last executing test programs: 5.482312074s ago: executing program 1 (id=1660): bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x400008, 0x40000000000000df, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c1200030000000004a3677337f9ecba075f6bba441b1011", 0x46}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) 4.465301338s ago: executing program 2 (id=1666): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0xaf01, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) sendfile$auto(r3, r0, &(0x7f0000000040)=0x7, 0x3) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x400000f2, 0x9, 0x3b0}]}) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) madvise$auto_MADV_DOFORK(0x5, 0x80000001, 0xb) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f00000001c0)={0x0, 0x0, [{0x0, 0xcd6c, 0xd}, {0x84, 0x8001, 0x2}, {0x424, 0x401, 0x545df35e}, {0x8000, 0x4, 0x6}, {0xf6a, 0x50, 0x2}, {0x1, 0x0, 0x2}]}) r6 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/interfaces\x00', 0x1, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x6, 0x0, 0x9, 0x9}, 0x800}, 0x10a, 0x8, 0x0) writev$auto(r6, &(0x7f0000000140)={0x0, 0x1}, 0x4) 4.284688638s ago: executing program 1 (id=1667): r0 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000300)={0x4}, 0x70, 0x6) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r1) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = geteuid() sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000018c0)={0x1618, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x2bd, 0x4, 0x0, 0x1, [@nested={0xff, 0x63, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @u32=0x4}, @generic="0ed0b011140741556d788d511f2ccb539a53073f9014f5f13d756b", @typed={0xc, 0x13b, 0x0, 0x0, @u64=0x81}, @nested={0x4, 0x4c}, @nested={0xb7, 0x2d, 0x0, 0x1, [@generic="32c15506466b13567d4733164599881f4fbfd7d07d0e8adfebffaf3db6cf484ed8f8e17fafb606b43cd2bab584c8648abcb87a9da26974a0db252adf6b549dd48a56dbbc8e2a11aaa7eb8f8feede4514bfc095fe8619be93a31ff31303cd740d932a8a29943015033ab4653914584177ef4cc12a844eddceba15be108e210f1cdeefc97d60d04b", @nested={0x2c, 0xce, 0x0, 0x1, [@generic="bd0074b41035190f2b4ea367ae41f3c73bf19eacce9b51ec3cc0011c38c023e6f5ffecba", @nested={0x4, 0xa4}]}]}, @nested={0x4, 0xc0}, @nested={0x4, 0x14d}, @typed={0x8, 0xe1, 0x0, 0x0, @fd=r0}]}, @nested={0x18, 0x13f, 0x0, 0x1, [@nested={0x4, 0x11e}, @typed={0x8, 0xc, 0x0, 0x0, @uid=r3}, @typed={0x6, 0x1f, 0x0, 0x0, @str='{\x00'}]}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x73, 0x0, 0x0, @u32=0x400}, @nested={0x130, 0x69, 0x0, 0x1, [@generic="33891611b94fb41c9185b36d8ce33c0797ccf76d79ed21d6307e6779d7ae4d36756041d3bb4c24259837368e6475a0712055f65bb5f8b255bd99", @nested={0x4, 0xdd}, @typed={0xc, 0xd1, 0x0, 0x0, @str='nl80211\x00'}, @generic="5b6aa25f64bcd45c898abf7152e425c73a2541e4da112b043cf28e7909f220a764204808ea47eda9ef1b443cb38e39bbd639b19a711bad8ca1b6108ebf6d16310e1d4caa72aaeb742648471936c838ca2fbb2bb354d8e3ae24671a0e21a68edbe0a388f5bb6b9a6340defb91faa102cd47a258e53067146ad109d19c10ce9dfd182f5f73425bcf1c37bb861a25b9afa6727f5b28dd389b76debb1d3701a7c12165a86d4d213a6bb48f0a260391fb111fc05d683590a051717597ee80d6266e8d65e6fe09907a09d3ab3cd6f5eb4df68d951c", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x8b}]}, @generic="1aa39ac9f17dc7eb4a9fd4b685ec0ba02579d4f52791d409b23ec4ce4ccbb7d99ef4b07c4eff569a4f1c6826418351976f86ed31846b061f9518c3d0b97927895e58c07afb0f480f8f4ee241fb664da78bae9018ecdf525852", @nested={0x8, 0x135, 0x0, 0x1, [@nested={0x4, 0x12d}]}]}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x1}, @OVS_VPORT_ATTR_OPTIONS={0x12e0, 0x4, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @u32}, @typed={0x8, 0x135, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xc5, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="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", @typed={0x6, 0x11d, 0x0, 0x0, @str='*\x00'}, @generic="07b8cb69d9440f73c7cedc6bbd8b29c82f008d3e2dd31fc8ca9387b0bc572f9d23f6476e0266f6077aa44daec26879f4dbf151d8964f094faf27989b69b5ab3847940054628837b36cb1e081217dea33050145c3625e10b07b1c0bebf3e006415b0004624bebb0b7d8c92d529ffdae06fc13681bc5f84cf961976726404d78ed81b47862d4de661e66b6d958bfb469ac40b15c7378a0a1723f7eaec95cad1544cdece3fdd2aa107f96d395a3031702b880a8fe9b93ff0060fbc74cf735df55a232e9e7c9779064e74921848fc6439e8a67dcdc1be0441aca", @nested={0x1dc, 0xf0, 0x0, 0x1, [@nested={0x4, 0x14b}, @generic="6e254241f83845ac47e6c35c2eb2eef436706eefa51ee7aca55385a5e0944ec7f9476a8864da5fc4db036bed05ddd3d1d87d9e", @generic="655146f7f28d9eb5dc6963cb379797a5eebe9c43eceefe6e", @generic="5a5f74f518e709e393707a31805a0e1f4323db86878a3f54b81cb44d25aeb3a67450811067591789020b39bb6b327487d38fdb7d0841ab9975cac70124fdbc94b50f86b1293c7949232582630a31bc15c614896f837411d15a81b243285a85756fe53df2ceb4a127579ad1bb623c336086c804bfdb2c1b956a98bca09671ff74c6786ba00bf3b9d3ddc6155e9eb3ae79ae74e027abb355ef573e04e2edc3a514b83995234b18ac0f5eb817c1c596ad9d52678a84e21f3bc47bc9c0b9f77a44c3159abf10e027812a246f7c5896043f7050d107bfe9ed08", @generic="aa67ff2e0eb30bc00c22c8f39e9ed1b47ee052a1a714a3b566e45e8e8749e99fad1653c49c13c44e33ceaa356170b917e7992a184e69e0d7efa23245ab2a97d63bf986dfb076f74adba7f061cf4ec77feb90b9e33adc6ea4510f4e942d3751cc9fc06b278aa324f68522eb0ba8a2a1ef6f14b0e76636899001d789bf8c8398d24c1aff74e6674d0da88ac3e6fc4984c63293c449d770a974e783b63112b2d7d3b6dda7561c3aa1e2c809212718cb4c4262ea"]}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r0}]}, @OVS_VPORT_ATTR_NETNSID={0x8, 0x9, 0x3}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x4}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x3, 0x5, 0x200, 0x10, 0xffff, 0x8, 0x4, 0x1}}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x1000}]}, 0x1618}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) read$auto_regulator_summary_fops_(r4, 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) 4.14142997s ago: executing program 2 (id=1668): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x0, 0x2000000005, 0x6) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) r3 = socket(0xa, 0x2, 0x73) mknod$auto(&(0x7f0000000180)='./file0\x00', 0x1001, 0x804) open(&(0x7f0000000000)='./file0\x00', 0x28400, 0x82) open(&(0x7f00000001c0)='./file0\x00', 0x40841, 0x118) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socketpair$auto(0x4004, 0x5, 0xfffffffc, 0x0) open(0x0, 0x0, 0x65) socket(0x840000000002, 0x3, 0xff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendto$auto(r3, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001300)=""/4096, 0x1000) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.48103438s ago: executing program 2 (id=1671): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x5, 0x0, 0x7, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x1000b, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x9, 0x3) msgsnd$auto(0x7d, 0x0, 0x9, 0x9) syz_genetlink_get_family_id$auto_macsec(0x0, r1) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x0, 0x4, 0x52, 0xffffffffffffffff, 0x800048000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) io_uring_setup$auto(0xe1f, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) socket(0x2b, 0x1, 0x0) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffff98, 0xf, 0x8, 0x2}, 0x0, 0x0, 0x9, 0x247, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0xff, 0x9, @raw}) 3.285448267s ago: executing program 3 (id=1672): setresuid$auto(0x8, 0x8, 0x0) r0 = setfsuid$auto(0xee00) unshare$auto(0x7) setreuid$auto(r0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = getpid() prctl$auto(0x3e, 0x1, r2, 0x3, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4) r4 = pidfd_open$auto(0x1, 0x0) unshare$auto(0xd9d) setns(r4, 0x8000000) mmap$auto(0xe, 0x20009, 0x5, 0x8011, 0xffffffffffffffff, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mbind$auto(0xfffffffffffff000, 0x100000004, 0xfffffffe, 0x0, 0x2000000000006, 0x1) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/ip_vs_conn_sync\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000380)=""/23, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = getegid() r7 = waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r0, r6, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r7, @raw=0x5, 0x5, 0x0, 0x0, 0x0}) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0101, 0x15) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) 2.925585007s ago: executing program 2 (id=1673): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.5/usb20/ep_00/interval\x00', 0x4000, 0x0) sendfile$auto(r0, r0, 0x0, 0x2400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353) unlink$auto(&(0x7f00000000c0)='#(//\x00') shutdown$auto(r1, 0x1) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$auto(r3, 0xc0045543, r4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) unshare$auto(0x7) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r5, 0xb21064a7, 0x20000a) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) 2.92351422s ago: executing program 1 (id=1674): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/snmp\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40000, 0x300) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x64e000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nr_requests\x00', 0x129102, 0x0) read$auto(r1, 0x0, 0x18) write$auto(r1, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xf, 0x0) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0) lseek$auto(r2, 0x9, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_fastopen_key\x00', 0x181081, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r4 = fsopen$auto(0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}, @HWSIM_ATTR_NO_VIF={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x40004) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1d8, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}, @HWSIM_ATTR_PERM_ADDR={0xd8, 0x16, "93057db45397b55f89b533d800d138db3e9ca1e38d28447f5bd877cfa8903aedbfc18699c20bcbcfce9ec52e29286a200026a11d7381e105b8183dd772576179fd9fb3a8c9e076011fe941bd93aa7f6b941d47d7f3e1eab6aa61142a72e4cab61242b94037288909beea9a84d1e7dc7add70990f339b1ac938080ef7c87f7c9e53a1cc934b2cf9aa725994f9524028678d01b6c77cda834b0381e19f1a33ed966410de47b0e147c75c7d8009a5805fc354117d57d7771f0b5fae9529b476aeae37c66f543dbf97a10a5c0fd921a848c00647bcee"}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_PERM_ADDR={0xdf, 0x16, "29d9cc5843738ecaa05ab5fa5141e35feafd15001b0b33ad441855497bbb8c86b0937807de09e62fe285c5575042d65b8915bfefedc53d277681c8a7cc1e66f61e1098653b4df8d2f5f1c590da50994d892b560eeecc69f8526055d8ab7f89f090eb33200136a7cf9dc30c2f25194c3f2d3f82e78922035c02ae8996432967e9704815315fff4aa03735d7856d1869b24a27f15cff6ac83d520279256b22aff73f059f63669b0773db2ab321801831a803f514cee532c93123ac280f185733701f40322d25a2cae065528dfa7dda6b18c46a49163ddbadaa7daf5e"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048001) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x3, 0x3, 0x0, &(0x7f0000000000)=0x8) 2.663675947s ago: executing program 0 (id=1675): bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x400008, 0x40000000000000df, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c120003000000000ba3677337f9ecba075f6bba441b1011", 0x46}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) 1.973835835s ago: executing program 0 (id=1676): mmap$auto(0x0, 0x6, 0x7, 0x9b72, 0x2, 0x80000008000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vbi5\x00', 0x50c81, 0x0) ioctl$auto(r0, 0xc0205649, 0x4) 1.863825417s ago: executing program 2 (id=1677): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x408802, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) socket(0x1e, 0x4, 0xfffffffc) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9602003a07cee0c6cc8285e33b2fd3d6f719278e119d3eed5dad33c658bf1e6d564cad8a9bb531ec68eb54c3d4364e104983ab850afceaec462f1d9c4ac75bf917a72c109fad4c82305a7be0f1d54a3de7ffd000791852fdb9469cc654ccb7de785bdf7b49b424a1c33d24ec58943b3a6491bd4079347f3e30409ab982de7ef363ca59711e223823246eb5506490790b16a18d89e18d11d1e1d1e129d445284d73207e7cc5db44d73f23f8a28585acde493be5bb2623d2c30ee714d1b80dad92948797bba65d92f7fd0ecb0dbd9034eaae53c40bbceb369c3157cde635125bcfaabaecb2552bceeab9b2", @ANYRES16=r2, @ANYBLOB="010326bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x400000000009b72, 0x2, 0x8000000000000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x10000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1200", @ANYRESHEX=r4, @ANYRES64=r2], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x4, 0x0, 0x29, 0x0, 0x0, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty22\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) 1.69855343s ago: executing program 0 (id=1678): mmap$auto(0x0, 0x4, 0xde, 0xaf5, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x2042, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0, 0xee00, 0x5, 0x4, 0x101, 0x1}, 0x7, 0x885, 0x7, 0x4, @inferred=0x0, @inferred, 0x6, 0x0, &(0x7f0000000080)="e108d55f902a93dc87ec4e8b03b1f6eb977c2dd90198631459ab57cdf47f0fef5711a378126fe312cc1252d1c3be46d9de256ad71b8c2870dc16679b3c005f07eca03d779cd9c6c8ea0a59be105ac174e7ea25f3a03af8f26f40e6e54496bf07b3b90f8401a21c2ff07a11409a6624441953b3508aeb313f39dcacb4ea2c5f", &(0x7f0000000100)="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"}) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x8, 0x0) sendmsg$auto_IPVS_CMD_SET_DEST(r2, &(0x7f0000002540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f0000001180)={0x12a8, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x10df, 0x1, 0x0, 0x1, [@generic="ed55cfd73a9fde15c7f6bdfd005d7ae8f92965c2dae7ebdb745159ef726825a980e071b9e9664ffb85abb0cca26fe2416e9121bf93692f", @nested={0x2d, 0xf4, 0x0, 0x1, [@generic="2c33c5fa6ad5d2b8ed427951b06aea291e0f72ffe59d3dd0f26b1179af41bce3cc564bac5d", @nested={0x4, 0x127}]}, @nested={0x1074, 0xc1, 0x0, 0x1, [@nested={0x4, 0x103}, @nested={0x4, 0x10c}, @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @nested={0x4, 0xc1}, @typed={0x1004, 0x118, 0x0, 0x0, @binary="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"}, @typed={0x4a, 0x119, 0x0, 0x0, @binary="0e3cffa9d770d6fc237d09596c32e95a704e3a9d089315eab5e4b9ad83c4cc5992353c9ea401c879366ce191614b55fe09d968d350189e6e9d79f7dac15628fa007d9089b7c1"}]}]}, @IPVS_CMD_ATTR_SERVICE={0xfb, 0x1, 0x0, 0x1, [@generic="b8f45801e801f3a75512b4c1472e270b94245aa2c03b4648e8ee7e67315611e29d64ba3b1a02c80d8bd1622b475f9bdd9f8adfbfaa2674604d17f7f598a3279f025dcdd36c401ed3ffd61b2d327368481738fb13de36de6686a97088dfe0737c6b69d9da0b33f533a16aaa0df84bffb4d09292b14ac358433bb33589c3f12663a8c2b2098267255a9451a4b7982629e4f3c7c02d6a463f243b2f2bd7796bb5b747e6e8869f792cc828cc49901cea21fdf4a27597aa9dea", @nested={0x10, 0x132, 0x0, 0x1, [@typed={0x5, 0x54, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x104}]}, @nested={0x14, 0x130, 0x0, 0x1, [@generic="d82f3e0e2331cdc9621d2deea6a51366"]}, @typed={0x8, 0x127, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x13b}, @typed={0x8, 0x2f, 0x0, 0x0, @pid=r6}, @nested={0x8, 0x2d, 0x0, 0x1, [@nested={0x4, 0x11c}]}]}, @IPVS_CMD_ATTR_DEST={0xa6, 0x2, 0x0, 0x1, [@generic="434b7e5ecf9f04674fd0d1b9aa1ebaadbdbc", @nested={0x8e, 0x141, 0x0, 0x1, [@nested={0x4, 0x70}, @generic="784f7a00f4ff045a08ea0e5747dd2fcd8a0a499639e90548049d49c9605f06c76157b5472f6576d8c04e9eca297ef233da9cc199814ccd4c00a2ed3dc1275a46ca76c1cb63704cabcbf619e2f11e1c45a5bd2d50c535a3207eef1631170ab55586799f91a52f", @nested={0x4, 0x144}, @nested={0x4, 0x74}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0xd6}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) move_pages$auto(r5, 0x803, 0x0, &(0x7f0000000280)=0xfe, &(0x7f00000002c0)=0xf4, 0x96) 1.296021696s ago: executing program 3 (id=1681): r0 = ioctl$auto_NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) vmsplice$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="fe52bc44773db48d0485102c3fa548948680a922e5f5dbf6f4ad71cbeee46ad516b4c67285bbae", 0x7}, 0x2, 0x8001) clock_gettime$auto(0x2, &(0x7f0000000000)={0x7, 0x7}) 1.086763195s ago: executing program 3 (id=1682): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x5, 0x0, 0x7, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x1000b, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) unshare$auto(0x40000080) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x9, 0x3) msgsnd$auto(0x7d, 0x0, 0x9, 0x9) syz_genetlink_get_family_id$auto_macsec(0x0, r1) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x0, 0x4, 0x52, 0xffffffffffffffff, 0x800048000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) io_uring_setup$auto(0xe1f, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) socket(0x2b, 0x1, 0x0) msgctl$auto_IPC_RMID(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x0, 0xffffffffffffffff, 0xffffff98, 0xf, 0x8, 0x2}, 0x0, 0x0, 0x9, 0x247, 0x2, 0xfffffffffffffffd, 0x7, 0x0, 0xff, 0x9, @raw}) 865.012841ms ago: executing program 0 (id=1683): mmap$auto(0x0, 0x4, 0x4200000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_settime$auto(0x0, 0x4b, &(0x7f0000000040)={{0x3, 0x1}, {0xc, 