0x9e0
[ 179.036197][ T7512] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 179.036227][ T7512] ? bpf_lsm_file_permission+0x9/0x10
[ 179.036260][ T7512] ? security_file_permission+0x71/0x210
[ 179.036289][ T7512] ? rw_verify_area+0xcf/0x6c0
[ 179.036317][ T7512] vfs_writev+0x35f/0xde0
[ 179.036353][ T7512] ? __pfx_vfs_writev+0x10/0x10
[ 179.036406][ T7512] ? __fget_files+0x20e/0x3c0
[ 179.036442][ T7512] ? do_writev+0x28c/0x340
[ 179.036470][ T7512] do_writev+0x28c/0x340
[ 179.036496][ T7512] ? __pfx_do_writev+0x10/0x10
[ 179.036531][ T7512] do_syscall_64+0xcd/0xfa0
[ 179.036563][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 179.036590][ T7512] RIP: 0033:0x7f364b18efc9
[ 179.036613][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 179.036636][ T7512] RSP: 002b:00007f364c0f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 179.036661][ T7512] RAX: ffffffffffffffda RBX: 00007f364b3e5fa0 RCX: 00007f364b18efc9
[ 179.036679][ T7512] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003
[ 179.036695][ T7512] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 179.036711][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 179.036726][ T7512] R13: 00007f364b3e6038 R14: 00007f364b3e5fa0 R15: 00007fffe944ca68
[ 179.036764][ T7512]
[ 179.076449][ T7501] chnl_net:caif_netlink_parms(): no params data found
[ 179.611392][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 179.622147][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 179.631896][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 179.641555][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 179.649895][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 179.757616][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state
[ 179.770404][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state
[ 179.777983][ T7501] bridge_slave_0: entered allmulticast mode
[ 179.786469][ T7501] bridge_slave_0: entered promiscuous mode
[ 179.796812][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state
[ 179.806006][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state
[ 179.813254][ T7501] bridge_slave_1: entered allmulticast mode
[ 179.820705][ T7501] bridge_slave_1: entered promiscuous mode
[ 179.880931][ T7501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 179.921597][ T7501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 179.958078][ T7501] team0: Port device team_slave_0 added
[ 179.978321][ T979] bridge_slave_1: left allmulticast mode
[ 179.984204][ T979] bridge_slave_1: left promiscuous mode
[ 179.991630][ T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 180.005212][ T979] bridge_slave_0: left allmulticast mode
[ 180.012195][ T979] bridge_slave_0: left promiscuous mode
[ 180.018656][ T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 180.056296][ T5845] Bluetooth: hci2: command tx timeout
[ 180.398286][ T7526] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 180.890639][ T979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 180.949171][ T979] bond0 (unregistering): Released all slaves
[ 181.001056][ T7501] team0: Port device team_slave_1 added
[ 181.201714][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'.
[ 181.214787][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 181.222830][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 181.250205][ T7501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 181.301929][ T7501] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 181.309074][ T7501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 181.335593][ T7501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 181.603228][ T7548] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7
[ 181.624673][ T7501] hsr_slave_0: entered promiscuous mode
[ 181.640578][ T7501] hsr_slave_1: entered promiscuous mode
[ 181.662659][ T7501] debugfs: 'hsr0' already exists in 'hsr'
[ 181.676496][ T7501] Cannot create hsr debugfs directory
[ 181.695736][ T979] hsr_slave_0: left promiscuous mode
[ 181.706495][ T979] hsr_slave_1: left promiscuous mode
[ 181.712958][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 181.720668][ T979] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 181.730361][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 181.738645][ T5845] Bluetooth: hci1: command tx timeout
[ 181.741882][ T979] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 181.771353][ T979] veth1_macvtap: left promiscuous mode
[ 181.777508][ T979] veth0_macvtap: left promiscuous mode
[ 181.783345][ T979] veth1_vlan: left promiscuous mode
[ 181.789144][ T979] veth0_vlan: left promiscuous mode
[ 182.136491][ T5845] Bluetooth: hci2: command tx timeout
[ 182.211638][ T979] team0 (unregistering): Port device team_slave_1 removed
[ 182.247771][ T979] team0 (unregistering): Port device team_slave_0 removed
[ 182.449379][ T7556] netlink: 'syz.1.528': attribute type 27 has an invalid length.
