last executing test programs: 4.473817348s ago: executing program 1 (id=241): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) 4.087632833s ago: executing program 3 (id=244): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/port100/uevent\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000002c0)='/dev/au\x0e\f\x00\x00Qk\\\xb5\xe8\x95\xe7\xac\xfd\x00\xefVx\xda\xffI(JK\\\x01\x7f\x18{\xbc\xcd\xe1\x87qF\xd2\xdb\x8f\xaej\xa0\xcf%3\b\x1b\x9d:W\x17\xbb\xe81\x80\x95_\xde\xcd\xb7-\x91n', 0xa3d9) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x8894) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f00000001c0), 0x501801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 3.881476201s ago: executing program 0 (id=245): ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000002c0)={@inferred, 0x2, 0x5, @btrfs_ioctl_vol_args_v2_3_0={0x9, 0x0}, @name="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"}) memfd_secret$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) select$auto(0x2, &(0x7f0000000040)={[0x7, 0x5ef2, 0x5, 0x10, 0x7, 0x7ff, 0x10001, 0x1, 0x8, 0x7, 0x8, 0x7fffffffffffffff, 0x4b1, 0x8, 0x5, 0x3]}, &(0x7f00000000c0)={[0x2, 0x8, 0x2, 0x9, 0x3, 0x5, 0x446, 0x2, 0xfffffffffffff9ad, 0x67, 0x9, 0x0, 0x3cc, 0x3, 0x10001, 0x10001]}, 0x0, 0x0) 3.096671466s ago: executing program 2 (id=248): set_mempolicy$auto(0x203, &(0x7f0000000000)=0x2, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) socket(0x2, 0x1, 0x0) fcntl$auto_F_OFD_SETLKW(0xffffffffffffffff, 0x26, 0x6) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r0, 0x0, 0x20000000001, 0xfffffffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x200, 0x4) times$auto(0xfffffffffffffffc) 2.888059434s ago: executing program 2 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x9, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0xe, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x8, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="20ec27bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x810) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x9, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 2.806080572s ago: executing program 1 (id=250): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x9, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0xe, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x8, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="20ec27bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x810) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x9, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 2.753031449s ago: executing program 0 (id=251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) ioctl$auto_BLKGETNRZONES(r0, 0x80041285, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) semctl$auto(0x5, 0xb73, 0x0, 0x3c) connect$auto(0xffffffffffffffff, 0x0, 0x1) getpriority$auto_PRIO_PROCESS(0x0, 0x0) 2.635072061s ago: executing program 3 (id=252): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x60342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x3) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 2.570365035s ago: executing program 0 (id=253): mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000040)=@task_fd_query={0x9, 0xffffffffffffffff, 0x7fc, 0x0, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) getsockopt$auto_SO_PASSCRED(r2, 0x1, 0x10, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon17\x00', 0x80, 0x0) 1.642462924s ago: executing program 0 (id=254): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) ioctl$auto_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x20000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) 1.565241081s ago: executing program 2 (id=255): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) capset$auto(0x0, 0x0) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0xc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xb8ff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) 1.540727003s ago: executing program 1 (id=256): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/port100/uevent\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd0\x00', 0xc0c00, 0x0) adjtimex$auto(0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000002c0)='/dev/au\x0e\f\x00\x00Qk\\\xb5\xe8\x95\xe7\xac\xfd\x00\xefVx\xda\xffI(JK\\\x01\x7f\x18{\xbc\xcd\xe1\x87qF\xd2\xdb\x8f\xaej\xa0\xcf%3\b\x1b\x9d:W\x17\xbb\xe81\x80\x95_\xde\xcd\xb7-\x91n', 0xa3d9) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x8894) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) read$auto(r0, 0x0, 0x20) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f00000001c0), 0x501801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xffd8) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.408215837s ago: executing program 3 (id=257): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4831, 0x40eb2, r0, 0x300000000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r1 = gettid() rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, &(0x7f0000001ac0)={0x80000000000003, 0x8}, 0x8) tkill$auto(r1, 0x7) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x7}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.216420479s ago: executing program 2 (id=258): write$auto(0xffffffffffffffff, &(0x7f0000000000)='}\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1e, 0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r1, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4cb) mkdir$auto(0x0, 0x8001) write$auto_fops_u32_(0xffffffffffffffff, 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) 1.152768337s ago: executing program 3 (id=259): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) close_range$auto(r0, r0, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) connect$auto(0x3, 0x0, 0x58) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) 1.082467907s ago: executing program 2 (id=260): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) sysfs$auto(0x2, 0xe, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x22, 0x3, 0x0) socket(0x10, 0x2, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x200080c2) write$auto(r0, 0x0, 0xfdf1) 963.498206ms ago: executing program 3 (id=261): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdd, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) write$auto(0x3, 0x0, 0x5c8) 924.716307ms ago: executing program 0 (id=262): socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) 828.787808ms ago: executing program 1 (id=263): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r0) close_range$auto(0x2, 0xa, 0x0) 810.978302ms ago: executing program 3 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x9, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0xe, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x8, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x5, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="20ec27bd7000fedbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x810) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)="361da6425979f321f15c64a6f5fa0b6cba1f0e4285504a768d83e5b21be75dd346782ab711f42ffe91741f05e24e30be16bbe7ac358ec9c81c091f1f8538451b6f89c6fbc4edbf8b0a309e31b55bc7f04f5f7a39aaee1b9943cd809e753b48adfca1b8"}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x9, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 629.810726ms ago: executing program 0 (id=265): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(r0, 0x0, 0x100000a3d9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r1, 0x0, 0xfffffdef) 627.041896ms ago: executing program 1 (id=266): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x60342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x3) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, '+o*#\x90\x80\x8b\x00'}, @SMC_PNETID_NAME={0xb, 0x1, 'netdev\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) 62.65077ms ago: executing program 2 (id=267): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=268): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4831, 0x40eb2, r0, 0x300000000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) semget$auto(0xff, 0x40000000, 0x7f) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r1 = gettid() rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, &(0x7f0000001ac0)={0x80000000000003, 0x8}, 0x8) tkill$auto(r1, 0x7) msgsnd$auto(0x1, 0x0, 0x2000, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x800, 0x7}, 0x1fe, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 81.570628][ T5853] cgroup: Unknown subsys name 'net' [ 81.675474][ T5853] cgroup: Unknown subsys name 'cpuset' [ 81.683534][ T5853] cgroup: Unknown subsys name 'rlimit' [ 81.841044][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.847640][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 83.067938][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.071767][ T5865] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.079229][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.086707][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.094459][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.102506][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.109710][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.117059][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.124592][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.155901][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.163574][ T5869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.177310][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.186515][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.197721][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.205146][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.213369][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.220988][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.229369][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.236795][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.244686][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.252207][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.581541][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 85.605338][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 85.656054][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 85.710445][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 85.742790][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.749970][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.757362][ T5862] bridge_slave_0: entered allmulticast mode [ 85.764677][ T5862] bridge_slave_0: entered promiscuous mode [ 85.804595][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.811720][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.819127][ T5862] bridge_slave_1: entered allmulticast mode [ 85.826208][ T5862] bridge_slave_1: entered promiscuous mode [ 85.832653][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.840074][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.847422][ T5866] bridge_slave_0: entered allmulticast mode [ 85.854481][ T5866] bridge_slave_0: entered promiscuous mode [ 