0x4c}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/rxrpc/peers\x00', 0x600, 0x0) pread64$auto(r0, 0x0, 0x200000000003, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a402, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0xffffffffffffffff, @relative_id=0x4, 0x80}, 0x96) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) getsockopt$auto(r0, 0xffffffff, 0x8, &(0x7f0000000000)='/proc/self/net/rxrpc/peers\x00', &(0x7f0000000040)=0x5) 860.194908ms ago: executing program 1 (id=1684): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr15/power/runtime_active_time\x00', 0x2062, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x8014) sendfile$auto(r0, r0, 0x0, 0x4) 784.493961ms ago: executing program 2 (id=1685): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af04, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dri/card2\x00', 0x80002, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) socket(0xf, 0x5, 0x5) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x80005, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0xfffffffffffffffe, 0xfff, 0x0, 0x7, 0x2, 0x4, 0x9, 0xf, @inferred, @inferred=0xffffffffffffffff}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci2/msft_opcode\x00', 0x2, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x1001, 0x0) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0xe) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4d7}, 0x6, 0x0, 0x8, 0x10007fe}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) 525.26108ms ago: executing program 3 (id=1686): bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x400008, 0x40000000000000df, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c1200030000000046a3677337f9ecba075f6bba441b1011", 0x46}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) 451.799306ms ago: executing program 1 (id=1687): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x48a22, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x0, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x8000000000400008, 0x1, 0x9b70, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xff) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc008561b, 0x38) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000240)={0x7fffffff, 0xd, 0x4002, 0x7, 0x7, 0xc, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x100, 0x3, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000000}}) mmap$auto(0x80000000003, 0xe983, 0xdf, 0xe9d, 0xffffffffffffffff, 0x7) 150.67495ms ago: executing program 3 (id=1688): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getresgid$auto(0x0, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) 96.531893ms ago: executing program 0 (id=1689): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x80002, 0x73) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x24008840) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x46, 0x2b, 0x1000000000065f, 0x80000000, 0x40000007, 0x3, 0x20000002, 0x9, 0x1, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x2, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x85, 0x10005, 0x0, 0x0, 0x10000007) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/192, 0xc0) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f0000002100)=""/4099, 0x1003) r7 = socket(0x2, 0x80002, 0x73) getsockopt$auto_SO_INCOMING_CPU(r7, 0x0, 0x31, &(0x7f0000000080)=']]\x00', &(0x7f00000000c0)=0x9) 0s ago: executing program 3 (id=1690): mmap$auto(0x0, 0x400007, 0xe2, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0xc, 0x0, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) kernel console output (not intermixed with test programs): 0x120 [ 270.941587][ T8679] ops_init+0x1e2/0x5f0 [ 270.941619][ T8679] setup_net+0x100/0x390 [ 270.941647][ T8679] ? __pfx_setup_net+0x10/0x10 [ 270.941677][ T8679] ? debug_mutex_init+0x37/0x70 [ 270.941710][ T8679] copy_net_ns+0x2f8/0x690 [ 270.941742][ T8679] create_new_namespaces+0x3ea/0xa90 [ 270.941788][ T8679] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 270.941823][ T8679] ksys_unshare+0x45b/0xa40 [ 270.941858][ T8679] ? __pfx_ksys_unshare+0x10/0x10 [ 270.941889][ T8679] ? xfd_validate_state+0x61/0x180 [ 270.941933][ T8679] __x64_sys_unshare+0x31/0x40 [ 270.941964][ T8679] do_syscall_64+0xcd/0xfa0 [ 270.941994][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.942020][ T8679] RIP: 0033:0x7f0e8898f6c9 [ 270.942040][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.942065][ T8679] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 270.942089][ T8679] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 270.942105][ T8679] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 270.942119][ T8679] RBP: 00007f0e88a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.942134][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.942149][ T8679] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 270.942184][ T8679] [ 271.182505][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.156181][ T30] audit: type=1326 audit(1762310172.622:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8709 comm="syz.3.583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 273.261294][ T30] audit: type=1326 audit(1762310172.722:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8711 comm="syz.1.582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 273.282887][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.819429][ T8734] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 273.933926][ T8734] mmap: syz.1.587 (8734) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 274.339276][ T30] audit: type=1326 audit(1762310173.792:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 275.295155][ T30] audit: type=1326 audit(1762310174.742:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8770 comm="syz.2.594" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 275.497906][ T30] audit: type=1326 audit(1762310174.962:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.1.595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 275.519889][ T30] audit: type=1326 audit(1762310174.962:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8784 comm="syz.0.597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 276.070063][ T5147] block nbd0: Receive control failed (result -107) [ 276.792078][ T30] audit: type=1326 audit(1762310176.252:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.1.602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 277.517640][ T30] audit: type=1326 audit(1762310176.982:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.1.609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 277.772388][ T30] audit: type=1326 audit(1762310177.232:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8836 comm="syz.0.610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 277.937572][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 279.007030][ T8879] netlink: 206 bytes leftover after parsing attributes in process `syz.0.620'. [ 279.508011][ T30] audit: type=1326 audit(1762310178.972:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.3.619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 279.529590][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.729785][ T30] audit: type=1326 audit(1762310180.192:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8893 comm="syz.0.624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 280.856017][ T30] audit: type=1326 audit(1762310180.322:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8898 comm="syz.2.628" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 280.975754][ T30] audit: type=1326 audit(1762310180.432:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.3.629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 280.997339][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.298841][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 281.307896][ T8928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.631'. [ 281.341246][ T8931] netlink: 93 bytes leftover after parsing attributes in process `syz.0.631'. [ 281.657057][ T30] audit: type=1326 audit(1762310181.122:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.2.633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 283.130009][ T30] audit: type=1326 audit(1762310182.592:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.0.635" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 283.872645][ T30] audit: type=1326 audit(1762310183.332:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8970 comm="syz.3.641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 286.121994][ T30] audit: type=1326 audit(1762310185.582:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8998 comm="syz.3.647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 287.687224][ T9040] capability: warning: `syz.3.655' uses 32-bit capabilities (legacy support in use) [ 288.132816][ T30] audit: type=1326 audit(4294967300.940:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 289.243181][ T9064] netlink: 252 bytes leftover after parsing attributes in process `syz.2.661'. [ 289.286457][ T9059] netlink: 252 bytes leftover after parsing attributes in process `syz.2.661'. [ 289.988010][ T30] audit: type=1326 audit(4294967302.799:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9070 comm="syz.2.662" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 290.102610][ T9082] IPVS: length: 7562853 != 24 [ 291.116080][ T30] audit: type=1326 audit(4294967303.919:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.3.670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 291.810473][ T30] audit: type=1326 audit(4294967304.619:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.2.671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 291.832043][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.225339][ T9147] sg_write: process 694 (syz.0.678) changed security contexts after opening file descriptor, this is not allowed. [ 293.990058][ T30] audit: type=1326 audit(4294967306.799:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.3.681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 295.570462][ T30] audit: type=1326 audit(4294967308.319:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 297.389371][ T9233] FAULT_INJECTION: forcing a failure. [ 297.389371][ T9233] name failslab, interval 1, probability 0, space 0, times 0 [ 297.402130][ T9233] CPU: 0 UID: 0 PID: 9233 Comm: syz.2.698 Not tainted syzkaller #0 PREEMPT(full) [ 297.402155][ T9233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.402163][ T9233] Call Trace: [ 297.402169][ T9233] [ 297.402175][ T9233] dump_stack_lvl+0x16c/0x1f0 [ 297.402196][ T9233] should_fail_ex+0x512/0x640 [ 297.402217][ T9233] ? fs_reclaim_acquire+0xae/0x150 [ 297.402237][ T9233] should_failslab+0xc2/0x120 [ 297.402256][ T9233] __kmalloc_noprof+0xdd/0x880 [ 297.402278][ T9233] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.402298][ T9233] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.402313][ T9233] tomoyo_realpath_from_path+0xc2/0x6e0 [ 297.402330][ T9233] ? tomoyo_profile+0x47/0x60 [ 297.402349][ T9233] tomoyo_path_number_perm+0x245/0x580 [ 297.402370][ T9233] ? tomoyo_path_number_perm+0x237/0x580 [ 297.402392][ T9233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.402415][ T9233] ? find_held_lock+0x2b/0x80 [ 297.402446][ T9233] ? find_held_lock+0x2b/0x80 [ 297.402459][ T9233] ? hook_file_ioctl_common+0x145/0x410 [ 297.402477][ T9233] ? __fget_files+0x20e/0x3c0 [ 297.402494][ T9233] security_file_ioctl+0x9b/0x240 [ 297.402509][ T9233] __x64_sys_ioctl+0xb7/0x210 [ 297.402530][ T9233] do_syscall_64+0xcd/0xfa0 [ 297.402547][ T9233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.402561][ T9233] RIP: 0033:0x7f5df4d8f6c9 [ 297.402573][ T9233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.402585][ T9233] RSP: 002b:00007f5df5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.402599][ T9233] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8f6c9 [ 297.402608][ T9233] RDX: 0000000000000000 RSI: 0000000040045109 RDI: 0000000000000008 [ 297.402616][ T9233] RBP: 00007f5df5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 297.402624][ T9233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.402632][ T9233] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 297.402657][ T9233] [ 297.402664][ T9233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.998740][ T30] audit: type=1326 audit(4294967311.809:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9240 comm="syz.2.700" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 299.346509][ T9260] device-mapper: ioctl: only supply one of name or uuid, cmd(12) [ 299.735311][ T30] audit: type=1326 audit(4294967312.539:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9267 comm="syz.3.706" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 302.282998][ T30] audit: type=1326 audit(4294967315.089:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9303 comm="syz.3.716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 305.118114][ T30] audit: type=1326 audit(4294967317.919:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9357 comm="syz.1.728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 305.166676][ T30] audit: type=1326 audit(4294967317.929:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.3.727" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 305.739570][ T30] audit: type=1326 audit(4294967318.549:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9364 comm="syz.2.730" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 305.761176][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.128760][ T30] audit: type=1326 audit(4294967318.939:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9371 comm="syz.0.731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 308.138666][ T30] audit: type=1326 audit(4294967320.949:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9420 comm="syz.1.744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 309.203608][ T30] audit: type=1326 audit(4294967322.009:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9423 comm="syz.0.743" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 309.731225][ T9456] FAULT_INJECTION: forcing a failure. [ 309.731225][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 309.875344][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.1.751 Not tainted syzkaller #0 PREEMPT(full) [ 309.875379][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 309.875404][ T9456] Call Trace: [ 309.875413][ T9456] [ 309.875423][ T9456] dump_stack_lvl+0x16c/0x1f0 [ 309.875457][ T9456] should_fail_ex+0x512/0x640 [ 309.875493][ T9456] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 309.875524][ T9456] should_failslab+0xc2/0x120 [ 309.875557][ T9456] kmem_cache_alloc_noprof+0x75/0x6e0 [ 309.875584][ T9456] ? __pmd_alloc+0xbf/0x8b0 [ 309.875624][ T9456] ? __pmd_alloc+0xbf/0x8b0 [ 309.875655][ T9456] __pmd_alloc+0xbf/0x8b0 [ 309.875693][ T9456] __handle_mm_fault+0xada/0x2aa0 [ 309.875746][ T9456] ? mt_find+0x3e2/0xa20 [ 309.875783][ T9456] ? __pfx___handle_mm_fault+0x10/0x10 [ 309.875820][ T9456] ? __pfx_mt_find+0x10/0x10 [ 309.875872][ T9456] ? find_vma+0xbf/0x140 [ 309.875901][ T9456] ? __pfx_find_vma+0x10/0x10 [ 309.875935][ T9456] handle_mm_fault+0x589/0xd10 [ 309.875975][ T9456] ? __pkru_allows_pkey+0x11/0xb0 [ 309.876017][ T9456] do_user_addr_fault+0x7a6/0x1370 [ 309.876046][ T9456] ? rcu_is_watching+0x12/0xc0 [ 309.876078][ T9456] exc_page_fault+0x64/0xc0 [ 309.876107][ T9456] asm_exc_page_fault+0x26/0x30 [ 309.876132][ T9456] RIP: 0010:__get_user_4+0x14/0x20 [ 309.876169][ T9456] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 00 35 04 00 90 90 90 90 90 90 90 90 90 90 [ 309.876193][ T9456] RSP: 0018:ffffc90004f3fdd0 EFLAGS: 00050287 [ 309.876215][ T9456] RAX: 0000000000000000 RBX: 0000000040045109 RCX: ffffc90004f3fd74 [ 309.876230][ T9456] RDX: 00007ffffffff000 RSI: ffffffff88fae4c7 RDI: ffffffff8bf075c0 [ 309.876246][ T9456] RBP: 1ffff920009e7fbc R08: 0e0d4e4d9d320fb5 R09: 0000000000000000 [ 309.876261][ T9456] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 309.876275][ T9456] R13: ffff88807c9a1000 R14: dffffc0000000000 R15: 0000000000000008 [ 309.876297][ T9456] ? snd_seq_oss_ioctl+0x977/0xda0 [ 309.876320][ T9456] snd_seq_oss_ioctl+0x97f/0xda0 [ 309.876338][ T9456] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 309.876355][ T9456] ? hook_file_ioctl_common+0x145/0x410 [ 309.876374][ T9456] ? __fget_files+0x20e/0x3c0 [ 309.876391][ T9456] odev_ioctl+0x94/0x120 [ 309.876409][ T9456] ? __pfx_odev_ioctl+0x10/0x10 [ 309.876435][ T9456] __x64_sys_ioctl+0x18e/0x210 [ 309.876474][ T9456] do_syscall_64+0xcd/0xfa0 [ 309.876499][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.876512][ T9456] RIP: 0033:0x7f0e8898f6c9 [ 309.876523][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.876538][ T9456] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.876550][ T9456] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 309.876559][ T9456] RDX: 0000000000000000 RSI: 0000000040045109 RDI: 0000000000000008 [ 309.876567][ T9456] RBP: 