last executing test programs: 2m14.957481617s ago: executing program 1 (id=1097): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x840, 0x152) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x2100, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x82080, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socketpair$auto(0x4004, 0x7, 0x10001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x40204706, 0x0) 2m12.375980942s ago: executing program 1 (id=1100): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0b45545, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fef", 0xe) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m10.190234339s ago: executing program 1 (id=1103): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x561642, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x8000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x80, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28282, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x0, 0x2, 0xfffffffd, 0x0) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) 2m5.332796672s ago: executing program 1 (id=1109): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf25040000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24004840) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket(0x11, 0x80003, 0x300) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r2, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.6/usbmon/usbmon22/uevent\x00', 0x210400, 0x0) read$auto(r3, 0x0, 0x20) recvmsg$auto(r1, &(0x7f00000005c0)={0x0, 0x8, 0x0, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r4, 0x4008af24, 0xffffffffffffffff) 1m56.360354187s ago: executing program 1 (id=1114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000480)={{0x0, 0x7, 0x0, 0x7, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b746", 0x0, 0x9}, 0x8}, 0x4, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x5, 0x80000000, {0x38c8b38f, 0xfc23f}, 0x2544, 0x200000001, 0xfb, 0x1000007, 0x0, 0x203c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b34, 0x2, 0x100) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(r1, 0x0, 0x1) pread64$auto(0xffffffffffffffff, &(0x7f0000000340)='/dev/bus/usb/013/001\x00', 0x6f, 0xdf) close_range$auto(0x2, 0x8, 0x0) 1m41.110570021s ago: executing program 32 (id=1114): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000480)={{0x0, 0x7, 0x0, 0x7, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b746", 0x0, 0x9}, 0x8}, 0x4, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x5, 0x80000000, {0x38c8b38f, 0xfc23f}, 0x2544, 0x200000001, 0xfb, 0x1000007, 0x0, 0x203c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b34, 0x2, 0x100) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(r1, 0x0, 0x1) pread64$auto(0xffffffffffffffff, &(0x7f0000000340)='/dev/bus/usb/013/001\x00', 0x6f, 0xdf) close_range$auto(0x2, 0x8, 0x0) 14.561756719s ago: executing program 3 (id=1287): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = io_uring_setup$auto(0xfff, 0x0) ioctl$auto_MON_IOCX_GET(r0, 0x40189206, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{@raw=0x7, 0x5, 0xfffff7bb, 0x2f, "984e784f697ebcc30053822c357eb55df43e9e037b650dfc7a3df9aa20e32749384f515111de5da4403cab68", @raw=0x7}, 0x200000, 0x1, 0x4, @raw=0x3, @enumerated={0x8, 0x0, "3544fac47a801d819cb534605db6a893115890fe4787b893bf2d3f312883af26fc4d92993388bae934e26fa2157468e873f1359a98377e7310a5f19b224938a6", 0xf}, "b210e8ae72f3052d09004297cc39fbd4fe51f972eb62ed41cec2ea5c1e45264907d818e9711e2b57cd159b796ab9e6c81a2f47680e3d2a7f677dccfd260d82fe"}) r2 = socket(0x2, 0x1, 0x106) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram15\x00', 0x7e9d00, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000002340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8d+BR\xa1\x9d\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/buffer_percent\x00', 0xbc102, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) ioctl$auto(r3, 0x1fefd, 0xffffffffffffffff) ioctl$auto_OTPSELECT(r4, 0x80044d0d, &(0x7f00000000c0)=0x10009) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r5, 0x5501, 0x0) writev$auto(r5, &(0x7f0000000340)={&(0x7f0000000200)="000000000000000007995a558670f5f8d8eb5f2af16a144ff569c26b", 0xda7e}, 0x8) getsockopt$auto(r2, 0x6, 0x6, 0x0, &(0x7f00000000c0)=0xfffffff8) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) 12.883544685s ago: executing program 3 (id=1291): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) syz_clone3(&(0x7f0000000440)={0x20900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), {0x1e}, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/175, 0x0}, 0x58) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_SNDCTL_DSP_MAPOUTBUF(0xffffffffffffffff, 0x80105014, &(0x7f0000000240)="56d2a31415a192ee779dea7567d602a61d6d6ba276224c1928c76b3f00034e5ab9dcd4fbab40111ab2132faaf5b8e3c45f83417d5e5e9e6e74719fa7489e27afa7c8f9a503682fab9c41eedb14c5ec7b0edf2f195684f1f4ed79486f75ecb4a478fda881360669f86d57590ddee1a20900a160f2d3b6aaa1fb76c52efca466215b95222b5ab57e6b2ac6deddc5") rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x2000aa7, 0x3, 0x2020401) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 12.697920317s ago: executing program 2 (id=1293): socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/most/drivers/most_core/components\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0x20499d, 0x9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/snd/pcmC1D1p\x00', 0x2205, 0x0) 11.625472419s ago: executing program 0 (id=1294): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 10.638131766s ago: executing program 4 (id=1295): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0xfffffff4, 0x100004, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r3, 0x6a, 0x2, 0x0, 0x6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = getpid() r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) 10.635521912s ago: executing program 3 (id=1303): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r5 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) recvmsg$auto(r5, 0x0, 0xe) write$auto(r4, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000120, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 9.246552357s ago: executing program 4 (id=1296): ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) socket(0x22, 0x6, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x8, 0x2, 0x0, 0x5, 0x2) mmap$auto(0x3, 0x8000, 0x1, 0x13, r0, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, 0x0, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0xa}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020209, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x4}, 0x80000b}, 0x5, 0x20000000) 9.246413928s ago: executing program 2 (id=1297): r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0xc0000080, 0x2000400, 0xfffffffffffffffd}]}) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r6, 0x5425, 0x0) 9.229091731s ago: executing program 3 (id=1298): socket(0x13, 0x2, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x22, 0x4, 0x83) setsockopt$auto(r0, 0x84, 0x15, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x1000000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SEM_STAT(0x2, 0x400, 0x12, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000040)='/dev/audio1\x00', 0x100000a3d1) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x4, 0x80000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x1) socket(0x1e, 0x1, 0x2fe) 8.912398765s ago: executing program 0 (id=1299): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x4, 0xda, 0x948b, 0x0, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000005, 0x7, 0x4, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.013688114s ago: executing program 2 (id=1300): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) 7.923382532s ago: executing program 4 (id=1301): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffe, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) open(0x0, 0x6041, 0x0) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="0e5165", 0x1}, 0x2, &(0x7f00000001c0)={0x0, 0x7}, 0x2, 0x0) clone3$auto(&(0x7f0000000100)={0x6, 0x7, 0x0, 0x5, 0xd, 0x80000000, 0x3ff, 0x8, 0x2, 0x2, 0x1}, 0x3) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000240)={"f63073df8058c302b0d3672f446ffae0e2e72cce81bb817c6c1737b5f32b9d13", 0xaf, 0x2, 0xda, 0xffffffffffffffff, 0x7}) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0x2e6100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x900, 0x0) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(r3, 0x805c6103, &(0x7f00000001c0)={"8911bd3a", 0x1, 0x0, 0x6, 0x4, 0x6, "feaf587cdf4d2f534a1c88d3e40a00", "e6cf6512", "f34cae3a", "10a991b3", ["3ae887a128f1d8c79420d880", "b11feafce4d296d8c985d069", "0149f0a7102c3fffab592db0", "0059c09dca7de9bdbbc6be07"]}) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 6.856990625s ago: executing program 4 (id=1302): mmap$auto(0x0, 0x280006, 0x3, 0x40eb1, 0xffffffffffffffff, 0x1300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa042, 0x0) sendfile$auto(r1, r0, 0x0, 0x48) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x7ffffffd}, 0x6, 0x6, 0x9, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0xffffffffffffff7c, 0x200000002020009, 0x8, 0x11, 0xfffffffffffffffa, 0x8) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x9, 0x2, 0x10, 0xffffffffffffffff, 0x300000000001) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2c0880, 0x0) rseq$auto(0x0, 0x2, 0x4, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0xa, 0x5) r4 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_marker_raw\x00', 0x2, 0x0) write$auto(r4, 0x0, 0xa5f) connect$auto(0x3, &(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x3) 6.16443309s ago: executing program 3 (id=1304): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = socket(0x2, 0x2, 0x88) setsockopt$auto(r4, 0x0, 0x20, 0x0, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) ioctl$auto_TCFLSH2(r7, 0x8910, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x14, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 5.853381078s ago: executing program 0 (id=1305): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) 5.490845376s ago: executing program 4 (id=1306): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) clock_settime$auto(0xfffffffe, &(0x7f0000000000)={0x100000004, 0x8}) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) msync$auto(0x1ffff000, 0xffffffffffffbffb, 0x3) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r1}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x2001ff, 0x5, 0xa, 0x8fd6, 0x948b, 0x3, 0x7, 0x3, 0x3, 0x62, 0x80002001, 0x7, 0x1, 0x9, 0x3fb, 0xfb7ffdfffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, 0x0, 0x801) mmap$auto(0x7, 0x20009, 0x5, 0xffffffff, 0x405, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) close_range$auto(r2, r4, 0x10001) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r5, 0x8000) 4.798147536s ago: executing program 2 (id=1307): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) getsockopt$auto(r0, 0xfffffff4, 0x100004, 0xfffffffffffffffe, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r3, 0x6a, 0x2, 0x0, 0x6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = getpid() r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) 3.993109864s ago: executing program 0 (id=1308): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80082, 0x0) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) socket(0x10, 0x2, 0xc) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x529000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x16bb82, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/dma\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x20000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000180)=""/250, 0xfa) r3 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000180)={0x3, [0x69f7, 0xc, 0x3e7, 0x9, 0x7, 0x3, 0x4, 0x4]}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/afs/addr_prefs\x00', 0x8104, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) 3.67631871s ago: executing program 4 (id=1309): madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x7aa8f4c7) futex$auto(0x0, 0x86, 0xfffffff8, 0x0, 0x0, 0x4) write$auto(r2, &(0x7f0000000000)='/dev/audio1\x00', 0x4) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) 3.054737922s ago: executing program 2 (id=1310): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) syz_clone3(&(0x7f0000000440)={0x20900, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200), {0x1e}, &(0x7f0000000280), 0x0, &(0x7f0000000340)=""/175, 0x0}, 0x58) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) ioctl$auto_SNDCTL_DSP_MAPOUTBUF(0xffffffffffffffff, 0x80105014, &(0x7f0000000240)="56d2a31415a192ee779dea7567d602a61d6d6ba276224c1928c76b3f00034e5ab9dcd4fbab40111ab2132faaf5b8e3c45f83417d5e5e9e6e74719fa7489e27afa7c8f9a503682fab9c41eedb14c5ec7b0edf2f195684f1f4ed79486f75ecb4a478fda881360669f86d57590ddee1a20900a160f2d3b6aaa1fb76c52efca466215b95222b5ab57e6b2ac6deddc5") rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x2000aa7, 0x3, 0x2020401) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 2.666866318s ago: executing program 3 (id=1311): socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000800084c01fbf50300932f473a42efe92d9570e80ea5de46f60fe532ff3f5bb746e9b6bdd25e7975346a71d840a59da2989e6ea0a883fc5e8894e043cea629f391d2a91da834b160a40b18fb8f01d87c8a944306b5e395b076e5106b031dbd5e61e78d63aeb2fb42905bffab583ccd8610196b28e8da7a11e7aea5efe1887a97d20253204370d578d36b1edaf47bc4ce23cc262fff2341b03844f301a7a222fa5b880e82a0caf2cbb7a4dfb6e1e91009346458f07c528682eb3cc5fba86b995491f1687e4b0ed15618728fe36a9966b3738a901c5ea8dd0f742081b30a", @ANYRES32=r4, @ANYBLOB="0500300008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r6, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) 1.791600381s ago: executing program 0 (id=1312): mmap$auto(0x3, 0x20009, 0x4, 0x414, 0x401, 0x7ff) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x1d9040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0xf, 0xa, 0xf) setsockopt$auto(r0, 0x1, 0xc, 0x0, 0x7fffffff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x540a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x1000000400000000, 0xa, 0xdb, 0x18, 0x5, 0x7ff9) 263.344482ms ago: executing program 0 (id=1313): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r2, &(0x7f0000001380)="22d2", 0x2) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000280)=""/210, 0xd2) ioctl$auto_NVRAM_INIT(r3, 0x7040, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/sockstat\x00', 0xc0880, 0x0) read$auto(r4, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) prctl$auto(0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000000180)='\x00\x10\\.