85.880598][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.887828][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.895164][ T5866] bridge_slave_1: entered allmulticast mode [ 85.901844][ T5866] bridge_slave_1: entered promiscuous mode [ 85.947254][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.964295][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.971450][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.978912][ T5871] bridge_slave_0: entered allmulticast mode [ 85.985632][ T5871] bridge_slave_0: entered promiscuous mode [ 86.001720][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.012846][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.022136][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.029529][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.036907][ T5871] bridge_slave_1: entered allmulticast mode [ 86.043921][ T5871] bridge_slave_1: entered promiscuous mode [ 86.073899][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.091353][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.098746][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.106250][ T5870] bridge_slave_0: entered allmulticast mode [ 86.113029][ T5870] bridge_slave_0: entered promiscuous mode [ 86.136905][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.146369][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.154125][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.161306][ T5870] bridge_slave_1: entered allmulticast mode [ 86.168162][ T5870] bridge_slave_1: entered promiscuous mode [ 86.176152][ T5862] team0: Port device team_slave_0 added [ 86.191297][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.208634][ T5862] team0: Port device team_slave_1 added [ 86.226511][ T5866] team0: Port device team_slave_0 added [ 86.240049][ T5866] team0: Port device team_slave_1 added [ 86.288641][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.299995][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.307114][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.334499][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.353858][ T5871] team0: Port device team_slave_0 added [ 86.360106][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.367175][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.393251][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.406721][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.424432][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.431390][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.458366][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.470646][ T5871] team0: Port device team_slave_1 added [ 86.477735][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.484748][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.510967][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.558658][ T5870] team0: Port device team_slave_0 added [ 86.566810][ T5870] team0: Port device team_slave_1 added [ 86.579200][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.586495][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.612845][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.625157][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.632133][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.658526][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.712031][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.721113][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.747446][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.759921][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.767261][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.793503][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.808153][ T5866] hsr_slave_0: entered promiscuous mode [ 86.814747][ T5866] hsr_slave_1: entered promiscuous mode [ 86.856858][ T5862] hsr_slave_0: entered promiscuous mode [ 86.863445][ T5862] hsr_slave_1: entered promiscuous mode [ 86.869407][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 86.875585][ T5862] Cannot create hsr debugfs directory [ 86.893704][ T5871] hsr_slave_0: entered promiscuous mode [ 86.899963][ T5871] hsr_slave_1: entered promiscuous mode [ 86.906157][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 86.911989][ T5871] Cannot create hsr debugfs directory [ 86.968252][ T5870] hsr_slave_0: entered promiscuous mode [ 86.975013][ T5870] hsr_slave_1: entered promiscuous mode [ 86.981006][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 86.986844][ T5870] Cannot create hsr debugfs directory [ 87.193017][ T5184] Bluetooth: hci0: command tx timeout [ 87.198608][ T5865] Bluetooth: hci1: command tx timeout [ 87.236467][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.246370][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.259785][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.272930][ T5184] Bluetooth: hci3: command tx timeout [ 87.276310][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.278435][ T5865] Bluetooth: hci2: command tx timeout [ 87.311652][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.322076][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.332026][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.342124][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.396930][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.412962][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.422530][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.432601][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.481951][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.500850][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.516054][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.527125][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.588197][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.631006][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.642098][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.666883][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.674050][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.695105][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.716736][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.723892][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.743006][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.750144][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.771369][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.778583][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.802590][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.833945][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.876425][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.892647][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.920288][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.927500][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.941009][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.948198][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.972285][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.979503][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.989082][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.996271][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.218026][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.310375][ T5871] veth0_vlan: entered promiscuous mode [ 88.338724][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.359042][ T5871] veth1_vlan: entered promiscuous mode [ 88.434080][ T5871] veth0_macvtap: entered promiscuous mode [ 88.454889][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.470400][ T5871] veth1_macvtap: entered promiscuous mode [ 88.495770][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.510273][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.520514][ T5866] veth0_vlan: entered promiscuous mode [ 88.535022][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.558889][ T5866] veth1_vlan: entered promiscuous mode [ 88.566066][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.575900][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.596252][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.605189][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.645606][ T5870] veth0_vlan: entered promiscuous mode [ 88.666121][ T5862] veth0_vlan: entered promiscuous mode [ 88.677349][ T5870] veth1_vlan: entered promiscuous mode [ 88.712667][ T5862] veth1_vlan: entered promiscuous mode [ 88.722317][ T5866] veth0_macvtap: entered promiscuous mode [ 88.742962][ T204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.752944][ T204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.761179][ T5866] veth1_macvtap: entered promiscuous mode [ 88.774710][ T5870] veth0_macvtap: entered promiscuous mode [ 88.791486][ T5870] veth1_macvtap: entered promiscuous mode [ 88.808062][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.816540][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.834156][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.848663][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.859963][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.879707][ T1031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892606][ T1031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.902377][ T5862] veth0_macvtap: entered promiscuous mode [ 88.912422][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.925756][ T1031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.925956][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.954177][ T5862] veth1_macvtap: entered promiscuous mode [ 88.967756][ T1031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.005657][ T1031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.027785][ T1031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.047301][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.055337][ T1031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.079005][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.087872][ T5954] mmap: syz.2.3 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.091433][ T1031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.141109][ T1031] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.153159][ T1031] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161926][ T1031] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180900][ T1031] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.201610][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.215128][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.273582][ T5865] Bluetooth: hci1: command tx timeout [ 89.275859][ T5184] Bluetooth: hci0: command tx timeout [ 89.291477][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.310713][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.320528][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.330950][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.353908][ T5184] Bluetooth: hci2: command tx timeout [ 89.353917][ T5865] Bluetooth: hci3: command tx timeout [ 89.361570][ T5954] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.407661][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.446758][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.530432][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.552774][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.566639][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.586358][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.830122][ T5970] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 90.082141][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.523242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.693020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.760263][ T5982] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 91.071244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.243025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.354017][ T5184] Bluetooth: hci1: command tx timeout [ 91.354051][ T5865] Bluetooth: hci0: command tx timeout [ 91.432577][ T5997] sd 0:0:1:0: device reset [ 91.434967][ T5865] Bluetooth: hci3: command tx timeout [ 91.438606][ T5184] Bluetooth: hci2: command tx timeout [ 91.497557][ T6000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 91.572996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.581489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.712882][ T30] audit: type=1806 audit(1755790966.620:2): xattr="." res=0 [ 91.852997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.862929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.889245][ T6011] Zero length message leads to an empty skb [ 92.085153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.175649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.983428][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 93.194400][ T6022] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 93.434370][ T5184] Bluetooth: hci1: command tx timeout [ 93.439982][ T5184] Bluetooth: hci0: command tx timeout [ 93.515422][ T5865] Bluetooth: hci2: command tx timeout [ 93.515468][ T5184] Bluetooth: hci3: command tx timeout [ 94.533933][ T6037] zswap: compressor not available [ 94.549393][ T6038] Setting dangerous option i915.mitigations - tainting kernel [ 94.576175][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.269700][ T6052] netlink: 25520 bytes leftover after parsing attributes in process `syz.0.20'. [ 95.279185][ T6052] netlink: zone id is out of range [ 95.288326][ T6052] netlink: zone id is out of range [ 95.309674][ T6052] netlink: zone id is out of range [ 95.324252][ T6052] netlink: zone id is out of range [ 95.330872][ T6052] netlink: zone id is out of range [ 95.337950][ T6052] netlink: zone id is out of range [ 95.345605][ T6052] netlink: zone id is out of range [ 95.355565][ T6052] netlink: zone id is out of range [ 95.364413][ T6052] netlink: zone id is out of range [ 95.369579][ T6052] netlink: zone id is out of range syzkaller syzkaller login: [ 96.153792][ T6027] kexec: Could not allocate control_code_buffer [ 96.204734][ T6062] syz.0.22 uses obsolete (PF_INET,SOCK_PACKET) [ 97.211829][ T1212] cfg80211: failed to load regulatory.db [ 97.293807][ T6083] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 98.088943][ T6089] FAULT_INJECTION: forcing a failure. [ 98.088943][ T6089] name failslab, interval 1, probability 0, space 0, times 1 [ 98.143340][ T6089] CPU: 1 UID: 0 PID: 6089 Comm: syz.1.28 Tainted: G U syzkaller #0 PREEMPT(full) [ 98.143391][ T6089] Tainted: [U]=USER [ 98.143402][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.143421][ T6089] Call Trace: [ 98.143431][ T6089] [ 98.143442][ T6089] dump_stack_lvl+0x16c/0x1f0 [ 98.143500][ T6089] should_fail_ex+0x512/0x640 [ 98.143552][ T6089] should_failslab+0xc2/0x120 [ 98.143603][ T6089] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 98.143641][ T6089] ? lock_release+0x201/0x2f0 [ 98.143682][ T6089] ? mpol_set_shared_policy+0x4e1/0x8c0 [ 98.143714][ T6089] mpol_set_shared_policy+0x4e1/0x8c0 [ 98.143747][ T6089] ? __pfx_shmem_set_policy+0x10/0x10 [ 98.143792][ T6089] mbind_range+0x339/0x570 [ 98.143838][ T6089] do_mbind+0x848/0xf30 [ 98.143901][ T6089] ? __pfx_do_mbind+0x10/0x10 [ 98.143960][ T6089] ? __pfx_get_nodes+0x10/0x10 [ 98.144001][ T6089] kernel_mbind+0x1e3/0x1f0 [ 98.144048][ T6089] ? __pfx_kernel_mbind+0x10/0x10 [ 98.144101][ T6089] do_syscall_64+0xcd/0x490 [ 98.144134][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.144158][ T6089] RIP: 0033:0x7f045438ebe9 [ 98.144180][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.144205][ T6089] RSP: 002b:00007f0455245038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 98.144229][ T6089] RAX: ffffffffffffffda RBX: 00007f04545b6090 RCX: 00007f045438ebe9 [ 98.144243][ T6089] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 98.144257][ T6089] RBP: 00007f0454411e19 R08: 0000000000000006 R09: 0000000000000002 [ 98.144270][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.144283][ T6089] R13: 00007f04545b6128 R14: 00007f04545b6090 R15: 00007ffc88b42dd8 [ 98.144305][ T6089] [ 98.530297][ T5184] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 100.562533][ T6122] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 100.577647][ T6122] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 101.547898][ T6115] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 101.585204][ T6130] netlink: 13832 bytes leftover after parsing attributes in process `syz.3.38'. [ 103.978603][ T6161] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 104.032199][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 104.101598][ T6161] veth0_macvtap: left promiscuous mode [ 105.432033][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.49'. [ 105.441198][ T6186] bridge_slave_1: left allmulticast mode [ 105.447205][ T30] audit: type=1107 audit(1755790980.350:3): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 105.475829][ T6186] bridge_slave_1: left promiscuous mode [ 105.511167][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.650264][ T6186] bridge_slave_0: left allmulticast mode [ 105.657684][ T6186] bridge_slave_0: left promiscuous mode [ 105.664283][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.306158][ T6220] vivid-003: ================= START STATUS ================= [ 107.314636][ T6220] vivid-003: Radio HW Seek Mode: Bounded [ 107.320846][ T6220] vivid-003: Radio Programmable HW Seek: false [ 107.341124][ T6220] vivid-003: RDS Rx I/O Mode: Block I/O [ 107.409765][ T6220] vivid-003: Generate RBDS Instead of RDS: false [ 107.515452][ T6220] vivid-003: RDS Reception: true [ 107.534789][ T6220] vivid-003: RDS Program Type: 0 inactive [ 107.540711][ T6220] vivid-003: RDS PS Name: inactive [ 107.565037][ T6220] vivid-003: RDS Radio Text: inactive [ 107.571127][ T6220] vivid-003: RDS Traffic Announcement: false inactive [ 107.647740][ T6220] vivid-003: RDS Traffic Program: false inactive [ 107.728393][ T6220] vivid-003: RDS Music: false inactive [ 107.742088][ T6220] vivid-003: ================== END STATUS ================== [ 109.130444][ T6243] FAULT_INJECTION: forcing a failure. [ 109.130444][ T6243] name failslab, interval 1, probability 0, space 0, times 0 [ 109.180723][ T6243] CPU: 1 UID: 0 PID: 6243 Comm: syz.3.60 Tainted: G U syzkaller #0 PREEMPT(full) [ 109.180771][ T6243] Tainted: [U]=USER [ 109.180782][ T6243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.180800][ T6243] Call Trace: [ 109.180809][ T6243] [ 109.180820][ T6243] dump_stack_lvl+0x16c/0x1f0 [ 109.180862][ T6243] should_fail_ex+0x512/0x640 [ 109.180906][ T6243] should_failslab+0xc2/0x120 [ 109.180947][ T6243] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 109.180982][ T6243] ? security_inode_alloc+0x3b/0x2b0 [ 109.181020][ T6243] security_inode_alloc+0x3b/0x2b0 [ 109.181053][ T6243] inode_init_always_gfp+0xce4/0x1030 [ 109.181089][ T6243] alloc_inode+0x86/0x240 [ 109.181130][ T6243] new_inode+0x22/0x1c0 [ 109.181170][ T6243] ? trace_cap_capable+0x18d/0x200 [ 109.181201][ T6243] shmem_get_inode+0x19a/0xfb0 [ 109.181248][ T6243] ? __vm_enough_memory+0x184/0x3f0 [ 109.181293][ T6243] __shmem_file_setup+0x279/0x330 [ 109.181323][ T6243] shmem_zero_setup+0x93/0x1a0 [ 109.181359][ T6243] __mmap_region+0x2081/0x27b0 [ 109.181396][ T6243] ? __pfx___mmap_region+0x10/0x10 [ 109.181430][ T6243] ? rcu_is_watching+0x12/0xc0 [ 109.181463][ T6243] ? rcu_is_watching+0x12/0xc0 [ 109.181492][ T6243] ? trace_sched_exit_tp+0xd1/0x120 [ 109.181537][ T6243] ? __schedule+0x11a3/0x5de0 [ 109.181567][ T6243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 109.181605][ T6243] ? kernel_text_address+0xc0/0x100 [ 109.181637][ T6243] ? __pfx___schedule+0x10/0x10 [ 109.181667][ T6243] ? futex_private_hash_put+0x112/0x300 [ 109.181704][ T6243] ? rcu_is_watching+0x12/0xc0 [ 109.181754][ T6243] ? trace_cap_capable+0x18d/0x200 [ 109.181786][ T6243] ? cap_capable+0xb3/0x250 [ 109.181818][ T6243] mmap_region+0x1ab/0x3f0 [ 109.181853][ T6243] ? __get_unmapped_area+0x267/0x440 [ 109.181897][ T6243] do_mmap+0xa3e/0x1210 [ 109.181942][ T6243] ? __pfx_do_mmap+0x10/0x10 [ 109.181984][ T6243] ? __pfx_down_write_killable+0x10/0x10 [ 109.182027][ T6243] ? do_writev+0x218/0x340 [ 109.182060][ T6243] vm_mmap_pgoff+0x29e/0x470 [ 109.182105][ T6243] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 109.182151][ T6243] ? __x64_sys_futex+0x1e0/0x4c0 [ 109.182188][ T6243] ? __x64_sys_futex+0x1e9/0x4c0 [ 109.182227][ T6243] ksys_mmap_pgoff+0x7d/0x5c0 [ 109.182268][ T6243] ? xfd_validate_state+0x61/0x180 [ 109.182310][ T6243] ? __pfx_do_writev+0x10/0x10 [ 109.182343][ T6243] __x64_sys_mmap+0x125/0x190 [ 109.182389][ T6243] do_syscall_64+0xcd/0x490 [ 109.182428][ T6243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.182459][ T6243] RIP: 0033:0x7ff94c18ebe9 [ 109.182483][ T6243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.182513][ T6243] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 109.182541][ T6243] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 109.182560][ T6243] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 109.182578][ T6243] RBP: 00007ff94c211e19 R08: fffffffffffffffa R09: 0000000000008000 [ 109.182597][ T6243] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 109.182615][ T6243] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 109.182643][ T6243] [ 109.526533][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 109.545647][ T6246] netlink: 186 bytes leftover after parsing attributes in process `syz.2.61'. [ 110.356027][ T6255] random: crng reseeded on system resumption [ 111.598255][ T5184] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 112.551178][ T6291] ima: policy update failed [ 112.559214][ T30] audit: type=1802 audit(1755790987.480:4): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.71" res=0 errno=0 [ 112.569499][ T6291] netlink: 25 bytes leftover after parsing attributes in process `syz.2.71'. [ 114.375231][ T6312] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 114.995610][ T6312] syz.2.75 (6312) used greatest stack depth: 19488 bytes left [ 116.962401][ T6368] process 'syz.1.82' launched ':,' with NULL argv: empty string added [ 116.978964][ T6368] FAULT_INJECTION: forcing a failure. [ 116.978964][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 