00007f0e898c7090 R08: 0000000000000000 R09: 0000000000000000 [ 309.876575][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.876583][ T9456] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 309.876602][ T9456] [ 310.194269][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.429484][ T9496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 313.251338][ T30] audit: type=1326 audit(4294967326.059:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9500 comm="syz.1.763" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 313.754296][ T30] audit: type=1326 audit(4294967326.559:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.3.765" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 313.930731][ T30] audit: type=1326 audit(4294967326.729:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9514 comm="syz.2.766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 315.028851][ T30] audit: type=1326 audit(4294967327.839:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9545 comm="syz.1.773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 316.206303][ T30] audit: type=1326 audit(4294967329.019:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.2.787" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 316.228416][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.449714][ T30] audit: type=1326 audit(4294967329.259:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.0.780" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 317.167423][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.173798][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.272051][ T9597] FAULT_INJECTION: forcing a failure. [ 317.272051][ T9597] name failslab, interval 1, probability 0, space 0, times 0 [ 317.284970][ T9597] CPU: 0 UID: 0 PID: 9597 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(full) [ 317.284989][ T9597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.284997][ T9597] Call Trace: [ 317.285003][ T9597] [ 317.285008][ T9597] dump_stack_lvl+0x16c/0x1f0 [ 317.285028][ T9597] should_fail_ex+0x512/0x640 [ 317.285049][ T9597] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 317.285077][ T9597] should_failslab+0xc2/0x120 [ 317.285108][ T9597] kmem_cache_alloc_noprof+0x75/0x6e0 [ 317.285131][ T9597] ? ptlock_alloc+0x1f/0x70 [ 317.285155][ T9597] ? ptlock_alloc+0x1f/0x70 [ 317.285174][ T9597] ptlock_alloc+0x1f/0x70 [ 317.285194][ T9597] pte_alloc_one+0x84/0x350 [ 317.285211][ T9597] do_pte_missing+0x1acf/0x3ba0 [ 317.285232][ T9597] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 317.285253][ T9597] ? __pmd_alloc+0x64f/0x8b0 [ 317.285273][ T9597] __handle_mm_fault+0x1556/0x2aa0 [ 317.285296][ T9597] ? mt_find+0x3e2/0xa20 [ 317.285314][ T9597] ? __pfx___handle_mm_fault+0x10/0x10 [ 317.285333][ T9597] ? __pfx_mt_find+0x10/0x10 [ 317.285360][ T9597] ? find_vma+0xbf/0x140 [ 317.285375][ T9597] ? __pfx_find_vma+0x10/0x10 [ 317.285392][ T9597] handle_mm_fault+0x589/0xd10 [ 317.285414][ T9597] ? __pkru_allows_pkey+0x11/0xb0 [ 317.285436][ T9597] do_user_addr_fault+0x7a6/0x1370 [ 317.285451][ T9597] ? rcu_is_watching+0x12/0xc0 [ 317.285468][ T9597] exc_page_fault+0x64/0xc0 [ 317.285484][ T9597] asm_exc_page_fault+0x26/0x30 [ 317.285498][ T9597] RIP: 0010:__get_user_4+0x14/0x20 [ 317.285519][ T9597] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca e9 00 35 04 00 90 90 90 90 90 90 90 90 90 90 [ 317.285531][ T9597] RSP: 0018:ffffc900033f7dd0 EFLAGS: 00050287 [ 317.285542][ T9597] RAX: 0000000000000000 RBX: 0000000040045109 RCX: ffffc900033f7d74 [ 317.285551][ T9597] RDX: 00007ffffffff000 RSI: ffffffff88fae4c7 RDI: ffffffff8bf075c0 [ 317.285560][ T9597] RBP: 1ffff9200067efbc R08: 0e0d4e4d9d320fb5 R09: 0000000000000000 [ 317.285568][ T9597] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 317.285576][ T9597] R13: ffff888079e7d000 R14: dffffc0000000000 R15: 0000000000000008 [ 317.285590][ T9597] ? snd_seq_oss_ioctl+0x977/0xda0 [ 317.285612][ T9597] snd_seq_oss_ioctl+0x97f/0xda0 [ 317.285630][ T9597] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 317.285647][ T9597] ? hook_file_ioctl_common+0x145/0x410 [ 317.285666][ T9597] ? __fget_files+0x20e/0x3c0 [ 317.285683][ T9597] odev_ioctl+0x94/0x120 [ 317.285697][ T9597] ? __pfx_odev_ioctl+0x10/0x10 [ 317.285712][ T9597] __x64_sys_ioctl+0x18e/0x210 [ 317.285734][ T9597] do_syscall_64+0xcd/0xfa0 [ 317.285750][ T9597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.285763][ T9597] RIP: 0033:0x7f0e8898f6c9 [ 317.285774][ T9597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.285787][ T9597] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.285798][ T9597] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 317.285807][ T9597] RDX: 0000000000000000 RSI: 0000000040045109 RDI: 0000000000000008 [ 317.285815][ T9597] RBP: 00007f0e898c7090 R08: 0000000000000000 R09: 0000000000000000 [ 317.285823][ T9597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.285831][ T9597] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 317.285850][ T9597] [ 317.621407][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.167992][ T9610] netlink: 342 bytes leftover after parsing attributes in process `syz.0.790'. [ 318.180749][ T9610] netlink: 342 bytes leftover after parsing attributes in process `syz.0.790'. [ 319.119901][ T30] audit: type=1326 audit(4294967331.929:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.792" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 319.416964][ T9634] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£ÒŒyù*›"¤l-‰†¤ôy–ú„ [ 322.190238][ T30] audit: type=1326 audit(4294967334.999:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9671 comm="syz.2.805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 322.211798][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.268677][ T9703] FAULT_INJECTION: forcing a failure. [ 323.268677][ T9703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.285211][ T9703] CPU: 1 UID: 0 PID: 9703 Comm: syz.1.813 Not tainted syzkaller #0 PREEMPT(full) [ 323.285245][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.285259][ T9703] Call Trace: [ 323.285267][ T9703] [ 323.285275][ T9703] dump_stack_lvl+0x16c/0x1f0 [ 323.285304][ T9703] should_fail_ex+0x512/0x640 [ 323.285331][ T9703] _copy_to_user+0x32/0xd0 [ 323.285354][ T9703] simple_read_from_buffer+0xcb/0x170 [ 323.285378][ T9703] proc_fail_nth_read+0x197/0x240 [ 323.285394][ T9703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.285410][ T9703] ? rw_verify_area+0xcf/0x6c0 [ 323.285422][ T9703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.285437][ T9703] vfs_read+0x1e4/0xcf0 [ 323.285460][ T9703] ? __pfx___mutex_lock+0x10/0x10 [ 323.285477][ T9703] ? __pfx_vfs_read+0x10/0x10 [ 323.285496][ T9703] ? __fget_files+0x20e/0x3c0 [ 323.285516][ T9703] ksys_read+0x12a/0x250 [ 323.285530][ T9703] ? __pfx_ksys_read+0x10/0x10 [ 323.285544][ T9703] ? fput+0x9b/0xd0 [ 323.285565][ T9703] do_syscall_64+0xcd/0xfa0 [ 323.285581][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.285596][ T9703] RIP: 0033:0x7f0e8898e0dc [ 323.285608][ T9703] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.285620][ T9703] RSP: 002b:00007f0e898c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.285634][ T9703] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898e0dc [ 323.285643][ T9703] RDX: 000000000000000f RSI: 00007f0e898c70a0 RDI: 0000000000000009 [ 323.285651][ T9703] RBP: 00007f0e898c7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.285659][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.285667][ T9703] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 323.285685][ T9703] [ 323.691545][ T30] audit: type=1326 audit(4294967336.499:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.0.811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 323.713121][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.829969][ T30] audit: type=1326 audit(4294967337.639:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.2.819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 326.090036][ T30] audit: type=1326 audit(4294967338.899:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9731 comm="syz.3.820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 326.111613][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.187617][ T9754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. getty: ttyS0: re syzkaller syzkaller login: [ 328.984515][ T30] audit: type=1326 audit(4294967341.789:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.0.831" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 329.852722][ T9806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 330.435146][ T30] audit: type=1326 audit(4294967343.239:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.1.839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 331.854535][ T30] audit: type=1326 audit(4294967344.659:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9831 comm="syz.1.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 331.876127][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.933856][ T30] audit: type=1326 audit(4294967344.739:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9840 comm="syz.0.845" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 333.262105][ T30] audit: type=1326 audit(4294967346.069:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9857 comm="syz.1.850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 335.818630][ T30] audit: type=1326 audit(4294967348.629:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9899 comm="syz.3.859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25b8d8f6c9 code=0x0 [ 336.762117][ T9944] ACPI: button: Initial lid state set to 'ignore' [ 336.977880][ T9204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.041175][ T9204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.164179][ T9204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.388720][ T9204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.574114][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.590421][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.605230][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.620735][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.633575][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.955195][ T30] audit: type=1326 audit(4294967350.759:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.2.874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 337.969734][ T9204] bridge_slave_1: left allmulticast mode [ 337.976856][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.995137][ T9204] bridge_slave_1: left promiscuous mode [ 338.002048][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.014961][ T9204] bridge_slave_0: left allmulticast mode [ 338.023421][ T9204] bridge_slave_0: left promiscuous mode [ 338.029391][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.290011][ T9204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.301031][ T9204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.314655][ T9204] bond0 (unregistering): Released all slaves [ 338.793543][ T9204] hsr_slave_0: left promiscuous mode [ 338.850554][ T9204] hsr_slave_1: left promiscuous mode [ 338.885493][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.892960][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.950291][ T9204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.970814][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.127577][ T9204] veth1_macvtap: left promiscuous mode [ 339.141353][ T9204] veth0_macvtap: left promiscuous mode [ 339.223393][ T9204] veth1_vlan: left promiscuous mode [ 339.223693][ T9204] veth0_vlan: left promiscuous mode [ 339.706121][ T5147] Bluetooth: hci3: command tx timeout [ 339.864655][T10005] cgroup: fork rejected by pids controller in /syz0 [ 340.786321][ T9204] team0 (unregistering): Port device team_slave_1 removed [ 341.400352][ T9204] team0 (unregistering): Port device team_slave_0 removed [ 341.785260][ T5147] Bluetooth: hci3: command tx timeout [ 343.865275][ T5147] Bluetooth: hci3: command tx timeout [ 345.428573][ T5823] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 345.558893][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 345.558915][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.558923][ T5823] Call Trace: [ 345.558929][ T5823] [ 345.558935][ T5823] dump_stack_lvl+0x16c/0x1f0 [ 345.558955][ T5823] dump_header+0x101/0x930 [ 345.558972][ T5823] oom_kill_process+0x272/0xa40 [ 345.558988][ T5823] out_of_memory+0x350/0x1700 [ 345.559006][ T5823] ? __pfx_out_of_memory+0x10/0x10 [ 345.559025][ T5823] mem_cgroup_out_of_memory+0x118/0x130 [ 345.559047][ T5823] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 345.559072][ T5823] ? do_raw_spin_unlock+0x172/0x230 [ 345.559097][ T5823] try_charge_memcg+0x695/0xd30 [ 345.559118][ T5823] ? __pfx_try_charge_memcg+0x10/0x10 [ 345.559134][ T5823] ? find_held_lock+0x2b/0x80 [ 345.559149][ T5823] ? rcu_read_unlock+0x17/0x60 [ 345.559172][ T5823] obj_cgroup_charge_account+0x292/0x500 [ 345.559192][ T5823] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 345.559214][ T5823] ? kasan_save_track+0x14/0x30 [ 345.559232][ T5823] kmem_cache_alloc_noprof+0x550/0x6e0 [ 345.559246][ T5823] ? alloc_empty_file+0x55/0x1e0 [ 345.559269][ T5823] ? alloc_empty_file+0x55/0x1e0 [ 345.559286][ T5823] alloc_empty_file+0x55/0x1e0 [ 345.559306][ T5823] path_openat+0xda/0x2cb0 [ 345.559327][ T5823] ? __pfx_path_openat+0x10/0x10 [ 345.559343][ T5823] ? __lock_acquire+0xb8a/0x1c90 [ 345.559363][ T5823] do_filp_open+0x20b/0x470 [ 345.559378][ T5823] ? __pfx_do_filp_open+0x10/0x10 [ 345.559407][ T5823] ? alloc_fd+0x471/0x7d0 [ 345.559427][ T5823] do_sys_openat2+0x11b/0x1d0 [ 345.559446][ T5823] ? __pfx_do_sys_openat2+0x10/0x10 [ 345.559467][ T5823] ? __pfx_get_timespec64+0x10/0x10 [ 345.559489][ T5823] __x64_sys_openat+0x174/0x210 [ 345.559509][ T5823] ? __pfx___x64_sys_openat+0x10/0x10 [ 345.559537][ T5823] do_syscall_64+0xcd/0xfa0 [ 345.559554][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.559568][ T5823] RIP: 0033:0x7f22bdd8efc1 [ 345.559581][ T5823] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 345.559593][ T5823] RSP: 002b:00007ffe9d4fa820 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 345.559607][ T5823] RAX: ffffffffffffffda RBX: 0000000000000408 RCX: 00007f22bdd8efc1 [ 345.559616][ T5823] RDX: 0000000000090800 RSI: 00007f22bde12286 RDI: 00000000ffffff9c [ 345.559625][ T5823] RBP: 00007ffe9d4fa8cc R08: 0000000000000000 R09: 0000000000000000 [ 345.559633][ T5823] R10: 0000000000000000 R11: 0000000000000287 R12: 00000000000000d2 [ 345.559641][ T5823] R13: 0000000000000000 R14: 00000000000537e4 R15: 00007ffe9d4fa920 [ 345.559659][ T5823] [ 345.559664][ T5823] memory: usage 307200kB, limit 307200kB, failcnt 22226 [ 345.894036][ T5823] memory+swap: usage 432180kB, limit 9007199254740988kB, failcnt 0 [ 345.945478][ T5147] Bluetooth: hci3: command tx timeout [ 346.013126][ T5823] kmem: usage 2580kB, limit 9007199254740988kB, failcnt 0 [ 346.028606][ T5823] Memory cgroup stats for /syz0: [ 346.028789][ T5823] cache 311771136 [ 346.037396][ T5823] rss 159744 [ 346.040590][ T5823] rss_huge 0 [ 346.043767][ T5823] shmem 311771136 [ 346.047434][ T5823] mapped_file 15740928 [ 346.051506][ T5823] dirty 0 [ 346.054422][ T5823] writeback 0 [ 346.057913][ T5823] workingset_refault_anon 78 [ 346.062510][ T5823] workingset_refault_file 0 [ 346.067177][ T5823] swap 127979520 [ 346.070744][ T5823] swapcached 0 [ 346.074116][ T5823] pgpgin 372682 [ 346.077736][ T5823] pgpgout 296527 [ 346.081363][ T5823] pgfault 387553 [ 346.084919][ T5823] pgmajfault 115 [ 346.109243][ T5823] inactive_anon 110092288 [ 346.113596][ T5823] active_anon 201732096 [ 346.161834][ T5823] inactive_file 0 [ 346.190358][ T5823] active_file 0 [ 346.193843][ T5823] unevictable 0 [ 346.230541][ T5823] hierarchical_memory_limit 314572800 [ 346.258689][ T5823] hierarchical_memsw_limit 9223372036854771712 [ 346.264859][ T5823] total_cache 311771136 [ 346.272162][ T5823] total_rss 159744 [ 346.276125][ T5823] total_rss_huge 0 [ 346.279844][ T5823] total_shmem 311771136 [ 346.283979][ T5823] total_mapped_file 15740928 [ 346.288603][ T5823] total_dirty 0 [ 346.292075][ T5823] total_writeback 0 [ 346.295931][ T5823] total_workingset_refault_anon 78 [ 346.301042][ T5823] total_workingset_refault_file 0 [ 346.306082][ T5823] total_swap 127979520 [ 346.310139][ T5823] total_swapcached 0 [ 346.314793][ T5823] total_pgpgin 372682 [ 346.319840][ T5823] total_pgpgout 296527 [ 346.323916][ T5823] total_pgfault 387553 [ 346.333896][ T5823] total_pgmajfault 115 [ 346.339128][ T5823] total_inactive_anon 110092288 [ 346.343995][ T5823] total_active_anon 201732096 [ 346.362070][ T5823] total_inactive_file 0 [ 346.366682][ T5823] total_active_file 0 [ 346.370659][ T5823] total_unevictable 0 [ 346.374617][ T5823] anon_cost 0 [ 346.378441][ T5823] file_cost 0 [ 346.381738][ T5823] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.877,pid=10055,uid=0 [ 346.398794][ T5823] Memory