[ 182.457371][ T7556] netlink: 146 bytes leftover after parsing attributes in process `syz.1.528'.
[ 182.618154][ T7553] netlink: 'syz.2.527': attribute type 27 has an invalid length.
[ 182.626365][ T7553] netlink: 'syz.2.527': attribute type 28 has an invalid length.
[ 182.634200][ T7553] netlink: 'syz.2.527': attribute type 29 has an invalid length.
[ 182.645090][ T7553] netlink: 'syz.2.527': attribute type 30 has an invalid length.
[ 182.666868][ T7553] netlink: 'syz.2.527': attribute type 31 has an invalid length.
[ 182.686782][ T7553] netlink: 'syz.2.527': attribute type 32 has an invalid length.
[ 182.704537][ T7553] netlink: 'syz.2.527': attribute type 33 has an invalid length.
[ 182.712593][ T7553] netlink: 'syz.2.527': attribute type 35 has an invalid length.
[ 182.722130][ T7553] netlink: 'syz.2.527': attribute type 37 has an invalid length.
[ 182.730088][ T7553] netlink: 18 bytes leftover after parsing attributes in process `syz.2.527'.
[ 182.954448][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[ 182.970180][ T7565] netlink: 25 bytes leftover after parsing attributes in process `syz.1.529'.
[ 183.009945][ T7516] chnl_net:caif_netlink_parms(): no params data found
[ 183.039212][ T30] audit: type=1800 audit(8277292110.960:4): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.530" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0
[ 183.280337][ T7571] sp0: Synchronizing with TNC
[ 183.541875][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state
[ 183.572770][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state
[ 183.581335][ T7516] bridge_slave_0: entered allmulticast mode
[ 183.596900][ T7516] bridge_slave_0: entered promiscuous mode
[ 183.626241][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state
[ 183.665063][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state
[ 183.672353][ T7516] bridge_slave_1: entered allmulticast mode
[ 183.708881][ T7516] bridge_slave_1: entered promiscuous mode
[ 183.808147][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 183.819719][ T5845] Bluetooth: hci1: command tx timeout
[ 183.848227][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 183.948365][ T979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 184.054185][ T7516] team0: Port device team_slave_0 added
[ 184.076778][ T7501] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 184.109906][ T7501] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 184.190011][ T979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 184.207760][ T7516] team0: Port device team_slave_1 added
[ 184.215090][ T5845] Bluetooth: hci2: command tx timeout
[ 184.244229][ T7501] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 184.272212][ T7501] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 184.325636][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 184.333695][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 184.360267][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 184.383662][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 184.390930][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 184.419067][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 184.462344][ T979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 184.564741][ T979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 184.584474][ T7516] hsr_slave_0: entered promiscuous mode
[ 184.591209][ T7516] hsr_slave_1: entered promiscuous mode
[ 184.597481][ T7516] debugfs: 'hsr0' already exists in 'hsr'
[ 184.603218][ T7516] Cannot create hsr debugfs directory
[ 185.267673][ T979] bridge_slave_1: left allmulticast mode
[ 185.273363][ T979] bridge_slave_1: left promiscuous mode
[ 185.288867][ T979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 185.311063][ T979] bridge_slave_0: left allmulticast mode
[ 185.326986][ T979] bridge_slave_0: left promiscuous mode
[ 185.334212][ T979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 185.381234][ T7632] netlink: 342 bytes leftover after parsing attributes in process `syz.1.542'.
[ 185.419949][ T7632] netlink: 274 bytes leftover after parsing attributes in process `syz.1.542'.