\x87\xf8Bw\x9bJx\amt\n\xfe\x9c', &(0x7f0000000040)=0xf7) setgroups$auto(0xe32, 0x0) futex$auto(0x0, 0x5, 0x9, 0x0, 0x0, 0xffff7fff) 0s ago: executing program 2 (id=1314): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, 0x0, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/sysname\x00', 0x80002, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, 0x0, 0xfffffdef) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r3, &(0x7f0000000040)="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", 0x259) kernel console output (not intermixed with test programs): 8.457474][ T8110] ? __pfx_ima_file_mmap+0x10/0x10 [ 328.457506][ T8110] security_mmap_file+0x88c/0x990 [ 328.457541][ T8110] vm_mmap_pgoff+0xec/0x470 [ 328.457577][ T8110] ? find_held_lock+0x2b/0x80 [ 328.457600][ T8110] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 328.457639][ T8110] ? __fget_files+0x20e/0x3c0 [ 328.457671][ T8110] ksys_mmap_pgoff+0x32c/0x5c0 [ 328.457711][ T8110] __x64_sys_mmap+0x125/0x190 [ 328.457752][ T8110] do_syscall_64+0xcd/0x4c0 [ 328.457775][ T8110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.457799][ T8110] RIP: 0033:0x7f0e3bb8ec29 [ 328.457818][ T8110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.457840][ T8110] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 328.457862][ T8110] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 328.457878][ T8110] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 328.457892][ T8110] RBP: 00007f0e3bc11e41 R08: 0000000000000009 R09: 0000000000000000 [ 328.457906][ T8110] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 328.457919][ T8110] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 328.457949][ T8110] [ 329.257064][ T8096] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 330.126827][ T8120] nvme_fabrics: missing parameter 'transport=%s' [ 330.223820][ T8120] nvme_fabrics: missing parameter 'nqn=%s' [ 331.099340][ T8138] FAULT_INJECTION: forcing a failure. [ 331.099340][ T8138] name failslab, interval 1, probability 0, space 0, times 0 [ 331.324138][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.0.446 Not tainted syzkaller #0 PREEMPT(full) [ 331.324170][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.324184][ T8138] Call Trace: [ 331.324191][ T8138] [ 331.324201][ T8138] dump_stack_lvl+0x16c/0x1f0 [ 331.324243][ T8138] should_fail_ex+0x512/0x640 [ 331.324282][ T8138] ? __kvmalloc_node_noprof+0x124/0x620 [ 331.324313][ T8138] should_failslab+0xc2/0x120 [ 331.324346][ T8138] __kvmalloc_node_noprof+0x137/0x620 [ 331.324375][ T8138] ? fib4_semantics_init+0x25/0x100 [ 331.324413][ T8138] ? fib4_semantics_init+0x25/0x100 [ 331.324444][ T8138] fib4_semantics_init+0x25/0x100 [ 331.324477][ T8138] fib_net_init+0x1fc/0x3f0 [ 331.324498][ T8138] ? __pfx___register_sysctl_table+0x10/0x10 [ 331.324537][ T8138] ? __pfx_fib_net_init+0x10/0x10 [ 331.324559][ T8138] ? lockdep_init_map_type+0x5c/0x280 [ 331.324594][ T8138] ? do_init_timer+0xc9/0x110 [ 331.324634][ T8138] ? devinet_init_net+0x5c2/0x910 [ 331.324663][ T8138] ? __pfx_fib_net_init+0x10/0x10 [ 331.324684][ T8138] ops_init+0x1df/0x5f0 [ 331.324709][ T8138] setup_net+0x10f/0x380 [ 331.324728][ T8138] ? lockdep_init_map_type+0x5c/0x280 [ 331.324761][ T8138] ? __pfx_setup_net+0x10/0x10 [ 331.324784][ T8138] ? debug_mutex_init+0x37/0x70 [ 331.324810][ T8138] copy_net_ns+0x2a6/0x5f0 [ 331.324838][ T8138] create_new_namespaces+0x3ea/0xa90 [ 331.324872][ T8138] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 331.324902][ T8138] ksys_unshare+0x45b/0xa40 [ 331.324936][ T8138] ? __pfx_ksys_unshare+0x10/0x10 [ 331.324970][ T8138] ? xfd_validate_state+0x61/0x180 [ 331.325014][ T8138] __x64_sys_unshare+0x31/0x40 [ 331.325046][ T8138] do_syscall_64+0xcd/0x4c0 [ 331.325069][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.325094][ T8138] RIP: 0033:0x7faed738ec29 [ 331.325112][ T8138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.325135][ T8138] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 331.325157][ T8138] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 331.325172][ T8138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 331.325186][ T8138] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 331.325200][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.325213][ T8138] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 331.325242][ T8138] [ 331.580897][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.504878][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 336.246238][ T8208] writing to auto_msgmni has no effect [ 337.709783][ T8223] zswap: compressor not available [ 343.315410][ T8303] netlink: 25 bytes leftover after parsing attributes in process `syz.2.471'. [ 348.568613][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 349.136876][ T8359] random: crng reseeded on system resumption [ 349.416205][ T8349] GUP no longer grows the stack in syz.3.480 (8349): 1000-401000 (0) [ 349.574218][ T8349] CPU: 0 UID: 0 PID: 8349 Comm: syz.3.480 Not tainted syzkaller #0 PREEMPT(full) [ 349.574249][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.574263][ T8349] Call Trace: [ 349.574270][ T8349] [ 349.574279][ T8349] dump_stack_lvl+0x16c/0x1f0 [ 349.574320][ T8349] gup_vma_lookup+0x1d2/0x220 [ 349.574357][ T8349] fixup_user_fault+0x26f/0x540 [ 349.574392][ T8349] ? futex_wake_op+0x974/0xe40 [ 349.574431][ T8349] fault_in_user_writeable+0x70/0xe0 [ 349.574461][ T8349] futex_wake_op+0x9a0/0xe40 [ 349.574505][ T8349] ? __pfx_futex_wake_op+0x10/0x10 [ 349.574540][ T8349] ? __pfx_futex_wait+0x10/0x10 [ 349.574585][ T8349] ? up_write+0x1b2/0x520 [ 349.574625][ T8349] do_futex+0x2e9/0x350 [ 349.574655][ T8349] ? __pfx_do_futex+0x10/0x10 [ 349.574694][ T8349] __x64_sys_futex+0x1e0/0x4c0 [ 349.574726][ T8349] ? fput+0x9b/0xd0 [ 349.574759][ T8349] ? __pfx___x64_sys_futex+0x10/0x10 [ 349.574790][ T8349] ? xfd_validate_state+0x61/0x180 [ 349.574873][ T8349] do_syscall_64+0xcd/0x4c0 [ 349.574898][ T8349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.574922][ T8349] RIP: 0033:0x7f086ad8ec29 [ 349.574940][ T8349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.574963][ T8349] RSP: 002b:00007f086bb84038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.574985][ T8349] RAX: ffffffffffffffda RBX: 00007f086afd6180 RCX: 00007f086ad8ec29 [ 349.575003][ T8349] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 349.575016][ T8349] RBP: 00007f086ae11e41 R08: 0000000000000000 R09: 0000000000000001 [ 349.575030][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.575044][ T8349] R13: 00007f086afd6218 R14: 00007f086afd6180 R15: 00007ffdbda808d8 [ 349.575073][ T8349] [ 349.766748][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.554343][ T8377] binder: 8376:8377 ioctl c018620c 0 returned -22 [ 352.167078][ T8389] netlink: 'syz.2.490': attribute type 5 has an invalid length. [ 353.409775][ T8401] net_ratelimit: 1 callbacks suppressed [ 353.409794][ T8401] netlink: zone id is out of range [ 353.502407][ T8401] netlink: zone id is out of range [ 353.540799][ T8401] netlink: zone id is out of range [ 353.624830][ T8401] netlink: zone id is out of range [ 353.655986][ T8401] netlink: zone id is out of range [ 353.696126][ T8401] netlink: zone id is out of range [ 353.758909][ T8401] netlink: zone id is out of range [ 353.830842][ T8401] netlink: zone id is out of range [ 353.874271][ T8401] netlink: zone id is out of range [ 353.879424][ T8401] netlink: zone id is out of range [ 354.121570][ T8405] can0: slcan on ttyS2. [ 354.374639][ T8404] can0 (unregistered): slcan off ttyS2. [ 361.079749][ T8495] Trying to write to read-only block-device sda1 [ 363.078767][ T8507] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 365.206519][ T8512] FAULT_INJECTION: forcing a failure. [ 365.206519][ T8512] name failslab, interval 1, probability 0, space 0, times 0 [ 365.240801][ T5878] Bluetooth: hci2: unexpected event 0x16 length: 440 > 6 [ 365.420892][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(full) [ 365.420924][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.420943][ T8512] Call Trace: [ 365.420950][ T8512] [ 365.420959][ T8512] dump_stack_lvl+0x16c/0x1f0 [ 365.421001][ T8512] should_fail_ex+0x512/0x640 [ 365.421038][ T8512] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 365.421066][ T8512] should_failslab+0xc2/0x120 [ 365.421098][ T8512] __kmalloc_cache_noprof+0x6a/0x3e0 [ 365.421123][ T8512] ? sctp_auth_init+0x30d/0x570 [ 365.421163][ T8512] sctp_auth_init+0x30d/0x570 [ 365.421203][ T8512] sctp_setsockopt+0xa371/0xb870 [ 365.421233][ T8512] ? __pfx_sctp_setsockopt+0x10/0x10 [ 365.421264][ T8512] ? find_held_lock+0x2b/0x80 [ 365.421291][ T8512] ? aa_sock_opt_perm+0xfd/0x1c0 [ 365.421314][ T8512] ? sock_common_setsockopt+0x2e/0xf0 [ 365.421339][ T8512] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 365.421367][ T8512] do_sock_setsockopt+0xf3/0x1d0 [ 365.421396][ T8512] __sys_setsockopt+0x120/0x1a0 [ 365.421436][ T8512] __x64_sys_setsockopt+0xbd/0x160 [ 365.421470][ T8512] ? do_syscall_64+0x91/0x4c0 [ 365.421490][ T8512] ? lockdep_hardirqs_on+0x7c/0x110 [ 365.421526][ T8512] do_syscall_64+0xcd/0x4c0 [ 365.421549][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.421573][ T8512] RIP: 0033:0x7f0e3bb8ec29 [ 365.421591][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.421613][ T8512] RSP: 002b:00007f0e3cab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 365.421635][ T8512] RAX: ffffffffffffffda RBX: 00007f0e3bdd6090 RCX: 00007f0e3bb8ec29 [ 365.421650][ T8512] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 365.421664][ T8512] RBP: 00007f0e3bc11e41 R08: 0000000000000008 R09: 0000000000000000 [ 365.421677][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.421691][ T8512] R13: 00007f0e3bdd6128 R14: 00007f0e3bdd6090 R15: 00007ffd81645da8 [ 365.421720][ T8512] [ 373.593641][ T8589] Invalid ELF header magic: != ELF [ 374.143053][ T8592] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 374.343286][ T8595] FAULT_INJECTION: forcing a failure. [ 374.343286][ T8595] name failslab, interval 1, probability 0, space 0, times 0 [ 374.567614][ T8595] CPU: 0 UID: 0 PID: 8595 Comm: syz.0.524 Not tainted syzkaller #0 PREEMPT(full) [ 374.567648][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.567662][ T8595] Call Trace: [ 374.567670][ T8595] [ 374.567678][ T8595] dump_stack_lvl+0x16c/0x1f0 [ 374.567720][ T8595] should_fail_ex+0x512/0x640 [ 374.567758][ T8595] ? fs_reclaim_acquire+0xae/0x150 [ 374.567798][ T8595] should_failslab+0xc2/0x120 [ 374.567830][ T8595] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 374.567860][ T8595] ? security_inode_alloc+0x3b/0x2b0 [ 374.567893][ T8595] security_inode_alloc+0x3b/0x2b0 [ 374.567921][ T8595] inode_init_always_gfp+0xce4/0x1030 [ 374.567954][ T8595] alloc_inode+0x86/0x240 [ 374.567990][ T8595] new_inode+0x22/0x1c0 [ 374.568028][ T8595] proc_pid_make_inode+0x22/0x160 [ 374.568061][ T8595] proc_pident_instantiate+0x85/0x310 [ 374.568096][ T8595] proc_fill_cache+0x35e/0x470 [ 374.568127][ T8595] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 374.568161][ T8595] ? __pfx_proc_fill_cache+0x10/0x10 [ 374.568221][ T8595] proc_pident_readdir+0x1bc/0x530 [ 374.568280][ T8595] iterate_dir+0x293/0xaf0 [ 374.568341][ T8595] __x64_sys_getdents+0x13c/0x2b0 [ 374.568364][ T8595] ? __pfx___x64_sys_getdents+0x10/0x10 [ 374.568386][ T8595] ? __x64_sys_openat+0x174/0x210 [ 374.568408][ T8595] ? __pfx_filldir+0x10/0x10 [ 374.568440][ T8595] do_syscall_64+0xcd/0x4c0 [ 374.568464][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.568488][ T8595] RIP: 0033:0x7faed738ec29 [ 374.568507][ T8595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.568530][ T8595] RSP: 002b:00007faed8206038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 374.568551][ T8595] RAX: ffffffffffffffda RBX: 00007faed75d6090 RCX: 00007faed738ec29 [ 374.568566][ T8595] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000007 [ 374.568580][ T8595] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 374.568593][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.568607][ T8595] R13: 00007faed75d6128 R14: 00007faed75d6090 R15: 00007fffb094c968 [ 374.568637][ T8595] [ 375.575430][ T8599] FAULT_INJECTION: forcing a failure. [ 375.575430][ T8599] name failslab, interval 1, probability 0, space 0, times 0 [ 375.762964][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.0.525 Not tainted syzkaller #0 PREEMPT(full) [ 375.762996][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.763010][ T8599] Call Trace: [ 375.763017][ T8599] [ 375.763025][ T8599] dump_stack_lvl+0x16c/0x1f0 [ 375.763066][ T8599] should_fail_ex+0x512/0x640 [ 375.763103][ T8599] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 375.763136][ T8599] should_failslab+0xc2/0x120 [ 375.763168][ T8599] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 375.763197][ T8599] ? sk_prot_alloc+0x60/0x2a0 [ 375.763237][ T8599] sk_prot_alloc+0x60/0x2a0 [ 375.763264][ T8599] sk_alloc+0x36/0xc20 [ 375.763299][ T8599] __vsock_create.constprop.0+0x3c/0xbb0 [ 375.763332][ T8599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.763371][ T8599] vsock_create+0x139/0x500 [ 375.763408][ T8599] __sock_create+0x338/0x8d0 [ 375.763441][ T8599] __sys_socket+0x14d/0x260 [ 375.763470][ T8599] ? __pfx___sys_socket+0x10/0x10 [ 375.763502][ T8599] ? xfd_validate_state+0x61/0x180 [ 375.763537][ T8599] ? __task_pid_nr_ns+0x17c/0x500 [ 375.763576][ T8599] __x64_sys_socket+0x72/0xb0 [ 375.763603][ T8599] ? lockdep_hardirqs_on+0x7c/0x110 [ 375.763639][ T8599] do_syscall_64+0xcd/0x4c0 [ 375.763661][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.763686][ T8599] RIP: 0033:0x7faed738ec29 [ 375.763704][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.763726][ T8599] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 375.763748][ T8599] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 375.763763][ T8599] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 375.763776][ T8599] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 375.763790][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.763803][ T8599] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 375.763832][ T8599] [ 375.812564][ T8588] FAULT_INJECTION: forcing a failure. [ 375.812564][ T8588] name fail_futex, interval 1, probability 0, space 0, times 0 [ 375.812598][ T8588] CPU: 0 UID: 0 PID: 8588 Comm: syz.1.523 Not tainted syzkaller #0 PREEMPT(full) [ 375.812626][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.812640][ T8588] Call Trace: [ 375.812647][ T8588] [ 375.812655][ T8588] dump_stack_lvl+0x16c/0x1f0 [ 375.812695][ T8588] should_fail_ex+0x512/0x640 [ 375.812738][ T8588] get_futex_key+0x1d0/0x1560 [ 375.812771][ T8588] ? __pfx_get_futex_key+0x10/0x10 [ 375.812803][ T8588] ? do_raw_spin_lock+0x12c/0x2b0 [ 375.812846][ T8588] futex_wake+0xea/0x530 [ 375.812881][ T8588] ? find_held_lock+0x2b/0x80 [ 375.812906][ T8588] ? __pfx_futex_wake+0x10/0x10 [ 375.812940][ T8588] ? rcu_is_watching+0x12/0xc0 [ 375.812965][ T8588] ? lockdep_hardirqs_on+0x7c/0x110 [ 375.813003][ T8588] ? posix_timer_unhash_and_free+0x375/0x400 [ 375.813037][ T8588] ? posix_cpu_timer_create+0x257/0x4a0 [ 375.813069][ T8588] do_futex+0x1e3/0x350 [ 375.813100][ T8588] ? __pfx_do_futex+0x10/0x10 [ 375.813139][ T8588] __x64_sys_futex+0x1e0/0x4c0 [ 375.813171][ T8588] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 375.813217][ T8588] ? __pfx___x64_sys_futex+0x10/0x10 [ 375.813249][ T8588] ? xfd_validate_state+0x61/0x180 [ 375.813284][ T8588] ? __task_pid_nr_ns+0x17c/0x500 [ 375.813326][ T8588] do_syscall_64+0xcd/0x4c0 [ 375.813349][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.813373][ T8588] RIP: 0033:0x7f0e3bb8ec29 [ 375.813391][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.813413][ T8588] RSP: 002b:00007f0e3cad50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.813435][ T8588] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa8 RCX: 00007f0e3bb8ec29 [ 375.813450][ T8588] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e3bdd5fac [ 375.813464][ T8588] RBP: 00007f0e3bdd5fa0 R08: 00007f0e3cad6000 R09: 0000000000000000 [ 375.813478][ T8588] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 375.813493][ T8588] R13: 00007f0e3bdd6038 R14: 00007ffd81645cc0 R15: 00007ffd81645da8 [ 375.813521][ T8588] [ 389.089720][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.096922][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.567479][ T8757] futex_wake_op: syz.0.551 tries to shift op by -9; fix this program [ 395.064068][ T30] audit: type=1804 audit(4294975180.595:7): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.554" name="/newroot/149/file0" dev="tmpfs" ino=807 res=1 errno=0 [ 396.207150][ T8767] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 396.294249][ T8767] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 400.188805][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 400.266707][ T8829] netlink: 354 bytes leftover after parsing attributes in process `syz.0.562'. [ 400.306330][ T8822] vivid-003: ================= START STATUS ================= [ 400.349388][ T8822] vivid-003: Radio HW Seek Mode: Bounded [ 400.388649][ T8822] vivid-003: Radio Programmable HW Seek: false [ 400.429436][ T8822] vivid-003: RDS Rx I/O Mode: Block I/O [ 400.494271][ T8822] vivid-003: Generate RBDS Instead of RDS: false [ 400.591736][ T8822] vivid-003: RDS Reception: true [ 400.638564][ T8822] vivid-003: RDS Program Type: 0 inactive [ 400.674343][ T8822] vivid-003: RDS PS Name: inactive [ 400.731955][ T8822] vivid-003: RDS Radio Text: inactive [ 400.874121][ T8822] vivid-003: RDS Traffic Announcement: false inactive [ 400.880955][ T8822] vivid-003: RDS Traffic Program: false inactive [ 401.035406][ T8822] vivid-003: RDS Music: false inactive [ 401.074219][ T8822] vivid-003: ================== END STATUS ================== [ 401.640595][ T8840] random: crng reseeded on system resumption [ 402.422176][ T8850] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 403.544226][ T8862] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 403.624726][ T8862] netlink: 93 bytes leftover after parsing attributes in process `syz.0.569'. [ 404.082590][ T8852] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 405.644406][ T8867] futex_wake_op: syz.1.570 tries to shift op by -9; fix this program [ 406.684335][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 407.176981][ T8886] vivid-003: ================= START STATUS ================= [ 407.229148][ T8886] vivid-003: Radio HW Seek Mode: Bounded [ 407.262272][ T8886] vivid-003: Radio Programmable HW Seek: false [ 407.315482][ T8891] vivid-007: ================= START STATUS ================= [ 407.360841][ T8886] vivid-003: RDS Rx I/O Mode: Block I/O [ 407.404700][ T8891] vivid-007: Generate PTS: true [ 407.445775][ T8886] vivid-003: Generate RBDS Instead of RDS: false [ 407.507965][ T8891] vivid-007: Generate SCR: true [ 407.558569][ T8886] vivid-003: RDS Reception: true [ 407.597593][ T8891] tpg source WxH: 320x240 (Y'CbCr) [ 407.684711][ T8886] vivid-003: RDS Program Type: 0 inactive [ 407.717866][ T8891] tpg field: 1 [ 407.745645][ T8891] tpg crop: (0,0)/320x240 [ 407.777281][ T8886] vivid-003: RDS PS Name: inactive [ 407.823268][ T8891] tpg compose: (0,0)/320x240 [ 407.870979][ T8886] vivid-003: RDS Radio Text: inactive [ 407.931641][ T8891] tpg colorspace: 8 [ 408.054030][ T8886] vivid-003: RDS Traffic Announcement: false inactive [ 408.116152][ T8891] tpg transfer function: 0/0 [ 408.120785][ T8891] tpg Y'CbCr encoding: 0/0 [ 408.204908][ T8886] vivid-003: RDS Traffic Program: false inactive [ 408.252212][ T8891] tpg quantization: 0/0 [ 408.296098][ T8891] tpg RGB range: 0/2 [ 408.347650][ T8886] vivid-003: RDS Music: false inactive [ 408.382071][ T8891] vivid-007: ================== END STATUS ================== [ 408.429378][ T8886] vivid-003: ================== END STATUS ================== [ 411.209700][ T8940] netlink: 266 bytes leftover after parsing attributes in process `syz.1.584'. [ 413.137072][ T8960] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.178177][ T8960] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 413.391632][ T8960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.422464][ T8960] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 413.536646][ T8960] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.604439][ T8960] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 414.294165][ T8966] netlink: 'syz.2.590': attribute type 1 has an invalid length. [ 414.764122][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 415.334711][ T8972] random: crng reseeded on system resumption [ 415.406316][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 415.565106][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 415.685491][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 415.798343][ T8985] FAULT_INJECTION: forcing a failure. [ 415.798343][ T8985] name fail_futex, interval 1, probability 0, space 0, times 0 [ 415.895311][ T8985] CPU: 0 UID: 0 PID: 8985 Comm: syz.2.594 Not tainted syzkaller #0 PREEMPT(full) [ 415.895343][ T8985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.895365][ T8985] Call Trace: [ 415.895372][ T8985] [ 415.895381][ T8985] dump_stack_lvl+0x16c/0x1f0 [ 415.895423][ T8985] should_fail_ex+0x512/0x640 [ 415.895465][ T8985] get_futex_key+0x1d0/0x1560 [ 415.895498][ T8985] ? __pfx_get_futex_key+0x10/0x10 [ 415.895528][ T8985] ? __pick_eevdf+0x30a/0x670 [ 415.895561][ T8985] futex_wait_setup+0x9d/0x550 [ 415.895606][ T8985] __futex_wait+0x194/0x2f0 [ 415.895643][ T8985] ? __pfx___futex_wait+0x10/0x10 [ 415.895678][ T8985] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 415.895711][ T8985] ? lockdep_hardirqs_on+0x7c/0x110 [ 415.895749][ T8985] ? __pfx_futex_wake_mark+0x10/0x10 [ 415.895789][ T8985] ? futex_private_hash_put+0x176/0x300 [ 415.895821][ T8985] ? futex_private_hash_put+0x18a/0x300 [ 415.895852][ T8985] futex_wait+0xe8/0x380 [ 415.895887][ T8985] ? __pfx_futex_wait+0x10/0x10 [ 415.895929][ T8985] ? kmem_cache_free+0x2d1/0x4d0 [ 415.895955][ T8985] ? fd_install+0x225/0x750 [ 415.895978][ T8985] ? putname+0x154/0x1a0 [ 415.896016][ T8985] do_futex+0x229/0x350 [ 415.896046][ T8985] ? __pfx_do_futex+0x10/0x10 [ 415.896085][ T8985] __x64_sys_futex+0x1e0/0x4c0 [ 415.896117][ T8985] ? __x64_sys_openat+0x174/0x210 [ 415.896138][ T8985] ? __pfx___x64_sys_futex+0x10/0x10 [ 415.896169][ T8985] ? xfd_validate_state+0x61/0x180 [ 415.896214][ T8985] do_syscall_64+0xcd/0x4c0 [ 415.896236][ T8985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.896261][ T8985] RIP: 0033:0x7fc1fd78ec29 [ 415.896279][ T8985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.896301][ T8985] RSP: 002b:00007fc1fe5880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 415.896323][ T8985] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa8 RCX: 00007fc1fd78ec29 [ 415.896338][ T8985] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1fd9d5fa8 [ 415.896359][ T8985] RBP: 00007fc1fd9d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 415.896373][ T8985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.896387][ T8985] R13: 00007fc1fd9d6038 R14: 00007ffd90372a80 R15: 00007ffd90372b68 [ 415.896416][ T8985] [ 415.896698][ T8985] ubi0: detaching mtd0 [ 416.901724][ T5878] Bluetooth: hci0: command 0x0406 tx timeout [ 417.469520][ T8988] netlink: 'syz.2.594': attribute type 1 has an invalid length. [ 417.485267][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 417.636262][ T8985] ubi0: mtd0 is detached [ 417.644061][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 418.151320][ T9016] nbd: must specify a device to reconfigure [ 419.185911][ T9029] FAULT_INJECTION: forcing a failure. [ 419.185911][ T9029] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 419.294078][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.0.602 Not tainted syzkaller #0 PREEMPT(full) [ 419.294143][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.294157][ T9029] Call Trace: [ 419.294164][ T9029] [ 419.294173][ T9029] dump_stack_lvl+0x16c/0x1f0 [ 419.294215][ T9029] should_fail_ex+0x512/0x640 [ 419.294257][ T9029] _copy_from_iter+0x463/0x1720 [ 419.294290][ T9029] ? __pfx__copy_from_iter+0x10/0x10 [ 419.294314][ T9029] ? sctp_addto_chunk+0xfa/0x2a0 [ 419.294344][ T9029] ? __asan_memcpy+0x3c/0x60 [ 419.294369][ T9029] ? sctp_make_datafrag_empty+0x1c3/0x240 [ 419.294402][ T9029] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 419.294439][ T9029] sctp_user_addto_chunk+0x84/0x240 [ 419.294476][ T9029] sctp_datamsg_from_user+0x5b6/0x1320 [ 419.294523][ T9029] sctp_sendmsg_to_asoc+0xaf5/0x1bf0 [ 419.294562][ T9029] ? sctp_assoc_set_primary+0x177/0x300 [ 419.294601][ T9029] ? sctp_assoc_add_peer+0x252/0x1550 [ 419.294628][ T9029] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 419.294663][ T9029] ? sctp_connect_new_asoc+0x41e/0x770 [ 419.294689][ T9029] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 419.294719][ T9029] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 419.294761][ T9029] sctp_sendmsg+0xea2/0x1e10 [ 419.294792][ T9029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.294814][ T9029] ? __pfx___might_resched+0x10/0x10 [ 419.294844][ T9029] ? aa_sk_perm+0x2f4/0xb10 [ 419.294879][ T9029] ? __pfx_aa_sk_perm+0x10/0x10 [ 419.294918][ T9029] ? __pfx_sctp_sendmsg+0x10/0x10 [ 419.294943][ T9029] inet_sendmsg+0x119/0x140 [ 419.294974][ T9029] ____sys_sendmsg+0x973/0xc70 [ 419.295010][ T9029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.295041][ T9029] ? find_held_lock+0x2b/0x80 [ 419.295065][ T9029] ? futex_unqueue+0x133/0x2c0 [ 419.295100][ T9029] ___sys_sendmsg+0x134/0x1d0 [ 419.295138][ T9029] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.295189][ T9029] ? find_held_lock+0x2b/0x80 [ 419.295230][ T9029] __sys_sendmmsg+0x200/0x420 [ 419.295271][ T9029] ? __pfx___sys_sendmmsg+0x10/0x10 [ 419.295316][ T9029] ? __pfx_do_futex+0x10/0x10 [ 419.295363][ T9029] ? xfd_validate_state+0x61/0x180 [ 419.295397][ T9029] ? __sys_setsockopt+0x140/0x1a0 [ 419.295436][ T9029] __x64_sys_sendmmsg+0x9c/0x100 [ 419.295472][ T9029] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.295508][ T9029] do_syscall_64+0xcd/0x4c0 [ 419.295530][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.295555][ T9029] RIP: 0033:0x7faed738ec29 [ 419.295574][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.295596][ T9029] RSP: 002b:00007faed8206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.295617][ T9029] RAX: ffffffffffffffda RBX: 00007faed75d6090 RCX: 00007faed738ec29 [ 419.295632][ T9029] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 419.295646][ T9029] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 419.295660][ T9029] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 419.295674][ T9029] R13: 00007faed75d6128 R14: 00007faed75d6090 R15: 00007fffb094c968 [ 419.295703][ T9029] [ 419.617075][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.976154][ T9032] netlink: 326 bytes leftover after parsing attributes in process `syz.3.604'. [ 420.365789][ T13] Trying to write to read-only block-device sda [ 423.031992][ T9066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.611'. [ 423.146798][ T9068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 423.627855][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'. [ 423.679634][ T30] audit: type=1800 audit(4294975209.215:8): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.609" name="features" dev="configfs" ino=75956 res=0 errno=0 [ 424.032018][ T9069] ipvlan0: entered promiscuous mode [ 424.165200][ T9069] ipvlan0: entered allmulticast mode [ 424.170711][ T9069] veth0_vlan: entered allmulticast mode [ 425.046077][ T9086] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 425.634469][ T9095] ICMPv6: process `syz.1.619' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 425.808444][ T9095] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 426.069935][ T9102] Console: switching to colour VGA+ 80x25 [ 426.412965][ T9102] Console: switching to colour frame buffer device 128x48 [ 431.030768][ T9153] usb usb17: usbfs: process 9153 (syz.2.630) did not claim interface 0 before use [ 431.665839][ T9150] Invalid ELF header magic: != ELF [ 434.217103][ T9195] __vm_enough_memory: pid: 9195, comm: syz.3.637, bytes: 4398046511104 not enough memory for the allocation [ 434.688885][ T9194] serio: Serial port pty6 [ 439.698382][ T9230] FAULT_INJECTION: forcing a failure. [ 439.698382][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 439.834041][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: syz.1.645 Not tainted syzkaller #0 PREEMPT(full) [ 439.834073][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.834087][ T9230] Call Trace: [ 439.834095][ T9230] [ 439.834104][ T9230] dump_stack_lvl+0x16c/0x1f0 [ 439.834146][ T9230] should_fail_ex+0x512/0x640 [ 439.834188][ T9230] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 439.834222][ T9230] should_failslab+0xc2/0x120 [ 439.834255][ T9230] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 439.834285][ T9230] ? proc_alloc_inode+0x25/0x200 [ 439.834322][ T9230] ? __pfx_proc_alloc_inode+0x10/0x10 [ 439.834352][ T9230] proc_alloc_inode+0x25/0x200 [ 439.834382][ T9230] alloc_inode+0x61/0x240 [ 439.834418][ T9230] new_inode+0x22/0x1c0 [ 439.834455][ T9230] proc_pid_make_inode+0x22/0x160 [ 439.834487][ T9230] proc_ns_dir_lookup+0x25b/0x3a0 [ 439.834521][ T9230] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 439.834551][ T9230] lookup_open.isra.0+0x4da/0x1580 [ 439.834583][ T9230] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 439.834623][ T9230] ? mnt_get_write_access+0x20c/0x300 [ 439.834664][ T9230] path_openat+0x893/0x2cb0 [ 439.834703][ T9230] ? __pfx_path_openat+0x10/0x10 [ 439.834739][ T9230] do_filp_open+0x20b/0x470 [ 439.834768][ T9230] ? __pfx_do_filp_open+0x10/0x10 [ 439.834808][ T9230] ? __pfx_kfree_link+0x10/0x10 [ 439.834853][ T9230] ? alloc_fd+0x471/0x7d0 [ 439.834886][ T9230] do_sys_openat2+0x11b/0x1d0 [ 439.834932][ T9230] ? __pfx_do_sys_openat2+0x10/0x10 [ 439.834968][ T9230] ? find_held_lock+0x2b/0x80 [ 439.834993][ T9230] ? handle_mm_fault+0x2ab/0xd10 [ 439.835026][ T9230] __x64_sys_openat+0x174/0x210 [ 439.835048][ T9230] ? __pfx___x64_sys_openat+0x10/0x10 [ 439.835072][ T9230] ? do_user_addr_fault+0x843/0x1370 [ 439.835119][ T9230] do_syscall_64+0xcd/0x4c0 [ 439.835143][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.835168][ T9230] RIP: 0033:0x7f0e3bb8d590 [ 439.835187][ T9230] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 439.835211][ T9230] RSP: 002b:00007f0e3cad4f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 439.835232][ T9230] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0e3bb8d590 [ 439.835248][ T9230] RDX: 0000000000000002 RSI: 00007f0e3cad4fa0 RDI: 00000000ffffff9c [ 439.835262][ T9230] RBP: 00007f0e3cad4fa0 R08: 0000000000000000 R09: 0000000000000000 [ 439.835277][ T9230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 439.835291][ T9230] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 439.835322][ T9230] [ 440.506652][ T9236] Invalid ELF header magic: != ELF [ 440.795917][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 440.845644][ T9241] netlink: 354 bytes leftover after parsing attributes in process `syz.0.647'. [ 443.954209][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 447.145038][ T9307] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 447.828116][ T9315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'. [ 447.956394][ T9315] geneve1: entered promiscuous mode [ 447.961649][ T9315] geneve1: entered allmulticast mode [ 448.077232][ T9316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.660'. [ 448.932592][ T9327] serio: Serial port pty6 [ 448.957018][ T9328] zram: Removed device: zram0 [ 449.533667][ T9331] netlink: 146 bytes leftover after parsing attributes in process `syz.1.664'. [ 450.530718][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.537367][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.861167][ T9334] netlink: 186 bytes leftover after parsing attributes in process `syz.1.664'. [ 451.079280][ T9344] netlink: 146 bytes leftover after parsing attributes in process `syz.1.664'. [ 453.440759][ T9362] random: crng reseeded on system resumption [ 460.965102][ T9409] netlink: 330 bytes leftover after parsing attributes in process `syz.2.677'. [ 461.033118][ T9403] net_ratelimit: 19 callbacks suppressed [ 461.033138][ T9403] netlink: zone id is out of range [ 461.062768][ T9409] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 461.283304][ T9403] netlink: zone id is out of range [ 461.420330][ T9403] netlink: zone id is out of range [ 461.455844][ T9403] netlink: zone id is out of range [ 461.493101][ T9403] netlink: zone id is out of range [ 461.552158][ T9403] netlink: zone id is out of range [ 461.604029][ T9403] netlink: zone id is out of range [ 461.664112][ T9403] netlink: zone id is out of range [ 461.669351][ T9403] netlink: zone id is out of range [ 461.728598][ T9403] netlink: zone id is out of range [ 464.021493][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 464.177326][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.682'. [ 464.240970][ T9436] geneve1: entered promiscuous mode [ 464.318099][ T9436] geneve1: entered allmulticast mode [ 464.421402][ T9442] HfR: entered promiscuous mode [ 465.109741][ T9450] ubi0: attaching mtd0 [ 465.205672][ T9450] ubi0: scanning is finished [ 466.096646][ T9450] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 470.689491][ T9496] net_ratelimit: 94 callbacks suppressed [ 470.689520][ T9496] netlink: zone id is out of range [ 470.866272][ T9496] netlink: del zone limit has 4 unknown bytes [ 471.117282][ T9498] HfR: entered promiscuous mode [ 471.621617][ T9492] netlink: set zone limit has 8 unknown bytes [ 473.028225][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 473.145482][ T9503] geneve1: entered promiscuous mode [ 473.150835][ T9503] geneve1: entered allmulticast mode [ 473.246387][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.695'. [ 473.974450][ T9481] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 486.694110][ T9579] i2c i2c-0: Failed to register i2c client card: at 0x01 (-16) [ 487.286701][ T9579] FAULT_INJECTION: forcing a failure. [ 487.286701][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 487.397133][ T9559] kexec: Could not allocate control_code_buffer [ 487.518818][ T9579] CPU: 0 UID: 0 PID: 9579 Comm: syz.2.709 Not tainted syzkaller #0 PREEMPT(full) [ 487.518852][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.518866][ T9579] Call Trace: [ 487.518874][ T9579] [ 487.518884][ T9579] dump_stack_lvl+0x16c/0x1f0 [ 487.518927][ T9579] should_fail_ex+0x512/0x640 [ 487.518965][ T9579] ? fs_reclaim_acquire+0xae/0x150 [ 487.519005][ T9579] should_failslab+0xc2/0x120 [ 487.519037][ T9579] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 487.519067][ T9579] ? security_inode_alloc+0x3b/0x2b0 [ 487.519109][ T9579] security_inode_alloc+0x3b/0x2b0 [ 487.519140][ T9579] inode_init_always_gfp+0xce4/0x1030 [ 487.519173][ T9579] alloc_inode+0x86/0x240 [ 487.519209][ T9579] new_inode+0x22/0x1c0 [ 487.519251][ T9579] proc_pid_make_inode+0x22/0x160 [ 487.519284][ T9579] proc_pident_instantiate+0x85/0x310 [ 487.519323][ T9579] proc_fill_cache+0x35e/0x470 [ 487.519355][ T9579] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 487.519389][ T9579] ? __pfx_proc_fill_cache+0x10/0x10 [ 487.519449][ T9579] proc_pident_readdir+0x1bc/0x530 [ 487.519489][ T9579] iterate_dir+0x293/0xaf0 [ 487.519515][ T9579] __x64_sys_getdents+0x13c/0x2b0 [ 487.519540][ T9579] ? __pfx___x64_sys_getdents+0x10/0x10 [ 487.519564][ T9579] ? __pfx_filldir+0x10/0x10 [ 487.519597][ T9579] do_syscall_64+0xcd/0x4c0 [ 487.519620][ T9579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.519645][ T9579] RIP: 0033:0x7fc1fd78ec29 [ 487.519664][ T9579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.519688][ T9579] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 487.519710][ T9579] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 487.519726][ T9579] RDX: 00000000000003f1 RSI: 0000000000000000 RDI: 0000000000000007 [ 487.519740][ T9579] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 487.519755][ T9579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.519769][ T9579] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 487.519799][ T9579] [ 497.536807][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 500.835310][ T9644] random: crng reseeded on system resumption [ 503.105036][ T9660] FAULT_INJECTION: forcing a failure. [ 503.105036][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 