cgroup out of memory: Killed process 10055 (syz.0.877) total-vm:131872kB, anon-rss:1296kB, file-rss:21668kB, shmem-rss:15488kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 347.285658][ T9954] chnl_net:caif_netlink_parms(): no params data found [ 348.551480][ T32] oom_reaper: reaped process 10055 (syz.0.877), now anon-rss:88kB, file-rss:20552kB, shmem-rss:12928kB [ 349.667545][T10038] syz.0.877 (10038) used greatest stack depth: 18488 bytes left [ 350.445846][ T30] audit: type=1326 audit(4294967363.249:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10209 comm="syz.1.883" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 350.531301][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.539095][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.555762][ T9954] bridge_slave_0: entered allmulticast mode [ 350.581744][ T9954] bridge_slave_0: entered promiscuous mode [ 350.639065][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.816514][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.839126][ T9954] bridge_slave_1: entered allmulticast mode [ 350.856562][ T9954] bridge_slave_1: entered promiscuous mode [ 351.170592][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.184408][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.455639][ T9954] team0: Port device team_slave_0 added [ 351.497054][ T9954] team0: Port device team_slave_1 added [ 351.753685][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.805482][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.942976][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.046288][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.065301][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.133977][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.515844][T10254] netlink: 93 bytes leftover after parsing attributes in process `syz.2.889'. [ 352.556756][ T9954] hsr_slave_0: entered promiscuous mode [ 352.576147][ T9954] hsr_slave_1: entered promiscuous mode [ 352.596606][T10254] kfence: disabled [ 353.997508][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 354.024594][T10294] zram: Removed device: zram0 [ 354.060241][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 354.310843][T10305] nvme_fcloop: unknown parameter or missing value '0' [ 354.340468][ T9954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.447535][ T9954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.493394][ T9954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.567643][ T9954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.822088][T10305] hub 1-0:1.0: USB hub found [ 354.828345][T10305] hub 1-0:1.0: 1 port detected [ 354.987731][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.057241][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.104736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.111909][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.243006][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.250177][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.252934][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.518989][ T9954] veth0_vlan: entered promiscuous mode [ 356.631487][ T9954] veth1_vlan: entered promiscuous mode [ 356.725997][ T9954] veth0_macvtap: entered promiscuous mode [ 356.827676][ T9954] veth1_macvtap: entered promiscuous mode [ 356.884126][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.910940][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.042867][ T9204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.082009][ T9204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.217325][ T9204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.252425][ T9204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.391172][ T30] audit: type=1326 audit(4294967910.201:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10350 comm="syz.0.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 357.412821][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.582076][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.615134][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.760601][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.770831][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.919288][T10383] sd 0:0:1:0: PR command failed: 1026 [ 357.924771][T10383] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 357.987703][T10383] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 358.779863][T10404] nvme_fcloop: unknown parameter or missing value '0' [ 359.247846][T10404] hub 1-0:1.0: USB hub found [ 359.269427][T10404] hub 1-0:1.0: 1 port detected [ 360.588946][ T30] audit: type=1326 audit(4294967913.401:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10436 comm="syz.2.912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 360.610655][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.031996][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 361.032469][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 361.041442][T10463] ipvlan0: entered promiscuous mode [ 361.070867][T10463] ipvlan0: entered allmulticast mode [ 361.085315][T10463] veth0_vlan: entered allmulticast mode [ 361.451420][T10473] ima: policy update failed [ 361.458985][ T30] audit: type=1326 audit(4294967914.271:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10467 comm="syz.1.918" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 361.480638][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.491145][ T30] audit: type=1802 audit(4294967914.271:180): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.919" res=0 errno=0 [ 363.280637][ T5147] Bluetooth: hci1: unexpected event 0x35 length: 13 > 6 [ 363.286529][ T30] audit: type=1326 audit(4029.908:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.3.924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 364.522781][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 364.545526][T10541] zswap: compressor not available [ 364.550746][T10553] size and base must be multiples of 4 kiB [ 364.557216][T10553] CPU: 1 UID: 0 PID: 10553 Comm: syz.3.933 Not tainted syzkaller #0 PREEMPT(full) [ 364.557248][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.557263][T10553] Call Trace: [ 364.557272][T10553] [ 364.557282][T10553] dump_stack_lvl+0x16c/0x1f0 [ 364.557318][T10553] mtrr_del+0xd1/0x110 [ 364.557353][T10553] mtrr_ioctl+0x922/0xcf0 [ 364.557386][T10553] ? __pfx_mtrr_ioctl+0x10/0x10 [ 364.557424][T10553] ? find_held_lock+0x2b/0x80 [ 364.557456][T10553] ? __fget_files+0x20e/0x3c0 [ 364.557480][T10553] ? __pfx_mtrr_ioctl+0x10/0x10 [ 364.557511][T10553] proc_reg_unlocked_ioctl+0x229/0x320 [ 364.557542][T10553] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 364.557583][T10553] __x64_sys_ioctl+0x18e/0x210 [ 364.557623][T10553] do_syscall_64+0xcd/0xfa0 [ 364.557652][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.557675][T10553] RIP: 0033:0x7f72a4f8f6c9 [ 364.557693][T10553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.557715][T10553] RSP: 002b:00007f72a5ea6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.557737][T10553] RAX: ffffffffffffffda RBX: 00007f72a51e6270 RCX: 00007f72a4f8f6c9 [ 364.557752][T10553] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 364.557767][T10553] RBP: 00007f72a5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.557781][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.557795][T10553] R13: 00007f72a51e6308 R14: 00007f72a51e6270 R15: 00007ffc2493b268 [ 364.557827][T10553] [ 365.488890][ T30] audit: type=1326 audit(4032.130:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.1.935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 365.510108][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.963857][ T30] audit: type=1326 audit(4032.602:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10566 comm="syz.2.939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 367.445420][ T30] audit: type=1326 audit(4034.090:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10594 comm="syz.2.946" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 367.590770][T10606] process 'syz.3.950' launched ':,' with NULL argv: empty string added [ 367.972074][ T30] audit: type=1326 audit(4034.592:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10602 comm="syz.1.948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 369.337526][ T30] audit: type=1326 audit(4036.000:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10634 comm="syz.1.955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 370.793337][T10663] sd 0:0:1:0: PR command failed: 1026 [ 370.817935][T10663] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 370.928095][T10663] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 372.592184][T10691] random: crng reseeded on system resumption [ 373.026979][ T30] audit: type=1326 audit(4039.699:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10688 comm="syz.1.968" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 374.149935][ T30] audit: type=1326 audit(4040.835:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.1.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 375.404834][ T30] audit: type=1326 audit(4042.091:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10728 comm="syz.1.975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 375.855661][ T30] audit: type=1326 audit(4042.554:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10723 comm="syz.0.974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 376.295206][ T30] audit: type=1326 audit(4042.996:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10751 comm="syz.1.979" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 376.699941][T10762] random: crng reseeded on system resumption [ 377.880360][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 378.504330][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.510876][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.003843][ T30] audit: type=1326 audit(4045.710:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10788 comm="syz.2.988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 379.478537][ T30] audit: type=1326 audit(4046.192:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10808 comm="syz.1.991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 379.772090][ T5147] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 380.205038][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 380.683329][T10835] ovs_ÿþ: entered promiscuous mode [ 382.526696][T10873] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 382.554495][T10875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'. [ 382.582634][T10875] hsr_slave_0: left promiscuous mode [ 382.613426][T10875] hsr_slave_1: left promiscuous mode [ 383.000114][T10881] zswap: compressor not available [ 383.269503][T10893] size and base must be multiples of 4 kiB [ 383.269526][T10893] CPU: 1 UID: 0 PID: 10893 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(full) [ 383.269559][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.269575][T10893] Call Trace: [ 383.269585][T10893] [ 383.269595][T10893] dump_stack_lvl+0x16c/0x1f0 [ 383.269631][T10893] mtrr_del+0xd1/0x110 [ 383.269665][T10893] mtrr_ioctl+0x922/0xcf0 [ 383.269701][T10893] ? __pfx_mtrr_ioctl+0x10/0x10 [ 383.269744][T10893] ? find_held_lock+0x2b/0x80 [ 383.269781][T10893] ? __fget_files+0x20e/0x3c0 [ 383.269807][T10893] ? __pfx_mtrr_ioctl+0x10/0x10 [ 383.269842][T10893] proc_reg_unlocked_ioctl+0x229/0x320 [ 383.269874][T10893] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 383.269913][T10893] __x64_sys_ioctl+0x18e/0x210 [ 383.269952][T10893] do_syscall_64+0xcd/0xfa0 [ 383.269985][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.270011][T10893] RIP: 0033:0x7f0e8898f6c9 [ 383.270033][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.270066][T10893] RSP: 002b:00007f0e89864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 383.270091][T10893] RAX: ffffffffffffffda RBX: 00007f0e88be6270 RCX: 00007f0e8898f6c9 [ 383.270109][T10893] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 383.270123][T10893] RBP: 00007f0e88a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 383.270137][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.270153][T10893] R13: 00007f0e88be6308 R14: 00007f0e88be6270 R15: 00007ffe20efb498 [ 383.270188][T10893] [ 384.478699][T10891] tty tty49: ldisc open failed (-12), clearing slot 48 [ 384.571255][T10897] pty pty238: ldisc open failed (-12), clearing slot 238 [ 384.936647][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'. [ 385.053335][T10916] hsr_slave_0: left promiscuous mode [ 385.063987][T10916] hsr_slave_1: left promiscuous mode [ 385.196069][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1019'. [ 385.658889][T10935] syz.3.1025 (10935) used obsolete PPPIOCDETACH ioctl [ 387.142842][T10949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.149429][T10949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 387.234139][T10949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.314554][T10949] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 387.400004][T10949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.458832][T10949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 387.501584][T10949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 387.528441][T10949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 387.586032][T10949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 388.447026][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 389.057747][T10984] futex_wake_op: syz.1.1035 tries to shift op by -2048; fix this program [ 389.070450][T10984] 0x000000000001-0x000000020000 : "" [ 389.237846][T10984] ftl_cs: FTL header corrupt! [ 389.252945][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 389.401965][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 389.561522][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 390.180791][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'. [ 390.527203][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 391.322198][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 391.471350][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 391.630979][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.709779][ T5147] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.922535][T11135] FAULT_INJECTION: forcing a failure. [ 394.922535][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 394.981923][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.1.1067 Not tainted syzkaller #0 PREEMPT(full) [ 394.981960][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.981975][T11135] Call Trace: [ 394.981983][T11135] [ 394.981993][T11135] dump_stack_lvl+0x16c/0x1f0 [ 394.982026][T11135] should_fail_ex+0x512/0x640 [ 394.982063][T11135] ? __kmalloc_noprof+0xca/0x880 [ 394.982105][T11135] should_failslab+0xc2/0x120 [ 394.982139][T11135] __kmalloc_noprof+0xdd/0x880 [ 394.982182][T11135] ? alloc_pipe_info+0x1ec/0x590 [ 394.982218][T11135] ? alloc_pipe_info+0x1ec/0x590 [ 394.982245][T11135] alloc_pipe_info+0x1ec/0x590 [ 394.982280][T11135] splice_direct_to_actor+0x77d/0xa30 [ 394.982308][T11135] ? __pfx_direct_splice_actor+0x10/0x10 [ 394.982335][T11135] ? __pfx_aa_file_perm+0x10/0x10 [ 394.982364][T11135] ? find_held_lock+0x2b/0x80 [ 394.982390][T11135] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 394.982414][T11135] ? get_pid_task+0xfc/0x250 [ 394.982457][T11135] do_splice_direct+0x174/0x240 [ 394.982483][T11135] ? __pfx_do_splice_direct+0x10/0x10 [ 394.982506][T11135] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 394.982546][T11135] ? rw_verify_area+0xcf/0x6c0 [ 394.982570][T11135] do_sendfile+0xb06/0xe50 [ 394.982604][T11135] ? __pfx_do_sendfile+0x10/0x10 [ 394.982631][T11135] ? __fget_files+0x20e/0x3c0 [ 394.982663][T11135] __x64_sys_sendfile64+0x1d8/0x220 [ 394.982692][T11135] ? ksys_write+0x1ac/0x250 [ 394.982718][T11135] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 394.982759][T11135] do_syscall_64+0xcd/0xfa0 [ 394.982791][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.982815][T11135] RIP: 0033:0x7f0e8898f6c9 [ 394.982838][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.982859][T11135] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.982881][T11135] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 394.982896][T11135] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 394.982910][T11135] RBP: 00007f0e898c7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.982924][T11135] R10: 0000800000000006 R11: 0000000000000246 R12: 0000000000000001 [ 394.982939][T11135] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 394.982972][T11135] [ 395.213374][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.617734][T11148] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 396.799343][ T30] audit: type=1326 audit(4294967308.896:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.1.1071" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 397.985833][T11209] futex_wake_op: syz.2.1077 tries to shift op by -2048; fix this