[ 185.771024][ T979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 185.781959][ T979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 185.792085][ T979] bond0 (unregistering): Released all slaves
[ 185.809344][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0
[ 185.896509][ T5845] Bluetooth: hci1: command tx timeout
[ 186.046705][ T7501] 8021q: adding VLAN 0 to HW filter on device team0
[ 186.201650][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 186.208854][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 186.263189][ T7516] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 186.295211][ T5845] Bluetooth: hci2: command tx timeout
[ 186.346049][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 186.353227][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 186.382406][ T7516] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 186.488798][ T7516] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 186.509671][ T7516] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 186.694186][ T979] hsr_slave_0: left promiscuous mode
[ 186.723462][ T979] hsr_slave_1: left promiscuous mode
[ 186.729851][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 186.756400][ T979] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 186.796613][ T979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 186.804105][ T979] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 186.876821][ T979] veth1_macvtap: left promiscuous mode
[ 186.883677][ T979] veth0_macvtap: left promiscuous mode
[ 186.895131][ T979] veth1_vlan: left promiscuous mode
[ 186.905197][ T979] veth0_vlan: left promiscuous mode
[ 187.270546][ T5845] Bluetooth: hci3: unexpected event 0x09 length: 435 > 3
[ 187.608538][ T7695] netlink: 330 bytes leftover after parsing attributes in process `syz.1.557'.
[ 187.871856][ T979] team0 (unregistering): Port device team_slave_1 removed
[ 187.909541][ T979] team0 (unregistering): Port device team_slave_0 removed
[ 187.985331][ T5845] Bluetooth: hci1: command tx timeout
[ 188.533706][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0
[ 188.604260][ T7516] 8021q: adding VLAN 0 to HW filter on device team0
[ 188.633913][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 188.641136][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 188.694776][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 188.702004][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 189.243229][ T7501] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 189.493356][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 190.206529][ T7746] sp0: Synchronizing with TNC
[ 190.382410][ T7501] veth0_vlan: entered promiscuous mode
[ 190.403837][ T7501] veth1_vlan: entered promiscuous mode
[ 190.545730][ T7516] veth0_vlan: entered promiscuous mode
[ 190.571407][ T7516] veth1_vlan: entered promiscuous mode
[ 190.652236][ T7501] veth0_macvtap: entered promiscuous mode
[ 190.720893][ T7501] veth1_macvtap: entered promiscuous mode
[ 190.803571][ T7516] veth0_macvtap: entered promiscuous mode
[ 190.837627][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 190.869597][ T7516] veth1_macvtap: entered promiscuous mode
[ 190.898321][ T7501] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 190.926676][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 190.955217][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 190.988661][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.038848][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.189642][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 191.336208][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 191.413791][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.437630][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.482733][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.509801][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 191.643326][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 191.675325][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 191.753961][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 191.777829][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 191.786172][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'.
[ 191.786734][ T7778] netlink: 5 bytes leftover after parsing attributes in process `syz.1.568'.
[ 191.899203][ T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 191.925556][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 191.977142][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 192.030695][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 193.178511][ T7813] sp0: Synchronizing with TNC
[ 193.544656][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'.
[ 193.745337][ T7832] netlink: 98 bytes leftover after parsing attributes in process `syz.5.580'.
[ 193.778707][ T7832] netlink: 50 bytes leftover after parsing attributes in process `syz.5.580'.
