last executing test programs: 3.858618248s ago: executing program 2 (id=637): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10) listmount$auto(0x0, 0x0, 0xf4240, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[@ANYBLOB="04290000", @ANYRES16=r0, @ANYBLOB="040029bd7000fedbdf25110000000a0018008765839be1d1000005009200050000002800c500d19f3b98daeb63ec0a45156a38993e14fc3f2accabf37e8c522d8058e434ecc56b0794e50800c400090000000500ee0034000000b900a68008005d00", @ANYRES32=r1, @ANYBLOB="62062d85ec59fc419223eb9fe14adf19dbaf624c58680e99c932dcd09c98197b25fd46d83cbafa8e24dd3e9f9c2ecd2127a29fd6b55a5536d4ccdf7b89691028836787505d5bc59ffd61160bba61388d6184f77870b101ef0837937cc3e4d07843c7efc8450c4ab80b5e22fb69093b9d31274869270cb7e18539102f865d39726027817cf9e3f1b75d7908f259428ede0ebccf3ec3b82c4604fe8d6fb83551c18f9c4d84fadf2b0647de9d30d00000001000b000d366b7db35437c4dea30f43bcf276e8027251980a424fd801000398008001c00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0c00598008002000", @ANYRES32=0x0, @ANYBLOB="04000d8014002300000000000000000000000000000000018400350018e40fba9258c1fdd520bfd70adeea7d25d9f39d58324ced0288a54d0084e98816428ba1f18a6b9c6cf03844b23ef7eb3bdea4fef042b62c495a21528aaac24782796c1184a0f0e6b849596dda5811f1a6eaff6ffb35b8439ddbf5c81164a6f7471bf433a9f13d8c4610136023b4eb0e4ad9e497ef02b28833dc8e12ab59d02c000800230107ef0000"], 0x2904}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r2, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/personality\x00', 0x8002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pppol2tp\x00', 0x40280, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000300)=""/251, 0xfb) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fb\x00', 0x40080, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 3.709772594s ago: executing program 3 (id=638): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\x00', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000001a80)='#(//\x00', 0x353) unshare$auto(0x40000080) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_active\x00', 0x80, 0x0) unshare$auto(0x40000080) r2 = open(&(0x7f0000000280)='./file0\x00', 0x105ac2, 0xe1d2b27bdc14abae) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4f64a1d2) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) 3.617402682s ago: executing program 2 (id=639): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xa, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x286c83, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) getsockopt$auto(r2, 0x0, 0x8, &(0x7f0000000100)='&!$:\')]\x00', &(0x7f0000000140)=0xffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xd, r4, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000005c0)={{@raw=0x1000, 0x3, 0x4, 0x10000, "4458b44b42a5e13a2aa6b4f8c04b019b4e2d33aaf762cd4ac60f6ae5aee5f0d4d83655dfebc6008f5b392926", @inferred=r4}, 0x1, @integer64=@value_ptr=&(0x7f0000000400), "62aee9689e613b4079257546164ea6509e0b48ace9466e437f5ceb7601f79e581a37c05654e63eb3875fa3ab4b6b1c1233813a247dbdfd144c5a3e2cd59e17f5d86124072550734935369300a8c9f8773dc6067f808284c66a9d095d889a5044be10ed5c1ff698848aa4059fa03571ee89dc72c308b96ead4f10848fb6b96e2c"}) madvise$auto(0x0, 0x2003f0, 0x15) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="08000c01", @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xcc, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@nested={0x18, 0x52, 0x0, 0x1, [@typed={0xfffffffffffffd21, 0x62, 0x0, 0x0, @ipv6=@loopback}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x98, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x7a, 0x5, "d3d777f9a5109fabf13273ba1d7b4a916e7978e9abe58442f4fa4361ecdbfee56bf048883af9c8fb0ecd70385c449db37a46d43a4e09df97a0245fc6d7953c8a416ce31a96f6ff64780d0affedea5927af24111e7987360ad85129a9a9d7719304feea0b20edc98568c0d9491316d5604b0cacc08687"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x240000c0) 