117.031893][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.1.82 Tainted: G U syzkaller #0 PREEMPT(full) [ 117.031944][ T6368] Tainted: [U]=USER [ 117.031955][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.031974][ T6368] Call Trace: [ 117.031984][ T6368] [ 117.031995][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 117.032041][ T6368] should_fail_ex+0x512/0x640 [ 117.032087][ T6368] ? tomoyo_init_log+0x1385/0x2140 [ 117.032129][ T6368] should_failslab+0xc2/0x120 [ 117.032170][ T6368] __kmalloc_noprof+0xd2/0x510 [ 117.032204][ T6368] ? __pfx_from_kuid+0x10/0x10 [ 117.032256][ T6368] tomoyo_init_log+0x1385/0x2140 [ 117.032310][ T6368] ? __pfx_tomoyo_init_log+0x10/0x10 [ 117.032354][ T6368] ? tomoyo_profile+0x47/0x60 [ 117.032381][ T6368] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 117.032420][ T6368] tomoyo_supervisor+0x302/0x13b0 [ 117.032451][ T6368] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 117.032491][ T6368] ? kfree+0x2b4/0x4d0 [ 117.032518][ T6368] ? tomoyo_check_path_acl+0xad/0x210 [ 117.032555][ T6368] ? tomoyo_check_acl+0x1f7/0x410 [ 117.032590][ T6368] tomoyo_path_permission+0x270/0x3b0 [ 117.032629][ T6368] tomoyo_check_open_permission+0x37b/0x3c0 [ 117.032669][ T6368] ? init_file+0x93/0x4c0 [ 117.032716][ T6368] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 117.032754][ T6368] ? do_sys_openat2+0x11b/0x1d0 [ 117.032810][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.032848][ T6368] ? rcu_is_watching+0x12/0xc0 [ 117.032892][ T6368] ? do_raw_spin_lock+0x12c/0x2b0 [ 117.032944][ T6368] ? path_get+0x61/0x80 [ 117.032985][ T6368] ? rcu_is_watching+0x12/0xc0 [ 117.033019][ T6368] tomoyo_file_open+0x6b/0x90 [ 117.033049][ T6368] security_file_open+0x84/0x1e0 [ 117.033093][ T6368] do_dentry_open+0x596/0x1530 [ 117.033136][ T6368] vfs_open+0x82/0x3f0 [ 117.033184][ T6368] path_openat+0x1de4/0x2cb0 [ 117.033227][ T6368] ? __pfx_path_openat+0x10/0x10 [ 117.033269][ T6368] do_filp_open+0x20b/0x470 [ 117.033306][ T6368] ? __pfx_do_filp_open+0x10/0x10 [ 117.033357][ T6368] ? alloc_fd+0x471/0x7d0 [ 117.033395][ T6368] do_sys_openat2+0x11b/0x1d0 [ 117.033444][ T6368] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.033498][ T6368] __x64_sys_openat+0x174/0x210 [ 117.033548][ T6368] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.033606][ T6368] do_syscall_64+0xcd/0x490 [ 117.033651][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.033682][ T6368] RIP: 0033:0x7f045438ebe9 [ 117.033719][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.033747][ T6368] RSP: 002b:00007f0455266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.033776][ T6368] RAX: ffffffffffffffda RBX: 00007f04545b5fa0 RCX: 00007f045438ebe9 [ 117.033795][ T6368] RDX: 0000000000000a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 117.033819][ T6368] RBP: 00007f0454411e19 R08: 0000000000000000 R09: 0000000000000000 [ 117.033836][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.033853][ T6368] R13: 00007f04545b6038 R14: 00007f04545b5fa0 R15: 00007ffc88b42dd8 [ 117.033881][ T6368] [ 118.590931][ T6392] ubi0: attaching mtd0 [ 118.608512][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 118.615052][ T6392] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 119.152936][ T6399] vivid-003: ================= START STATUS ================= [ 119.160606][ T6399] vivid-003: Radio HW Seek Mode: Bounded [ 119.179550][ T6399] vivid-003: Radio Programmable HW Seek: false [ 119.208299][ T6399] vivid-003: RDS Rx I/O Mode: Block I/O [ 119.214085][ T6399] vivid-003: Generate RBDS Instead of RDS: false [ 119.220566][ T6399] vivid-003: RDS Reception: true [ 119.225621][ T6399] vivid-003: RDS Program Type: 0 inactive [ 119.231456][ T6399] vivid-003: RDS PS Name: inactive [ 119.257042][ T6399] vivid-003: RDS Radio Text: inactive [ 119.284960][ T6399] vivid-003: RDS Traffic Announcement: false inactive [ 119.291835][ T6399] vivid-003: RDS Traffic Program: false inactive [ 119.331601][ T6399] vivid-003: RDS Music: false inactive [ 119.346147][ T6399] vivid-003: ================== END STATUS ================== [ 120.332909][ T6423] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 123.006641][ T6475] random: crng reseeded on system resumption [ 123.699604][ T6484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.100'. [ 124.754350][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 124.807038][ T6507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.105'. [ 125.216470][ T6523] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.326489][ T6525] FAULT_INJECTION: forcing a failure. [ 125.326489][ T6525] name failslab, interval 1, probability 0, space 0, times 0 [ 125.346219][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.3.108 Tainted: G U syzkaller #0 PREEMPT(full) [ 125.346268][ T6525] Tainted: [U]=USER [ 125.346278][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.346296][ T6525] Call Trace: [ 125.346305][ T6525] [ 125.346315][ T6525] dump_stack_lvl+0x16c/0x1f0 [ 125.346362][ T6525] should_fail_ex+0x512/0x640 [ 125.346409][ T6525] should_failslab+0xc2/0x120 [ 125.346440][ T6525] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 125.346469][ T6525] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 125.346496][ T6525] mem_cgroup_css_alloc+0xa8f/0x1e80 [ 125.346521][ T6525] ? css_populate_dir+0x254/0x580 [ 125.346548][ T6525] cgroup_apply_control_enable+0x4b0/0xbb0 [ 125.346587][ T6525] cgroup_mkdir+0x5e7/0x11f0 [ 125.346624][ T6525] ? __pfx_cgroup_mkdir+0x10/0x10 [ 125.346660][ T6525] kernfs_iop_mkdir+0x111/0x190 [ 125.346692][ T6525] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 125.346723][ T6525] vfs_mkdir+0x590/0x8c0 [ 125.346749][ T6525] do_mkdirat+0x304/0x3e0 [ 125.346776][ T6525] ? __pfx_do_mkdirat+0x10/0x10 [ 125.346804][ T6525] ? getname_flags.part.0+0x1c5/0x550 [ 125.346840][ T6525] __x64_sys_mkdir+0xef/0x140 [ 125.346867][ T6525] do_syscall_64+0xcd/0x490 [ 125.346905][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.346928][ T6525] RIP: 0033:0x7ff94c18ebe9 [ 125.346945][ T6525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.346966][ T6525] RSP: 002b:00007ff94cf23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 125.346987][ T6525] RAX: ffffffffffffffda RBX: 00007ff94c3b6090 RCX: 00007ff94c18ebe9 [ 125.347001][ T6525] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 125.347015][ T6525] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 125.347028][ T6525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.347041][ T6525] R13: 00007ff94c3b6128 R14: 00007ff94c3b6090 R15: 00007ffd9c2d0fe8 [ 125.347062][ T6525] [ 125.699173][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'. [ 126.273699][ T6542] FAULT_INJECTION: forcing a failure. [ 126.273699][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 126.353410][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.2.118 Tainted: G U syzkaller #0 PREEMPT(full) [ 126.353464][ T6542] Tainted: [U]=USER [ 126.353475][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.353494][ T6542] Call Trace: [ 126.353505][ T6542] [ 126.353516][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 126.353562][ T6542] should_fail_ex+0x512/0x640 [ 126.353611][ T6542] should_failslab+0xc2/0x120 [ 126.353654][ T6542] __kmalloc_cache_node_noprof+0x6d/0x420 [ 126.353692][ T6542] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 126.353724][ T6542] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 126.353759][ T6542] mem_cgroup_css_alloc+0xac2/0x1e80 [ 126.353806][ T6542] ? css_populate_dir+0x254/0x580 [ 126.353842][ T6542] cgroup_apply_control_enable+0x4b0/0xbb0 [ 126.353894][ T6542] cgroup_mkdir+0x5e7/0x11f0 [ 126.353946][ T6542] ? __pfx_cgroup_mkdir+0x10/0x10 [ 126.353995][ T6542] kernfs_iop_mkdir+0x111/0x190 [ 126.354038][ T6542] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 126.354080][ T6542] vfs_mkdir+0x590/0x8c0 [ 126.354110][ T6542] do_mkdirat+0x304/0x3e0 [ 126.354148][ T6542] ? __pfx_do_mkdirat+0x10/0x10 [ 126.354188][ T6542] ? getname_flags.part.0+0x1c5/0x550 [ 126.354239][ T6542] __x64_sys_mkdir+0xef/0x140 [ 126.354278][ T6542] do_syscall_64+0xcd/0x490 [ 126.354319][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.354351][ T6542] RIP: 0033:0x7f2368b8ebe9 [ 126.354375][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.354410][ T6542] RSP: 002b:00007f2369a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 126.354441][ T6542] RAX: ffffffffffffffda RBX: 00007f2368db6090 RCX: 00007f2368b8ebe9 [ 126.354462][ T6542] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 126.354482][ T6542] RBP: 00007f2368c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 126.354501][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.354521][ T6542] R13: 00007f2368db6128 R14: 00007f2368db6090 R15: 00007ffc3811b078 [ 126.354550][ T6542] [ 126.897562][ T6565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.111'. [ 126.948127][ T6565] veth0_macvtap: entered promiscuous mode [ 127.198702][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 127.302895][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.113'. [ 127.922866][ T6586] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input7 [ 128.391129][ T6601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 128.610814][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 129.044836][ T6614] FAULT_INJECTION: forcing a failure. [ 129.044836][ T6614] name failslab, interval 1, probability 0, space 0, times 0 [ 129.072825][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.3.120 Tainted: G U syzkaller #0 PREEMPT(full) [ 129.072876][ T6614] Tainted: [U]=USER [ 129.072886][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.072904][ T6614] Call Trace: [ 129.072911][ T6614] [ 129.072933][ T6614] dump_stack_lvl+0x16c/0x1f0 [ 129.072966][ T6614] should_fail_ex+0x512/0x640 [ 129.073001][ T6614] should_failslab+0xc2/0x120 [ 129.073032][ T6614] __kmalloc_cache_node_noprof+0x6d/0x420 [ 129.073063][ T6614] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 129.073098][ T6614] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 129.073133][ T6614] mem_cgroup_css_alloc+0xac2/0x1e80 [ 129.073169][ T6614] ? css_populate_dir+0x254/0x580 [ 129.073206][ T6614] cgroup_apply_control_enable+0x4b0/0xbb0 [ 129.073269][ T6614] cgroup_mkdir+0x5e7/0x11f0 [ 129.073320][ T6614] ? __pfx_cgroup_mkdir+0x10/0x10 [ 129.073368][ T6614] kernfs_iop_mkdir+0x111/0x190 [ 129.073413][ T6614] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 129.073455][ T6614] vfs_mkdir+0x590/0x8c0 [ 129.073485][ T6614] do_mkdirat+0x304/0x3e0 [ 129.073521][ T6614] ? __pfx_do_mkdirat+0x10/0x10 [ 129.073560][ T6614] ? getname_flags.part.0+0x1c5/0x550 [ 129.073610][ T6614] __x64_sys_mkdir+0xef/0x140 [ 129.073648][ T6614] do_syscall_64+0xcd/0x490 [ 129.073690][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.073722][ T6614] RIP: 0033:0x7ff94c18ebe9 [ 129.073746][ T6614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.073776][ T6614] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 129.073807][ T6614] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 