[ 194.321282][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.330364][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[ 195.475253][ T7879] netlink: 338 bytes leftover after parsing attributes in process `syz.1.592'.
[ 195.738149][ T7891] FAULT_INJECTION: forcing a failure.
[ 195.738149][ T7891] name failslab, interval 1, probability 0, space 0, times 0
[ 195.775252][ T7891] CPU: 1 UID: 0 PID: 7891 Comm: syz.5.595 Not tainted syzkaller #0 PREEMPT(full)
[ 195.775291][ T7891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 195.775307][ T7891] Call Trace:
[ 195.775316][ T7891]
[ 195.775327][ T7891] dump_stack_lvl+0x16c/0x1f0
[ 195.775362][ T7891] should_fail_ex+0x512/0x640
[ 195.775399][ T7891] ? __kmalloc_noprof+0xca/0x880
[ 195.775439][ T7891] should_failslab+0xc2/0x120
[ 195.775472][ T7891] __kmalloc_noprof+0xdd/0x880
[ 195.775509][ T7891] ? process_vm_rw_core.constprop.0+0x1d8/0x970
[ 195.775545][ T7891] ? process_vm_rw_core.constprop.0+0x1d8/0x970
[ 195.775572][ T7891] process_vm_rw_core.constprop.0+0x1d8/0x970
[ 195.775618][ T7891] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10
[ 195.775670][ T7891] ? iovec_from_user+0xbb/0x140
[ 195.775697][ T7891] process_vm_rw+0x216/0x2c0
[ 195.775727][ T7891] ? __pfx_process_vm_rw+0x10/0x10
[ 195.775764][ T7891] ? do_writev+0x218/0x340
[ 195.775806][ T7891] ? cap_task_prctl+0x2af/0xa80
[ 195.775849][ T7891] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230
[ 195.775896][ T7891] __x64_sys_process_vm_readv+0xe2/0x1c0
[ 195.775925][ T7891] ? syscall_trace_enter+0x5e/0x240
[ 195.775964][ T7891] do_syscall_64+0xcd/0xfa0
[ 195.775994][ T7891] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 195.776018][ T7891] RIP: 0033:0x7f53de98efc9
[ 195.776040][ T7891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 195.776064][ T7891] RSP: 002b:00007f53df802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136
[ 195.776096][ T7891] RAX: ffffffffffffffda RBX: 00007f53debe5fa0 RCX: 00007f53de98efc9
[ 195.776113][ T7891] RDX: 0000040000000001 RSI: 0000200000000080 RDI: 0000000000000014
[ 195.776130][ T7891] RBP: 00007f53dea11f91 R08: 000000000000000a R09: 0000000000000000
[ 195.776147][ T7891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 195.776161][ T7891] R13: 00007f53debe6038 R14: 00007f53debe5fa0 R15: 00007ffe097da5c8
[ 195.776192][ T7891]
[ 196.291590][ T7897] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 197.268804][ T7923] netlink: 138 bytes leftover after parsing attributes in process `syz.4.603'.
[ 198.995223][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.612'.
[ 199.843720][ T7980] netlink: 226 bytes leftover after parsing attributes in process `syz.4.618'.
[ 199.864188][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'.
[ 199.883891][ T7980] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[ 202.869522][ T8010] zswap: compressor not available
[ 204.672790][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'.
[ 205.164178][ T8061] validate_nla: 1 callbacks suppressed
[ 205.164198][ T8061] netlink: 'syz.4.639': attribute type 1 has an invalid length.
[ 205.887453][ T8080] __vm_enough_memory: pid: 8080, comm: syz.1.642, bytes: 4398046511104 not enough memory for the allocation
[ 206.067604][ T8083] Invalid ELF header magic: != ELF
[ 206.618740][ T5152] Bluetooth: hci3: command 0x0406 tx timeout
[ 206.625730][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[ 207.763339][ T8114] 0x000200000001-0xa29656a63616329 : ""
[ 207.774011][ T8114] mtd: partition "" is out of reach -- disabled
[ 207.822674][ T8114] ftl_cs: FTL header not found.
[ 209.934575][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'.
[ 209.956863][ T8151] netlink: 'syz.1.659': attribute type 1 has an invalid length.
[ 209.964576][ T8151] netlink: 13 bytes leftover after parsing attributes in process `syz.1.659'.
[ 210.015788][ T8149] netlink: 342 bytes leftover after parsing attributes in process `syz.5.660'.
[ 210.119887][ T8147] ima: policy update failed
[ 210.214781][ T30] audit: type=1802 audit(8277292138.130:5): pid=8147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.660" res=0 errno=0
[ 219.220287][ T52] Bluetooth: hci0: Received unexpected HCI Event 0x00
[ 219.230635][ T52] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 222.871283][ T8405] zswap: compressor not available
[ 225.290839][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.727'.
[ 225.316237][ T8450] ipvlan0: entered promiscuous mode
[ 225.331666][ T8450] ipvlan0: entered allmulticast mode
[ 225.337100][ T8450] veth0_vlan: entered allmulticast mode
[ 226.379681][ T8463] futex_wake_op: syz.2.721 tries to shift op by -2048; fix this program
[ 226.465533][ T8463] futex_wake_op: syz.2.721 tries to shift op by -2048; fix this program
[ 227.708274][ T8482] zswap: compressor not available
[ 229.331963][ T8512] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[ 230.429519][ T8524] FAULT_INJECTION: forcing a failure.