program [ 397.997783][T11209] 0x000000000001-0x000000020000 : "" [ 398.010168][T11209] ftl_cs: FTL header corrupt! [ 401.198832][ T30] audit: type=1326 audit(4294967313.308:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz.0.1094" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 402.231643][ T30] audit: type=1326 audit(4294967314.354:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11274 comm="syz.3.1093" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 403.045415][T11319] FAULT_INJECTION: forcing a failure. [ 403.045415][T11319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.077997][T11319] CPU: 1 UID: 0 PID: 11319 Comm: syz.2.1103 Not tainted syzkaller #0 PREEMPT(full) [ 403.078019][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.078028][T11319] Call Trace: [ 403.078033][T11319] [ 403.078039][T11319] dump_stack_lvl+0x16c/0x1f0 [ 403.078059][T11319] should_fail_ex+0x512/0x640 [ 403.078084][T11319] _copy_from_user+0x2e/0xd0 [ 403.078106][T11319] core_sys_select+0x35b/0xc20 [ 403.078125][T11319] ? __pfx_core_sys_select+0x10/0x10 [ 403.078142][T11319] ? proc_fail_nth_write+0x9f/0x220 [ 403.078173][T11319] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.078194][T11319] kern_select+0x15d/0x1e0 [ 403.078208][T11319] ? __pfx_kern_select+0x10/0x10 [ 403.078223][T11319] ? __pfx_ksys_write+0x10/0x10 [ 403.078241][T11319] __x64_sys_select+0xbd/0x160 [ 403.078253][T11319] ? do_syscall_64+0x91/0xfa0 [ 403.078268][T11319] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.078283][T11319] do_syscall_64+0xcd/0xfa0 [ 403.078299][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.078313][T11319] RIP: 0033:0x7f5df4d8f6c9 [ 403.078326][T11319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.078339][T11319] RSP: 002b:00007f5df5c15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 403.078354][T11319] RAX: ffffffffffffffda RBX: 00007f5df4fe6180 RCX: 00007f5df4d8f6c9 [ 403.078366][T11319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 403.078374][T11319] RBP: 00007f5df5c15090 R08: 0000000000000000 R09: 0000000000000000 [ 403.078382][T11319] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 403.078390][T11319] R13: 00007f5df4fe6218 R14: 00007f5df4fe6180 R15: 00007ffc5e057ae8 [ 403.078409][T11319] [ 405.414204][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 405.444895][T11349] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1110'. [ 405.533595][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1111'. [ 406.495680][T11384] FAULT_INJECTION: forcing a failure. [ 406.495680][T11384] name fail_futex, interval 1, probability 0, space 0, times 1 [ 406.529399][T11384] CPU: 0 UID: 0 PID: 11384 Comm: syz.3.1120 Not tainted syzkaller #0 PREEMPT(full) [ 406.529435][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.529453][T11384] Call Trace: [ 406.529462][T11384] [ 406.529471][T11384] dump_stack_lvl+0x16c/0x1f0 [ 406.529510][T11384] should_fail_ex+0x512/0x640 [ 406.529555][T11384] get_futex_key+0x1d0/0x1560 [ 406.529593][T11384] ? __pfx_get_futex_key+0x10/0x10 [ 406.529628][T11384] ? __destroy_inode+0x2e4/0x730 [ 406.529660][T11384] ? __pfx_sock_free_inode+0x10/0x10 [ 406.529697][T11384] futex_wake+0xea/0x530 [ 406.529736][T11384] ? __pfx_evict+0x10/0x10 [ 406.529768][T11384] ? __pfx_futex_wake+0x10/0x10 [ 406.529824][T11384] do_futex+0x1e3/0x350 [ 406.529860][T11384] ? __pfx_do_futex+0x10/0x10 [ 406.529891][T11384] ? iput+0x35/0x40 [ 406.529921][T11384] ? __sock_release+0x20b/0x270 [ 406.529956][T11384] __x64_sys_futex+0x1e0/0x4c0 [ 406.529992][T11384] ? __sys_socket+0xac/0x260 [ 406.530034][T11384] ? __fget_files+0x20e/0x3c0 [ 406.530060][T11384] ? __pfx___x64_sys_futex+0x10/0x10 [ 406.530097][T11384] ? xfd_validate_state+0x61/0x180 [ 406.530146][T11384] do_syscall_64+0xcd/0xfa0 [ 406.530178][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.530205][T11384] RIP: 0033:0x7f72a4f8f6c9 [ 406.530226][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.530252][T11384] RSP: 002b:00007f72a5f090e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 406.530278][T11384] RAX: ffffffffffffffda RBX: 00007f72a51e5fa8 RCX: 00007f72a4f8f6c9 [ 406.530296][T11384] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f72a51e5fac [ 406.530313][T11384] RBP: 00007f72a51e5fa0 R08: 00007f72a5f0a000 R09: 0000000000000000 [ 406.530330][T11384] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 406.530346][T11384] R13: 00007f72a51e6038 R14: 00007ffc2493b180 R15: 00007ffc2493b268 [ 406.530384][T11384] [ 406.732370][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.887060][T11391] FAULT_INJECTION: forcing a failure. [ 406.887060][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 406.998022][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.3.1122 Not tainted syzkaller #0 PREEMPT(full) [ 406.998056][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.998069][T11391] Call Trace: [ 406.998076][T11391] [ 406.998085][T11391] dump_stack_lvl+0x16c/0x1f0 [ 406.998118][T11391] should_fail_ex+0x512/0x640 [ 406.998150][T11391] ? __kmalloc_noprof+0xca/0x880 [ 406.998189][T11391] should_failslab+0xc2/0x120 [ 406.998223][T11391] __kmalloc_noprof+0xdd/0x880 [ 406.998262][T11391] ? iter_file_splice_write+0x1cc/0x12e0 [ 406.998295][T11391] ? iter_file_splice_write+0x1cc/0x12e0 [ 406.998327][T11391] iter_file_splice_write+0x1cc/0x12e0 [ 406.998360][T11391] ? kfree+0x2b8/0x6d0 [ 406.998379][T11391] ? copy_splice_read+0x897/0xc20 [ 406.998409][T11391] ? copy_splice_read+0x897/0xc20 [ 406.998433][T11391] ? __pfx_iter_file_splice_write+0x10/0x10 [ 406.998461][T11391] ? __lock_acquire+0xb8a/0x1c90 [ 406.998497][T11391] ? __pfx_copy_splice_read+0x10/0x10 [ 406.998556][T11391] ? __pfx_iter_file_splice_write+0x10/0x10 [ 406.998586][T11391] direct_splice_actor+0x192/0x6c0 [ 406.998617][T11391] splice_direct_to_actor+0x345/0xa30 [ 406.998645][T11391] ? __pfx_direct_splice_actor+0x10/0x10 [ 406.998677][T11391] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 406.998700][T11391] ? get_pid_task+0xfc/0x250 [ 406.998743][T11391] do_splice_direct+0x174/0x240 [ 406.998769][T11391] ? __pfx_do_splice_direct+0x10/0x10 [ 406.998795][T11391] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 406.998841][T11391] ? rw_verify_area+0xcf/0x6c0 [ 406.998870][T11391] do_sendfile+0xb06/0xe50 [ 406.998902][T11391] ? __pfx_do_sendfile+0x10/0x10 [ 406.998929][T11391] ? __fget_files+0x20e/0x3c0 [ 406.998964][T11391] __x64_sys_sendfile64+0x1d8/0x220 [ 406.998996][T11391] ? ksys_write+0x1ac/0x250 [ 406.999022][T11391] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 406.999066][T11391] do_syscall_64+0xcd/0xfa0 [ 406.999097][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.999123][T11391] RIP: 0033:0x7f72a4f8f6c9 [ 406.999143][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.999167][T11391] RSP: 002b:00007f72a5f09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 406.999191][T11391] RAX: ffffffffffffffda RBX: 00007f72a51e5fa0 RCX: 00007f72a4f8f6c9 [ 406.999208][T11391] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 406.999223][T11391] RBP: 00007f72a5f09090 R08: 0000000000000000 R09: 0000000000000000 [ 406.999238][T11391] R10: 0000800000000006 R11: 0000000000000246 R12: 0000000000000001 [ 406.999254][T11391] R13: 00007f72a51e6038 R14: 00007f72a51e5fa0 R15: 00007ffc2493b268 [ 406.999290][T11391] [ 407.264840][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.029264][ T5147] Bluetooth: hci1: unexpected event 0x3e length: 728 > 260 [ 408.029298][ T5147] Bluetooth: hci1: unexpected subevent 0x0c length: 727 > 5 [ 409.364009][ T30] audit: type=1326 audit(4294967321.521:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.2.1130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 410.322770][T11455] FAULT_INJECTION: forcing a failure. [ 410.322770][T11455] name failslab, interval 1, probability 0, space 0, times 0 [ 410.417040][T11455] CPU: 1 UID: 0 PID: 11455 Comm: syz.2.1135 Not tainted syzkaller #0 PREEMPT(full) [ 410.417075][T11455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 410.417090][T11455] Call Trace: [ 410.417098][T11455] [ 410.417109][T11455] dump_stack_lvl+0x16c/0x1f0 [ 410.417143][T11455] should_fail_ex+0x512/0x640 [ 410.417180][T11455] ? __kmalloc_noprof+0xca/0x880 [ 410.417222][T11455] should_failslab+0xc2/0x120 [ 410.417256][T11455] __kmalloc_noprof+0xdd/0x880 [ 410.417295][T11455] ? kernfs_fop_write_iter+0x237/0x570 [ 410.417340][T11455] ? kernfs_fop_write_iter+0x237/0x570 [ 410.417378][T11455] kernfs_fop_write_iter+0x237/0x570 [ 410.417424][T11455] iter_file_splice_write+0xa24/0x12e0 [ 410.417473][T11455] ? __pfx_iter_file_splice_write+0x10/0x10 [ 410.417508][T11455] ? __pfx_copy_splice_read+0x10/0x10 [ 410.417569][T11455] ? __pfx_iter_file_splice_write+0x10/0x10 [ 410.417599][T11455] direct_splice_actor+0x192/0x6c0 [ 410.417630][T11455] splice_direct_to_actor+0x345/0xa30 [ 410.417659][T11455] ? __pfx_direct_splice_actor+0x10/0x10 [ 410.417692][T11455] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 410.417717][T11455] ? get_pid_task+0xfc/0x250 [ 410.417760][T11455] do_splice_direct+0x174/0x240 [ 410.417786][T11455] ? __pfx_do_splice_direct+0x10/0x10 [ 410.417812][T11455] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 410.417858][T11455] ? rw_verify_area+0xcf/0x6c0 [ 410.417886][T11455] do_sendfile+0xb06/0xe50 [ 410.417919][T11455] ? __pfx_do_sendfile+0x10/0x10 [ 410.417947][T11455] ? __fget_files+0x20e/0x3c0 [ 410.417982][T11455] __x64_sys_sendfile64+0x1d8/0x220 [ 410.418013][T11455] ? ksys_write+0x1ac/0x250 [ 410.418045][T11455] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 410.418090][T11455] do_syscall_64+0xcd/0xfa0 [ 410.418121][T11455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.418147][T11455] RIP: 0033:0x7f5df4d8f6c9 [ 410.418167][T11455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.418191][T11455] RSP: 002b:00007f5df5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.418216][T11455] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8f6c9 [ 410.418234][T11455] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 410.418249][T11455] RBP: 00007f5df5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 410.418265][T11455] R10: 0000800000000006 R11: 0000000000000246 R12: 0000000000000001 [ 410.418281][T11455] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 410.418319][T11455] [ 410.696235][T11453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1134'. [ 412.644757][T11501] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿ, dev 4 [ 413.230516][T11512] FAULT_INJECTION: forcing a failure. [ 413.230516][T11512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 413.244243][T11512] CPU: 1 UID: 0 PID: 11512 Comm: syz.2.1149 Not tainted syzkaller #0 PREEMPT(full) [ 413.244276][T11512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.244292][T11512] Call Trace: [ 413.244302][T11512] [ 413.244311][T11512] dump_stack_lvl+0x16c/0x1f0 [ 413.244346][T11512] should_fail_ex+0x512/0x640 [ 413.244391][T11512] get_futex_key+0x1d0/0x1560 [ 413.244430][T11512] ? __pfx_get_futex_key+0x10/0x10 [ 413.244465][T11512] ? __destroy_inode+0x2e4/0x730 [ 413.244497][T11512] ? __pfx_sock_free_inode+0x10/0x10 [ 413.244533][T11512] futex_wake+0xea/0x530 [ 413.244572][T11512] ? __pfx_evict+0x10/0x10 [ 413.244603][T11512] ? __pfx_futex_wake+0x10/0x10 [ 413.244655][T11512] do_futex+0x1e3/0x350 [ 413.244691][T11512] ? __pfx_do_futex+0x10/0x10 [ 413.244720][T11512] ? iput+0x35/0x40 [ 413.244748][T11512] ? __sock_release+0x20b/0x270 [ 413.244782][T11512] __x64_sys_futex+0x1e0/0x4c0 [ 413.244814][T11512] ? __sys_socket+0xac/0x260 [ 413.244853][T11512] ? __fget_files+0x20e/0x3c0 [ 413.244881][T11512] ? __pfx___x64_sys_futex+0x10/0x10 [ 413.244913][T11512] ? xfd_validate_state+0x61/0x180 [ 413.244958][T11512] do_syscall_64+0xcd/0xfa0 [ 413.244989][T11512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.245014][T11512] RIP: 0033:0x7f5df4d8f6c9 [ 413.245035][T11512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.245060][T11512] RSP: 002b:00007f5df5c570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 413.245085][T11512] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa8 RCX: 00007f5df4d8f6c9 [ 413.245102][T11512] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5df4fe5fac [ 413.245116][T11512] RBP: 00007f5df4fe5fa0 R08: 00007f5df5c58000 R09: 0000000000000000 [ 413.245133][T11512] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 413.245147][T11512] R13: 00007f5df4fe6038 R14: 00007ffc5e057a00 R15: 00007ffc5e057ae8 [ 413.245178][T11512] [ 413.874756][ T5147] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 413.874781][ T5147] Bluetooth: hci2: unexpected subevent 0x0c length: 727 > 5 [ 413.958829][T11533] FAULT_INJECTION: forcing a failure. [ 413.958829][T11533] name failslab, interval 1, probability 0, space 0, times 0 [ 413.981941][T11533] CPU: 0 UID: 0 PID: 11533 Comm: syz.0.1153 Not tainted syzkaller #0 PREEMPT(full) [ 413.981972][T11533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 413.981980][T11533] Call Trace: [ 413.981985][T11533] [ 413.981991][T11533] dump_stack_lvl+0x16c/0x1f0 [ 413.982011][T11533] should_fail_ex+0x512/0x640 [ 413.982032][T11533] ? __kmalloc_noprof+0xca/0x880 [ 413.982056][T11533] should_failslab+0xc2/0x120 [ 413.982074][T11533] __kmalloc_noprof+0xdd/0x880 [ 413.982095][T11533] ? alloc_pipe_info+0x1ec/0x590 [ 413.982114][T11533] ? alloc_pipe_info+0x1ec/0x590 [ 413.982128][T11533] alloc_pipe_info+0x1ec/0x590 [ 413.982146][T11533] splice_direct_to_actor+0x77d/0xa30 [ 413.982161][T11533] ? __pfx_direct_splice_actor+0x10/0x10 [ 413.982176][T11533] ? __pfx_aa_file_perm+0x10/0x10 [ 413.982193][T11533] ? find_held_lock+0x2b/0x80 [ 413.982207][T11533] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 413.982220][T11533] ? get_pid_task+0xfc/0x250 [ 413.982243][T11533] do_splice_direct+0x174/0x240 [ 413.982257][T11533] ? __pfx_do_splice_direct+0x10/0x10 [ 413.982271][T11533] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 413.982309][T11533] ? rw_verify_area+0xcf/0x6c0 [ 413.982336][T11533] do_sendfile+0xb06/0xe50 [ 413.982367][T11533] ? __pfx_do_sendfile+0x10/0x10 [ 413.982393][T11533] ? __fget_files+0x20e/0x3c0 [ 413.982424][T11533] __x64_sys_sendfile64+0x1d8/0x220 [ 413.982454][T11533] ? ksys_write+0x1ac/0x250 [ 413.982479][T11533] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 413.982518][T11533] do_syscall_64+0xcd/0xfa0 [ 413.982547][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.982572][T11533] RIP: 0033:0x7f22bdd8f6c9 [ 413.982593][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.982617][T11533] RSP: 002b:00007f22bed02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 413.982642][T11533] RAX: ffffffffffffffda RBX: 00007f22bdfe5fa0 RCX: 00007f22bdd8f6c9 [ 413.982660][T11533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 413.982681][T11533] RBP: 00007f22bed02090 R08: 0000000000000000 R09: 0000000000000000 [ 413.982697][T11533] R10: 0000000000800048 R11: 0000000000000246 R12: 0000000000000001 [ 413.982712][T11533] R13: 00007f22bdfe6038 R14: 00007f22bdfe5fa0 R15: 00007ffe9d4fa508 [ 413.982749][T11533] [ 414.214766][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.083628][T11580] FAULT_INJECTION: forcing a failure. [ 416.083628][T11580] name failslab, interval 1, probability 0, space 0, times 0 [ 416.113971][T11580] CPU: 0 UID: 0 PID: 11580 Comm: syz.2.1164 Not tainted syzkaller #0 PREEMPT(full) [ 416.114006][T11580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.114021][T11580] Call Trace: [ 416.114029][T11580] [ 416.114038][T11580] dump_stack_lvl+0x16c/0x1f0 [ 416.114072][T11580] should_fail_ex+0x512/0x640 [ 416.114108][T11580] ? __kmalloc_noprof+0xca/0x880 [ 416.114149][T11580] should_failslab+0xc2/0x120 [ 416.114182][T11580] __kmalloc_noprof+0xdd/0x880 [ 416.114218][T11580] ? copy_splice_read+0x1a8/0xc20 [ 416.114243][T11580] ? copy_splice_read+0x1a8/0xc20 [ 416.114262][T11580] copy_splice_read+0x1a8/0xc20 [ 416.114292][T11580] ? __pfx_copy_splice_read+0x10/0x10 [ 416.114334][T11580] ? look_up_lock_class+0x59/0x150 [ 416.114377][T11580] ? lockdep_init_map_type+0x5c/0x280 [ 416.114412][T11580] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 416.114441][T11580] ? __pfx_copy_splice_read+0x10/0x10 [ 416.114479][T11580] do_splice_read+0x285/0x370 [ 416.114508][T11580] splice_direct_to_actor+0x2a1/0xa30 [ 416.114536][T11580] ? __pfx_direct_splice_actor+0x10/0x10 [ 416.114568][T11580] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 416.114592][T11580] ? get_pid_task+0xfc/0x250 [ 416.114634][T11580] do_splice_direct+0x174/0x240 [ 416.114660][T11580] ? __pfx_do_splice_direct+0x10/0x10 [ 416.114685][T11580] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 416.114730][T11580] ? rw_verify_area+0xcf/0x6c0 [ 416.114758][T11580] do_sendfile+0xb06/0xe50 [ 416.114792][T11580] ? __pfx_do_sendfile+0x10/0x10 [ 416.114818][T11580] ? __fget_files+0x20e/0x3c0 [ 416.114853][T11580] __x64_sys_sendfile64+0x1d8/0x220 [ 416.114885][T11580] ? ksys_write+0x1ac/0x250 [ 