503.206959][ T9648] kexec: Could not allocate control_code_buffer [ 503.257957][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(full) [ 503.257989][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.258003][ T9660] Call Trace: [ 503.258011][ T9660] [ 503.258020][ T9660] dump_stack_lvl+0x16c/0x1f0 [ 503.258062][ T9660] should_fail_ex+0x512/0x640 [ 503.258100][ T9660] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 503.258128][ T9660] should_failslab+0xc2/0x120 [ 503.258161][ T9660] __kmalloc_cache_noprof+0x6a/0x3e0 [ 503.258185][ T9660] ? ip6addrlbl_add+0x69c/0xc40 [ 503.258220][ T9660] ? ip6addrlbl_add+0xbb/0xc40 [ 503.258266][ T9660] ip6addrlbl_add+0xbb/0xc40 [ 503.258310][ T9660] ip6addrlbl_net_init+0x10a/0x380 [ 503.258349][ T9660] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 503.258385][ T9660] ops_init+0x1df/0x5f0 [ 503.258410][ T9660] setup_net+0x10f/0x380 [ 503.258429][ T9660] ? lockdep_init_map_type+0x5c/0x280 [ 503.258463][ T9660] ? __pfx_setup_net+0x10/0x10 [ 503.258488][ T9660] ? debug_mutex_init+0x37/0x70 [ 503.258515][ T9660] copy_net_ns+0x2a6/0x5f0 [ 503.258543][ T9660] create_new_namespaces+0x3ea/0xa90 [ 503.258577][ T9660] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 503.258608][ T9660] ksys_unshare+0x45b/0xa40 [ 503.258642][ T9660] ? __pfx_ksys_unshare+0x10/0x10 [ 503.258675][ T9660] ? xfd_validate_state+0x61/0x180 [ 503.258720][ T9660] __x64_sys_unshare+0x31/0x40 [ 503.258756][ T9660] do_syscall_64+0xcd/0x4c0 [ 503.258779][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.258804][ T9660] RIP: 0033:0x7faed738ec29 [ 503.258823][ T9660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.258847][ T9660] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 503.258869][ T9660] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 503.258885][ T9660] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 503.258899][ T9660] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 503.258914][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.258928][ T9660] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 503.258958][ T9660] [ 507.408593][ T9672] FAULT_INJECTION: forcing a failure. [ 507.408593][ T9672] name failslab, interval 1, probability 0, space 0, times 0 [ 507.597231][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.1.727 Not tainted syzkaller #0 PREEMPT(full) [ 507.597265][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.597279][ T9672] Call Trace: [ 507.597287][ T9672] [ 507.597296][ T9672] dump_stack_lvl+0x16c/0x1f0 [ 507.597339][ T9672] should_fail_ex+0x512/0x640 [ 507.597378][ T9672] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 507.597407][ T9672] should_failslab+0xc2/0x120 [ 507.597439][ T9672] __kmalloc_cache_noprof+0x6a/0x3e0 [ 507.597463][ T9672] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x305/0x610 [ 507.597492][ T9672] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x3b3/0x610 [ 507.597519][ T9672] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 507.597552][ T9672] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 507.597586][ T9672] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 507.597612][ T9672] snd_mixer_oss_ioctl1+0xb52/0x1e40 [ 507.597651][ T9672] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.597690][ T9672] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 507.597717][ T9672] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 507.597756][ T9672] ? tomoyo_path_number_perm+0x295/0x580 [ 507.597803][ T9672] ? tomoyo_path_number_perm+0x18d/0x580 [ 507.597837][ T9672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 507.597883][ T9672] snd_mixer_oss_ioctl_card+0x102/0x170 [ 507.597909][ T9672] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 507.597942][ T9672] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 507.597971][ T9672] ? find_held_lock+0x2b/0x80 [ 507.597995][ T9672] ? hook_file_ioctl_common+0x145/0x410 [ 507.598028][ T9672] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 507.598063][ T9672] ? __fget_files+0x20e/0x3c0 [ 507.598095][ T9672] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 507.598128][ T9672] __x64_sys_ioctl+0x18b/0x210 [ 507.598169][ T9672] do_syscall_64+0xcd/0x4c0 [ 507.598192][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.598217][ T9672] RIP: 0033:0x7f0e3bb8ec29 [ 507.598236][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.598264][ T9672] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.598287][ T9672] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 507.598304][ T9672] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000002 [ 507.598319][ T9672] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 507.598333][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.598347][ T9672] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 507.598377][ T9672] [ 511.968770][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.993984][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.035024][ T5921] usb usb38-port5: attempt power cycle [ 512.666533][ T5921] usb usb38-port5: unable to enumerate USB device [ 512.722437][ T9704] vhci_hcd: invalid port number 23 [ 513.744466][ T9724] __vm_enough_memory: pid: 9724, comm: syz.2.738, bytes: 4398046511104 not enough memory for the allocation [ 514.977356][ T9701] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 516.269534][ T9732] FAULT_INJECTION: forcing a failure. [ 516.269534][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 516.394101][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.0.740 Not tainted syzkaller #0 PREEMPT(full) [ 516.394134][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.394157][ T9732] Call Trace: [ 516.394165][ T9732] [ 516.394175][ T9732] dump_stack_lvl+0x16c/0x1f0 [ 516.394218][ T9732] should_fail_ex+0x512/0x640 [ 516.394256][ T9732] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 516.394288][ T9732] should_failslab+0xc2/0x120 [ 516.394323][ T9732] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 516.394353][ T9732] ? ima_d_path+0xbd/0x2a0 [ 516.394387][ T9732] ima_d_path+0xbd/0x2a0 [ 516.394416][ T9732] ? __pfx_ima_d_path+0x10/0x10 [ 516.394451][ T9732] ? lockdep_init_map_type+0x5c/0x280 [ 516.394485][ T9732] ? ima_inode_get+0x39e/0x580 [ 516.394514][ T9732] process_measurement+0x175f/0x23e0 [ 516.394546][ T9732] ? __lock_acquire+0x62e/0x1ce0 [ 516.394579][ T9732] ? __pfx_process_measurement+0x10/0x10 [ 516.394617][ T9732] ? find_held_lock+0x2b/0x80 [ 516.394665][ T9732] ? futex_private_hash_put+0x18a/0x300 [ 516.394702][ T9732] ima_file_mmap+0x1b1/0x1d0 [ 516.394726][ T9732] ? __pfx_ima_file_mmap+0x10/0x10 [ 516.394759][ T9732] security_mmap_file+0x88c/0x990 [ 516.394794][ T9732] vm_mmap_pgoff+0xec/0x470 [ 516.394830][ T9732] ? find_held_lock+0x2b/0x80 [ 516.394853][ T9732] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 516.394893][ T9732] ? __fget_files+0x20e/0x3c0 [ 516.394925][ T9732] ksys_mmap_pgoff+0x32c/0x5c0 [ 516.394965][ T9732] __x64_sys_mmap+0x125/0x190 [ 516.395006][ T9732] do_syscall_64+0xcd/0x4c0 [ 516.395030][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.395055][ T9732] RIP: 0033:0x7faed738ec29 [ 516.395074][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.395098][ T9732] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 516.395120][ T9732] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 516.395136][ T9732] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 516.395156][ T9732] RBP: 00007faed7411e41 R08: 0000000000000009 R09: 0000000000000000 [ 516.395170][ T9732] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 516.395184][ T9732] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 516.395214][ T9732] [ 516.649934][ T30] audit: type=1804 audit(4294967300.180:9): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.740" name="file0" dev="tmpfs" ino=1057 res=1 errno=0 [ 517.937082][ T9733] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 525.063487][ T9806] zswap: compressor @ not available [ 527.080430][ T9828] vivid-007: ================= START STATUS ================= [ 527.274058][ T9828] vivid-007: Enable Output Cropping: true [ 527.279873][ T9828] vivid-007: Enable Output Composing: true [ 527.557006][ T9828] vivid-007: Enable Output Scaler: true [ 527.677721][ T9828] vivid-007: Tx RGB Quantization Range: Automatic [ 527.788731][ T9828] vivid-007: Transmit Mode: HDMI [ 527.793761][ T9828] vivid-007: Hotplug Present: 0x00000000 [ 528.000867][ T9828] vivid-007: RxSense Present: 0x00000000 [ 528.059375][ T9828] vivid-007: EDID Present: 0x00000000 [ 528.153337][ T9828] vivid-007: ================== END STATUS ================== [ 531.158980][ T9878] random: crng reseeded on system resumption [ 535.613464][ T9913] zswap: compressor not available [ 536.811117][ T9928] netlink: 25 bytes leftover after parsing attributes in process `syz.3.775'. [ 539.220890][ T9953] random: crng reseeded on system resumption [ 543.242519][ T9948] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 544.047018][ T9985] binder: 9984:9985 ioctl c018620c 0 returned -22 [ 545.923847][T10010] FAULT_INJECTION: forcing a failure. [ 545.923847][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 545.937419][T10010] CPU: 0 UID: 0 PID: 10010 Comm: syz.0.798 Not tainted syzkaller #0 PREEMPT(full) [ 545.937452][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.937467][T10010] Call Trace: [ 545.937474][T10010] [ 545.937483][T10010] dump_stack_lvl+0x16c/0x1f0 [ 545.937525][T10010] should_fail_ex+0x512/0x640 [ 545.937563][T10010] ? __kmalloc_noprof+0xbf/0x510 [ 545.937595][T10010] ? handler_new_ref+0x1b0/0xc60 [ 545.937616][T10010] should_failslab+0xc2/0x120 [ 545.937649][T10010] __kmalloc_noprof+0xd2/0x510 [ 545.937676][T10010] ? __asan_memcpy+0x3c/0x60 [ 545.937706][T10010] handler_new_ref+0x1b0/0xc60 [ 545.937736][T10010] v4l2_ctrl_new+0x1963/0x2180 [ 545.937769][T10010] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 545.937800][T10010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.937841][T10010] v4l2_ctrl_new_std+0x1be/0x290 [ 545.937873][T10010] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 545.937900][T10010] ? rcu_is_watching+0x12/0xc0 [ 545.937924][T10010] ? trace_kmalloc+0x2b/0xd0 [ 545.937958][T10010] ? __kvmalloc_node_noprof+0x298/0x620 [ 545.937987][T10010] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 545.938031][T10010] ? media_request_object_init+0x100/0x180 [ 545.938062][T10010] vicodec_open+0x1d0/0xf90 [ 545.938100][T10010] v4l2_open+0x222/0x490 [ 545.938134][T10010] ? __pfx_v4l2_open+0x10/0x10 [ 545.938243][T10010] chrdev_open+0x231/0x6a0 [ 545.938277][T10010] ? __pfx_apparmor_file_open+0x10/0x10 [ 545.938305][T10010] ? __pfx_chrdev_open+0x10/0x10 [ 545.938339][T10010] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 545.938372][T10010] do_dentry_open+0x97f/0x1530 [ 545.938403][T10010] ? __pfx_chrdev_open+0x10/0x10 [ 545.938441][T10010] vfs_open+0x82/0x3f0 [ 545.938481][T10010] path_openat+0x1de4/0x2cb0 [ 545.938519][T10010] ? __pfx_path_openat+0x10/0x10 [ 545.938589][T10010] do_filp_open+0x20b/0x470 [ 545.938618][T10010] ? __pfx_do_filp_open+0x10/0x10 [ 545.938669][T10010] ? alloc_fd+0x471/0x7d0 [ 545.938704][T10010] do_sys_openat2+0x11b/0x1d0 [ 545.938742][T10010] ? __pfx_do_sys_openat2+0x10/0x10 [ 545.938796][T10010] __x64_sys_openat+0x174/0x210 [ 545.938819][T10010] ? __pfx___x64_sys_openat+0x10/0x10 [ 545.938853][T10010] do_syscall_64+0xcd/0x4c0 [ 545.938884][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.938910][T10010] RIP: 0033:0x7faed738ec29 [ 545.938930][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.938954][T10010] RSP: 002b:00007faed81e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 545.938977][T10010] RAX: ffffffffffffffda RBX: 00007faed75d6180 RCX: 00007faed738ec29 [ 545.938992][T10010] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 545.939007][T10010] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 545.939022][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.939036][T10010] R13: 00007faed75d6218 R14: 00007faed75d6180 R15: 00007fffb094c968 [ 545.939067][T10010] [ 551.914610][T10068] binder: 10065:10068 ioctl c018620c 0 returned -22 [ 552.105798][T10067] FAULT_INJECTION: forcing a failure. [ 552.105798][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 552.230169][T10067] CPU: 0 UID: 0 PID: 10067 Comm: syz.2.800 Not tainted syzkaller #0 PREEMPT(full) [ 552.230217][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.230231][T10067] Call Trace: [ 552.230239][T10067] [ 552.230249][T10067] dump_stack_lvl+0x16c/0x1f0 [ 552.230297][T10067] should_fail_ex+0x512/0x640 [ 552.230335][T10067] ? __kmalloc_noprof+0xbf/0x510 [ 552.230365][T10067] ? __register_sysctl_table+0xea2/0x1900 [ 552.230401][T10067] should_failslab+0xc2/0x120 [ 552.230433][T10067] __kmalloc_noprof+0xd2/0x510 [ 552.230460][T10067] ? __register_sysctl_table+0xe8e/0x1900 [ 552.230502][T10067] __register_sysctl_table+0xea2/0x1900 [ 552.230545][T10067] ? __pfx___register_sysctl_table+0x10/0x10 [ 552.230581][T10067] ? is_module_address+0x69/0xf0 [ 552.230615][T10067] ? register_net_sysctl_sz+0x228/0x3e0 [ 552.230645][T10067] __addrconf_sysctl_register+0x1a2/0x360 [ 552.230678][T10067] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 552.230705][T10067] ? trace_kmalloc+0x2b/0xd0 [ 552.230740][T10067] ? addrconf_init_net+0x1e9/0x8e0 [ 552.230768][T10067] ? __asan_memcpy+0x3c/0x60 [ 552.230795][T10067] addrconf_init_net+0x50c/0x8e0 [ 552.230824][T10067] ? __pfx_addrconf_init_net+0x10/0x10 [ 552.230851][T10067] ops_init+0x1df/0x5f0 [ 552.230876][T10067] setup_net+0x10f/0x380 [ 552.230895][T10067] ? lockdep_init_map_type+0x5c/0x280 [ 552.230930][T10067] ? __pfx_setup_net+0x10/0x10 [ 552.230952][T10067] ? debug_mutex_init+0x37/0x70 [ 552.230979][T10067] copy_net_ns+0x2a6/0x5f0 [ 552.231007][T10067] create_new_namespaces+0x3ea/0xa90 [ 552.231042][T10067] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 552.231073][T10067] ksys_unshare+0x45b/0xa40 [ 552.231107][T10067] ? __pfx_ksys_unshare+0x10/0x10 [ 552.231141][T10067] ? xfd_validate_state+0x61/0x180 [ 552.231187][T10067] __x64_sys_unshare+0x31/0x40 [ 552.231225][T10067] do_syscall_64+0xcd/0x4c0 [ 552.231248][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.231279][T10067] RIP: 0033:0x7fc1fd78ec29 [ 552.231298][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.231322][T10067] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.231345][T10067] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 552.231360][T10067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.231374][T10067] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 552.231389][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.231403][T10067] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 552.231432][T10067] [ 552.231503][T10067] sysctl could not get directory: /net/ipv6/conf -12 [ 562.180567][T10161] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 562.674539][T10167] random: crng reseeded on system resumption [ 567.252763][T10202] FAULT_INJECTION: forcing a failure. [ 567.252763][T10202] name failslab, interval 1, probability 0, space 0, times 0 [ 567.435844][T10202] CPU: 0 UID: 0 PID: 10202 Comm: syz.2.823 Not tainted syzkaller #0 PREEMPT(full) [ 567.435878][T10202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 567.435893][T10202] Call Trace: [ 567.435900][T10202] [ 567.435910][T10202] dump_stack_lvl+0x16c/0x1f0 [ 567.435953][T10202] should_fail_ex+0x512/0x640 [ 567.435991][T10202] ? __kmalloc_noprof+0xbf/0x510 [ 567.436022][T10202] ? handler_new_ref+0x1b0/0xc60 [ 567.436043][T10202] should_failslab+0xc2/0x120 [ 567.436075][T10202] __kmalloc_noprof+0xd2/0x510 [ 567.436101][T10202] ? __asan_memcpy+0x3c/0x60 [ 567.436131][T10202] handler_new_ref+0x1b0/0xc60 [ 567.436160][T10202] v4l2_ctrl_new+0x1963/0x2180 [ 567.436193][T10202] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 567.436232][T10202] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 567.436274][T10202] v4l2_ctrl_new_std+0x1be/0x290 [ 567.436305][T10202] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 567.436332][T10202] ? rcu_is_watching+0x12/0xc0 [ 567.436356][T10202] ? trace_kmalloc+0x2b/0xd0 [ 567.436389][T10202] ? __kvmalloc_node_noprof+0x298/0x620 [ 567.436417][T10202] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 567.436459][T10202] ? media_request_object_init+0x100/0x180 [ 567.436491][T10202] vicodec_open+0x1d0/0xf90 [ 567.436528][T10202] v4l2_open+0x222/0x490 [ 567.436563][T10202] ? __pfx_v4l2_open+0x10/0x10 [ 567.436596][T10202] chrdev_open+0x231/0x6a0 [ 567.436627][T10202] ? __pfx_apparmor_file_open+0x10/0x10 [ 567.436655][T10202] ? __pfx_chrdev_open+0x10/0x10 [ 567.436689][T10202] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 567.436722][T10202] do_dentry_open+0x97f/0x1530 [ 567.436752][T10202] ? __pfx_chrdev_open+0x10/0x10 [ 567.436816][T10202] vfs_open+0x82/0x3f0 [ 567.436861][T10202] path_openat+0x1de4/0x2cb0 [ 567.436905][T10202] ? __pfx_path_openat+0x10/0x10 [ 567.436941][T10202] do_filp_open+0x20b/0x470 [ 567.436971][T10202] ? __pfx_do_filp_open+0x10/0x10 [ 567.437021][T10202] ? alloc_fd+0x471/0x7d0 [ 567.437055][T10202] do_sys_openat2+0x11b/0x1d0 [ 567.437092][T10202] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.437141][T10202] __x64_sys_openat+0x174/0x210 [ 567.437163][T10202] ? __pfx___x64_sys_openat+0x10/0x10 [ 567.437196][T10202] do_syscall_64+0xcd/0x4c0 [ 567.437220][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.437245][T10202] RIP: 0033:0x7fc1fd78ec29 [ 567.437264][T10202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.437288][T10202] RSP: 002b:00007fc1fe546038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.437311][T10202] RAX: ffffffffffffffda RBX: 00007fc1fd9d6180 RCX: 00007fc1fd78ec29 [ 567.437327][T10202] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 567.437342][T10202] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 567.437358][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.437372][T10202] R13: 00007fc1fd9d6218 R14: 00007fc1fd9d6180 R15: 00007ffd90372b68 [ 567.437402][T10202] [ 573.315925][T10234] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 573.412792][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.419857][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.502063][T10307] can0: slcan on ttyS2. [ 580.756972][T10304] can0 (unregistered): slcan off ttyS2. [ 583.555272][T10349] random: crng reseeded on system resumption [ 593.429573][T10453] FAULT_INJECTION: forcing a failure. [ 593.429573][T10453] name failslab, interval 1, probability 0, space 0, times 0 [ 593.534533][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.1.858 Not tainted syzkaller #0 PREEMPT(full) [ 593.534567][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 593.534582][T10453] Call Trace: [ 593.534589][T10453] [ 593.534598][T10453] dump_stack_lvl+0x16c/0x1f0 [ 593.534641][T10453] should_fail_ex+0x512/0x640 [ 593.534678][T10453] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 593.534711][T10453] should_failslab+0xc2/0x120 [ 593.534744][T10453] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 593.534774][T10453] ? __alloc_skb+0x2b2/0x380 [ 593.534813][T10453] __alloc_skb+0x2b2/0x380 [ 593.534846][T10453] ? __pfx___alloc_skb+0x10/0x10 [ 593.534885][T10453] ? __pfx___register_sysctl_table+0x10/0x10 [ 593.534921][T10453] ? is_module_address+0x69/0xf0 [ 593.534959][T10453] inet6_netconf_notify_devconf+0x87/0x180 [ 593.534991][T10453] __addrconf_sysctl_register+0x22b/0x360 [ 593.535030][T10453] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 593.535057][T10453] ? trace_kmalloc+0x2b/0xd0 [ 593.535093][T10453] ? addrconf_init_net+0x1e9/0x8e0 [ 593.535121][T10453] ? __asan_memcpy+0x3c/0x60 [ 593.535148][T10453] addrconf_init_net+0x53a/0x8e0 [ 593.535178][T10453] ? __pfx_addrconf_init_net+0x10/0x10 [ 593.535205][T10453] ops_init+0x1df/0x5f0 [ 593.535229][T10453] setup_net+0x10f/0x380 [ 593.535248][T10453] ? lockdep_init_map_type+0x5c/0x280 [ 593.535282][T10453] ? __pfx_setup_net+0x10/0x10 [ 593.535305][T10453] ? debug_mutex_init+0x37/0x70 [ 593.535332][T10453] copy_net_ns+0x2a6/0x5f0 [ 593.535359][T10453] create_new_namespaces+0x3ea/0xa90 [ 593.535394][T10453] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 593.535425][T10453] ksys_unshare+0x45b/0xa40 [ 593.535459][T10453] ? __pfx_ksys_unshare+0x10/0x10 [ 593.535493][T10453] ? xfd_validate_state+0x61/0x180 [ 593.535537][T10453] __x64_sys_unshare+0x31/0x40 [ 593.535573][T10453] do_syscall_64+0xcd/0x4c0 [ 593.535597][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.535622][T10453] RIP: 0033:0x7f0e3bb8ec29 [ 593.535641][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.535666][T10453] RSP: 002b:00007f0e3cab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 593.535688][T10453] RAX: ffffffffffffffda RBX: 00007f0e3bdd6090 RCX: 00007f0e3bb8ec29 [ 593.535704][T10453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 593.535718][T10453] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 593.535732][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.535746][T10453] R13: 00007f0e3bdd6128 R14: 00007f0e3bdd6090 R15: 00007ffd81645da8 [ 593.535776][T10453] [ 593.806983][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.493981][T10552] vivid-003: ================= START STATUS ================= [ 606.502018][T10552] vivid-003: Radio HW Seek Mode: Bounded [ 606.656642][T10552] vivid-003: Radio Programmable HW Seek: false [ 606.662961][T10552] vivid-003: RDS Rx I/O Mode: Block I/O [ 606.748913][T10552] vivid-003: Generate RBDS Instead of RDS: false [ 606.805697][T10552] vivid-003: RDS Reception: true [ 606.836362][T10552] vivid-003: RDS Program Type: 0 inactive [ 606.968161][T10552] vivid-003: RDS PS Name: inactive [ 607.052019][T10552] vivid-003: RDS Radio Text: inactive [ 607.145793][T10552] vivid-003: RDS Traffic Announcement: false inactive [ 607.152626][T10552] vivid-003: RDS Traffic Program: false inactive [ 607.408968][T10552] vivid-003: RDS Music: false inactive [ 607.437749][T10552] vivid-003: ================== END STATUS ================== [ 610.407222][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.884'. [ 610.475188][T10589] ipvlan0: entered promiscuous mode [ 610.527957][T10589] ipvlan0: entered allmulticast mode [ 610.616724][T10589] veth0_vlan: entered allmulticast mode [ 615.227123][T10644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.898'. [ 615.409714][T10644] ipvlan0: entered promiscuous mode [ 615.470076][T10644] ipvlan0: entered allmulticast mode [ 615.557080][T10644] veth0_vlan: entered allmulticast mode [ 620.049368][T10674] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 620.401037][T10690] FAULT_INJECTION: forcing a failure. [ 620.401037][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 620.472797][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.1.906 Not tainted syzkaller #0 PREEMPT(full) [ 620.472830][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.472844][T10690] Call Trace: [ 620.472853][T10690] [ 620.472862][T10690] dump_stack_lvl+0x16c/0x1f0 [ 620.472904][T10690] should_fail_ex+0x512/0x640 [ 620.472942][T10690] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 620.472975][T10690] should_failslab+0xc2/0x120 [ 620.473007][T10690] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 620.473037][T10690] ? do_epoll_ctl+0x1170/0x3790 [ 620.473068][T10690] do_epoll_ctl+0x1170/0x3790 [ 620.473107][T10690] ? __pfx_do_epoll_ctl+0x10/0x10 [ 620.473132][T10690] ? find_held_lock+0x2b/0x80 [ 620.473154][T10690] ? __might_fault+0xe3/0x190 [ 620.473181][T10690] ? __might_fault+0xe3/0x190 [ 620.473220][T10690] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 620.473245][T10690] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 620.473273][T10690] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 620.473318][T10690] do_syscall_64+0xcd/0x4c0 [ 620.473342][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.473367][T10690] RIP: 0033:0x7f0e3bb8ec29 [ 620.473386][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.473409][T10690] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 620.473431][T10690] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 620.473447][T10690] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000006 [ 620.473461][T10690] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 620.473475][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.473489][T10690] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 620.473519][T10690] [ 621.827732][T10690] netlink: 326 bytes leftover after parsing attributes in process `syz.1.906'. [ 621.914766][T10690] bridge0: port 3(batadv0) entered disabled state [ 626.845476][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.909'. [ 626.945079][T10726] ipvlan0: entered promiscuous mode [ 627.026870][T10726] ipvlan0: entered allmulticast mode [ 627.130184][T10726] veth0_vlan: entered allmulticast mode [ 632.808567][T10804] serio: Serial port pty6 [ 634.848216][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.863509][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.664088][T10848] Invalid ELF header magic: != ELF [ 642.243988][ T30] audit: type=1804 audit(4294967426.020:10): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.940" name="/newroot/232/file0" dev="tmpfs" ino=1239 res=1 errno=0 [ 643.146693][T10881] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 643.190777][T10881] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 644.189080][T10897] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 645.869963][T10905] FAULT_INJECTION: forcing a failure. [ 645.869963][T10905] name failslab, interval 1, probability 0, space 0, times 0 [ 645.922427][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.2.945 Not tainted syzkaller #0 PREEMPT(full) [ 645.922460][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 645.922474][T10905] Call Trace: [ 645.922482][T10905] [ 645.922492][T10905] dump_stack_lvl+0x16c/0x1f0 [ 645.922533][T10905] should_fail_ex+0x512/0x640 [ 645.922571][T10905] ? fs_reclaim_acquire+0xae/0x150 [ 645.922611][T10905] should_failslab+0xc2/0x120 [ 645.922643][T10905] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 645.922673][T10905] ? security_inode_alloc+0x3b/0x2b0 [ 645.922713][T10905] security_inode_alloc+0x3b/0x2b0 [ 645.922742][T10905] inode_init_always_gfp+0xce4/0x1030 [ 645.922774][T10905] alloc_inode+0x86/0x240 [ 645.922810][T10905] path_from_stashed+0x25b/0x750 [ 645.922838][T10905] ? do_raw_spin_unlock+0x172/0x230 [ 645.922882][T10905] ns_get_path+0x5f/0x80 [ 645.922907][T10905] proc_ns_get_link+0x121/0x230 [ 645.922938][T10905] ? __pfx_proc_ns_get_link+0x10/0x10 [ 645.922970][T10905] ? try_to_unlazy+0x2a9/0x660 [ 645.922996][T10905] ? __pfx_proc_ns_get_link+0x10/0x10 [ 645.923026][T10905] step_into+0x1a29/0x2270 [ 645.923050][T10905] ? find_held_lock+0x2b/0x80 [ 645.923076][T10905] ? __pfx_step_into+0x10/0x10 [ 645.923105][T10905] ? lookup_fast+0x156/0x610 [ 645.923133][T10905] path_openat+0x6db/0x2cb0 [ 645.923170][T10905] ? __pfx_path_openat+0x10/0x10 [ 645.923207][T10905] do_filp_open+0x20b/0x470 [ 645.923236][T10905] ? __pfx_do_filp_open+0x10/0x10 [ 645.923285][T10905] ? alloc_fd+0x471/0x7d0 [ 645.923319][T10905] do_sys_openat2+0x11b/0x1d0 [ 645.923357][T10905] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.923397][T10905] ? find_held_lock+0x2b/0x80 [ 645.923420][T10905] ? handle_mm_fault+0x2ab/0xd10 [ 645.923452][T10905] __x64_sys_openat+0x174/0x210 [ 645.923473][T10905] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.923496][T10905] ? xfd_validate_state+0x61/0x180 [ 645.923531][T10905] ? do_user_addr_fault+0x843/0x1370 [ 645.923577][T10905] do_syscall_64+0xcd/0x4c0 [ 645.923601][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.923626][T10905] RIP: 0033:0x7fc1fd78d590 [ 645.923645][T10905] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 645.923668][T10905] RSP: 002b:00007fc1fe587f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 645.923690][T10905] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc1fd78d590 [ 645.923713][T10905] RDX: 0000000000000000 RSI: 00007fc1fe587fa0 RDI: 00000000ffffff9c [ 645.923727][T10905] RBP: 00007fc1fe587fa0 R08: 0000000000000000 R09: 0000000000000000 [ 645.923742][T10905] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 645.923756][T10905] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 645.923785][T10905] [ 648.214019][T10920] serio: Serial port pty6 [ 650.011285][T10943] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 650.901734][ T30] audit: type=1804 audit(4294967434.680:11): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.952" name="/newroot/219/file0" dev="tmpfs" ino=1176 res=1 errno=0 [ 651.884826][T10950] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 651.945121][T10950] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 652.929749][T10973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 654.456698][T10994] futex_wake_op: syz.0.968 tries to shift op by -9; fix this program [ 655.233555][T11001] FAULT_INJECTION: forcing a failure. [ 655.233555][T11001] name failslab, interval 1, probability 0, space 0, times 0 [ 655.333270][T11001] CPU: 0 UID: 0 PID: 11001 Comm: syz.2.960 Not tainted syzkaller #0 PREEMPT(full) [ 655.333310][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 655.333325][T11001] Call Trace: [ 655.333332][T11001] [ 655.333341][T11001] dump_stack_lvl+0x16c/0x1f0 [ 655.333384][T11001] should_fail_ex+0x512/0x640 [ 655.333440][T11001] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 655.333469][T11001] should_failslab+0xc2/0x120 [ 655.333502][T11001] __kmalloc_cache_noprof+0x6a/0x3e0 [ 655.333528][T11001] ? ip_vs_protocol_net_init+0xbe/0x300 [ 655.333558][T11001] ip_vs_protocol_net_init+0xbe/0x300 [ 655.333587][T11001] __ip_vs_init+0x239/0x520 [ 655.333621][T11001] ? __pfx___ip_vs_init+0x10/0x10 [ 655.333652][T11001] ops_init+0x1df/0x5f0 [ 655.333677][T11001] setup_net+0x10f/0x380 [ 655.333696][T11001] ? lockdep_init_map_type+0x5c/0x280 [ 655.333732][T11001] ? __pfx_setup_net+0x10/0x10 [ 655.333763][T11001] ? debug_mutex_init+0x37/0x70 [ 655.333791][T11001] copy_net_ns+0x2a6/0x5f0 [ 655.333823][T11001] create_new_namespaces+0x3ea/0xa90 [ 655.333858][T11001] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 655.333890][T11001] ksys_unshare+0x45b/0xa40 [ 655.333924][T11001] ? __pfx_ksys_unshare+0x10/0x10 [ 655.333959][T11001] ? xfd_validate_state+0x61/0x180 [ 655.334003][T11001] __x64_sys_unshare+0x31/0x40 [ 655.334036][T11001] do_syscall_64+0xcd/0x4c0 [ 655.334059][T11001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.334084][T11001] RIP: 0033:0x7fc1fd78ec29 [ 655.334103][T11001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.334126][T11001] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 655.334149][T11001] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 655.334164][T11001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 655.334178][T11001] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 655.334192][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.334206][T11001] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 655.334236][T11001] [ 658.130358][T11031] ima: policy update failed [ 658.162581][ T30] audit: type=1802 audit(4294967441.940:12): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.969" res=0 errno=0 [ 658.196757][T11031] netlink: 25 bytes leftover after parsing attributes in process `syz.3.969'. [ 659.021845][T11028] FAULT_INJECTION: forcing a failure. [ 659.021845][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 659.118377][T11028] CPU: 0 UID: 0 PID: 11028 Comm: syz.0.967 Not tainted syzkaller #0 PREEMPT(full) [ 659.118410][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 659.118424][T11028] Call Trace: [ 659.118432][T11028] [ 659.118441][T11028] dump_stack_lvl+0x16c/0x1f0 [ 659.118483][T11028] should_fail_ex+0x512/0x640 [ 659.118521][T11028] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 659.118549][T11028] should_failslab+0xc2/0x120 [ 659.118582][T11028] __kmalloc_cache_noprof+0x6a/0x3e0 [ 659.118608][T11028] ? sctp_auth_init+0x30d/0x570 [ 659.118650][T11028] sctp_auth_init+0x30d/0x570 [ 659.118699][T11028] sctp_setsockopt+0xa371/0xb870 [ 659.118729][T11028] ? __pfx_sctp_setsockopt+0x10/0x10 [ 659.118754][T11028] ? find_held_lock+0x2b/0x80 [ 659.118782][T11028] ? aa_sock_opt_perm+0xfd/0x1c0 [ 659.118805][T11028] ? sock_common_setsockopt+0x2e/0xf0 [ 659.118830][T11028] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 659.118859][T11028] do_sock_setsockopt+0xf3/0x1d0 [ 659.118888][T11028] __sys_setsockopt+0x120/0x1a0 [ 659.118928][T11028] __x64_sys_setsockopt+0xbd/0x160 [ 659.118962][T11028] ? do_syscall_64+0x91/0x4c0 [ 659.118981][T11028] ? lockdep_hardirqs_on+0x7c/0x110 [ 659.119016][T11028] do_syscall_64+0xcd/0x4c0 [ 659.119039][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.119064][T11028] RIP: 0033:0x7faed738ec29 [ 659.119082][T11028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.119106][T11028] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 659.119128][T11028] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 659.119143][T11028] RDX: 0000000000000081 RSI: 0000010000000084 RDI: 0000000000000003 [ 659.119157][T11028] RBP: 00007faed7411e41 R08: 0000000000000008 R09: 0000000000000000 [ 659.119172][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.119185][T11028] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 659.119215][T11028] [ 660.524397][T11060] futex_wake_op: syz.1.981 tries to shift op by -9; fix this program [ 661.806556][T11058] vivid-003: ================= START STATUS ================= [ 661.899276][T11058] vivid-003: Radio HW Seek Mode: Bounded [ 662.003989][T11058] vivid-003: Radio Programmable HW Seek: false [ 662.010563][T11058] vivid-003: RDS Rx I/O Mode: Block I/O [ 662.186942][T11058] vivid-003: Generate RBDS Instead of RDS: false [ 662.257458][T11058] vivid-003: RDS Reception: true [ 662.302643][T11058] vivid-003: RDS Program Type: 0 inactive [ 662.355504][T11058] vivid-003: RDS PS Name: inactive [ 662.511121][T11058] vivid-003: RDS Radio Text: inactive [ 662.562229][T11058] vivid-003: RDS Traffic Announcement: false inactive [ 662.682415][T11058] vivid-003: RDS Traffic Program: false inactive [ 662.734299][T11058] vivid-003: RDS Music: false inactive [ 662.772974][T11058] vivid-003: ================== END STATUS ================== [ 665.501022][T11099] serio: Serial port pty6 [ 666.340238][T11115] FAULT_INJECTION: forcing a failure. [ 666.340238][T11115] name failslab, interval 1, probability 0, space 0, times 0 [ 666.494044][T11115] CPU: 0 UID: 0 PID: 11115 Comm: syz.2.980 Not tainted syzkaller #0 PREEMPT(full) [ 666.494078][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 666.494093][T11115] Call Trace: [ 666.494101][T11115] [ 666.494111][T11115] dump_stack_lvl+0x16c/0x1f0 [ 666.494153][T11115] should_fail_ex+0x512/0x640 [ 666.494192][T11115] ? __kmalloc_noprof+0xbf/0x510 [ 666.494223][T11115] ? __register_sysctl_table+0xb3/0x1900 [ 666.494259][T11115] should_failslab+0xc2/0x120 [ 666.494291][T11115] __kmalloc_noprof+0xd2/0x510 [ 666.494327][T11115] __register_sysctl_table+0xb3/0x1900 [ 666.494364][T11115] ? is_module_address+0x5f/0xf0 [ 666.494403][T11115] ? __pfx___register_sysctl_table+0x10/0x10 [ 666.494438][T11115] ? is_module_address+0x69/0xf0 [ 666.494471][T11115] ? register_net_sysctl_sz+0x228/0x3e0 [ 666.494496][T11115] ? __asan_memcpy+0x3c/0x60 [ 666.494523][T11115] xfrm6_net_init+0xf0/0x1c0 [ 666.494549][T11115] ? __pfx_xfrm6_net_init+0x10/0x10 [ 666.494572][T11115] ops_init+0x1df/0x5f0 [ 666.494598][T11115] setup_net+0x10f/0x380 [ 666.494617][T11115] ? lockdep_init_map_type+0x5c/0x280 [ 666.494652][T11115] ? __pfx_setup_net+0x10/0x10 [ 666.494674][T11115] ? debug_mutex_init+0x37/0x70 [ 666.494748][T11115] copy_net_ns+0x2a6/0x5f0 [ 666.494777][T11115] create_new_namespaces+0x3ea/0xa90 [ 666.494812][T11115] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 666.494843][T11115] ksys_unshare+0x45b/0xa40 [ 666.494878][T11115] ? __pfx_ksys_unshare+0x10/0x10 [ 666.494912][T11115] ? xfd_validate_state+0x61/0x180 [ 666.494957][T11115] __x64_sys_unshare+0x31/0x40 [ 666.494989][T11115] do_syscall_64+0xcd/0x4c0 [ 666.495013][T11115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.495038][T11115] RIP: 0033:0x7fc1fd78ec29 [ 666.495056][T11115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.495080][T11115] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 666.495102][T11115] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 666.495118][T11115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 666.495132][T11115] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 666.495146][T11115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.495161][T11115] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 666.495190][T11115] [ 667.764496][T11123] netlink: zone id is out of range [ 667.786781][T11123] netlink: zone id is out of range [ 667.791939][T11123] netlink: zone id is out of range [ 667.823937][T11123] netlink: zone id is out of range [ 667.829099][T11123] netlink: zone id is out of range [ 667.867654][T11123] netlink: zone id is out of range [ 667.923267][T11123] netlink: zone id is out of range [ 667.944050][T11123] netlink: zone id is out of range [ 668.004193][T11123] netlink: zone id is out of range [ 668.037935][T11123] netlink: zone id is out of range [ 668.187542][T11126] FAULT_INJECTION: forcing a failure. [ 668.187542][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 668.269572][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.2.984 Not tainted syzkaller #0 PREEMPT(full) [ 668.269606][T11126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 668.269621][T11126] Call Trace: [ 668.269628][T11126] [ 668.269638][T11126] dump_stack_lvl+0x16c/0x1f0 [ 668.269680][T11126] should_fail_ex+0x512/0x640 [ 668.269718][T11126] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 668.269746][T11126] should_failslab+0xc2/0x120 [ 668.269778][T11126] __kmalloc_cache_noprof+0x6a/0x3e0 [ 668.269804][T11126] ? nd_alloc_stack+0x85/0x110 [ 668.269844][T11126] nd_alloc_stack+0x85/0x110 [ 668.269879][T11126] step_into+0x1ac7/0x2270 [ 668.269909][T11126] ? __pfx_step_into+0x10/0x10 [ 668.269931][T11126] ? __d_lookup+0x266/0x4a0 [ 668.269971][T11126] ? lookup_fast+0x156/0x610 [ 668.269999][T11126] walk_component+0xfc/0x5b0 [ 668.270025][T11126] link_path_walk+0x627/0xe20 [ 668.270060][T11126] path_lookupat+0x15a/0x6d0 [ 668.270085][T11126] ? __lock_acquire+0xb97/0x1ce0 [ 668.270120][T11126] filename_lookup+0x224/0x5f0 [ 668.270149][T11126] ? __pfx_filename_lookup+0x10/0x10 [ 668.270201][T11126] ? getname_flags.part.0+0x1c5/0x550 [ 668.270245][T11126] user_path_at+0x3a/0x60 [ 668.270272][T11126] vfs_open_tree+0x2ca/0x910 [ 668.270303][T11126] ? __pfx_vfs_open_tree+0x10/0x10 [ 668.270333][T11126] ? xfd_validate_state+0x61/0x180 [ 668.270375][T11126] __x64_sys_open_tree+0x84/0x130 [ 668.270407][T11126] do_syscall_64+0xcd/0x4c0 [ 668.270431][T11126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.270462][T11126] RIP: 0033:0x7fc1fd78ec29 [ 668.270481][T11126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.270505][T11126] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 668.270527][T11126] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 668.270543][T11126] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 668.270558][T11126] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 668.270572][T11126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.270586][T11126] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 668.270616][T11126] [ 669.952156][T11139] vivid-003: ================= START STATUS ================= [ 670.020985][T11139] vivid-003: Radio HW Seek Mode: Bounded [ 670.101580][T11142] vivid-007: ================= START STATUS ================= [ 670.201095][T11139] vivid-003: Radio Programmable HW Seek: false [ 670.245797][T11142] vivid-007: Generate PTS: true [ 670.250793][T11142] vivid-007: Generate SCR: true [ 670.319108][T11139] vivid-003: RDS Rx I/O Mode: Block I/O [ 670.404913][T11139] vivid-003: Generate RBDS Instead of RDS: false [ 670.479717][T11142] tpg source WxH: 320x240 (Y'CbCr) [ 670.536837][T11139] vivid-003: RDS Reception: true [ 670.577005][T11142] tpg field: 1 [ 670.601919][T11142] tpg crop: (0,0)/320x240 [ 670.642279][T11139] vivid-003: RDS Program Type: 0 inactive [ 670.671377][T11142] tpg compose: (0,0)/320x240 [ 670.692476][T11140] futex_wake_op: syz.3.987 tries to shift op by -9; fix this program [ 670.726563][T11139] vivid-003: RDS PS Name: inactive [ 670.787320][T11142] tpg colorspace: 8 [ 670.823085][T11139] vivid-003: RDS Radio Text: inactive [ 670.870740][T11142] tpg transfer function: 0/0 [ 670.916623][T11142] tpg Y'CbCr encoding: 0/0 [ 670.956313][T11139] vivid-003: RDS Traffic Announcement: false inactive [ 670.963167][T11139] vivid-003: RDS Traffic Program: false inactive [ 671.069025][T11142] tpg quantization: 0/0 [ 671.073260][T11142] tpg RGB range: 0/2 [ 671.106980][T11142] vivid-007: ================== END STATUS ================== [ 671.170514][T11139] vivid-003: RDS Music: false inactive [ 671.223314][T11139] vivid-003: ================== END STATUS ================== [ 671.643500][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.993'. [ 673.314230][T11173] FAULT_INJECTION: forcing a failure. [ 673.314230][T11173] name failslab, interval 1, probability 0, space 0, times 0 [ 673.392225][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.0.995 Not tainted syzkaller #0 PREEMPT(full) [ 673.392258][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.392272][T11173] Call Trace: [ 673.392280][T11173] [ 673.392289][T11173] dump_stack_lvl+0x16c/0x1f0 [ 673.392336][T11173] should_fail_ex+0x512/0x640 [ 673.392379][T11173] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 673.392415][T11173] should_failslab+0xc2/0x120 [ 673.392448][T11173] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 673.392482][T11173] ? fib_rules_register+0x30/0x500 [ 673.392521][T11173] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 673.392553][T11173] kmemdup_noprof+0x29/0x60 [ 673.392584][T11173] fib_rules_register+0x30/0x500 [ 673.392624][T11173] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 673.392655][T11173] fib6_rules_net_init+0x1f/0x140 [ 673.392685][T11173] ops_init+0x1df/0x5f0 [ 673.392710][T11173] setup_net+0x10f/0x380 [ 673.392728][T11173] ? lockdep_init_map_type+0x5c/0x280 [ 673.392763][T11173] ? __pfx_setup_net+0x10/0x10 [ 673.392786][T11173] ? debug_mutex_init+0x37/0x70 [ 673.392813][T11173] copy_net_ns+0x2a6/0x5f0 [ 673.392840][T11173] create_new_namespaces+0x3ea/0xa90 [ 673.392875][T11173] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 673.392906][T11173] ksys_unshare+0x45b/0xa40 [ 673.392941][T11173] ? __pfx_ksys_unshare+0x10/0x10 [ 673.392986][T11173] ? xfd_validate_state+0x61/0x180 [ 673.393031][T11173] __x64_sys_unshare+0x31/0x40 [ 673.393063][T11173] do_syscall_64+0xcd/0x4c0 [ 673.393087][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.393111][T11173] RIP: 0033:0x7faed738ec29 [ 673.393129][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.393153][T11173] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.393175][T11173] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 673.393190][T11173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 673.393204][T11173] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 673.393222][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.393236][T11173] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 673.393265][T11173] [ 675.276980][T11187] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 675.549341][T11197] futex_wake_op: syz.3.1000 tries to shift op by -9; fix this program [ 678.763380][T11227] FAULT_INJECTION: forcing a failure. [ 678.763380][T11227] name failslab, interval 1, probability 0, space 0, times 0 [ 678.854580][T11227] CPU: 0 UID: 0 PID: 11227 Comm: syz.1.1015 Not tainted syzkaller #0 PREEMPT(full) [ 678.854612][T11227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 678.854627][T11227] Call Trace: [ 678.854634][T11227] [ 678.854643][T11227] dump_stack_lvl+0x16c/0x1f0 [ 678.854693][T11227] should_fail_ex+0x512/0x640 [ 678.854730][T11227] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 678.854758][T11227] should_failslab+0xc2/0x120 [ 678.854791][T11227] __kmalloc_cache_noprof+0x6a/0x3e0 [ 678.854819][T11227] ? fib6_net_init+0x3f9/0xb20 [ 678.854849][T11227] fib6_net_init+0x3f9/0xb20 [ 678.854876][T11227] ? __pfx_fib6_net_init+0x10/0x10 [ 678.854901][T11227] ops_init+0x1df/0x5f0 [ 678.854926][T11227] setup_net+0x10f/0x380 [ 678.854945][T11227] ? lockdep_init_map_type+0x5c/0x280 [ 678.854979][T11227] ? __pfx_setup_net+0x10/0x10 [ 678.855002][T11227] ? debug_mutex_init+0x37/0x70 [ 678.855028][T11227] copy_net_ns+0x2a6/0x5f0 [ 678.855056][T11227] create_new_namespaces+0x3ea/0xa90 [ 678.855090][T11227] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 678.855121][T11227] ksys_unshare+0x45b/0xa40 [ 678.855155][T11227] ? __pfx_ksys_unshare+0x10/0x10 [ 678.855189][T11227] ? xfd_validate_state+0x61/0x180 [ 678.855233][T11227] __x64_sys_unshare+0x31/0x40 [ 678.855266][T11227] do_syscall_64+0xcd/0x4c0 [ 678.855289][T11227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.855313][T11227] RIP: 0033:0x7f0e3bb8ec29 [ 678.855332][T11227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.855356][T11227] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 678.855378][T11227] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 678.855393][T11227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 678.855407][T11227] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 678.855422][T11227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.855436][T11227] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 678.855466][T11227] [ 679.220369][T11234] Console: switching to colour VGA+ 80x25 [ 684.900732][T11298] FAULT_INJECTION: forcing a failure. [ 684.900732][T11298] name failslab, interval 1, probability 0, space 0, times 0 [ 684.999099][T11298] CPU: 0 UID: 0 PID: 11298 Comm: syz.1.1021 Not tainted syzkaller #0 PREEMPT(full) [ 684.999132][T11298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 684.999146][T11298] Call Trace: [ 684.999154][T11298] [ 684.999163][T11298] dump_stack_lvl+0x16c/0x1f0 [ 684.999205][T11298] should_fail_ex+0x512/0x640 [ 684.999244][T11298] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 684.999280][T11298] should_failslab+0xc2/0x120 [ 684.999313][T11298] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 684.999346][T11298] ? fib_rules_register+0x30/0x500 [ 684.999386][T11298] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 684.999423][T11298] kmemdup_noprof+0x29/0x60 [ 684.999457][T11298] fib_rules_register+0x30/0x500 [ 684.999497][T11298] ? __pfx_fib6_rules_net_init+0x10/0x10 [ 684.999527][T11298] fib6_rules_net_init+0x1f/0x140 [ 684.999558][T11298] ops_init+0x1df/0x5f0 [ 684.999583][T11298] setup_net+0x10f/0x380 [ 684.999602][T11298] ? lockdep_init_map_type+0x5c/0x280 [ 684.999637][T11298] ? __pfx_setup_net+0x10/0x10 [ 684.999660][T11298] ? debug_mutex_init+0x37/0x70 [ 684.999687][T11298] copy_net_ns+0x2a6/0x5f0 [ 684.999715][T11298] create_new_namespaces+0x3ea/0xa90 [ 684.999750][T11298] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 684.999780][T11298] ksys_unshare+0x45b/0xa40 [ 684.999815][T11298] ? __pfx_ksys_unshare+0x10/0x10 [ 684.999849][T11298] ? xfd_validate_state+0x61/0x180 [ 684.999893][T11298] __x64_sys_unshare+0x31/0x40 [ 684.999926][T11298] do_syscall_64+0xcd/0x4c0 [ 684.999949][T11298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.999974][T11298] RIP: 0033:0x7f0e3bb8ec29 [ 684.999992][T11298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.000048][T11298] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 685.000070][T11298] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 685.000085][T11298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 685.000099][T11298] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 685.000114][T11298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.000128][T11298] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 685.000158][T11298] [ 685.372793][T11302] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 685.380024][T11302] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 685.386565][T11302] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.932223][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 687.488990][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 687.497682][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 687.683140][T11331] random: crng reseeded on system resumption [ 689.181013][T11358] serio: Serial port pty6 [ 691.669395][T11373] blktrace: Concurrent blktraces are not allowed on ram7 [ 692.661227][T11378] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 692.696791][T11378] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 692.763531][T11378] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 694.364384][T11340] Bluetooth: hci0: command 0x0406 tx timeout [ 694.754254][T11410] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 694.764358][ T5878] Bluetooth: hci2: command 0x0406 tx timeout [ 694.770395][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 695.953050][T11414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 696.287490][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.294113][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.956399][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 703.103148][T11486] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 712.598260][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 712.695908][T11529] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1061'. [ 713.187239][T11531] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 716.190418][T11536] kexec: Could not allocate control_code_buffer [ 716.883610][T11570] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 716.932729][T11569] ima: policy update failed [ 716.987273][ T30] audit: type=1802 audit(4294967500.770:13): pid=11569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1069" res=0 errno=0 [ 717.014036][T11569] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1069'. [ 717.157506][T11558] FAULT_INJECTION: forcing a failure. [ 717.157506][T11558] name failslab, interval 1, probability 0, space 0, times 0 [ 717.668016][T11558] CPU: 0 UID: 0 PID: 11558 Comm: syz.2.1067 Not tainted syzkaller #0 PREEMPT(full) [ 717.668049][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 717.668064][T11558] Call Trace: [ 717.668071][T11558] [ 717.668080][T11558] dump_stack_lvl+0x16c/0x1f0 [ 717.668124][T11558] should_fail_ex+0x512/0x640 [ 717.668163][T11558] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 717.668196][T11558] should_failslab+0xc2/0x120 [ 717.668228][T11558] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 717.668258][T11558] ? __kernfs_iattrs+0x124/0x3e0 [ 717.668290][T11558] __kernfs_iattrs+0x124/0x3e0 [ 717.668319][T11558] ? __pfx___kernfs_iattrs+0x10/0x10 [ 717.668353][T11558] ? down_write+0x14d/0x200 [ 717.668376][T11558] ? inode_newsize_ok+0x13b/0x200 [ 717.668417][T11558] __kernfs_setattr+0x4d/0x3c0 [ 717.668449][T11558] kernfs_iop_setattr+0xda/0x120 [ 717.668480][T11558] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 717.668519][T11558] notify_change+0x6a6/0x1230 [ 717.668569][T11558] do_truncate+0x1d7/0x230 [ 717.668600][T11558] ? __pfx_do_truncate+0x10/0x10 [ 717.668638][T11558] ? mnt_get_write_access+0x20c/0x300 [ 717.668679][T11558] vfs_truncate+0x5d6/0x6e0 [ 717.668710][T11558] ? __pfx_vfs_truncate+0x10/0x10 [ 717.668742][T11558] ? putname+0x154/0x1a0 [ 717.668779][T11558] __x64_sys_truncate+0x172/0x1e0 [ 717.668810][T11558] ? __pfx___x64_sys_truncate+0x10/0x10 [ 717.668851][T11558] do_syscall_64+0xcd/0x4c0 [ 717.668874][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.668899][T11558] RIP: 0033:0x7fc1fd78ec29 [ 717.668918][T11558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.668942][T11558] RSP: 002b:00007fc1fe588038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 717.668964][T11558] RAX: ffffffffffffffda RBX: 00007fc1fd9d5fa0 RCX: 00007fc1fd78ec29 [ 717.668980][T11558] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 717.668994][T11558] RBP: 00007fc1fd811e41 R08: 0000000000000000 R09: 0000000000000000 [ 717.669008][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.669022][T11558] R13: 00007fc1fd9d6038 R14: 00007fc1fd9d5fa0 R15: 00007ffd90372b68 [ 717.669053][T11558] [ 718.175664][T11582] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 720.140056][T11578] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 720.618079][T11613] serio: Serial port pty6 [ 723.833229][T11641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 725.033865][T11647] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input21 [ 732.688213][T11700] ubi0: attaching mtd0 [ 732.692381][T11700] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 742.996384][T11759] FAULT_INJECTION: forcing a failure. [ 742.996384][T11759] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.057298][T11759] CPU: 0 UID: 0 PID: 11759 Comm: syz.1.1100 Not tainted syzkaller #0 PREEMPT(full) [ 743.057336][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 743.057352][T11759] Call Trace: [ 743.057359][T11759] [ 743.057369][T11759] dump_stack_lvl+0x16c/0x1f0 [ 743.057411][T11759] should_fail_ex+0x512/0x640 [ 743.057454][T11759] should_fail_alloc_page+0xe7/0x130 [ 743.057490][T11759] prepare_alloc_pages+0x3c2/0x610 [ 743.057531][T11759] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 743.057561][T11759] ? stack_trace_save+0x8e/0xc0 [ 743.057589][T11759] ? __pfx_stack_trace_save+0x10/0x10 [ 743.057614][T11759] ? rcu_is_watching+0x12/0xc0 [ 743.057638][T11759] ? stack_depot_save_flags+0x29/0x9c0 [ 743.057682][T11759] ? kasan_save_stack+0x42/0x60 [ 743.057708][T11759] ? kasan_save_stack+0x33/0x60 [ 743.057734][T11759] ? kasan_save_track+0x14/0x30 [ 743.057761][T11759] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 743.057790][T11759] ? walk_pgd_range+0x88b/0x1f50 [ 743.057818][T11759] ? walk_page_range_mm+0x461/0xb40 [ 743.057847][T11759] ? madvise_walk_vmas+0x31f/0x9c0 [ 743.057881][T11759] ? madvise_do_behavior+0x1e2/0x530 [ 743.057923][T11759] ? do_madvise+0x176/0x240 [ 743.057954][T11759] ? __x64_sys_madvise+0xa9/0x110 [ 743.057988][T11759] ? do_syscall_64+0xcd/0x4c0 [ 743.058008][T11759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.058046][T11759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.058084][T11759] ? policy_nodemask+0xea/0x4e0 [ 743.058118][T11759] alloc_pages_mpol+0x1fb/0x550 [ 743.058152][T11759] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 743.058192][T11759] alloc_pages_noprof+0x131/0x390 [ 743.058225][T11759] pte_alloc_one+0x1c/0x3a0 [ 743.058252][T11759] __pte_alloc+0x6d/0x3c0 [ 743.058285][T11759] ? __pfx___pte_alloc+0x10/0x10 [ 743.058318][T11759] ? _raw_spin_unlock+0x28/0x50 [ 743.058349][T11759] ? __pmd_alloc+0x3fb/0x930 [ 743.058388][T11759] walk_pgd_range+0xb84/0x1f50 [ 743.058422][T11759] ? __pfx_guard_install_set_pte+0x10/0x10 [ 743.058454][T11759] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 743.058490][T11759] ? __pfx_guard_install_set_pte+0x10/0x10 [ 743.058526][T11759] ? __pfx_guard_install_set_pte+0x10/0x10 [ 743.058565][T11759] ? __pfx_guard_install_set_pte+0x10/0x10 [ 743.058599][T11759] ? __pfx_walk_pgd_range+0x10/0x10 [ 743.058638][T11759] __walk_page_range+0x163/0x820 [ 743.058670][T11759] ? find_vma+0xbf/0x140 [ 743.058701][T11759] ? __pfx_find_vma+0x10/0x10 [ 743.058736][T11759] ? walk_page_test+0x9b/0x180 [ 743.058766][T11759] walk_page_range_mm+0x461/0xb40 [ 743.058802][T11759] ? __pfx_walk_page_range_mm+0x10/0x10 [ 743.058841][T11759] ? __anon_vma_prepare+0x2e2/0x5e0 [ 743.058871][T11759] madvise_vma_behavior+0xa62/0x2d60 [ 743.058917][T11759] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 743.058954][T11759] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 743.058992][T11759] ? __pfx_mas_prev+0x10/0x10 [ 743.059037][T11759] ? find_vma_prev+0xda/0x160 [ 743.059070][T11759] ? find_held_lock+0x2b/0x80 [ 743.059094][T11759] ? __pfx_find_vma_prev+0x10/0x10 [ 743.059130][T11759] ? futex_unqueue+0x133/0x2c0 [ 743.059171][T11759] ? __futex_wait+0x24c/0x2f0 [ 743.059212][T11759] madvise_walk_vmas+0x31f/0x9c0 [ 743.059253][T11759] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 743.059297][T11759] madvise_do_behavior+0x1e2/0x530 [ 743.059331][T11759] ? futex_private_hash_put+0x18a/0x300 [ 743.059361][T11759] ? __pfx_madvise_do_behavior+0x10/0x10 [ 743.059399][T11759] ? down_read+0x13d/0x480 [ 743.059436][T11759] do_madvise+0x176/0x240 [ 743.059472][T11759] ? __pfx_do_madvise+0x10/0x10 [ 743.059505][T11759] ? do_futex+0x122/0x350 [ 743.059555][T11759] ? xfd_validate_state+0x61/0x180 [ 743.059589][T11759] ? __pfx_ksys_write+0x10/0x10 [ 743.059623][T11759] __x64_sys_madvise+0xa9/0x110 [ 743.059657][T11759] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.059693][T11759] do_syscall_64+0xcd/0x4c0 [ 743.059716][T11759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.059741][T11759] RIP: 0033:0x7f0e3bb8ec29 [ 743.059761][T11759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.059785][T11759] RSP: 002b:00007f0e3cad5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 743.059808][T11759] RAX: ffffffffffffffda RBX: 00007f0e3bdd5fa0 RCX: 00007f0e3bb8ec29 [ 743.059824][T11759] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 743.059839][T11759] RBP: 00007f0e3bc11e41 R08: 0000000000000000 R09: 0000000000000000 [ 743.059854][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.059868][T11759] R13: 00007f0e3bdd6038 R14: 00007f0e3bdd5fa0 R15: 00007ffd81645da8 [ 743.059911][T11759] [ 744.548575][ T30] audit: type=1800 audit(4294967528.290:14): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1100" name="features" dev="configfs" ino=142436 res=0 errno=0 [ 745.182239][T11777] netlink: 'syz.0.1104': attribute type 28 has an invalid length. [ 745.216909][T11777] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1104'. [ 748.747095][T11794] serio: Serial port pty6 [ 750.458387][T11812] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 757.755474][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.762130][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 763.275140][T11865] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 767.390912][T11899] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 768.704423][T11906] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 768.787773][T11908] Process accounting resumed [ 769.634676][T11912] FAULT_INJECTION: forcing a failure. [ 769.634676][T11912] name failslab, interval 1, probability 0, space 0, times 0 [ 769.682936][T11912] CPU: 0 UID: 0 PID: 11912 Comm: syz.0.1134 Not tainted syzkaller #0 PREEMPT(full) [ 769.682981][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 769.682995][T11912] Call Trace: [ 769.683003][T11912] [ 769.683011][T11912] dump_stack_lvl+0x16c/0x1f0 [ 769.683054][T11912] should_fail_ex+0x512/0x640 [ 769.683092][T11912] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 769.683120][T11912] should_failslab+0xc2/0x120 [ 769.683153][T11912] __kmalloc_cache_noprof+0x6a/0x3e0 [ 769.683176][T11912] ? lockdep_init_map_type+0x5c/0x280 [ 769.683210][T11912] ? nci_hci_allocate+0x45/0x330 [ 769.683252][T11912] nci_hci_allocate+0x45/0x330 [ 769.683290][T11912] nci_allocate_device+0x26f/0x430 [ 769.683323][T11912] virtual_ncidev_open+0x6f/0x220 [ 769.683355][T11912] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 769.683386][T11912] misc_open+0x35a/0x420 [ 769.683416][T11912] ? __pfx_misc_open+0x10/0x10 [ 769.683445][T11912] chrdev_open+0x231/0x6a0 [ 769.683476][T11912] ? __pfx_apparmor_file_open+0x10/0x10 [ 769.683513][T11912] ? __pfx_chrdev_open+0x10/0x10 [ 769.683547][T11912] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 769.683582][T11912] do_dentry_open+0x97f/0x1530 [ 769.683614][T11912] ? __pfx_chrdev_open+0x10/0x10 [ 769.683665][T11912] vfs_open+0x82/0x3f0 [ 769.683706][T11912] path_openat+0x1de4/0x2cb0 [ 769.683746][T11912] ? __pfx_path_openat+0x10/0x10 [ 769.683788][T11912] do_filp_open+0x20b/0x470 [ 769.683817][T11912] ? __pfx_do_filp_open+0x10/0x10 [ 769.683867][T11912] ? alloc_fd+0x471/0x7d0 [ 769.683901][T11912] do_sys_openat2+0x11b/0x1d0 [ 769.683939][T11912] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.683989][T11912] __x64_sys_openat+0x174/0x210 [ 769.684011][T11912] ? __pfx___x64_sys_openat+0x10/0x10 [ 769.684045][T11912] do_syscall_64+0xcd/0x4c0 [ 769.684069][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.684094][T11912] RIP: 0033:0x7faed738ec29 [ 769.684113][T11912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.684137][T11912] RSP: 002b:00007faed8206038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 769.684159][T11912] RAX: ffffffffffffffda RBX: 00007faed75d6090 RCX: 00007faed738ec29 [ 769.684175][T11912] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 769.684191][T11912] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 769.684206][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.684220][T11912] R13: 00007faed75d6128 R14: 00007faed75d6090 R15: 00007fffb094c968 [ 769.684251][T11912] [ 772.815475][T11946] Invalid ELF header magic: != ELF [ 774.280246][T11962] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 774.372643][T11962] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 774.449625][T11962] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 774.757814][T11970] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 775.447982][ T30] audit: type=1800 audit(4294967559.230:15): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1138" name="features" dev="configfs" ino=143301 res=0 errno=0 [ 776.022727][T11630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 776.033331][T11630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 776.041834][T11630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 776.054313][T11630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 776.063147][T11630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 776.812822][T11985] chnl_net:caif_netlink_parms(): no params data found [ 777.130763][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.154094][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.174056][T11985] bridge_slave_0: entered allmulticast mode [ 777.193376][T11985] bridge_slave_0: entered promiscuous mode [ 777.217288][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.232439][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.250439][T11985] bridge_slave_1: entered allmulticast mode [ 777.272462][T11985] bridge_slave_1: entered promiscuous mode [ 777.501031][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.563485][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.950683][T11985] team0: Port device team_slave_0 added [ 778.005095][T11985] team0: Port device team_slave_1 added [ 778.125797][T11630] Bluetooth: hci4: command tx timeout [ 778.299665][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.339791][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.485699][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.549450][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.585809][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.746401][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.225162][T11985] hsr_slave_0: entered promiscuous mode [ 779.266218][T11985] hsr_slave_1: entered promiscuous mode [ 779.272521][T11985] debugfs: 'hsr0' already exists in 'hsr' [ 779.347302][T11985] Cannot create hsr debugfs directory [ 779.534233][T12013] FAULT_INJECTION: forcing a failure. [ 779.534233][T12013] name fail_futex, interval 1, probability 0, space 0, times 0 [ 779.655753][T12013] CPU: 0 UID: 0 PID: 12013 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 779.655788][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 779.655803][T12013] Call Trace: [ 779.655810][T12013] [ 779.655820][T12013] dump_stack_lvl+0x16c/0x1f0 [ 779.655863][T12013] should_fail_ex+0x512/0x640 [ 779.655907][T12013] get_futex_key+0x1d0/0x1560 [ 779.655941][T12013] ? __pfx_get_futex_key+0x10/0x10 [ 779.655974][T12013] ? __lock_acquire+0x62e/0x1ce0 [ 779.656011][T12013] futex_wake+0xea/0x530 [ 779.656050][T12013] ? __pfx_futex_wake+0x10/0x10 [ 779.656091][T12013] ? mntput_no_expire+0x14f/0xd30 [ 779.656121][T12013] do_futex+0x1e3/0x350 [ 779.656160][T12013] ? __pfx_do_futex+0x10/0x10 [ 779.656188][T12013] ? __pfx_mntput_no_expire+0x10/0x10 [ 779.656214][T12013] ? dput.part.0+0xce/0x9b0 [ 779.656253][T12013] __x64_sys_futex+0x1e0/0x4c0 [ 779.656286][T12013] ? mntput+0x6b/0x90 [ 779.656308][T12013] ? __pfx___x64_sys_futex+0x10/0x10 [ 779.656340][T12013] ? __pfx___x64_sys_truncate+0x10/0x10 [ 779.656380][T12013] do_syscall_64+0xcd/0x4c0 [ 779.656404][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.656429][T12013] RIP: 0033:0x7faed738ec29 [ 779.656447][T12013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.656471][T12013] RSP: 002b:00007faed82270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 779.656493][T12013] RAX: ffffffffffffffda RBX: 00007faed75d5fa8 RCX: 00007faed738ec29 [ 779.656508][T12013] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faed75d5fac [ 779.656523][T12013] RBP: 00007faed75d5fa0 R08: 00007faed8228000 R09: 0000000000000000 [ 779.656538][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.656552][T12013] R13: 00007faed75d6038 R14: 00007fffb094c880 R15: 00007fffb094c968 [ 779.656582][T12013] [ 780.254454][T11630] Bluetooth: hci4: command tx timeout [ 781.253392][T11985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 781.301400][T11985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 781.387267][T11985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 781.420859][T11985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 781.770870][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.847555][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.911114][T11627] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.918329][T11627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.969247][T11627] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.976563][T11627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.229493][T12025] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 782.286645][T11630] Bluetooth: hci4: command tx timeout [ 783.394005][T12029] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 783.630692][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.368541][T11630] Bluetooth: hci4: command tx timeout [ 784.979526][T11985] veth0_vlan: entered promiscuous mode [ 785.032020][T11985] veth1_vlan: entered promiscuous mode [ 785.153085][T11985] veth0_macvtap: entered promiscuous mode [ 785.267851][T11985] veth1_macvtap: entered promiscuous mode [ 785.358344][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.425783][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.500245][T11644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.552450][T11644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.619582][T11644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.666892][T11644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.059039][T11694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.136758][T11694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.355217][T11644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.411340][T11644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.894165][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 791.640243][ T30] audit: type=1800 audit(4294967575.420:16): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1155" name="dbroot" dev="configfs" ino=144421 res=0 errno=0 [ 792.070412][ T30] audit: type=1800 audit(4294967575.850:17): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=144442 res=0 errno=0 [ 794.597110][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 797.988781][T12193] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 802.523012][T12236] net_ratelimit: 19 callbacks suppressed [ 802.523033][T12236] openvswitch: netlink: IPv4 tunnel dst address is zero [ 803.791824][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 805.011317][ T30] audit: type=1800 audit(4294967588.790:18): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1178" name="dbroot" dev="configfs" ino=144777 res=0 errno=0 [ 809.739804][T12311] FAULT_INJECTION: forcing a failure. [ 809.739804][T12311] name failslab, interval 1, probability 0, space 0, times 0 [ 809.813979][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.4.1189 Not tainted syzkaller #0 PREEMPT(full) [ 809.814012][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 809.814026][T12311] Call Trace: [ 809.814034][T12311] [ 809.814043][T12311] dump_stack_lvl+0x16c/0x1f0 [ 809.814085][T12311] should_fail_ex+0x512/0x640 [ 809.814123][T12311] ? fs_reclaim_acquire+0xae/0x150 [ 809.814172][T12311] should_failslab+0xc2/0x120 [ 809.814205][T12311] __kmalloc_cache_noprof+0x6a/0x3e0 [ 809.814230][T12311] ? find_held_lock+0x2b/0x80 [ 809.814254][T12311] ? tomoyo_open_control+0x56/0xa30 [ 809.814282][T12311] tomoyo_open_control+0x56/0xa30 [ 809.814309][T12311] do_dentry_open+0x97f/0x1530 [ 809.814340][T12311] ? __pfx_tomoyo_open+0x10/0x10 [ 809.814381][T12311] vfs_open+0x82/0x3f0 [ 809.814420][T12311] path_openat+0x1de4/0x2cb0 [ 809.814459][T12311] ? __pfx_path_openat+0x10/0x10 [ 809.814495][T12311] do_filp_open+0x20b/0x470 [ 809.814524][T12311] ? __pfx_do_filp_open+0x10/0x10 [ 809.814573][T12311] ? alloc_fd+0x471/0x7d0 [ 809.814607][T12311] do_sys_openat2+0x11b/0x1d0 [ 809.814644][T12311] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.814693][T12311] __x64_sys_openat+0x174/0x210 [ 809.814715][T12311] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.814748][T12311] do_syscall_64+0xcd/0x4c0 [ 809.814771][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.814797][T12311] RIP: 0033:0x7f2e7d78ec29 [ 809.814816][T12311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.814838][T12311] RSP: 002b:00007f2e7e63b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.814861][T12311] RAX: ffffffffffffffda RBX: 00007f2e7d9d5fa0 RCX: 00007f2e7d78ec29 [ 809.814877][T12311] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 809.814892][T12311] RBP: 00007f2e7d811e41 R08: 0000000000000000 R09: 0000000000000000 [ 809.814907][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.814920][T12311] R13: 00007f2e7d9d6038 R14: 00007f2e7d9d5fa0 R15: 00007ffd53f78c18 [ 809.814950][T12311] [ 810.033951][ C0] vkms_vblank_simulate: vblank timer overrun [ 811.148774][ T30] audit: type=1326 audit(4294967594.