[ 230.429519][ T8524] name failslab, interval 1, probability 0, space 0, times 0
[ 230.466612][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.740 Not tainted syzkaller #0 PREEMPT(full)
[ 230.466650][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 230.466666][ T8524] Call Trace:
[ 230.466675][ T8524]
[ 230.466686][ T8524] dump_stack_lvl+0x16c/0x1f0
[ 230.466719][ T8524] should_fail_ex+0x512/0x640
[ 230.466752][ T8524] ? __kmalloc_cache_noprof+0x5f/0x780
[ 230.466793][ T8524] should_failslab+0xc2/0x120
[ 230.466825][ T8524] __kmalloc_cache_noprof+0x72/0x780
[ 230.466859][ T8524] ? ptrace_may_access+0x35/0x50
[ 230.466889][ T8524] ? sched_core_share_pid+0x3c1/0x9d0
[ 230.466917][ T8524] ? do_raw_spin_unlock+0x172/0x230
[ 230.466957][ T8524] ? sched_core_share_pid+0x3c1/0x9d0
[ 230.466984][ T8524] sched_core_share_pid+0x3c1/0x9d0
[ 230.467010][ T8524] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 230.467051][ T8524] ? __pfx_sched_core_share_pid+0x10/0x10
[ 230.467082][ T8524] ? static_key_count+0x5a/0x70
[ 230.467115][ T8524] ? security_task_prctl+0x11c/0x160
[ 230.467149][ T8524] __do_sys_prctl+0x317/0x2250
[ 230.467198][ T8524] ? __pfx___do_sys_prctl+0x10/0x10
[ 230.467246][ T8524] do_syscall_64+0xcd/0xfa0
[ 230.467276][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 230.467302][ T8524] RIP: 0033:0x7f364b18efc9
[ 230.467323][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 230.467346][ T8524] RSP: 002b:00007f364c0d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[ 230.467372][ T8524] RAX: ffffffffffffffda RBX: 00007f364b3e6090 RCX: 00007f364b18efc9
[ 230.467390][ T8524] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e
[ 230.467405][ T8524] RBP: 00007f364b211f91 R08: 0000000000000000 R09: 0000000000000000
[ 230.467420][ T8524] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 230.467435][ T8524] R13: 00007f364b3e6128 R14: 00007f364b3e6090 R15: 00007fffe944ca68
[ 230.467471][ T8524]
[ 231.164031][ T8523] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 231.175403][ T8523] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 231.198024][ T8523] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 231.224576][ T8523] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 231.270166][ T8523] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 231.295171][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 231.360153][ T8523] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 231.401778][ T8523] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 231.438772][ T8523] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 231.460920][ T8523] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 231.579506][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.744'.
[ 231.635345][ T8544] ipvlan0: entered promiscuous mode
[ 231.653901][ T8544] ipvlan0: entered allmulticast mode
[ 231.670741][ T8544] veth0_vlan: entered allmulticast mode
[ 232.545106][ T52] Bluetooth: hci0: command 0x0406 tx timeout
[ 233.255730][ T52] Bluetooth: hci3: command 0x0406 tx timeout
[ 233.335219][ T52] Bluetooth: hci2: command 0x0c1a tx timeout
[ 233.435039][ T52] Bluetooth: hci1: command 0x0c1a tx timeout
[ 234.615202][ T52] Bluetooth: hci0: command 0x0406 tx timeout
[ 235.335093][ T52] Bluetooth: hci3: command 0x0406 tx timeout
[ 235.354456][ T8607] ==================================================================
[ 235.354473][ T8607] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60
[ 235.354508][ T8607] Write of size 8 at addr ffffc90003b69240 by task syz.5.767/8607