416.114911][T11580] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 416.114955][T11580] do_syscall_64+0xcd/0xfa0 [ 416.114985][T11580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.115011][T11580] RIP: 0033:0x7f5df4d8f6c9 [ 416.115032][T11580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.115057][T11580] RSP: 002b:00007f5df5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 416.115081][T11580] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8f6c9 [ 416.115099][T11580] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 416.115113][T11580] RBP: 00007f5df5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 416.115129][T11580] R10: 0000000000800048 R11: 0000000000000246 R12: 0000000000000001 [ 416.115145][T11580] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 416.115181][T11580] [ 416.374776][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.626533][T11606] tipc: Started in network mode [ 417.631786][T11606] tipc: Node identity 45e5412, cluster identity 4711 [ 417.638704][T11606] tipc: Node number set to 73290770 [ 417.647255][T11606] delete_channel: no stack [ 418.387889][ T30] audit: type=1326 audit(4294967330.578:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.3.1170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 418.994034][ T30] audit: type=1326 audit(4294967331.201:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.0.1171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 419.593730][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 419.783145][T11646] hub 8-0:1.0: USB hub found [ 419.813297][ T5147] Bluetooth: hci0: unexpected event 0x01 length: 5 > 1 [ 419.838103][T11653] FAULT_INJECTION: forcing a failure. [ 419.838103][T11653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.874772][T11646] hub 8-0:1.0: 1 port detected [ 419.884642][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(full) [ 419.884675][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 419.884690][T11653] Call Trace: [ 419.884698][T11653] [ 419.884708][T11653] dump_stack_lvl+0x16c/0x1f0 [ 419.884741][T11653] should_fail_ex+0x512/0x640 [ 419.884783][T11653] _copy_to_user+0x32/0xd0 [ 419.884826][T11653] simple_read_from_buffer+0xcb/0x170 [ 419.884868][T11653] proc_fail_nth_read+0x197/0x240 [ 419.884898][T11653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.884929][T11653] ? rw_verify_area+0xcf/0x6c0 [ 419.884961][T11653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.884989][T11653] vfs_read+0x1e4/0xcf0 [ 419.885022][T11653] ? __pfx___mutex_lock+0x10/0x10 [ 419.885057][T11653] ? __pfx_vfs_read+0x10/0x10 [ 419.885094][T11653] ? __fget_files+0x20e/0x3c0 [ 419.885130][T11653] ksys_read+0x12a/0x250 [ 419.885157][T11653] ? __pfx_ksys_read+0x10/0x10 [ 419.885196][T11653] do_syscall_64+0xcd/0xfa0 [ 419.885228][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.885253][T11653] RIP: 0033:0x7f5df4d8e0dc [ 419.885272][T11653] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.885296][T11653] RSP: 002b:00007f5df5c57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.885325][T11653] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8e0dc [ 419.885343][T11653] RDX: 000000000000000f RSI: 00007f5df5c570a0 RDI: 0000000000000005 [ 419.885359][T11653] RBP: 00007f5df5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 419.885375][T11653] R10: 0000800000000006 R11: 0000000000000246 R12: 0000000000000002 [ 419.885392][T11653] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 419.885430][T11653] [ 420.071709][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.452667][T11675] FAULT_INJECTION: forcing a failure. [ 421.452667][T11675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.469579][ T30] audit: type=1326 audit(4294967333.694:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11659 comm="syz.1.1182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 421.501964][T11675] CPU: 0 UID: 0 PID: 11675 Comm: syz.3.1184 Not tainted syzkaller #0 PREEMPT(full) [ 421.501990][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.501998][T11675] Call Trace: [ 421.502004][T11675] [ 421.502011][T11675] dump_stack_lvl+0x16c/0x1f0 [ 421.502031][T11675] should_fail_ex+0x512/0x640 [ 421.502056][T11675] core_sys_select+0x4c5/0xc20 [ 421.502075][T11675] ? __pfx_core_sys_select+0x10/0x10 [ 421.502091][T11675] ? proc_fail_nth_write+0x9f/0x220 [ 421.502122][T11675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 421.502143][T11675] kern_select+0x15d/0x1e0 [ 421.502156][T11675] ? __pfx_kern_select+0x10/0x10 [ 421.502177][T11675] ? __pfx_ksys_write+0x10/0x10 [ 421.502195][T11675] __x64_sys_select+0xbd/0x160 [ 421.502207][T11675] ? do_syscall_64+0x91/0xfa0 [ 421.502222][T11675] ? lockdep_hardirqs_on+0x7c/0x110 [ 421.502237][T11675] do_syscall_64+0xcd/0xfa0 [ 421.502254][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.502269][T11675] RIP: 0033:0x7f72a4f8f6c9 [ 421.502281][T11675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.502295][T11675] RSP: 002b:00007f72a5ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 421.502309][T11675] RAX: ffffffffffffffda RBX: 00007f72a51e6180 RCX: 00007f72a4f8f6c9 [ 421.502318][T11675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 421.502326][T11675] RBP: 00007f72a5ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.502335][T11675] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 421.502343][T11675] R13: 00007f72a51e6218 R14: 00007f72a51e6180 R15: 00007ffc2493b268 [ 421.502361][T11675] [ 421.675185][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.125236][ T30] audit: type=1326 audit(4294967334.357:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11679 comm="syz.2.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 422.174032][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 422.345355][T11691] hub 8-0:1.0: USB hub found [ 422.356341][T11691] hub 8-0:1.0: 1 port detected [ 423.971103][T11687] kexec: Could not allocate control_code_buffer [ 424.249408][T11732] netlink: 'syz.0.1199': attribute type 1 has an invalid length. [ 424.751361][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 424.791829][ T30] audit: type=1326 audit(4294967337.031:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11736 comm="syz.3.1202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 424.813615][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.962658][T11739] hub 8-0:1.0: USB hub found [ 424.988674][T11739] hub 8-0:1.0: 1 port detected [ 425.111537][T11751] __vm_enough_memory: pid: 11751, comm: syz.0.1204, bytes: 4398046511104 not enough memory for the allocation [ 426.493446][T11770] FAULT_INJECTION: forcing a failure. [ 426.493446][T11770] name fail_futex, interval 1, probability 0, space 0, times 0 [ 426.506557][T11770] CPU: 1 UID: 0 PID: 11770 Comm: syz.1.1209 Not tainted syzkaller #0 PREEMPT(full) [ 426.506592][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.506607][T11770] Call Trace: [ 426.506615][T11770] [ 426.506626][T11770] dump_stack_lvl+0x16c/0x1f0 [ 426.506662][T11770] should_fail_ex+0x512/0x640 [ 426.506708][T11770] get_futex_key+0x1d0/0x1560 [ 426.506756][T11770] ? __pfx_get_futex_key+0x10/0x10 [ 426.506788][T11770] ? futex_private_hash_put+0x176/0x300 [ 426.506832][T11770] futex_wake+0xea/0x530 [ 426.506871][T11770] ? __pfx_futex_wake+0x10/0x10 [ 426.506926][T11770] do_futex+0x1e3/0x350 [ 426.506962][T11770] ? __pfx_do_futex+0x10/0x10 [ 426.507007][T11770] __x64_sys_futex+0x1e0/0x4c0 [ 426.507046][T11770] ? fdget_pos+0x2b8/0x370 [ 426.507074][T11770] ? __pfx___x64_sys_futex+0x10/0x10 [ 426.507109][T11770] ? ksys_read+0x1ac/0x250 [ 426.507136][T11770] ? __pfx_ksys_read+0x10/0x10 [ 426.507175][T11770] do_syscall_64+0xcd/0xfa0 [ 426.507208][T11770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.507236][T11770] RIP: 0033:0x7f0e8898f6c9 [ 426.507258][T11770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.507283][T11770] RSP: 002b:00007f0e898c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 426.507310][T11770] RAX: ffffffffffffffda RBX: 00007f0e88be5fa8 RCX: 00007f0e8898f6c9 [ 426.507328][T11770] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e88be5fac [ 426.507345][T11770] RBP: 00007f0e88be5fa0 R08: 00007f0e898c8000 R09: 0000000000000000 [ 426.507362][T11770] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 426.507379][T11770] R13: 00007f0e88be6038 R14: 00007ffe20efb3b0 R15: 00007ffe20efb498 [ 426.507416][T11770] [ 427.260326][T11780] netlink: 36332 bytes leftover after parsing attributes in process `syz.1.1211'. [ 428.843087][T11810] zswap: compressor not available [ 429.771091][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1219'. [ 431.313028][T11861] FAULT_INJECTION: forcing a failure. [ 431.313028][T11861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.356742][T11861] CPU: 1 UID: 0 PID: 11861 Comm: syz.2.1228 Not tainted syzkaller #0 PREEMPT(full) [ 431.356781][T11861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.356797][T11861] Call Trace: [ 431.356805][T11861] [ 431.356815][T11861] dump_stack_lvl+0x16c/0x1f0 [ 431.356852][T11861] should_fail_ex+0x512/0x640 [ 431.356895][T11861] should_fail_alloc_page+0xe7/0x130 [ 431.356931][T11861] prepare_alloc_pages+0x3c2/0x610 [ 431.356964][T11861] ? rcu_is_watching+0x12/0xc0 [ 431.356995][T11861] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 431.357030][T11861] ? mark_held_locks+0x49/0x80 [ 431.357063][T11861] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 431.357091][T11861] ? lockdep_hardirqs_on+0x7c/0x110 [ 431.357126][T11861] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 431.357155][T11861] ? stack_depot_save_flags+0x3de/0x9c0 [ 431.357196][T11861] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 431.357227][T11861] ? kasan_save_stack+0x42/0x60 [ 431.357255][T11861] ? kasan_save_stack+0x33/0x60 [ 431.357283][T11861] ? kasan_save_track+0x14/0x30 [ 431.357311][T11861] ? __kasan_kmalloc+0xaa/0xb0 [ 431.357338][T11861] ? mon_bin_open+0x1a8/0x4a0 [ 431.357371][T11861] ? do_sys_openat2+0x11b/0x1d0 [ 431.357407][T11861] ? __x64_sys_openat+0x174/0x210 [ 431.357442][T11861] ? do_syscall_64+0xcd/0xfa0 [ 431.357469][T11861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.357504][T11861] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.357548][T11861] ? policy_nodemask+0xea/0x4e0 [ 431.357585][T11861] alloc_pages_mpol+0x1fb/0x550 [ 431.357621][T11861] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 431.357667][T11861] alloc_pages_noprof+0x131/0x390 [ 431.357703][T11861] get_zeroed_page_noprof+0x18/0xb0 [ 431.357737][T11861] mon_alloc_buff+0xce/0x1b0 [ 431.357767][T11861] ? kasan_save_track+0x14/0x30 [ 431.357800][T11861] mon_bin_open+0x207/0x4a0 [ 431.357833][T11861] ? __pfx_mon_bin_open+0x10/0x10 [ 431.357865][T11861] chrdev_open+0x234/0x6a0 [ 431.357893][T11861] ? __pfx_apparmor_file_open+0x10/0x10 [ 431.357928][T11861] ? __pfx_chrdev_open+0x10/0x10 [ 431.357961][T11861] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 431.357996][T11861] do_dentry_open+0x982/0x1530 [ 431.358027][T11861] ? __pfx_chrdev_open+0x10/0x10 [ 431.358066][T11861] vfs_open+0x82/0x3f0 [ 431.358103][T11861] path_openat+0x1de4/0x2cb0 [ 431.358146][T11861] ? __pfx_path_openat+0x10/0x10 [ 431.358175][T11861] ? __lock_acquire+0xb8a/0x1c90 [ 431.358209][T11861] do_filp_open+0x3c6/0x470 [ 431.358236][T11861] ? __pfx_do_filp_open+0x10/0x10 [ 431.358286][T11861] ? alloc_fd+0x471/0x7d0 [ 431.358323][T11861] do_sys_openat2+0x11b/0x1d0 [ 431.358361][T11861] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.358412][T11861] __x64_sys_openat+0x174/0x210 [ 431.358451][T11861] ? __pfx___x64_sys_openat+0x10/0x10 [ 431.358502][T11861] do_syscall_64+0xcd/0xfa0 [ 431.358532][T11861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.358560][T11861] RIP: 0033:0x7f5df4d8f6c9 [ 431.358581][T11861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.358607][T11861] RSP: 002b:00007f5df5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.358633][T11861] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8f6c9 [ 431.358652][T11861] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 431.358669][T11861] RBP: 00007f5df4e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.358685][T11861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.358701][T11861] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 431.358740][T11861] [ 431.720975][T11863] capability: warning: `syz.1.1226' uses deprecated v2 capabilities in a way that may be insecure [ 431.762009][T11867] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 432.037863][T11865] zswap: compressor not available [ 432.814361][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 433.914581][ T30] audit: type=1804 audit(4294967346.198:203): pid=11905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1237" name="/newroot/312/file0" dev="tmpfs" ino=1825 res=1 errno=0 [ 434.017843][ T30] audit: type=1804 audit(4294967346.229:204): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1237" name="/newroot/312/file0" dev="tmpfs" ino=1825 res=1 errno=0 [ 436.397712][T11960] nvme_fcloop: unknown parameter or missing value '0' [ 436.444628][T11961] hub 1-0:1.0: USB hub found [ 436.450914][T11961] hub 1-0:1.0: 1 port detected [ 437.031560][ T30] audit: type=1800 audit(4294967349.335:205): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1259" name="dbroot" dev="configfs" ino=30143 res=0 errno=0 [ 439.627756][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.635325][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.462342][T12053] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1277'. [ 442.002985][ T30] audit: type=1804 audit(4294967354.331:206): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1282" name="/newroot/306/file0" dev="tmpfs" ino=1795 res=1 errno=0 [ 442.079835][ T30] audit: type=1804 audit(4294967354.401:207): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1282" name="/newroot/306/file0" dev="tmpfs" ino=1795 res=1 errno=0 [ 446.160265][T12175] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1302'. [ 446.231974][T12175] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1302'. [ 448.154909][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 449.811659][T12252] Format for unlinking a device is "netnsfd:ifidx" (int uint). [ 450.344174][ T30] audit: type=1326 audit(4294967362.714:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12253 comm="syz.3.1322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 454.255761][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 456.062112][T12351] openvswitch: netlink: nsh attr 36 is out of range max 3 [ 456.931823][T12388] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1353'. [ 456.971779][ T30] audit: type=1326 audit(4294967300.824:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.1.1351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 456.993646][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.919759][T12415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 458.945200][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.042421][T12415] bridge_slave_1 (unregistering): left allmulticast mode [ 459.070948][T12415] bridge_slave_1 (unregistering): left promiscuous mode [ 459.078921][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.296515][T12426] kafs: addr_prefs: Invalid Command [ 459.423213][ T30] audit: type=1326 audit(4294967303.287:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12418 comm="syz.0.1361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 459.522405][T12421] openvswitch: netlink: nsh attr 36 is out of range max 3 [ 460.462116][T12450] FAULT_INJECTION: forcing a failure. [ 460.462116][T12450] name failslab, interval 1, probability 0, space 0, times 0 [ 460.516522][T12450] CPU: 1 UID: 0 PID: 12450 Comm: syz.3.1367 Not tainted syzkaller #0 PREEMPT(full) [ 460.516558][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 460.516572][T12450] Call Trace: [ 460.516581][T12450] [ 460.516590][T12450] dump_stack_lvl+0x16c/0x1f0 [ 460.516625][T12450] should_fail_ex+0x512/0x640 [ 460.516661][T12450] ? fs_reclaim_acquire+0xae/0x150 [ 460.516697][T12450] should_failslab+0xc2/0x120 [ 460.516729][T12450] __kmalloc_noprof+0xdd/0x880 [ 460.516769][T12450] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 460.516805][T12450] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 460.516832][T12450] tomoyo_realpath_from_path+0xc2/0x6e0 [ 460.516874][T12450] ? tomoyo_profile+0x47/0x60 [ 460.516909][T12450] tomoyo_path_number_perm+0x245/0x580 [ 460.516947][T12450] ? tomoyo_path_number_perm+0x237/0x580 [ 460.516988][T12450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.517028][T12450] ? find_held_lock+0x2b/0x80 [ 460.517086][T12450] ? find_held_lock+0x2b/0x80 [ 460.517110][T12450] ? hook_file_ioctl_common+0x145/0x410 [ 460.517145][T12450] ? __fget_files+0x20e/0x3c0 [ 460.517176][T12450] security_file_ioctl+0x9b/0x240 [ 460.517203][T12450] __x64_sys_ioctl+0xb7/0x210 [ 460.517242][T12450] do_syscall_64+0xcd/0xfa0 [ 460.517273][T12450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.517299][T12450] RIP: 