3.292450874s ago: executing program 2 (id=641): r0 = socket(0x2, 0x2, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/dev/tty/legacy_tiocsti\x00', 0x101002, 0x0) write$auto(r1, 0x0, 0x73) r2 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1016, r0, 0xf23, r0}, 0x10) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x10442, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000300)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r7 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/o2hb/livenodes\x00', 0x480001, 0x0) sendmsg$auto(r7, &(0x7f00000005c0)={&(0x7f00000003c0)="7e0d0c886e305d861899ed12a5afd1ad1596594acd587b51be27c00d55e2877d0de5559f53d2403d4b110ac792c77460d67ebf20233a66e0ac13b448c9f4b7af8fcc2f439a443225205f5817b86468278bfd3d2c7cfed097199293097bfdd40c46e7693e4628b9bbe81e99a9f79b5d2562524a49ee16b37000de403ba216f8c65f035f74d498698913f7434be85aae92005609db106ceb24d3aa2be81fe81ecefd", 0xe93d, &(0x7f0000000540)={&(0x7f0000000480)="fe311c203e2638e57fe98034a3d86f03d41f844287d91eceb298bd8a52b1fa7f5f076cefce79fa07ff8ce659caadeed66fd5b4866466dff25e97a75e79bcd386af7ce5df12e55037635b2054ba5ed344fe037179c99c500266229226dbbe94e251a45ee88431b49f907793ab6004d5f125922d3c79be90945bd42c8e490d4fcf266cc4ca5fd067ef5cc28382a1ad1a19eea04b59109bebb6c5074df22a1cf2f1cecc0bf57ff14c6be3", 0x9}, 0xffff, &(0x7f0000000580)="607b8d32f32aac57adb62c55a5067493ac33210a6209f9d5427fe59bdebc258d413401b36dd96ad8c81099b9491e1ad5b7c916207c", 0x1, 0x7}, 0x8) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000700)=@info={r7, 0x0, 0x9}, 0x6) r8 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x3, &(0x7f0000000300)="12937dd826403d5334557bf7c23ee38631b22fe441ab3b93df3feb4b318601ea716d9e10e3d3f7f34e8e2f28a362805603f5fbe2cb40b1c970a77f8090eb6f9045bcf75c218218a9c0bd1cce96a7662ac5df89bcd91f856705000470bb0a0d8d4de7a877071693587464a6700673bf6f8162ae2a6086a4ad64547a0bfe9d5860e295e2e65fb8f2") bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)=@bpf_attr_3={0x5, 0x1, 0x8000, 0xffffffffffff424c, 0x4c, 0x60b, 0x6, 0x6, 0x1000, "cb498352730fb03f95e8e74e635100ad", r5, 0x10000, r0, 0x100, 0xffffffffffffa0c1, 0x4, 0x10001, 0x9, 0xe, 0x9, @attach_prog_fd=r8, 0xb, 0x1, 0x6, 0x2, 0xfffffff9, r2, r0}, 0x5) bpf$auto(0x1, &(0x7f0000000080)=@test={r2, 0x1a, 0x7ff, 0x6, 0x4, 0x9, 0x1, 0x7, 0xff, 0x9, 0xb0c0, 0xe3, 0x1, 0x6, 0xfffffffc}, 0x5) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), r2) ioctl$auto_BINDER_CTL_ADD(r9, 0xc1086201, &(0x7f00000007c0)={"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", 0x9, 0x7}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf252c0000001800018014000200776c616e3100eeffffff000000000000"], 0x2c}, 0x1, 0x1000000}, 0x8094) 3.067502711s ago: executing program 2 (id=643): r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = epoll_create$auto(0x4) epoll_ctl$auto(r1, 0x1, r0, 0x0) fspick$auto(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4) r2 = socket(0x2, 0x3, 0xa) r3 = getsockopt$auto(r2, 0x0, 0x29, 0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, r1, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000580)=@task_fd_query={0x7, 0x4, 0x200, 0x37e, 0x0, 0xf, 0xffffffffffffffff, 0x2, 0x5}, 0x6f4) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') pwrite64$auto(r3, &(0x7f00000002c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xdb\xd3\x1d\xf8\xbebi\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x06\x00\x00 *\xc0\xc1\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@F\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x3, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) mmap$auto(0x0, 0x40008, 0xdb, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xfa3, 0x0) bpf$auto(0x5, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0xe, 0x100, 0x80000001, 0x6fca, 0xffffffffffffffff, 0x5, "31b63adcc97aa60ffd8c28b17c06a76e", 0x0, 0xffffffffffffffff, 0x61, 