[ 235.354528][ T8607]
[ 235.354539][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.5.767 Not tainted syzkaller #0 PREEMPT(full)
[ 235.354569][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 235.354585][ T8607] Call Trace:
[ 235.354594][ T8607]
[ 235.354604][ T8607] dump_stack_lvl+0x116/0x1f0
[ 235.354633][ T8607] print_report+0xcd/0x630
[ 235.354666][ T8607] ? __virt_addr_valid+0x81/0x610
[ 235.354699][ T8607] ? sys_imageblit+0x1a6f/0x1e60
[ 235.354733][ T8607] kasan_report+0xe0/0x110
[ 235.354765][ T8607] ? sys_imageblit+0x1a6f/0x1e60
[ 235.354798][ T8607] sys_imageblit+0x1a6f/0x1e60
[ 235.354829][ T8607] ? __pfx_sys_imageblit+0x10/0x10
[ 235.354855][ T8607] ? __pfx__prb_read_valid+0x10/0x10
[ 235.354890][ T8607] ? find_held_lock+0x2b/0x80
[ 235.354914][ T8607] ? up+0xcb/0x140
[ 235.354940][ T8607] ? do_raw_spin_unlock+0x172/0x230
[ 235.354977][ T8607] ? prb_read_valid+0x78/0xa0
[ 235.355009][ T8607] drm_fbdev_shmem_defio_imageblit+0x20/0x130
[ 235.355036][ T8607] soft_cursor+0x524/0xa10
[ 235.355075][ T8607] ? fb_get_color_depth+0x120/0x250
[ 235.355109][ T8607] bit_cursor+0xe8c/0x17e0
[ 235.355146][ T8607] ? __pfx_bit_cursor+0x10/0x10
[ 235.355185][ T8607] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 235.355222][ T8607] ? get_color+0x1da/0x450
[ 235.355252][ T8607] ? __pfx_bit_cursor+0x10/0x10
[ 235.355286][ T8607] fbcon_cursor+0x40c/0x5a0
[ 235.355316][ T8607] ? add_softcursor+0x41/0x290
[ 235.355354][ T8607] set_cursor+0x1db/0x250
[ 235.355388][ T8607] con_write+0x89/0xb0
[ 235.355413][ T8607] n_tty_write+0x41e/0x11e0
[ 235.355449][ T8607] ? __pfx_n_tty_write+0x10/0x10
[ 235.355477][ T8607] ? trace_kmalloc+0x2b/0xd0
[ 235.355507][ T8607] ? __pfx_woken_wake_function+0x10/0x10
[ 235.355542][ T8607] ? kfree+0x252/0x6d0
[ 235.355563][ T8607] ? __pfx_n_tty_write+0x10/0x10
[ 235.355595][ T8607] file_tty_write.constprop.0+0x503/0x9b0
[ 235.355628][ T8607] redirected_tty_write+0xd4/0x150
[ 235.355654][ T8607] vfs_write+0x7d3/0x11d0
[ 235.355680][ T8607] ? __pfx_redirected_tty_write+0x10/0x10
[ 235.355708][ T8607] ? __pfx_vfs_write+0x10/0x10
[ 235.355741][ T8607] ? find_held_lock+0x2b/0x80
[ 235.355777][ T8607] ksys_write+0x12a/0x250
[ 235.355804][ T8607] ? __pfx_ksys_write+0x10/0x10
[ 235.355839][ T8607] do_syscall_64+0xcd/0xfa0
[ 235.355867][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 235.355893][ T8607] RIP: 0033:0x7f53de98efc9
[ 235.355913][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 235.355937][ T8607] RSP: 002b:00007f53df7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 235.355962][ T8607] RAX: ffffffffffffffda RBX: 00007f53debe6090 RCX: 00007f53de98efc9
[ 235.355980][ T8607] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003
[ 235.355996][ T8607] RBP: 00007f53dea11f91 R08: 0000000000000000 R09: 0000000000000000
[ 235.356012][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 235.356027][ T8607] R13: 00007f53debe6128 R14: 00007f53debe6090 R15: 00007ffe097da5c8
[ 235.356052][ T8607]
[ 235.356061][ T8607]
[ 235.356068][ T8607] The buggy address belongs to a vmalloc virtual mapping
[ 235.356183][ T8607] Memory state around the buggy address:
[ 235.356198][ T8607] ffffc90003b69100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 235.356217][ T8607] ffffc90003b69180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 235.356235][ T8607] >ffffc90003b69200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 235.356250][ T8607] ^