0033:0x7f72a4f8f6c9 [ 460.517319][T12450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.517343][T12450] RSP: 002b:00007f72a5f09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.517368][T12450] RAX: ffffffffffffffda RBX: 00007f72a51e5fa0 RCX: 00007f72a4f8f6c9 [ 460.517385][T12450] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 460.517399][T12450] RBP: 00007f72a5f09090 R08: 0000000000000000 R09: 0000000000000000 [ 460.517415][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.517429][T12450] R13: 00007f72a51e6038 R14: 00007f72a51e5fa0 R15: 00007ffc2493b268 [ 460.517469][T12450] [ 460.705234][T12450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.603798][T12481] random: crng reseeded on system resumption [ 463.191622][T12511] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 463.210364][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.865195][ T30] audit: type=1326 audit(4294967304.251:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.3.1383" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 465.136832][T12541] FAULT_INJECTION: forcing a failure. [ 465.136832][T12541] name failslab, interval 1, probability 0, space 0, times 0 [ 465.159026][T12541] CPU: 0 UID: 0 PID: 12541 Comm: syz.2.1389 Not tainted syzkaller #0 PREEMPT(full) [ 465.159049][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 465.159057][T12541] Call Trace: [ 465.159062][T12541] [ 465.159068][T12541] dump_stack_lvl+0x16c/0x1f0 [ 465.159088][T12541] should_fail_ex+0x512/0x640 [ 465.159110][T12541] ? fs_reclaim_acquire+0xae/0x150 [ 465.159130][T12541] should_failslab+0xc2/0x120 [ 465.159149][T12541] __kmalloc_noprof+0xdd/0x880 [ 465.159171][T12541] ? tomoyo_encode2+0x100/0x3e0 [ 465.159190][T12541] ? tomoyo_encode2+0x100/0x3e0 [ 465.159204][T12541] tomoyo_encode2+0x100/0x3e0 [ 465.159222][T12541] tomoyo_encode+0x29/0x50 [ 465.159236][T12541] tomoyo_realpath_from_path+0x18f/0x6e0 [ 465.159257][T12541] tomoyo_path_number_perm+0x245/0x580 [ 465.159278][T12541] ? tomoyo_path_number_perm+0x237/0x580 [ 465.159301][T12541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.159337][T12541] ? find_held_lock+0x2b/0x80 [ 465.159378][T12541] ? find_held_lock+0x2b/0x80 [ 465.159402][T12541] ? hook_file_ioctl_common+0x145/0x410 [ 465.159435][T12541] ? __fget_files+0x20e/0x3c0 [ 465.159466][T12541] security_file_ioctl+0x9b/0x240 [ 465.159496][T12541] __x64_sys_ioctl+0xb7/0x210 [ 465.159518][T12541] do_syscall_64+0xcd/0xfa0 [ 465.159535][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.159550][T12541] RIP: 0033:0x7f5df4d8f6c9 [ 465.159562][T12541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.159575][T12541] RSP: 002b:00007f5df5c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.159589][T12541] RAX: ffffffffffffffda RBX: 00007f5df4fe5fa0 RCX: 00007f5df4d8f6c9 [ 465.159598][T12541] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 465.159607][T12541] RBP: 00007f5df5c57090 R08: 0000000000000000 R09: 0000000000000000 [ 465.159615][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.159623][T12541] R13: 00007f5df4fe6038 R14: 00007f5df4fe5fa0 R15: 00007ffc5e057ae8 [ 465.159642][T12541] [ 465.159657][T12541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.316772][ C0] vkms_vblank_simulate: vblank timer overrun [ 466.255306][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1392'. [ 466.267233][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.382137][T12552] bridge_slave_1 (unregistering): left allmulticast mode [ 466.409682][T12552] bridge_slave_1 (unregistering): left promiscuous mode [ 466.420359][T12552] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.967710][T12574] zswap: compressor Midi Through Port-0 not available [ 467.977540][ T30] audit: type=1326 audit(4294967308.311:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.3.1394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 468.514903][ T30] audit: type=1326 audit(4294967308.934:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.2.1401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 468.536665][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.564540][T12593] FAULT_INJECTION: forcing a failure. [ 468.564540][T12593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.577937][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.0.1400 Not tainted syzkaller #0 PREEMPT(full) [ 468.577976][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.577990][T12593] Call Trace: [ 468.577998][T12593] [ 468.578004][T12593] dump_stack_lvl+0x16c/0x1f0 [ 468.578025][T12593] should_fail_ex+0x512/0x640 [ 468.578049][T12593] _copy_to_user+0x32/0xd0 [ 468.578072][T12593] simple_read_from_buffer+0xcb/0x170 [ 468.578096][T12593] proc_fail_nth_read+0x197/0x240 [ 468.578111][T12593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.578127][T12593] ? rw_verify_area+0xcf/0x6c0 [ 468.578140][T12593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.578154][T12593] vfs_read+0x1e4/0xcf0 [ 468.578172][T12593] ? __pfx_do_seccomp+0x10/0x10 [ 468.578189][T12593] ? __pfx_vfs_read+0x10/0x10 [ 468.578204][T12593] ? do_sys_openat2+0x157/0x1d0 [ 468.578222][T12593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 468.578248][T12593] ? cap_task_prctl+0x2af/0xa80 [ 468.578269][T12593] ? static_key_count+0x5a/0x70 [ 468.578292][T12593] ksys_read+0x12a/0x250 [ 468.578307][T12593] ? __pfx_ksys_read+0x10/0x10 [ 468.578322][T12593] ? __secure_computing+0x1f5/0x320 [ 468.578342][T12593] do_syscall_64+0xcd/0xfa0 [ 468.578359][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.578374][T12593] RIP: 0033:0x7f22bdd8e0dc [ 468.578386][T12593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.578399][T12593] RSP: 002b:00007f22bed02030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.578413][T12593] RAX: ffffffffffffffda RBX: 00007f22bdfe5fa0 RCX: 00007f22bdd8e0dc [ 468.578423][T12593] RDX: 000000000000000f RSI: 00007f22bed020a0 RDI: 0000000000000002 [ 468.578431][T12593] RBP: 00007f22bed02090 R08: 0000000000000000 R09: 0000000000000000 [ 468.578440][T12593] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000001 [ 468.578448][T12593] R13: 00007f22bdfe6038 R14: 00007f22bdfe5fa0 R15: 00007ffe9d4fa508 [ 468.578467][T12593] [ 468.578792][ T30] audit: type=1326 audit(4294967309.004:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12592 comm="syz.0.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 468.803317][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.311128][T12602] FAULT_INJECTION: forcing a failure. [ 469.311128][T12602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.359969][T12602] CPU: 0 UID: 0 PID: 12602 Comm: syz.3.1403 Not tainted syzkaller #0 PREEMPT(full) [ 469.360005][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.360020][T12602] Call Trace: [ 469.360028][T12602] [ 469.360038][T12602] dump_stack_lvl+0x16c/0x1f0 [ 469.360072][T12602] should_fail_ex+0x512/0x640 [ 469.360114][T12602] _copy_from_user+0x2e/0xd0 [ 469.360154][T12602] set_selection_user+0x83/0x140 [ 469.360202][T12602] ? __pfx_set_selection_user+0x10/0x10 [ 469.360244][T12602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.360286][T12602] tioclinux+0x2b1/0x640 [ 469.360317][T12602] vt_ioctl+0x1fdf/0x30a0 [ 469.360353][T12602] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.360385][T12602] ? __pfx_vt_ioctl+0x10/0x10 [ 469.360419][T12602] ? tomoyo_path_number_perm+0x295/0x580 [ 469.360464][T12602] ? tomoyo_path_number_perm+0x18d/0x580 [ 469.360506][T12602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 469.360547][T12602] ? find_held_lock+0x2b/0x80 [ 469.360574][T12602] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 469.360615][T12602] ? tty_jobctrl_ioctl+0x152/0xe00 [ 469.360652][T12602] ? __pfx_vt_ioctl+0x10/0x10 [ 469.360684][T12602] tty_ioctl+0x661/0x1680 [ 469.360713][T12602] ? __pfx_tty_ioctl+0x10/0x10 [ 469.360751][T12602] ? find_held_lock+0x2b/0x80 [ 469.360776][T12602] ? hook_file_ioctl_common+0x145/0x410 [ 469.360810][T12602] ? __fget_files+0x20e/0x3c0 [ 469.360841][T12602] ? __pfx_tty_ioctl+0x10/0x10 [ 469.360870][T12602] __x64_sys_ioctl+0x18e/0x210 [ 469.360909][T12602] do_syscall_64+0xcd/0xfa0 [ 469.360939][T12602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.360966][T12602] RIP: 0033:0x7f72a4f8f6c9 [ 469.360986][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.361011][T12602] RSP: 002b:00007f72a5f09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 469.361035][T12602] RAX: ffffffffffffffda RBX: 00007f72a51e5fa0 RCX: 00007f72a4f8f6c9 [ 469.361052][T12602] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 469.361067][T12602] RBP: 00007f72a5f09090 R08: 0000000000000000 R09: 0000000000000000 [ 469.361083][T12602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.361098][T12602] R13: 00007f72a51e6038 R14: 00007f72a51e5fa0 R15: 00007ffc2493b268 [ 469.361134][T12602] [ 469.598926][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.487043][ T30] audit: type=1326 audit(4294967311.918:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 472.228128][T12649] hub 8-0:1.0: USB hub found [ 472.233195][T12649] hub 8-0:1.0: 1 port detected [ 472.309875][ T30] audit: type=1326 audit(4294967312.742:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1415" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a4f8f6c9 code=0x0 [ 473.523514][T12675] FAULT_INJECTION: forcing a failure. [ 473.523514][T12675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.549495][T12675] CPU: 0 UID: 0 PID: 12675 Comm: syz.1.1421 Not tainted syzkaller #0 PREEMPT(full) [ 473.549528][T12675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.549541][T12675] Call Trace: [ 473.549548][T12675] [ 473.549556][T12675] dump_stack_lvl+0x16c/0x1f0 [ 473.549588][T12675] should_fail_ex+0x512/0x640 [ 473.549628][T12675] _copy_from_user+0x2e/0xd0 [ 473.549666][T12675] core_sys_select+0x35b/0xc20 [ 473.549701][T12675] ? __pfx_core_sys_select+0x10/0x10 [ 473.549732][T12675] ? proc_fail_nth_write+0x9f/0x220 [ 473.549789][T12675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.549829][T12675] kern_select+0x15d/0x1e0 [ 473.549853][T12675] ? __pfx_kern_select+0x10/0x10 [ 473.549891][T12675] ? __pfx_ksys_write+0x10/0x10 [ 473.549924][T12675] __x64_sys_select+0xbd/0x160 [ 473.549947][T12675] ? do_syscall_64+0x91/0xfa0 [ 473.549974][T12675] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.550001][T12675] do_syscall_64+0xcd/0xfa0 [ 473.550034][T12675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.550060][T12675] RIP: 0033:0x7f0e8898f6c9 [ 473.550081][T12675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.550105][T12675] RSP: 002b:00007f0e89885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 473.550128][T12675] RAX: ffffffffffffffda RBX: 00007f0e88be6180 RCX: 00007f0e8898f6c9 [ 473.550145][T12675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 473.550160][T12675] RBP: 00007f0e89885090 R08: 0000000000000000 R09: 0000000000000000 [ 473.550175][T12675] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 473.550190][T12675] R13: 00007f0e88be6218 R14: 00007f0e88be6180 R15: 00007ffe20efb498 [ 473.550226][T12675] [ 473.732950][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.835195][T12670] ima: policy update failed [ 473.871283][ T30] audit: type=1802 audit(4294967314.290:217): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1420" res=0 errno=0 [ 478.029606][T12774] FAULT_INJECTION: forcing a failure. [ 478.029606][T12774] name fail_futex, interval 1, probability 0, space 0, times 0 [ 478.048671][T12774] CPU: 1 UID: 0 PID: 12774 Comm: syz.3.1440 Not tainted syzkaller #0 PREEMPT(full) [ 478.048708][T12774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.048722][T12774] Call Trace: [ 478.048729][T12774] [ 478.048738][T12774] dump_stack_lvl+0x16c/0x1f0 [ 478.048768][T12774] should_fail_ex+0x512/0x640 [ 478.048805][T12774] get_futex_key+0x1d0/0x1560 [ 478.048855][T12774] ? __pfx_get_futex_key+0x10/0x10 [ 478.048887][T12774] ? __mutex_trylock_common+0xe9/0x250 [ 478.048931][T12774] futex_wake+0xea/0x530 [ 478.048973][T12774] ? __pfx_futex_wake+0x10/0x10 [ 478.049007][T12774] ? __lock_acquire+0xb8a/0x1c90 [ 478.049057][T12774] do_futex+0x1e3/0x350 [ 478.049091][T12774] ? __pfx_do_futex+0x10/0x10 [ 478.049121][T12774] ? __might_fault+0xe3/0x190 [ 478.049157][T12774] mm_release+0x24e/0x300 [ 478.049187][T12774] do_exit+0x68e/0x2bf0 [ 478.049229][T12774] ? __pfx_do_exit+0x10/0x10 [ 478.049263][T12774] ? do_raw_spin_lock+0x12c/0x2b0 [ 478.049300][T12774] ? find_held_lock+0x2b/0x80 [ 478.049333][T12774] do_group_exit+0xd3/0x2a0 [ 478.049369][T12774] get_signal+0x2671/0x26d0 [ 478.049408][T12774] ? poll_select_finish+0x376/0x6b0 [ 478.049434][T12774] ? __pfx_get_signal+0x10/0x10 [ 478.049474][T12774] arch_do_signal_or_restart+0x8f/0x790 [ 478.049509][T12774] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.049551][T12774] ? __pfx_ksys_write+0x10/0x10 [ 478.049586][T12774] exit_to_user_mode_loop+0x85/0x130 [ 478.049626][T12774] do_syscall_64+0x426/0xfa0 [ 478.049657][T12774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.049683][T12774] RIP: 0033:0x7f72a4f8f6c9 [ 478.049704][T12774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.049730][T12774] RSP: 002b:00007f72a5ec7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 478.049755][T12774] RAX: fffffffffffffdfe RBX: 00007f72a51e6180 RCX: 00007f72a4f8f6c9 [ 478.049772][T12774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 478.049788][T12774] RBP: 00007f72a5ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 478.049804][T12774] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 478.049820][T12774] R13: 00007f72a51e6218 R14: 00007f72a51e6180 R15: 00007ffc2493b268 [ 478.049862][T12774] [ 479.686945][ T30] audit: type=1326 audit(4294967320.147:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.1.1448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 480.655157][T12832] __vm_enough_memory: pid: 12832, comm: syz.0.1453, bytes: 4398046511104 not enough memory for the allocation [ 483.391845][ T30] audit: type=1326 audit(4294967323.885:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12894 comm="syz.1.1466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 485.424880][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'. [ 485.460884][T12928] ima: policy update failed [ 485.491198][ T30] audit: type=1802 audit(4294967325.965:220): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1475" res=0 errno=0 [ 485.928360][ T30] audit: type=1326 audit(4294967326.427:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.0.1480" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 485.950161][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.803992][T12990] netlink: 'syz.3.1493': attribute type 2 has an invalid length. [ 488.655702][ T30] audit: type=1326 audit(4294967329.160:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13009 comm="syz.1.1497" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e8898f6c9 code=0x0 [ 489.315521][ T5922] Process accounting resumed [ 491.881674][T13070] FAULT_INJECTION: forcing a failure. [ 491.881674][T13070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 491.911868][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.3.1512 Not tainted syzkaller #0 PREEMPT(full) [ 491.911891][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.911899][T13070] Call Trace: [ 491.911905][T13070] [ 491.911911][T13070] dump_stack_lvl+0x16c/0x1f0 [ 491.911932][T13070] should_fail_ex+0x512/0x640 [ 491.911958][T13070] should_fail_alloc_page+0xe7/0x130 [ 491.911979][T13070] prepare_alloc_pages+0x3c2/0x610 [ 491.911998][T13070] ? stack_trace_save+0x8e/0xc0 [ 491.912016][T13070] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 491.912030][T13070] ? kasan_save_stack+0x33/0x60 [ 491.912045][T13070] ? kasan_save_track+0x14/0x30 [ 491.912064][T13070] ? __lock_acquire+0x622/0x1c90 [ 491.912086][T13070] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.912100][T13070] ? __lock_acquire+0x622/0x1c90 [ 491.912123][T13070] ? __lock_acquire+0xb8a/0x1c90 [ 491.912143][T13070] ? find_held_lock+0x2b/0x80 [ 491.912156][T13070] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.912179][T13070] ? policy_nodemask+0xea/0x4e0 [ 491.912198][T13070] alloc_pages_mpol+0x1fb/0x550 [ 491.912217][T13070] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 491.912236][T13070] ? __anon_vma_prepare+0x2db/0x5e0 [ 491.912259][T13070] folio_alloc_mpol_noprof+0x36/0x2f0 [ 491.912280][T13070] vma_alloc_folio_noprof+0xed/0x1e0 [ 491.912300][T13070] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 491.912320][T13070] ? __anon_vma_prepare+0x2e2/0x5e0 [ 491.912345][T13070] do_pte_missing+0x2202/0x3ba0 [ 491.912367][T13070] ? mtree_range_walk+0x718/0xc00 [ 491.912382][T13070] ? find_held_lock+0x2b/0x80 [ 491.912397][T13070] __handle_mm_fault+0x1556/0x2aa0 [ 491.912423][T13070] ? __pfx___handle_mm_fault+0x10/0x10 [ 491.912459][T13070] handle_mm_fault+0x589/0xd10 [ 491.912484][T13070] __get_user_pages+0x54e/0x3530 [ 