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12327 comm="syz.4.1191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2e7d78ec29 code=0x0 [ 813.588453][T12349] nbd: nbd7 already in use [ 815.864063][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 817.156196][ T30] audit: type=1800 audit(4294967600.940:20): pid=12390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1201" name="dbroot" dev="configfs" ino=145260 res=0 errno=0 [ 819.185813][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.192158][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.495040][T12447] openvswitch: netlink: IPv4 tunnel dst address is zero [ 823.990000][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'. [ 825.335815][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 826.828686][ T30] audit: type=1800 audit(4294967610.610:21): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1216" name="dbroot" dev="configfs" ino=145710 res=0 errno=0 [ 832.188382][T12544] FAULT_INJECTION: forcing a failure. [ 832.188382][T12544] name failslab, interval 1, probability 0, space 0, times 0 [ 832.270224][T12544] CPU: 0 UID: 0 PID: 12544 Comm: syz.0.1236 Not tainted syzkaller #0 PREEMPT(full) [ 832.270258][T12544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 832.270273][T12544] Call Trace: [ 832.270281][T12544] [ 832.270289][T12544] dump_stack_lvl+0x16c/0x1f0 [ 832.270332][T12544] should_fail_ex+0x512/0x640 [ 832.270370][T12544] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 832.270402][T12544] should_failslab+0xc2/0x120 [ 832.270435][T12544] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 832.270463][T12544] ? d_instantiate+0x77/0x90 [ 832.270494][T12544] ? alloc_empty_file+0x55/0x1e0 [ 832.270534][T12544] alloc_empty_file+0x55/0x1e0 [ 832.270571][T12544] alloc_file_pseudo+0x13a/0x230 [ 832.270609][T12544] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 832.270646][T12544] ? security_inode_init_security_anon+0x79/0x240 [ 832.270683][T12544] __anon_inode_getfile+0xe8/0x280 [ 832.270712][T12544] ? _copy_to_user+0x48/0xd0 [ 832.270739][T12544] io_uring_setup+0x1511/0x20c0 [ 832.270778][T12544] ? __pfx_io_uring_setup+0x10/0x10 [ 832.270833][T12544] ? xfd_validate_state+0x61/0x180 [ 832.270884][T12544] __x64_sys_io_uring_setup+0xc2/0x170 [ 832.270921][T12544] do_syscall_64+0xcd/0x4c0 [ 832.270945][T12544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.270970][T12544] RIP: 0033:0x7faed738ec29 [ 832.270988][T12544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.271012][T12544] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 832.271034][T12544] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 832.271050][T12544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 832.271064][T12544] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 832.271078][T12544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.271092][T12544] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 832.271121][T12544] [ 832.747214][ T30] audit: type=1326 audit(4294967616.500:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12550 comm="syz.0.1229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faed738ec29 code=0x0 [ 834.584018][T12569] nbd: nbd7 already in use [ 835.769463][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1235'. [ 836.994852][ T30] audit: type=1800 audit(4294967620.780:23): pid=12595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1235" name="dbroot" dev="configfs" ino=146124 res=0 errno=0 [ 845.305958][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 845.364369][T12709] ipvlan0: entered promiscuous mode [ 845.412370][T12709] ipvlan0: entered allmulticast mode [ 845.466898][T12709] veth0_vlan: entered allmulticast mode [ 846.433652][T12725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 850.393430][T12764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 850.412944][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1265'. [ 850.444495][T12764] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 850.451509][T12764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 850.507860][T12764] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 850.554265][T12764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 850.634000][T12764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 850.761502][T12778] XFS: Clearing xfsstats [ 851.547317][ T30] audit: type=1800 audit(4294967311.330:24): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1265" name="dbroot" dev="configfs" ino=146785 res=0 errno=0 [ 851.973575][T12791] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 852.124490][T11669] Bluetooth: hci0: command 0x0406 tx timeout [ 852.531596][T11669] Bluetooth: hci4: command 0x0c1a tx timeout [ 852.537731][T11630] Bluetooth: hci2: command 0x0406 tx timeout [ 852.544464][T11630] Bluetooth: hci1: command 0x0406 tx timeout [ 854.603999][T12812] Bluetooth: hci4: command 0x0c1a tx timeout [ 856.683996][T12812] Bluetooth: hci4: command 0x0c1a tx timeout [ 856.894638][T12839] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1274'. [ 857.342170][T12843] kexec: Could not allocate control_code_buffer [ 860.997137][T12914] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 861.635914][T12925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1289'. [ 862.594314][T12931] FAULT_INJECTION: forcing a failure. [ 862.594314][T12931] name failslab, interval 1, probability 0, space 0, times 0 [ 862.682365][T12931] CPU: 0 UID: 0 PID: 12931 Comm: syz.0.1292 Not tainted syzkaller #0 PREEMPT(full) [ 862.682399][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 862.682414][T12931] Call Trace: [ 862.682422][T12931] [ 862.682430][T12931] dump_stack_lvl+0x16c/0x1f0 [ 862.682472][T12931] should_fail_ex+0x512/0x640 [ 862.682509][T12931] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 862.682538][T12931] should_failslab+0xc2/0x120 [ 862.682570][T12931] __kmalloc_cache_noprof+0x6a/0x3e0 [ 862.682596][T12931] ? usbdev_open+0x9d/0x8b0 [ 862.682630][T12931] usbdev_open+0x9d/0x8b0 [ 862.682661][T12931] ? kobject_get_unless_zero+0x156/0x1e0 [ 862.682685][T12931] ? __pfx_usbdev_open+0x10/0x10 [ 862.682726][T12931] ? chrdev_open+0x10b/0x6a0 [ 862.682762][T12931] ? __pfx_usbdev_open+0x10/0x10 [ 862.682793][T12931] chrdev_open+0x231/0x6a0 [ 862.682823][T12931] ? __pfx_apparmor_file_open+0x10/0x10 [ 862.682851][T12931] ? __pfx_chrdev_open+0x10/0x10 [ 862.682885][T12931] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 862.682918][T12931] do_dentry_open+0x97f/0x1530 [ 862.682948][T12931] ? __pfx_chrdev_open+0x10/0x10 [ 862.682985][T12931] vfs_open+0x82/0x3f0 [ 862.683024][T12931] path_openat+0x1de4/0x2cb0 [ 862.683062][T12931] ? __pfx_path_openat+0x10/0x10 [ 862.683098][T12931] do_filp_open+0x20b/0x470 [ 862.683128][T12931] ? __pfx_do_filp_open+0x10/0x10 [ 862.683177][T12931] ? alloc_fd+0x471/0x7d0 [ 862.683211][T12931] do_sys_openat2+0x11b/0x1d0 [ 862.683248][T12931] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.683287][T12931] ? __pfx___might_resched+0x10/0x10 [ 862.683319][T12931] __x64_sys_openat+0x174/0x210 [ 862.683341][T12931] ? __pfx___x64_sys_openat+0x10/0x10 [ 862.683374][T12931] do_syscall_64+0xcd/0x4c0 [ 862.683397][T12931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.683422][T12931] RIP: 0033:0x7faed738ec29 [ 862.683440][T12931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.683463][T12931] RSP: 002b:00007faed8227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 862.683485][T12931] RAX: ffffffffffffffda RBX: 00007faed75d5fa0 RCX: 00007faed738ec29 [ 862.683501][T12931] RDX: 0000000000040101 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 862.683516][T12931] RBP: 00007faed7411e41 R08: 0000000000000000 R09: 0000000000000000 [ 862.683530][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.683544][T12931] R13: 00007faed75d6038 R14: 00007faed75d5fa0 R15: 00007fffb094c968 [ 862.683573][T12931] [ 863.666515][T12949] random: crng reseeded on system resumption [ 873.895814][ T30] audit: type=1800 audit(4294967300.170:25): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1309" name="dbroot" dev="configfs" ino=147697 res=0 errno=0 [ 875.490907][ T31] INFO: task kworker/u8:4:8310 blocked for more than 143 seconds. [ 875.499389][ T31] Not tainted syzkaller #0 [ 875.513795][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 875.571485][ T31] task:kworker/u8:4 state:D stack:25080 pid:8310 tgid:8310 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 875.657135][T13084] futex_wake_op: syz.0.1313 tries to shift op by -9; fix this program [ 875.706658][ T31] Workqueue: netns cleanup_net [ 875.711502][ T31] Call Trace: [ 875.750919][ T31] [ 875.781470][ T31] __schedule+0x1190/0x5de0 [ 875.816594][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 875.858881][ T31] ? __pfx___schedule+0x10/0x10 [ 875.898943][ T31] ? find_held_lock+0x2b/0x80 [ 875.903685][ T31] ? schedule+0x2d7/0x3a0 [ 875.962740][ T31] schedule+0xe7/0x3a0 [ 876.004030][ T31] schedule_timeout+0x257/0x290 [ 876.008972][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 876.093530][ T31] ? mark_held_locks+0x49/0x80 [ 876.115999][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 876.121539][ T31] __wait_for_common+0x2fc/0x4e0 [ 876.213912][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 876.219368][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 876.271177][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 876.315405][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 876.321299][ T31] __flush_workqueue+0x3e2/0x1230 [ 876.383940][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 876.416911][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 876.422309][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 876.489161][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 876.519487][ T31] rds_tcp_listen_stop+0x104/0x150 [ 876.556883][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 876.603552][ T31] rds_tcp_exit_net+0xcb/0x810 [ 876.613671][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 876.661189][ T31] ? __pfx___might_resched+0x10/0x10 [ 876.697661][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 876.703185][ T31] ops_undo_list+0x2eb/0xab0 [ 876.768977][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 876.803799][ T31] ? cleanup_net+0x334/0x890 [ 876.828866][ T31] ? idr_destroy+0x62/0x2e0 [ 876.873870][ T31] cleanup_net+0x408/0x890 [ 876.878400][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 876.883492][ T31] ? rcu_is_watching+0x12/0xc0 [ 876.949540][ T31] process_one_work+0x9cf/0x1b70 [ 876.996223][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 877.001505][ T31] ? __pfx_process_one_work+0x10/0x10 [ 877.048114][ T31] ? assign_work+0x1a0/0x250 [ 877.052999][ T31] worker_thread+0x6c8/0xf10 [ 877.152054][ T31] ? __kthread_parkme+0x19e/0x250 [ 877.220185][ T31] ? __pfx_worker_thread+0x10/0x10 [ 877.279090][ T31] kthread+0x3c5/0x780 [ 877.283254][ T31] ? __pfx_kthread+0x10/0x10 [ 877.343813][ T31] ? rcu_is_watching+0x12/0xc0 [ 877.348646][ T31] ? __pfx_kthread+0x10/0x10 [ 877.353331][ T31] ret_from_fork+0x56d/0x730 [ 877.413801][ T31] ? __pfx_kthread+0x10/0x10 [ 877.418486][ T31] ret_from_fork_asm+0x1a/0x30 [ 877.423305][ T31] [ 877.456760][ T31] [ 877.456760][ T31] Showing all locks held in the system: [ 877.527682][ T31] 1 lock held by khungtaskd/31: [ 877.532601][ T31] #0: ffffffff8e5c1420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 877.756632][ T31] 1 lock held by syz-executor/5863: [ 877.761919][ T31] 1 lock held by syz-executor/5870: [ 877.854362][ T31] 3 locks held by kworker/u8:4/8310: [ 877.859795][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 877.969244][ T31] #1: ffffc900037e7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 878.027302][ T31] #2: ffffffff90372890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 878.103807][ T31] 2 locks held by getty/10914: [ 878.108620][ T31] #0: ffff8880314e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 878.213863][ T31] #1: ffffc90002f302f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 878.284162][ T31] 1 lock held by syz.1.1114/11849: [ 878.289929][ T31] #0: ffffffff90372890 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 878.370019][ T31] [ 878.372431][ T31] ============================================= [ 878.372431][ T31] [ 878.467791][ T31] NMI backtrace for cpu 0 [ 878.467813][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 878.467840][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 878.467854][ T31] Call Trace: [ 878.467861][ T31] [ 878.467870][ T31] dump_stack_lvl+0x116/0x1f0 [ 878.467912][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 878.467938][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 878.467972][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 878.468007][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 878.468039][ T31] watchdog+0xf0e/0x1260 [ 878.468077][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.468109][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.468146][ T31] ? __kthread_parkme+0x19e/0x250 [ 878.468182][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.468216][ T31] kthread+0x3c5/0x780 [ 878.468251][ T31] ? __pfx_kthread+0x10/0x10 [ 878.468287][ T31] ? rcu_is_watching+0x12/0xc0 [ 878.468311][ T31] ? __pfx_kthread+0x10/0x10 [ 878.468346][ T31] ret_from_fork+0x56d/0x730 [ 878.468382][ T31] ? __pfx_kthread+0x10/0x10 [ 878.468417][ T31] ret_from_fork_asm+0x1a/0x30 [ 878.468458][ T31] [ 878.468474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 878.591357][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 878.600484][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 878.610563][ T31] Call Trace: [ 878.613854][ T31] [ 878.616800][ T31] dump_stack_lvl+0x3d/0x1f0 [ 878.621421][ T31] vpanic+0x6e8/0x7a0 [ 878.625467][ T31] ? __pfx_vpanic+0x10/0x10 [ 878.630005][ T31] panic+0xca/0xd0 [ 878.633754][ T31] ? __pfx_panic+0x10/0x10 [ 878.638199][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 878.643937][ T31] ? irq_work_queue+0xce/0x100 [ 878.648836][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 878.654842][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 878.660261][ T31] ? watchdog+0xd78/0x1260 [ 878.664721][ T31] ? watchdog+0xd6b/0x1260 [ 878.669165][ T31] watchdog+0xd89/0x1260 [ 878.673485][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.678200][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.683459][ T31] ? __kthread_parkme+0x19e/0x250 [ 878.688531][ T31] ? __pfx_watchdog+0x10/0x10 [ 878.693266][ T31] kthread+0x3c5/0x780 [ 878.697363][ T31] ? __pfx_kthread+0x10/0x10 [ 878.702073][ T31] ? rcu_is_watching+0x12/0xc0 [ 878.706888][ T31] ? __pfx_kthread+0x10/0x10 [ 878.711620][ T31] ret_from_fork+0x56d/0x730 [ 878.716325][ T31] ? __pfx_kthread+0x10/0x10 [ 878.721055][ T31] ret_from_fork_asm+0x1a/0x30 [ 878.725853][ T31] [ 878.728946][ T31] Kernel Offset: disabled [ 878.733284][ T31] Rebooting in 86400 seconds..