[ 235.356264][ T8607] ffffc90003b69280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 235.356282][ T8607] ffffc90003b69300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 235.356296][ T8607] ==================================================================
[ 235.415165][ T52] Bluetooth: hci2: command 0x0c1a tx timeout
[ 235.421049][ T8607] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 235.421073][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.5.767 Not tainted syzkaller #0 PREEMPT(full)
[ 235.421106][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 235.421122][ T8607] Call Trace:
[ 235.421130][ T8607]
[ 235.421139][ T8607] dump_stack_lvl+0x3d/0x1f0
[ 235.421171][ T8607] vpanic+0x640/0x6f0
[ 235.421204][ T8607] panic+0xca/0xd0
[ 235.421235][ T8607] ? __pfx_panic+0x10/0x10
[ 235.421267][ T8607] ? sys_imageblit+0x1a6f/0x1e60
[ 235.421295][ T8607] ? preempt_schedule_common+0x44/0xc0
[ 235.421322][ T8607] ? preempt_schedule_thunk+0x16/0x30
[ 235.421357][ T8607] check_panic_on_warn+0xab/0xb0
[ 235.421389][ T8607] end_report+0x107/0x170
[ 235.421418][ T8607] kasan_report+0xee/0x110
[ 235.421448][ T8607] ? sys_imageblit+0x1a6f/0x1e60
[ 235.421488][ T8607] sys_imageblit+0x1a6f/0x1e60
[ 235.421519][ T8607] ? __pfx_sys_imageblit+0x10/0x10
[ 235.421542][ T8607] ? __pfx__prb_read_valid+0x10/0x10
[ 235.421572][ T8607] ? find_held_lock+0x2b/0x80
[ 235.421596][ T8607] ? up+0xcb/0x140
[ 235.421620][ T8607] ? do_raw_spin_unlock+0x172/0x230
[ 235.421660][ T8607] ? prb_read_valid+0x78/0xa0
[ 235.421692][ T8607] drm_fbdev_shmem_defio_imageblit+0x20/0x130
[ 235.421718][ T8607] soft_cursor+0x524/0xa10
[ 235.421751][ T8607] ? fb_get_color_depth+0x120/0x250
[ 235.421781][ T8607] bit_cursor+0xe8c/0x17e0
[ 235.421813][ T8607] ? __pfx_bit_cursor+0x10/0x10
[ 235.421846][ T8607] ? __sanitizer_cov_trace_switch+0x54/0x90
[ 235.421881][ T8607] ? get_color+0x1da/0x450
[ 235.421906][ T8607] ? __pfx_bit_cursor+0x10/0x10
[ 235.421935][ T8607] fbcon_cursor+0x40c/0x5a0
[ 235.421961][ T8607] ? add_softcursor+0x41/0x290
[ 235.421994][ T8607] set_cursor+0x1db/0x250
[ 235.422025][ T8607] con_write+0x89/0xb0
[ 235.422047][ T8607] n_tty_write+0x41e/0x11e0
[ 235.422079][ T8607] ? __pfx_n_tty_write+0x10/0x10
[ 235.422107][ T8607] ? trace_kmalloc+0x2b/0xd0
[ 235.422133][ T8607] ? __pfx_woken_wake_function+0x10/0x10
[ 235.422169][ T8607] ? kfree+0x252/0x6d0
[ 235.422191][ T8607] ? __pfx_n_tty_write+0x10/0x10
[ 235.422220][ T8607] file_tty_write.constprop.0+0x503/0x9b0
[ 235.422248][ T8607] redirected_tty_write+0xd4/0x150
[ 235.422272][ T8607] vfs_write+0x7d3/0x11d0
[ 235.422298][ T8607] ? __pfx_redirected_tty_write+0x10/0x10
[ 235.422349][ T8607] ? __pfx_vfs_write+0x10/0x10
[ 235.422373][ T8607] ? find_held_lock+0x2b/0x80
[ 235.422405][ T8607] ksys_write+0x12a/0x250
[ 235.422431][ T8607] ? __pfx_ksys_write+0x10/0x10
[ 235.422462][ T8607] do_syscall_64+0xcd/0xfa0
[ 235.422500][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 235.422528][ T8607] RIP: 0033:0x7f53de98efc9
[ 235.422549][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 235.422574][ T8607] RSP: 002b:00007f53df7e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 235.422600][ T8607] RAX: ffffffffffffffda RBX: 00007f53debe6090 RCX: 00007f53de98efc9
[ 235.422618][ T8607] RDX: 0000000000000d4f RSI: 0000200000001bc0 RDI: 0000000000000003
[ 235.422634][ T8607] RBP: 00007f53dea11f91 R08: 0000000000000000 R09: 0000000000000000
[ 235.422651][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 235.422667][ T8607] R13: 00007f53debe6128 R14: 00007f53debe6090 R15: 00007ffe097da5c8
[ 235.422694][ T8607]
[ 235.422961][ T8607] Kernel Offset: disabled