491.912519][T13070] ? __pfx___get_user_pages+0x10/0x10 [ 491.912544][T13070] populate_vma_page_range+0x267/0x3f0 [ 491.912565][T13070] ? __pfx_populate_vma_page_range+0x10/0x10 [ 491.912585][T13070] ? __pfx_find_vma_intersection+0x10/0x10 [ 491.912603][T13070] ? do_mmap+0x69c/0x1210 [ 491.912622][T13070] __mm_populate+0x1d8/0x380 [ 491.912641][T13070] ? __pfx___mm_populate+0x10/0x10 [ 491.912661][T13070] ? up_write+0x1b2/0x520 [ 491.912683][T13070] vm_mmap_pgoff+0x37f/0x470 [ 491.912708][T13070] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 491.912731][T13070] ? __x64_sys_futex+0x1e0/0x4c0 [ 491.912750][T13070] ? __x64_sys_futex+0x1e9/0x4c0 [ 491.912772][T13070] ksys_mmap_pgoff+0x7d/0x5c0 [ 491.912789][T13070] ? xfd_validate_state+0x61/0x180 [ 491.912807][T13070] ? __pfx_do_writev+0x10/0x10 [ 491.912823][T13070] __x64_sys_mmap+0x125/0x190 [ 491.912845][T13070] do_syscall_64+0xcd/0xfa0 [ 491.912862][T13070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.912877][T13070] RIP: 0033:0x7f72a4f8f6c9 [ 491.912889][T13070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.912902][T13070] RSP: 002b:00007f72a5f09038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 491.912916][T13070] RAX: ffffffffffffffda RBX: 00007f72a51e5fa0 RCX: 00007f72a4f8f6c9 [ 491.912926][T13070] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 491.912934][T13070] RBP: 00007f72a5011f91 R08: 0000000000000002 R09: 0000000000008000 [ 491.912943][T13070] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 491.912952][T13070] R13: 00007f72a51e6038 R14: 00007f72a51e5fa0 R15: 00007ffc2493b268 [ 491.912972][T13070] [ 492.259509][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.900311][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 494.960691][T13139] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1528'. [ 495.276885][ T30] audit: type=1326 audit(4294967335.811:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13132 comm="syz.2.1525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 495.881033][T13164] netlink: 'syz.3.1533': attribute type 2 has an invalid length. [ 500.718918][T13269] ptp ptp0: only physical clock in use now [ 500.770344][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.779909][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.789976][T13269] hub 1-0:1.0: USB hub found [ 500.811619][T13269] hub 1-0:1.0: 1 port detected [ 501.301271][ T30] audit: type=1326 audit(4294967341.880:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.0.1555" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 501.984504][ T30] audit: type=1326 audit(4294967342.563:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.0.1560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22bdd8f6c9 code=0x0 [ 502.694736][ T30] audit: type=1800 audit(4294967343.266:226): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1564" name="features" dev="configfs" ino=36391 res=0 errno=0 [ 502.976057][T13317] FAULT_INJECTION: forcing a failure. [ 502.976057][T13317] name failslab, interval 1, probability 0, space 0, times 0 [ 502.990458][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.0.1566 Not tainted syzkaller #0 PREEMPT(full) [ 502.990495][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.990510][T13317] Call Trace: [ 502.990518][T13317] [ 502.990526][T13317] dump_stack_lvl+0x16c/0x1f0 [ 502.990558][T13317] should_fail_ex+0x512/0x640 [ 502.990595][T13317] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 502.990623][T13317] should_failslab+0xc2/0x120 [ 502.990656][T13317] kmem_cache_alloc_noprof+0x75/0x6e0 [ 502.990682][T13317] ? alloc_empty_file+0x55/0x1e0 [ 502.990722][T13317] ? alloc_empty_file+0x55/0x1e0 [ 502.990755][T13317] alloc_empty_file+0x55/0x1e0 [ 502.990792][T13317] path_openat+0xda/0x2cb0 [ 502.990832][T13317] ? __pfx_path_openat+0x10/0x10 [ 502.990862][T13317] ? __lock_acquire+0xb8a/0x1c90 [ 502.990900][T13317] do_filp_open+0x20b/0x470 [ 502.990936][T13317] ? __pfx_do_filp_open+0x10/0x10 [ 502.990993][T13317] ? alloc_fd+0x471/0x7d0 [ 502.991030][T13317] do_sys_openat2+0x11b/0x1d0 [ 502.991063][T13317] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.991108][T13317] __x64_sys_openat+0x174/0x210 [ 502.991140][T13317] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.991183][T13317] do_syscall_64+0xcd/0xfa0 [ 502.991214][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.991245][T13317] RIP: 0033:0x7f22bdd8f6c9 [ 502.991266][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.991293][T13317] RSP: 002b:00007f22bed02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.991319][T13317] RAX: ffffffffffffffda RBX: 00007f22bdfe5fa0 RCX: 00007f22bdd8f6c9 [ 502.991337][T13317] RDX: 0000000000080a01 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 502.991354][T13317] RBP: 00007f22bde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.991370][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.991385][T13317] R13: 00007f22bdfe6038 R14: 00007f22bdfe5fa0 R15: 00007ffe9d4fa508 [ 502.991422][T13317] [ 504.379131][ T30] audit: type=1800 audit(4294967344.964:227): pid=13353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1576" name="features" dev="configfs" ino=36919 res=0 errno=0 [ 506.244873][T13375] FAULT_INJECTION: forcing a failure. [ 506.244873][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 506.264207][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.1.1582 Not tainted syzkaller #0 PREEMPT(full) [ 506.264241][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 506.264258][T13375] Call Trace: [ 506.264267][T13375] [ 506.264277][T13375] dump_stack_lvl+0x16c/0x1f0 [ 506.264311][T13375] should_fail_ex+0x512/0x640 [ 506.264349][T13375] ? __kmalloc_noprof+0xca/0x880 [ 506.264389][T13375] should_failslab+0xc2/0x120 [ 506.264432][T13375] __kmalloc_noprof+0xdd/0x880 [ 506.264472][T13375] ? kobject_get_path+0xd2/0x2a0 [ 506.264500][T13375] ? kobject_get_path+0xd2/0x2a0 [ 506.264520][T13375] kobject_get_path+0xd2/0x2a0 [ 506.264547][T13375] kobject_uevent_env+0x289/0x1870 [ 506.264588][T13375] net_rx_queue_update_kobjects+0x1e4/0x770 [ 506.264621][T13375] ? kset_register+0x1bb/0x2b0 [ 506.264651][T13375] netdev_register_kobject+0x290/0x3d0 [ 506.264685][T13375] register_netdevice+0x13dc/0x2270 [ 506.264719][T13375] ? __pfx_register_netdevice+0x10/0x10 [ 506.264752][T13375] __ip_tunnel_create+0x540/0x6e0 [ 506.264786][T13375] ? __pfx___ip_tunnel_create+0x10/0x10 [ 506.264820][T13375] ip_tunnel_init_net+0x22f/0x7d0 [ 506.264849][T13375] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 506.264883][T13375] ? ops_init+0x77/0x5f0 [ 506.264906][T13375] ? __pfx_ipgre_init_net+0x10/0x10 [ 506.264930][T13375] ops_init+0x1e2/0x5f0 [ 506.264958][T13375] setup_net+0x100/0x390 [ 506.264984][T13375] ? __pfx_setup_net+0x10/0x10 [ 506.265012][T13375] ? debug_mutex_init+0x37/0x70 [ 506.265043][T13375] copy_net_ns+0x2f8/0x690 [ 506.265073][T13375] create_new_namespaces+0x3ea/0xa90 [ 506.265114][T13375] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 506.265146][T13375] ksys_unshare+0x45b/0xa40 [ 506.265175][T13375] ? __pfx_ksys_unshare+0x10/0x10 [ 506.265204][T13375] ? xfd_validate_state+0x61/0x180 [ 506.265248][T13375] __x64_sys_unshare+0x31/0x40 [ 506.265278][T13375] do_syscall_64+0xcd/0xfa0 [ 506.265309][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.265334][T13375] RIP: 0033:0x7f0e8898f6c9 [ 506.265354][T13375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.265378][T13375] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 506.265400][T13375] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 506.265424][T13375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 506.265439][T13375] RBP: 00007f0e88a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 506.265453][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.265467][T13375] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 506.265501][T13375] [ 506.537685][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.325527][ T30] audit: type=1800 audit(4294967347.928:228): pid=13408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1588" name="members" dev="configfs" ino=37080 res=0 errno=0 [ 509.782358][T13455] x86/mm: Checked W+X mappings: passed, no W+X pages found. “[ 513.628048][T13561] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1621'. [ 514.740143][ T30] audit: type=1800 audit(4294967355.373:229): pid=13576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1625" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 514.914429][ T30] audit: type=1326 audit(4294967355.544:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13575 comm="syz.2.1625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df4d8f6c9 code=0x0 [ 515.957974][T13618] nbd: must specify at least one socket [ 516.113302][T13623] FAULT_INJECTION: forcing a failure. [ 516.113302][T13623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 516.146646][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.1.1634 Not tainted syzkaller #0 PREEMPT(full) [ 516.146683][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.146699][T13623] Call Trace: [ 516.146709][T13623] [ 516.146719][T13623] dump_stack_lvl+0x16c/0x1f0 [ 516.146753][T13623] should_fail_ex+0x512/0x640 [ 516.146799][T13623] should_fail_alloc_page+0xe7/0x130 [ 516.146837][T13623] prepare_alloc_pages+0x3c2/0x610 [ 516.146876][T13623] ? rcu_is_watching+0x12/0xc0 [ 516.146908][T13623] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 516.146934][T13623] ? css_rstat_updated+0x1c2/0x510 [ 516.146960][T13623] ? __pfx_css_rstat_updated+0x10/0x10 [ 516.147000][T13623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 516.147041][T13623] ? __lock_acquire+0x622/0x1c90 [ 516.147080][T13623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 516.147123][T13623] ? policy_nodemask+0xea/0x4e0 [ 516.147159][T13623] alloc_pages_mpol+0x1fb/0x550 [ 516.147193][T13623] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 516.147236][T13623] folio_alloc_mpol_noprof+0x36/0x2f0 [ 516.147277][T13623] vma_alloc_folio_noprof+0xed/0x1e0 [ 516.147316][T13623] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 516.147361][T13623] do_pte_missing+0x2202/0x3ba0 [ 516.147401][T13623] ? find_held_lock+0x2b/0x80 [ 516.147432][T13623] __handle_mm_fault+0x1556/0x2aa0 [ 516.147478][T13623] ? __pfx___handle_mm_fault+0x10/0x10 [ 516.147520][T13623] ? __pte_offset_map_lock+0x174/0x310 [ 516.147552][T13623] ? find_held_lock+0x2b/0x80 [ 516.147591][T13623] ? follow_page_pte+0x5cf/0x1390 [ 516.147631][T13623] handle_mm_fault+0x589/0xd10 [ 516.147680][T13623] __get_user_pages+0x54e/0x3530 [ 516.147732][T13623] ? __pfx___get_user_pages+0x10/0x10 [ 516.147778][T13623] populate_vma_page_range+0x267/0x3f0 [ 516.147818][T13623] ? __pfx_populate_vma_page_range+0x10/0x10 [ 516.147855][T13623] ? __pfx_find_vma_intersection+0x10/0x10 [ 516.147899][T13623] ? do_mmap+0x69c/0x1210 [ 516.147937][T13623] __mm_populate+0x1d8/0x380 [ 516.147976][T13623] ? __pfx___mm_populate+0x10/0x10 [ 516.148017][T13623] ? up_write+0x1b2/0x520 [ 516.148059][T13623] vm_mmap_pgoff+0x37f/0x470 [ 516.148097][T13623] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 516.148140][T13623] ? __x64_sys_futex+0x1e0/0x4c0 [ 516.148173][T13623] ? __x64_sys_futex+0x1e9/0x4c0 [ 516.148212][T13623] ksys_mmap_pgoff+0x7d/0x5c0 [ 516.148245][T13623] ? xfd_validate_state+0x61/0x180 [ 516.148279][T13623] ? __pfx___do_sys_close_range+0x10/0x10 [ 516.148314][T13623] __x64_sys_mmap+0x125/0x190 [ 516.148357][T13623] do_syscall_64+0xcd/0xfa0 [ 516.148387][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.148412][T13623] RIP: 0033:0x7f0e8898f6c9 [ 516.148433][T13623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.148461][T13623] RSP: 002b:00007f0e898c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 516.148486][T13623] RAX: ffffffffffffffda RBX: 00007f0e88be5fa0 RCX: 00007f0e8898f6c9 [ 516.148503][T13623] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 516.148518][T13623] RBP: 00007f0e88a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 516.148532][T13623] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 516.148546][T13623] R13: 00007f0e88be6038 R14: 00007f0e88be5fa0 R15: 00007ffe20efb498 [ 516.148581][T13623] [ 516.482312][ C0] vkms_vblank_simulate: vblank timer overrun [ 516.872206][ T5924] smpboot: CPU 1 is now offline [ 517.873039][T13651] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1641'. [ 517.999729][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.076718][T13777] aoe: could not set interface list: too many interfaces [ 524.902097][T13792] i2c i2c-0: new_device: Extra parameters [ 528.494842][T13871] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 528.502661][T13871] #PF: supervisor instruction fetch in kernel mode [ 528.509163][T13871] #PF: error_code(0x0010) - not-present page [ 528.515119][T13871] PGD 80000000696ac067 P4D 80000000696ac067 PUD 0 [ 528.521646][T13871] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 528.527000][T13871] CPU: 0 UID: 0 PID: 13871 Comm: syz.0.1689 Not tainted syzkaller #0 PREEMPT(full) [ 528.536349][T13871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.546469][T13871] RIP: 0010:0x0 [ 528.549916][T13871] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 528.557260][T13871] RSP: 0018:ffffc9000b9879a0 EFLAGS: 00010287 [ 528.563317][T13871] RAX: 00000000000009bb RBX: 0000000000000000 RCX: ffffc9000cb5b000 [ 528.571268][T13871] RDX: 0000000000080000 RSI: ffffea0001b75180 RDI: ffff88807ac91880 [ 528.579219][T13871] RBP: ffffea0001b75180 R08: 0000000000000007 R09: 0000000000000000 [ 528.587171][T13871] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001730f35 [ 528.595123][T13871] R13: ffff88807ac91880 R14: 0000000000000000 R15: dffffc0000000000 [ 528.603074][T13871] FS: 00007f22bed026c0(0000) GS:ffff888124a10000(0000) knlGS:0000000000000000 [ 528.611988][T13871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.618552][T13871] CR2: ffffffffffffffd6 CR3: 000000007f82e000 CR4: 00000000003526f0 [ 528.626506][T13871] Call Trace: [ 528.629766][T13871] [ 528.632678][T13871] filemap_read_folio+0xc8/0x2a0 [ 528.637598][T13871] ? __pfx_filemap_read_folio+0x10/0x10 [ 528.643128][T13871] ? __filemap_get_folio+0x32b/0xc30 [ 528.648396][T13871] ? down_read+0x13d/0x480 [ 528.652799][T13871] do_read_cache_folio+0x263/0x5c0 [ 528.657891][T13871] freader_get_folio+0x337/0x930 [ 528.662807][T13871] freader_fetch+0xc2/0x5e0 [ 528.667297][T13871] ? query_matching_vma+0x345/0x7d0 [ 528.672488][T13871] __build_id_parse.isra.0+0xec/0x7a0 [ 528.677852][T13871] ? query_matching_vma+0x48e/0x7d0 [ 528.683037][T13871] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 528.689010][T13871] do_procmap_query+0xb0e/0x1080 [ 528.693967][T13871] ? __pfx_do_procmap_query+0x10/0x10 [ 528.699324][T13871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.705211][T13871] ? do_vfs_ioctl+0x128/0x14f0 [ 528.709968][T13871] ? __fget_files+0x20e/0x3c0 [ 528.714627][T13871] procfs_procmap_ioctl+0x9d/0xe0 [ 528.719637][T13871] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 528.725339][T13871] __x64_sys_ioctl+0x18e/0x210 [ 528.730088][T13871] do_syscall_64+0xcd/0xfa0 [ 528.734570][T13871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.740454][T13871] RIP: 0033:0x7f22bdd8f6c9 [ 528.744850][T13871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.764437][T13871] RSP: 002b:00007f22bed02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.772920][T13871] RAX: ffffffffffffffda RBX: 00007f22bdfe5fa0 RCX: 00007f22bdd8f6c9 [ 528.780872][T13871] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000007 [ 528.788828][T13871] RBP: 00007f22bde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.796866][T13871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.804817][T13871] R13: 00007f22bdfe6038 R14: 00007f22bdfe5fa0 R15: 00007ffe9d4fa508 [ 528.812784][T13871] [ 528.815789][T13871] Modules linked in: [ 528.819683][T13871] CR2: 0000000000000000 [ 528.823822][T13871] ---[ end trace 0000000000000000 ]--- [ 528.829254][T13871] RIP: 0010:0x0 [ 528.832708][T13871] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 528.840048][T13871] RSP: 0018:ffffc9000b9879a0 EFLAGS: 00010287 [ 528.846094][T13871] RAX: 00000000000009bb RBX: 0000000000000000 RCX: ffffc9000cb5b000 [ 528.854044][T13871] RDX: 0000000000080000 RSI: ffffea0001b75180 RDI: ffff88807ac91880 [ 528.861992][T13871] RBP: ffffea0001b75180 R08: 0000000000000007 R09: 0000000000000000 [ 528.869939][T13871] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001730f35 [ 528.877887][T13871] R13: ffff88807ac91880 R14: 0000000000000000 R15: dffffc0000000000 [ 528.885838][T13871] FS: 00007f22bed026c0(0000) GS:ffff888124a10000(0000) knlGS:0000000000000000 [ 528.894756][T13871] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.901318][T13871] CR2: ffffffffffffffd6 CR3: 000000007f82e000 CR4: 00000000003526f0 [ 528.909282][T13871] Kernel panic - not syncing: Fatal exception [ 528.915386][T13871] Kernel Offset: disabled [ 528.919692][T13871] Rebooting in 86400 seconds..