129.073827][ T6614] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 129.073847][ T6614] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 129.073866][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.073885][ T6614] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 129.073915][ T6614] [ 129.812582][ T6632] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 131.032099][ T6648] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 131.058622][ T6648] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 131.807715][ T6682] FAULT_INJECTION: forcing a failure. [ 131.807715][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 131.845908][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 131.863309][ T6682] CPU: 1 UID: 0 PID: 6682 Comm: syz.1.130 Tainted: G U syzkaller #0 PREEMPT(full) [ 131.863346][ T6682] Tainted: [U]=USER [ 131.863353][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.863367][ T6682] Call Trace: [ 131.863374][ T6682] [ 131.863382][ T6682] dump_stack_lvl+0x16c/0x1f0 [ 131.863414][ T6682] should_fail_ex+0x512/0x640 [ 131.863450][ T6682] should_failslab+0xc2/0x120 [ 131.863481][ T6682] __kvmalloc_node_noprof+0x137/0x620 [ 131.863508][ T6682] ? alloc_shrinker_info+0xea/0x470 [ 131.863540][ T6682] ? alloc_shrinker_info+0xea/0x470 [ 131.863569][ T6682] ? mem_cgroup_css_online+0x1ba/0x640 [ 131.863605][ T6682] alloc_shrinker_info+0xea/0x470 [ 131.863647][ T6682] mem_cgroup_css_online+0x217/0x640 [ 131.863680][ T6682] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 131.863715][ T6682] online_css+0xaf/0x350 [ 131.863742][ T6682] cgroup_apply_control_enable+0x702/0xbb0 [ 131.863777][ T6682] cgroup_mkdir+0x5e7/0x11f0 [ 131.863811][ T6682] ? __pfx_cgroup_mkdir+0x10/0x10 [ 131.863843][ T6682] kernfs_iop_mkdir+0x111/0x190 [ 131.863873][ T6682] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 131.863901][ T6682] vfs_mkdir+0x590/0x8c0 [ 131.863921][ T6682] do_mkdirat+0x304/0x3e0 [ 131.863946][ T6682] ? __pfx_do_mkdirat+0x10/0x10 [ 131.863980][ T6682] ? getname_flags.part.0+0x1c5/0x550 [ 131.864015][ T6682] __x64_sys_mkdir+0xef/0x140 [ 131.864059][ T6682] do_syscall_64+0xcd/0x490 [ 131.864103][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.864125][ T6682] RIP: 0033:0x7f045438ebe9 [ 131.864141][ T6682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.864161][ T6682] RSP: 002b:00007f0455245038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 131.864181][ T6682] RAX: ffffffffffffffda RBX: 00007f04545b6090 RCX: 00007f045438ebe9 [ 131.864195][ T6682] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 131.864208][ T6682] RBP: 00007f0454411e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.864221][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.864234][ T6682] R13: 00007f04545b6128 R14: 00007f04545b6090 R15: 00007ffc88b42dd8 [ 131.864253][ T6682] [ 133.105985][ T6699] delete_channel: no stack [ 133.294550][ T6698] FAULT_INJECTION: forcing a failure. [ 133.294550][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 133.329517][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.2.135 Tainted: G U syzkaller #0 PREEMPT(full) [ 133.329554][ T6698] Tainted: [U]=USER [ 133.329562][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 133.329575][ T6698] Call Trace: [ 133.329583][ T6698] [ 133.329591][ T6698] dump_stack_lvl+0x16c/0x1f0 [ 133.329624][ T6698] should_fail_ex+0x512/0x640 [ 133.329660][ T6698] should_failslab+0xc2/0x120 [ 133.329691][ T6698] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.329721][ T6698] ? lock_release+0x201/0x2f0 [ 133.329751][ T6698] ? __proc_create+0x2ce/0x8e0 [ 133.329787][ T6698] __proc_create+0x2ce/0x8e0 [ 133.329829][ T6698] ? __pfx___proc_create+0x10/0x10 [ 133.329862][ T6698] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.329896][ T6698] ? pcpu_alloc_noprof+0x7d6/0x1470 [ 133.329922][ T6698] ? rcu_is_watching+0x12/0xc0 [ 133.329948][ T6698] proc_create_reg+0x7d/0x180 [ 133.329984][ T6698] proc_create_net_data+0x8e/0x1c0 [ 133.330020][ T6698] ? __pfx_proc_create_net_data+0x10/0x10 [ 133.330060][ T6698] synproxy_net_init+0x15b/0x1f0 [ 133.330093][ T6698] ? __pfx_synproxy_net_init+0x10/0x10 [ 133.330123][ T6698] ops_init+0x1df/0x5f0 [ 133.330155][ T6698] setup_net+0x10f/0x380 [ 133.330185][ T6698] ? lockdep_init_map_type+0x5c/0x280 [ 133.330217][ T6698] ? __pfx_setup_net+0x10/0x10 [ 133.330249][ T6698] ? debug_mutex_init+0x37/0x70 [ 133.330272][ T6698] copy_net_ns+0x2a6/0x5f0 [ 133.330308][ T6698] create_new_namespaces+0x3ea/0xa90 [ 133.330337][ T6698] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 133.330365][ T6698] ksys_unshare+0x45b/0xa40 [ 133.330397][ T6698] ? __pfx_ksys_unshare+0x10/0x10 [ 133.330430][ T6698] ? xfd_validate_state+0x61/0x180 [ 133.330469][ T6698] __x64_sys_unshare+0x31/0x40 [ 133.330501][ T6698] do_syscall_64+0xcd/0x490 [ 133.330538][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.330562][ T6698] RIP: 0033:0x7f2368b8ebe9 [ 133.330579][ T6698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.330601][ T6698] RSP: 002b:00007f2369aac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 133.330623][ T6698] RAX: ffffffffffffffda RBX: 00007f2368db5fa0 RCX: 00007f2368b8ebe9 [ 133.330638][ T6698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 133.330652][ T6698] RBP: 00007f2368c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.330665][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.330679][ T6698] R13: 00007f2368db6038 R14: 00007f2368db5fa0 R15: 00007ffc3811b078 [ 133.330701][ T6698] [ 134.971417][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 135.109758][ T6724] FAULT_INJECTION: forcing a failure. [ 135.109758][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 135.132926][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.2.142 Tainted: G U syzkaller #0 PREEMPT(full) [ 135.132975][ T6724] Tainted: [U]=USER [ 135.132986][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.133003][ T6724] Call Trace: [ 135.133013][ T6724] [ 135.133023][ T6724] dump_stack_lvl+0x16c/0x1f0 [ 135.133067][ T6724] should_fail_ex+0x512/0x640 [ 135.133113][ T6724] should_failslab+0xc2/0x120 [ 135.133155][ T6724] __kmalloc_cache_node_noprof+0x6d/0x420 [ 135.133191][ T6724] ? mem_cgroup_css_alloc+0xa8f/0x1e80 [ 135.133224][ T6724] ? mem_cgroup_css_alloc+0xac2/0x1e80 [ 135.133259][ T6724] mem_cgroup_css_alloc+0xac2/0x1e80 [ 135.133294][ T6724] ? css_populate_dir+0x254/0x580 [ 135.133330][ T6724] cgroup_apply_control_enable+0x4b0/0xbb0 [ 135.133383][ T6724] cgroup_mkdir+0x5e7/0x11f0 [ 135.133433][ T6724] ? __pfx_cgroup_mkdir+0x10/0x10 [ 135.133479][ T6724] kernfs_iop_mkdir+0x111/0x190 [ 135.133524][ T6724] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 135.133565][ T6724] vfs_mkdir+0x590/0x8c0 [ 135.133596][ T6724] do_mkdirat+0x304/0x3e0 [ 135.133633][ T6724] ? __pfx_do_mkdirat+0x10/0x10 [ 135.133671][ T6724] ? getname_flags.part.0+0x1c5/0x550 [ 135.133723][ T6724] __x64_sys_mkdir+0xef/0x140 [ 135.133761][ T6724] do_syscall_64+0xcd/0x490 [ 135.133815][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.133845][ T6724] RIP: 0033:0x7f2368b8ebe9 [ 135.133893][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.133923][ T6724] RSP: 002b:00007f2369a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 135.133953][ T6724] RAX: ffffffffffffffda RBX: 00007f2368db6090 RCX: 00007f2368b8ebe9 [ 135.133973][ T6724] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 135.133993][ T6724] RBP: 00007f2368c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 135.134011][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.134030][ T6724] R13: 00007f2368db6128 R14: 00007f2368db6090 R15: 00007ffc3811b078 [ 135.134059][ T6724] [ 135.348744][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.725142][ T6731] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 136.344087][ T6750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.150'. [ 136.866214][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 137.224885][ T6777] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 137.236838][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 137.422019][ T6782] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 138.089371][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.161'. [ 138.958153][ T6815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 139.830504][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 139.955169][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 140.576795][ T6867] overlayfs: missing 'lowerdir' [ 140.806766][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 140.950573][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.184'. [ 141.200900][ T6895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 141.416296][ T6896] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 141.957893][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.191'. [ 142.077648][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 142.904128][ T6938] sg_read: process 199 (syz.0.194) changed security contexts after opening file descriptor, this is not allowed. [ 143.020652][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.196'. [ 143.181093][ T6948] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 143.266896][ T6952] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 143.279141][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.279200][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.865992][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 143.928230][ T6969] ipvlan1: entered allmulticast mode [ 143.945480][ T6969] veth0_vlan: entered allmulticast mode [ 144.092238][ T6979] FAULT_INJECTION: forcing a failure. [ 144.092238][ T6979] name failslab, interval 1, probability 0, space 0, times 0 [ 144.145774][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.2.205 Tainted: G U syzkaller #0 PREEMPT(full) [ 144.145808][ T6979] Tainted: [U]=USER [ 144.145815][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.145828][ T6979] Call Trace: [ 144.145835][ T6979] [ 144.145842][ T6979] dump_stack_lvl+0x16c/0x1f0 [ 144.145873][ T6979] should_fail_ex+0x512/0x640 [ 144.145912][ T6979] should_failslab+0xc2/0x120 [ 144.145941][ T6979] __kmalloc_cache_noprof+0x6a/0x3e0 [ 144.145963][ T6979] ? lock_release+0x201/0x2f0 [ 144.145990][ T6979] ? mem_cgroup_css_alloc+0x83a/0x1e80 [ 144.146014][ T6979] mem_cgroup_css_alloc+0x83a/0x1e80 [ 144.146037][ T6979] ? css_populate_dir+0x254/0x580 [ 144.146061][ T6979] cgroup_apply_control_enable+0x4b0/0xbb0 [ 144.146096][ T6979] cgroup_mkdir+0x5e7/0x11f0 [ 144.146129][ T6979] ? __pfx_cgroup_mkdir+0x10/0x10 [ 144.146161][ T6979] kernfs_iop_mkdir+0x111/0x190 [ 144.146191][ T6979] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 144.146220][ T6979] vfs_mkdir+0x590/0x8c0 [ 144.146240][ T6979] do_mkdirat+0x304/0x3e0 [ 144.146265][ T6979] ? __pfx_do_mkdirat+0x10/0x10 [ 144.146291][ T6979] ? getname_flags.part.0+0x1c5/0x550 [ 144.146325][ T6979] __x64_sys_mkdir+0xef/0x140 [ 144.146350][ T6979] do_syscall_64+0xcd/0x490 [ 144.146378][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.146399][ T6979] RIP: 0033:0x7f2368b8ebe9 [ 144.146414][ T6979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.146435][ T6979] RSP: 002b:00007f2369aac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 144.146454][ T6979] RAX: ffffffffffffffda RBX: 00007f2368db5fa0 RCX: 00007f2368b8ebe9 [ 144.146468][ T6979] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 144.146499][ T6979] RBP: 00007f2368c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.146513][ T6979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.146526][ T6979] R13: 00007f2368db6038 R14: 00007f2368db5fa0 R15: 00007ffc3811b078 [ 144.146547][ T6979] [ 144.165259][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 144.468000][ T6988] FAULT_INJECTION: forcing a failure. [ 144.468000][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 144.468044][ T6988] CPU: 1 UID: 0 PID: 6988 Comm: syz.3.208 Tainted: G U syzkaller #0 PREEMPT(full) [ 144.468085][ T6988] Tainted: [U]=USER [ 144.468095][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.468113][ T6988] Call Trace: [ 144.468122][ T6988] [ 144.468132][ T6988] dump_stack_lvl+0x16c/0x1f0 [ 144.468174][ T6988] should_fail_ex+0x512/0x640 [ 144.468219][ T6988] should_failslab+0xc2/0x120 [ 144.468256][ T6988] __kmalloc_cache_noprof+0x6a/0x3e0 [ 144.468288][ T6988] ? percpu_ref_init+0xec/0x410 [ 144.468325][ T6988] ? __pfx_obj_cgroup_release+0x10/0x10 [ 144.468355][ T6988] percpu_ref_init+0xec/0x410 [ 144.468390][ T6988] ? kasan_save_track+0x14/0x30 [ 144.468425][ T6988] mem_cgroup_css_online+0x7e/0x640 [ 144.468489][ T6988] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 144.468540][ T6988] online_css+0xaf/0x350 [ 144.468578][ T6988] cgroup_apply_control_enable+0x702/0xbb0 [ 144.468642][ T6988] cgroup_mkdir+0x5e7/0x11f0 [ 144.468693][ T6988] ? __pfx_cgroup_mkdir+0x10/0x10 [ 144.468740][ T6988] kernfs_iop_mkdir+0x111/0x190 [ 144.468785][ T6988] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 144.468829][ T6988] vfs_mkdir+0x590/0x8c0 [ 144.468861][ T6988] do_mkdirat+0x304/0x3e0 [ 144.468899][ T6988] ? __pfx_do_mkdirat+0x10/0x10 [ 144.468937][ T6988] ? getname_flags.part.0+0x1c5/0x550 [ 144.468987][ T6988] __x64_sys_mkdir+0xef/0x140 [ 144.469029][ T6988] do_syscall_64+0xcd/0x490 [ 144.469091][ T6988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.469124][ T6988] RIP: 0033:0x7ff94c18ebe9 [ 144.469147][ T6988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.469179][ T6988] RSP: 002b:00007ff94cf23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 144.469209][ T6988] RAX: ffffffffffffffda RBX: 00007ff94c3b6090 RCX: 00007ff94c18ebe9 [ 144.469230][ T6988] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 144.469249][ T6988] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 144.469267][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.469284][ T6988] R13: 00007ff94c3b6128 R14: 00007ff94c3b6090 R15: 00007ffd9c2d0fe8 [ 144.469312][ T6988] [ 145.008984][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.440120][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.211'. [ 146.007923][ T7024] capability: warning: `syz.2.216' uses 32-bit capabilities (legacy support in use) [ 146.520694][ T7045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.220'. [ 146.654899][ T7053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.224'. [ 146.697397][ T7051] FAULT_INJECTION: forcing a failure. [ 146.697397][ T7051] name failslab, interval 1, probability 0, space 0, times 0 [ 146.721661][ T7051] CPU: 1 UID: 0 PID: 7051 Comm: syz.3.222 Tainted: G U syzkaller #0 PREEMPT(full) [ 146.721698][ T7051] Tainted: [U]=USER [ 146.721705][ T7051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.721719][ T7051] Call Trace: [ 146.721725][ T7051] [ 146.721733][ T7051] dump_stack_lvl+0x16c/0x1f0 [ 146.721766][ T7051] should_fail_ex+0x512/0x640 [ 146.721802][ T7051] should_failslab+0xc2/0x120 [ 146.721833][ T7051] __kmalloc_cache_noprof+0x6a/0x3e0 [ 146.721862][ T7051] ? idr_replace+0xfa/0x170 [ 146.721897][ T7051] ? mem_cgroup_css_online+0x5c/0x640 [ 146.721950][ T7051] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 146.722000][ T7051] mem_cgroup_css_online+0x5c/0x640 [ 146.722049][ T7051] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 146.722110][ T7051] online_css+0xaf/0x350 [ 146.722140][ T7051] cgroup_apply_control_enable+0x702/0xbb0 [ 146.722193][ T7051] cgroup_mkdir+0x5e7/0x11f0 [ 146.722230][ T7051] ? __pfx_cgroup_mkdir+0x10/0x10 [ 146.722266][ T7051] kernfs_iop_mkdir+0x111/0x190 [ 146.722299][ T7051] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 146.722330][ T7051] vfs_mkdir+0x590/0x8c0 [ 146.722352][ T7051] do_mkdirat+0x304/0x3e0 [ 146.722379][ T7051] ? __pfx_do_mkdirat+0x10/0x10 [ 146.722407][ T7051] ? getname_flags.part.0+0x1c5/0x550 [ 146.722443][ T7051] __x64_sys_mkdir+0xef/0x140 [ 146.722470][ T7051] do_syscall_64+0xcd/0x490 [ 146.722500][ T7051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.722522][ T7051] RIP: 0033:0x7ff94c18ebe9 [ 146.722539][ T7051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.722569][ T7051] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 146.722590][ T7051] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 146.722604][ T7051] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 146.722618][ T7051] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 146.722631][ T7051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.722644][ T7051] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 146.722666][ T7051] [ 147.361992][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 147.496902][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 147.560229][ T7074] FAULT_INJECTION: forcing a failure. [ 147.560229][ T7074] name failslab, interval 1, probability 0, space 0, times 0 [ 147.599825][ T7074] CPU: 1 UID: 0 PID: 7074 Comm: syz.3.230 Tainted: G U syzkaller #0 PREEMPT(full) [ 147.599875][ T7074] Tainted: [U]=USER [ 147.599886][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.599906][ T7074] Call Trace: [ 147.599916][ T7074] [ 147.599928][ T7074] dump_stack_lvl+0x16c/0x1f0 [ 147.599974][ T7074] should_fail_ex+0x512/0x640 [ 147.600024][ T7074] should_failslab+0xc2/0x120 [ 147.600068][ T7074] __kmalloc_cache_noprof+0x6a/0x3e0 [ 147.600103][ T7074] ? rcu_is_watching+0x12/0xc0 [ 147.600135][ T7074] ? snd_pcm_oss_open+0x5eb/0x1400 [ 147.600189][ T7074] snd_pcm_oss_open+0x5eb/0x1400 [ 147.600258][ T7074] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 147.600322][ T7074] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 147.600362][ T7074] ? __pfx_default_wake_function+0x10/0x10 [ 147.600393][ T7074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.600429][ T7074] ? do_raw_spin_lock+0x12c/0x2b0 [ 147.600476][ T7074] ? rcu_is_watching+0x12/0xc0 [ 147.600504][ T7074] ? lock_release+0x201/0x2f0 [ 147.600540][ T7074] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 147.600589][ T7074] soundcore_open+0x409/0x580 [ 147.600630][ T7074] ? __pfx_soundcore_open+0x10/0x10 [ 147.600664][ T7074] chrdev_open+0x231/0x6a0 [ 147.600699][ T7074] ? __pfx_apparmor_file_open+0x10/0x10 [ 147.600726][ T7074] ? __pfx_chrdev_open+0x10/0x10 [ 147.600758][ T7074] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 147.600791][ T7074] do_dentry_open+0x97f/0x1530 [ 147.600823][ T7074] ? __pfx_chrdev_open+0x10/0x10 [ 147.600858][ T7074] vfs_open+0x82/0x3f0 [ 147.600895][ T7074] path_openat+0x1de4/0x2cb0 [ 147.600929][ T7074] ? __pfx_path_openat+0x10/0x10 [ 147.600961][ T7074] do_filp_open+0x20b/0x470 [ 147.600989][ T7074] ? __pfx_do_filp_open+0x10/0x10 [ 147.601027][ T7074] ? alloc_fd+0x471/0x7d0 [ 147.601056][ T7074] do_sys_openat2+0x11b/0x1d0 [ 147.601093][ T7074] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.601130][ T7074] ? rcu_is_watching+0x12/0xc0 [ 147.601154][ T7074] ? __fget_files+0x204/0x3c0 [ 147.601183][ T7074] __x64_sys_openat+0x174/0x210 [ 147.601221][ T7074] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.601277][ T7074] do_syscall_64+0xcd/0x490 [ 147.601311][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.601335][ T7074] RIP: 0033:0x7ff94c18ebe9 [ 147.601354][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.601378][ T7074] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.601402][ T7074] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 147.601418][ T7074] RDX: 0000000000080502 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 147.601433][ T7074] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 147.601448][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.601462][ T7074] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 147.601486][ T7074] [ 148.417397][ T7086] FAULT_INJECTION: forcing a failure. [ 148.417397][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 148.431978][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.0.232 Tainted: G U syzkaller #0 PREEMPT(full) [ 148.432022][ T7086] Tainted: [U]=USER [ 148.432031][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.432047][ T7086] Call Trace: [ 148.432056][ T7086] [ 148.432065][ T7086] dump_stack_lvl+0x16c/0x1f0 [ 148.432106][ T7086] should_fail_ex+0x512/0x640 [ 148.432147][ T7086] should_failslab+0xc2/0x120 [ 148.432192][ T7086] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 148.432228][ T7086] ? shmem_alloc_inode+0x25/0x50 [ 148.432271][ T7086] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 148.432310][ T7086] shmem_alloc_inode+0x25/0x50 [ 148.432347][ T7086] alloc_inode+0x61/0x240 [ 148.432388][ T7086] new_inode+0x22/0x1c0 [ 148.432428][ T7086] shmem_get_inode+0x19a/0xfb0 [ 148.432474][ T7086] shmem_tmpfile+0x58/0x180 [ 148.432516][ T7086] vfs_tmpfile+0x2bb/0x890 [ 148.432551][ T7086] path_openat+0x1683/0x2cb0 [ 148.432582][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.432616][ T7086] ? __pfx_path_openat+0x10/0x10 [ 148.432652][ T7086] do_filp_open+0x20b/0x470 [ 148.432689][ T7086] ? __pfx_do_filp_open+0x10/0x10 [ 148.432734][ T7086] ? _raw_spin_unlock+0x28/0x50 [ 148.432765][ T7086] ? alloc_fd+0x471/0x7d0 [ 148.432798][ T7086] do_sys_openat2+0x11b/0x1d0 [ 148.432844][ T7086] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.432898][ T7086] __x64_sys_open+0x153/0x1e0 [ 148.432944][ T7086] ? __pfx___x64_sys_open+0x10/0x10 [ 148.432994][ T7086] ? rcu_is_watching+0x12/0xc0 [ 148.433026][ T7086] do_syscall_64+0xcd/0x490 [ 148.433065][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.433094][ T7086] RIP: 0033:0x7f883ab8ebe9 [ 148.433117][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.433145][ T7086] RSP: 002b:00007f883b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 148.433182][ T7086] RAX: ffffffffffffffda RBX: 00007f883adb5fa0 RCX: 00007f883ab8ebe9 [ 148.433202][ T7086] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 148.433221][ T7086] RBP: 00007f883ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 148.433240][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.433257][ T7086] R13: 00007f883adb6038 R14: 00007f883adb5fa0 R15: 00007ffe11879b88 [ 148.433286][ T7086] [ 148.977327][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.235'. [ 149.020513][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 149.253389][ T7110] FAULT_INJECTION: forcing a failure. [ 149.253389][ T7110] name failslab, interval 1, probability 0, space 0, times 0 [ 149.277026][ T7108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 149.306111][ T7110] CPU: 1 UID: 0 PID: 7110 Comm: syz.3.238 Tainted: G U syzkaller #0 PREEMPT(full) [ 149.306161][ T7110] Tainted: [U]=USER [ 149.306172][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.306192][ T7110] Call Trace: [ 149.306202][ T7110] [ 149.306212][ T7110] dump_stack_lvl+0x16c/0x1f0 [ 149.306248][ T7110] should_fail_ex+0x512/0x640 [ 149.306294][ T7110] should_failslab+0xc2/0x120 [ 149.306325][ T7110] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 149.306351][ T7110] ? __pfx___might_resched+0x10/0x10 [ 149.306374][ T7110] ? __anon_vma_prepare+0xae/0x5e0 [ 149.306400][ T7110] __anon_vma_prepare+0xae/0x5e0 [ 149.306423][ T7110] ? __pfx___pte_alloc+0x10/0x10 [ 149.306455][ T7110] __vmf_anon_prepare+0x11c/0x240 [ 149.306490][ T7110] do_pte_missing+0x10bd/0x3ba0 [ 149.306512][ T7110] ? mtree_range_walk+0x718/0xc00 [ 149.306539][ T7110] __handle_mm_fault+0x152a/0x2a50 [ 149.306565][ T7110] ? __pfx___handle_mm_fault+0x10/0x10 [ 149.306590][ T7110] ? mt_validate+0x1d6/0x4210 [ 149.306626][ T7110] ? find_vma+0xbf/0x140 [ 149.306655][ T7110] ? __pfx_find_vma+0x10/0x10 [ 149.306686][ T7110] handle_mm_fault+0x589/0xd10 [ 149.306710][ T7110] __get_user_pages+0x551/0x34a0 [ 149.306749][ T7110] ? __pfx___get_user_pages+0x10/0x10 [ 149.306783][ T7110] ? __pfx___might_resched+0x10/0x10 [ 149.306808][ T7110] populate_vma_page_range+0x267/0x3f0 [ 149.306845][ T7110] ? __pfx_populate_vma_page_range+0x10/0x10 [ 149.306882][ T7110] ? __pfx_find_vma_intersection+0x10/0x10 [ 149.306925][ T7110] ? do_mmap+0x69c/0x1210 [ 149.306957][ T7110] __mm_populate+0x1d8/0x380 [ 149.306991][ T7110] ? __pfx___mm_populate+0x10/0x10 [ 149.307026][ T7110] ? up_write+0x1b2/0x520 [ 149.307060][ T7110] vm_mmap_pgoff+0x37f/0x470 [ 149.307092][ T7110] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 149.307126][ T7110] ? __x64_sys_futex+0x1e0/0x4c0 [ 149.307154][ T7110] ? __x64_sys_futex+0x1e9/0x4c0 [ 149.307182][ T7110] ksys_mmap_pgoff+0x7d/0x5c0 [ 149.307212][ T7110] ? xfd_validate_state+0x61/0x180 [ 149.307246][ T7110] __x64_sys_mmap+0x125/0x190 [ 149.307286][ T7110] do_syscall_64+0xcd/0x490 [ 149.307316][ T7110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.307337][ T7110] RIP: 0033:0x7ff94c18ebe9 [ 149.307353][ T7110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.307373][ T7110] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.307392][ T7110] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 149.307406][ T7110] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 149.307418][ T7110] RBP: 00007ff94c211e19 R08: 0000000000000002 R09: 0000000800008000 [ 149.307431][ T7110] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 149.307443][ T7110] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 149.307462][ T7110] [ 149.715806][ T7117] syz.1.241: vmalloc error: size 28672, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.753191][ T7117] CPU: 1 UID: 0 PID: 7117 Comm: syz.1.241 Tainted: G U syzkaller #0 PREEMPT(full) [ 149.753236][ T7117] Tainted: [U]=USER [ 149.753245][ T7117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.753269][ T7117] Call Trace: [ 149.753278][ T7117] [ 149.753288][ T7117] dump_stack_lvl+0x16c/0x1f0 [ 149.753328][ T7117] warn_alloc+0x248/0x3a0 [ 149.753363][ T7117] ? __pfx_warn_alloc+0x10/0x10 [ 149.753397][ T7117] ? alloc_pages_mpol+0x25a/0x550 [ 149.753434][ T7117] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 149.753472][ T7117] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 149.753532][ T7117] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 149.753584][ T7117] ? kernel_clone+0xfc/0x930 [ 149.753630][ T7117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.753669][ T7117] ? kernel_clone+0xfc/0x930 [ 149.753708][ T7117] __vmalloc_node_noprof+0xad/0xf0 [ 149.753737][ T7117] ? kernel_clone+0xfc/0x930 [ 149.753778][ T7117] copy_process+0x2c70/0x7690 [ 149.753815][ T7117] ? preempt_schedule_thunk+0x16/0x30 [ 149.753878][ T7117] ? try_to_wake_up+0xa67/0x1870 [ 149.753911][ T7117] ? __pfx_copy_process+0x10/0x10 [ 149.753947][ T7117] ? rcu_is_watching+0x12/0xc0 [ 149.753979][ T7117] ? lock_release+0x201/0x2f0 [ 149.754020][ T7117] ? futex_private_hash_put+0x11c/0x300 [ 149.754058][ T7117] kernel_clone+0xfc/0x930 [ 149.754094][ T7117] ? __pfx_futex_wake+0x10/0x10 [ 149.754135][ T7117] ? __pfx_kernel_clone+0x10/0x10 [ 149.754170][ T7117] ? __pfx_vfs_writev+0x10/0x10 [ 149.754212][ T7117] ? 0xffffffffff600000 [ 149.754231][ T7117] __do_sys_clone+0xce/0x120 [ 149.754277][ T7117] ? __pfx___do_sys_clone+0x10/0x10 [ 149.754318][ T7117] ? 0xffffffffff600000 [ 149.754346][ T7117] ? xfd_validate_state+0x61/0x180 [ 149.754391][ T7117] ? __pfx_do_writev+0x10/0x10 [ 149.754429][ T7117] do_syscall_64+0xcd/0x490 [ 149.754471][ T7117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.754504][ T7117] RIP: 0033:0x7f045438ebe9 [ 149.754528][ T7117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.754559][ T7117] RSP: 002b:00007f0455266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 149.754590][ T7117] RAX: ffffffffffffffda RBX: 00007f04545b5fa0 RCX: 00007f045438ebe9 [ 149.754610][ T7117] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 149.754630][ T7117] RBP: 00007f0454411e19 R08: 0000000000000006 R09: 0000000000000000 [ 149.754649][ T7117] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 149.754669][ T7117] R13: 00007f04545b6038 R14: 00007f04545b5fa0 R15: 00007ffc88b42dd8 [ 149.754694][ T7117] ? 0xffffffffff600000 [ 149.754720][ T7117] [ 149.754731][ T7117] Mem-Info: [ 150.136536][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 150.173654][ T7117] active_anon:20940 inactive_anon:0 isolated_anon:0 [ 150.173654][ T7117] active_file:15998 inactive_file:40494 isolated_file:0 [ 150.173654][ T7117] unevictable:768 dirty:205 writeback:0 [ 150.173654][ T7117] slab_reclaimable:10572 slab_unreclaimable:93522 [ 150.173654][ T7117] mapped:34746 shmem:13107 pagetables:1168 [ 150.173654][ T7117] sec_pagetables:0 bounce:0 [ 150.173654][ T7117] kernel_misc_reclaimable:0 [ 150.173654][ T7117] free:1313176 free_pcp:10890 free_cma:0 [ 150.219139][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.274256][ T7117] Node 0 active_anon:83660kB inactive_anon:0kB active_file:63992kB inactive_file:161768kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138984kB dirty:812kB writeback:0kB shmem:52792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11432kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.332902][ T7117] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 150.362816][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.444325][ T7117] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.523601][ T7117] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 150.529420][ T7117] Node 0 DMA32 free:1331788kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98616kB inactive_anon:0kB active_file:63992kB inactive_file:160440kB unevictable:1536kB writepending:812kB present:3129332kB managed:2539600kB mlocked:0kB bounce:0kB free_pcp:25584kB local_pcp:13412kB free_cma:0kB [ 150.561748][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.592431][ T7117] lowmem_reserve[]: 0 0 1 1 1 [ 150.607089][ T7117] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 150.670872][ T7117] lowmem_reserve[]: 0 0 0 0 0 [ 150.713650][ T7117] Node 1 Normal free:3892748kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17892kB local_pcp:11104kB free_cma:0kB [ 150.744978][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.810175][ T7117] lowmem_reserve[]: 0 0 0 0 0 [ 150.825329][ T7117] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.874289][ T7117] Node 0 DMA32: 1581*4kB (UME) 621*8kB (UM) 498*16kB (UE) 1*32kB (M) 2*64kB (UE) 69*128kB (UM) 119*256kB (UM) 48*512kB (UME) 25*1024kB (UME) 12*2048kB (UME) 291*4096kB (UM) = 1325404kB [ 150.938783][ T7117] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 151.000315][ T7117] Node 1 Normal: 187*4kB (UM) 50*8kB (UME) 35*16kB (UME) 80*32kB (UME) 30*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UM) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3892780kB [ 151.053141][ T7117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.104085][ T7117] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 151.113904][ T7117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.123873][ T7117] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.133372][ T7117] 74140 total pagecache pages [ 151.138047][ T7117] 0 pages in swap cache [ 151.142209][ T7117] Free swap = 120804kB [ 151.148016][ T7117] Total swap = 124996kB [ 151.152198][ T7117] 2097051 pages RAM [ 151.156471][ T7117] 0 pages HighMem/MovableOnly [ 151.161223][ T7117] 430189 pages reserved [ 151.165748][ T7117] 0 pages cma reserved [ 151.392440][ T7147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'. [ 151.465686][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'. [ 151.737176][ T7160] FAULT_INJECTION: forcing a failure. [ 151.737176][ T7160] name failslab, interval 1, probability 0, space 0, times 0 [ 151.758491][ T7160] CPU: 0 UID: 0 PID: 7160 Comm: syz.3.252 Tainted: G U syzkaller #0 PREEMPT(full) [ 151.758535][ T7160] Tainted: [U]=USER [ 151.758543][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.758556][ T7160] Call Trace: [ 151.758563][ T7160] [ 151.758571][ T7160] dump_stack_lvl+0x16c/0x1f0 [ 151.758604][ T7160] should_fail_ex+0x512/0x640 [ 151.758639][ T7160] should_failslab+0xc2/0x120 [ 151.758670][ T7160] __kmalloc_cache_noprof+0x6a/0x3e0 [ 151.758693][ T7160] ? idr_replace+0xfa/0x170 [ 151.758718][ T7160] ? mem_cgroup_css_online+0x5c/0x640 [ 151.758757][ T7160] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 151.758818][ T7160] mem_cgroup_css_online+0x5c/0x640 [ 151.758867][ T7160] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 151.758918][ T7160] online_css+0xaf/0x350 [ 151.758959][ T7160] cgroup_apply_control_enable+0x702/0xbb0 [ 151.759011][ T7160] cgroup_mkdir+0x5e7/0x11f0 [ 151.759066][ T7160] ? __pfx_cgroup_mkdir+0x10/0x10 [ 151.759132][ T7160] kernfs_iop_mkdir+0x111/0x190 [ 151.759179][ T7160] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 151.759223][ T7160] vfs_mkdir+0x590/0x8c0 [ 151.759252][ T7160] do_mkdirat+0x304/0x3e0 [ 151.759281][ T7160] ? __pfx_do_mkdirat+0x10/0x10 [ 151.759309][ T7160] ? getname_flags.part.0+0x1c5/0x550 [ 151.759348][ T7160] __x64_sys_mkdir+0xef/0x140 [ 151.759376][ T7160] do_syscall_64+0xcd/0x490 [ 151.759407][ T7160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.759430][ T7160] RIP: 0033:0x7ff94c18ebe9 [ 151.759448][ T7160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.759470][ T7160] RSP: 002b:00007ff94cf44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 151.759491][ T7160] RAX: ffffffffffffffda RBX: 00007ff94c3b5fa0 RCX: 00007ff94c18ebe9 [ 151.759507][ T7160] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 151.759521][ T7160] RBP: 00007ff94c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 151.759536][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.759549][ T7160] R13: 00007ff94c3b6038 R14: 00007ff94c3b5fa0 R15: 00007ffd9c2d0fe8 [ 151.759571][ T7160] [ 151.977974][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.045522][ T7158] FAULT_INJECTION: forcing a failure. [ 152.045522][ T7158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.058827][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.253 Tainted: G U syzkaller #0 PREEMPT(full) [ 152.058859][ T7158] Tainted: [U]=USER [ 152.058866][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.058879][ T7158] Call Trace: [ 152.058886][ T7158] [ 152.058893][ T7158] dump_stack_lvl+0x16c/0x1f0 [ 152.058924][ T7158] should_fail_ex+0x512/0x640 [ 152.058957][ T7158] should_fail_alloc_page+0xe7/0x130 [ 152.058988][ T7158] prepare_alloc_pages+0x3c2/0x610 [ 152.059026][ T7158] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 152.059052][ T7158] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.059107][ T7158] ? stack_depot_save_flags+0x3de/0x9c0 [ 152.059140][ T7158] ? rcu_is_watching+0x12/0xc0 [ 152.059163][ T7158] ? rcu_is_watching+0x12/0xc0 [ 152.059186][ T7158] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 152.059224][ T7158] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 152.059251][ T7158] ? stack_depot_save_flags+0x3de/0x9c0 [ 152.059285][ T7158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.059315][ T7158] ? kasan_save_stack+0x42/0x60 [ 152.059340][ T7158] ? kasan_save_stack+0x33/0x60 [ 152.059366][ T7158] ? kasan_save_track+0x14/0x30 [ 152.059391][ T7158] ? __kasan_kmalloc+0xaa/0xb0 [ 152.059415][ T7158] ? mon_bin_open+0x1a8/0x4a0 [ 152.059444][ T7158] ? do_sys_openat2+0x11b/0x1d0 [ 152.059479][ T7158] ? __x64_sys_openat+0x174/0x210 [ 152.059514][ T7158] ? do_syscall_64+0xcd/0x490 [ 152.059543][ T7158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.059569][ T7158] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.059605][ T7158] ? policy_nodemask+0xea/0x4e0 [ 152.059636][ T7158] alloc_pages_mpol+0x1fb/0x550 [ 152.059667][ T7158] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.059701][ T7158] alloc_pages_noprof+0x131/0x390 [ 152.059732][ T7158] get_zeroed_page_noprof+0x18/0xb0 [ 152.059772][ T7158] mon_alloc_buff+0xce/0x1b0 [ 152.059798][ T7158] ? kasan_save_track+0x14/0x30 [ 152.059826][ T7158] mon_bin_open+0x207/0x4a0 [ 152.059854][ T7158] ? __pfx_mon_bin_open+0x10/0x10 [ 152.059882][ T7158] chrdev_open+0x231/0x6a0 [ 152.059913][ T7158] ? __pfx_chrdev_open+0x10/0x10 [ 152.059944][ T7158] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 152.059973][ T7158] do_dentry_open+0x97f/0x1530 [ 152.060001][ T7158] ? __pfx_chrdev_open+0x10/0x10 [ 152.060033][ T7158] vfs_open+0x82/0x3f0 [ 152.060068][ T7158] path_openat+0x1de4/0x2cb0 [ 152.060099][ T7158] ? __pfx_path_openat+0x10/0x10 [ 152.060130][ T7158] do_filp_open+0x20b/0x470 [ 152.060156][ T7158] ? __pfx_do_filp_open+0x10/0x10 [ 152.060193][ T7158] ? alloc_fd+0x471/0x7d0 [ 152.060220][ T7158] do_sys_openat2+0x11b/0x1d0 [ 152.060255][ T7158] ? __pfx_do_sys_openat2+0x10/0x10 [ 152.060302][ T7158] ? lock_release+0x201/0x2f0 [ 152.060336][ T7158] __x64_sys_openat+0x174/0x210 [ 152.060371][ T7158] ? __pfx___x64_sys_openat+0x10/0x10 [ 152.060412][ T7158] do_syscall_64+0xcd/0x490 [ 152.060442][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.060465][ T7158] RIP: 0033:0x7f883ab8ebe9 [ 152.060482][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.060503][ T7158] RSP: 002b:00007f883b9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 152.060524][ T7158] RAX: ffffffffffffffda RBX: 00007f883adb5fa0 RCX: 00007f883ab8ebe9 [ 152.060539][ T7158] RDX: 0000000000000080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 152.060554][ T7158] RBP: 00007f883ac11e19 R08: 0000000000000000 R09: 0000000000000000 [ 152.060567][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.060580][ T7158] R13: 00007f883adb6038 R14: 00007f883adb5fa0 R15: 00007ffe11879b88 [ 152.060601][ T7158] [ 152.420714][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.900670][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 153.459045][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 153.784658][ T7207] FAULT_INJECTION: forcing a failure. [ 153.784658][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 153.859982][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.1.266 Tainted: G U syzkaller #0 PREEMPT(full) [ 153.860025][ T7207] Tainted: [U]=USER [ 153.860033][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.860047][ T7207] Call Trace: [ 153.860054][ T7207] [ 153.860062][ T7207] dump_stack_lvl+0x16c/0x1f0 [ 153.860096][ T7207] should_fail_ex+0x512/0x640 [ 153.860133][ T7207] should_failslab+0xc2/0x120 [ 153.860167][ T7207] __kmalloc_cache_noprof+0x6a/0x3e0 [ 153.860191][ T7207] ? percpu_ref_init+0xec/0x410 [ 153.860222][ T7207] ? __pfx_css_release+0x10/0x10 [ 153.860254][ T7207] percpu_ref_init+0xec/0x410 [ 153.860295][ T7207] ? init_and_link_css+0x32c/0x700 [ 153.860319][ T7207] cgroup_apply_control_enable+0x50b/0xbb0 [ 153.860357][ T7207] cgroup_mkdir+0x5e7/0x11f0 [ 153.860393][ T7207] ? __pfx_cgroup_mkdir+0x10/0x10 [ 153.860434][ T7207] kernfs_iop_mkdir+0x111/0x190 [ 153.860469][ T7207] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 153.860499][ T7207] vfs_mkdir+0x590/0x8c0 [ 153.860520][ T7207] do_mkdirat+0x304/0x3e0 [ 153.860548][ T7207] ? __pfx_do_mkdirat+0x10/0x10 [ 153.860578][ T7207] ? getname_flags.part.0+0x1c5/0x550 [ 153.860614][ T7207] __x64_sys_mkdir+0xef/0x140 [ 153.860641][ T7207] do_syscall_64+0xcd/0x490 [ 153.860671][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.860694][ T7207] RIP: 0033:0x7f045438ebe9 [ 153.860710][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.860732][ T7207] RSP: 002b:00007f0455245038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 153.860752][ T7207] RAX: ffffffffffffffda RBX: 00007f04545b6090 RCX: 00007f045438ebe9 [ 153.860767][ T7207] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 153.860780][ T7207] RBP: 00007f0454411e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.860793][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.860812][ T7207] R13: 00007f04545b6128 R14: 00007f04545b6090 R15: 00007ffc88b42dd8 [ 153.860834][ T7207] [ 154.146916][ T9] ------------[ cut here ]------------ [ 154.152440][ T9] WARNING: CPU: 0 PID: 9 at kernel/cgroup/rstat.c:488 css_rstat_exit+0x368/0x470 [ 154.161997][ T9] Modules linked in: [ 154.166279][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U syzkaller #0 PREEMPT(full) [ 154.177034][ T9] Tainted: [U]=USER [ 154.180857][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.190988][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 154.197145][ T9] RIP: 0010:css_rstat_exit+0x368/0x470 [ 154.202935][ T9] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 154.222662][ T9] RSP: 0018:ffffc900000e7bc0 EFLAGS: 00010293 [ 154.229383][ T9] RAX: 0000000000000000 RBX: ffff88814049ce00 RCX: ffff8881246c4000 [ 154.237811][ T9] RDX: ffff88801e2c8000 RSI: ffffffff81b405c7 RDI: ffffffff8df57e60 [ 154.245822][ T9] RBP: ffff88814049ce08 R08: 0000000000000005 R09: 0000000000000007 [ 154.253926][ T9] R10: 0000000000000000 R11: ffffffff9b0a6230 R12: ffff88814049ce20 [ 154.261964][ T9] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 154.269995][ T9] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 154.278991][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.285629][ T9] CR2: 0000555586090808 CR3: 0000000074d56000 CR4: 00000000003526f0 [ 154.293668][ T9] Call Trace: [ 154.296973][ T9] [ 154.299931][ T9] css_free_rwork_fn+0x80/0x12e0 [ 154.304986][ T9] ? rcu_is_watching+0x12/0xc0 [ 154.309789][ T9] process_one_work+0x9cf/0x1b70 [ 154.314829][ T9] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 154.320913][ T9] ? __pfx_process_one_work+0x10/0x10 [ 154.326743][ T9] ? assign_work+0x1a0/0x250 [ 154.331353][ T9] worker_thread+0x6c8/0xf10 [ 154.335980][ T9] ? __pfx_worker_thread+0x10/0x10 [ 154.341110][ T9] kthread+0x3c5/0x780 [ 154.345219][ T9] ? __pfx_kthread+0x10/0x10 [ 154.349839][ T9] ? rcu_is_watching+0x12/0xc0 [ 154.354644][ T9] ? __pfx_kthread+0x10/0x10 [ 154.359315][ T9] ret_from_fork+0x5d4/0x6f0 [ 154.363991][ T9] ? __pfx_kthread+0x10/0x10 [ 154.368603][ T9] ret_from_fork_asm+0x1a/0x30 [ 154.373432][ T9] [ 154.376451][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.383751][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G U syzkaller #0 PREEMPT(full) [ 154.394461][ T9] Tainted: [U]=USER [ 154.398270][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.408329][ T9] Workqueue: cgroup_destroy css_free_rwork_fn [ 154.414424][ T9] Call Trace: [ 154.417698][ T9] [ 154.420627][ T9] dump_stack_lvl+0x3d/0x1f0 [ 154.425226][ T9] vpanic+0x6e8/0x7a0 [ 154.429224][ T9] ? __pfx_vpanic+0x10/0x10 [ 154.433755][ T9] ? css_rstat_exit+0x368/0x470 [ 154.438626][ T9] panic+0xca/0xd0 [ 154.442357][ T9] ? __pfx_panic+0x10/0x10 [ 154.446784][ T9] ? check_panic_on_warn+0x1f/0xb0 [ 154.451911][ T9] check_panic_on_warn+0xab/0xb0 [ 154.456867][ T9] __warn+0xf6/0x3c0 [ 154.460796][ T9] ? css_rstat_exit+0x368/0x470 [ 154.465651][ T9] report_bug+0x3c3/0x580 [ 154.469987][ T9] ? css_rstat_exit+0x368/0x470 [ 154.474861][ T9] handle_bug+0x184/0x210 [ 154.479223][ T9] exc_invalid_op+0x17/0x50 [ 154.483744][ T9] asm_exc_invalid_op+0x1a/0x20 [ 154.488605][ T9] RIP: 0010:css_rstat_exit+0x368/0x470 [ 154.494078][ T9] Code: 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 0e 01 00 00 49 c7 85 70 05 00 00 00 00 00 00 e9 00 ff ff ff e8 19 08 07 00 90 <0f> 0b 90 e9 3e ff ff ff e8 0b 08 07 00 90 0f 0b 90 e9 30 ff ff ff [ 154.513722][ T9] RSP: 0018:ffffc900000e7bc0 EFLAGS: 00010293 [ 154.519798][ T9] RAX: 0000000000000000 RBX: ffff88814049ce00 RCX: ffff8881246c4000 [ 154.527774][ T9] RDX: ffff88801e2c8000 RSI: ffffffff81b405c7 RDI: ffffffff8df57e60 [ 154.535768][ T9] RBP: ffff88814049ce08 R08: 0000000000000005 R09: 0000000000000007 [ 154.543749][ T9] R10: 0000000000000000 R11: ffffffff9b0a6230 R12: ffff88814049ce20 [ 154.551723][ T9] R13: 0000000000000000 R14: 0000000000000003 R15: dffffc0000000000 [ 154.559703][ T9] ? css_rstat_exit+0x367/0x470 [ 154.564576][ T9] css_free_rwork_fn+0x80/0x12e0 [ 154.569537][ T9] ? rcu_is_watching+0x12/0xc0 [ 154.574315][ T9] process_one_work+0x9cf/0x1b70 [ 154.579281][ T9] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 154.584927][ T9] ? __pfx_process_one_work+0x10/0x10 [ 154.590339][ T9] ? assign_work+0x1a0/0x250 [ 154.594946][ T9] worker_thread+0x6c8/0xf10 [ 154.599548][ T9] ? __pfx_worker_thread+0x10/0x10 [ 154.604662][ T9] kthread+0x3c5/0x780 [ 154.608767][ T9] ? __pfx_kthread+0x10/0x10 [ 154.613396][ T9] ? rcu_is_watching+0x12/0xc0 [ 154.618164][ T9] ? __pfx_kthread+0x10/0x10 [ 154.622768][ T9] ret_from_fork+0x5d4/0x6f0 [ 154.627376][ T9] ? __pfx_kthread+0x10/0x10 [ 154.631978][ T9] ret_from_fork_asm+0x1a/0x30 [ 154.636758][ T9] [ 154.640119][ T9] Kernel Offset: disabled [ 154.644454][ T9] Rebooting in 86400 seconds..