0xffffffff, 0x4, 0x8}, 0x9) unshare$auto(0x40000080) 2.734970098s ago: executing program 1 (id=646): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = waitid$auto_P_ALL(0x0, 0x628, 0x0, 0x8, &(0x7f00000001c0)={{0x1, 0xffffffffffff0000}, {0xfe8, 0x2}, 0x2, 0x9, 0xffffffffffff8915, 0xffffffffffffff89, 0x1, 0x1, 0x7fffffffffffffff, 0x9, 0xfffffffffffffffb, 0xa902, 0x3, 0xb73, 0x7, 0x9}) wait4$auto(r0, 0x0, 0x5fe, 0x0) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60341, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r4, 0x0, 0x7ff, 0xd) 2.434553198s ago: executing program 2 (id=648): memfd_secret$auto(0x0) socket(0x1, 0x1, 0x400000) epoll_create$auto(0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(0x0, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x2040000000000000, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') r4 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0x40086203, r4) 2.169028118s ago: executing program 2 (id=649): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffd) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.168269658s ago: executing program 0 (id=650): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0xa, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x286c83, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mount$auto(0x0, &(0x7f00000002c0)='./cgroup/../file0\x00', &(0x7f0000000440)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0z\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xba\\\xd0x\x841\xe7d\xbfK?m_}\xd3\xf7\xb4U\xbe\x19\xab\x8f%\xe0;\x83\xfe#,\xd7\x8f\xa8\x8dN_\xadfHJ\xdd&\xcf\xc1\xc5\x0eH\x84\xd2\x87*\x84\xc3Ouh\xe9q\xc9\xb2D\xcb\x04\xa4s\x9b\x93\x86\xe4x\xbe\xf3\xc2>\x1c\x19\xc8', 0x4, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) getsockopt$auto(r2, 0x0, 0x8, &(0x7f0000000100)='&!$:\')]\x00', &(0x7f0000000140)=0xffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xd, r4, 0x4, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000005c0)={{@raw=0x1000, 0x3, 0x4, 0x10000, "4458b44b42a5e13a2aa6b4f8c04b019b4e2d33aaf762cd4ac60f6ae5aee5f0d4d83655dfebc6008f5b392926", @inferred=r4}, 0x1, @integer64=@value_ptr=&(0x7f0000000400), "62aee9689e613b4079257546164ea6509e0b48ace9466e437f5ceb7601f79e581a37c05654e63eb3875fa3ab4b6b1c1233813a247dbdfd144c5a3e2cd59e17f5d86124072550734935369300a8c9f8773dc6067f808284c66a9d095d889a5044be10ed5c1ff698848aa4059fa03571ee89dc72c308b96ead4f10848fb6b96e2c"}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r1) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130026bd7000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="08000c01", @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xcc, r5, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@nested={0x18, 0x52, 0x0, 0x1, [@typed={0xfffffffffffffd21, 0x62, 0x0, 0x0, @ipv6=@loopback}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x98, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x7a, 0x5, "d3d777f9a5109fabf13273ba1d7b4a916e7978e9abe58442f4fa4361ecdbfee56bf048883af9c8fb0ecd70385c449db37a46d43a4e09df97a0245fc6d7953c8a416ce31a96f6ff64780d0affedea5927af24111e7987360ad85129a9a9d7719304feea0b20edc98568c0d9491316d5604b0cacc08687"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4010}, 0x240000c0) 2.094595272s ago: executing program 1 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x3000000, 0x2000c040}, 0x4) 2.009488659s ago: executing program 3 (id=652): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/xfrm_stat\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x52, 0x0, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 1.99597677s ago: executing program 1 (id=653): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x2a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r1, r0, 0x0, 0x7) 1.828490732s ago: executing program 0 (id=654): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f94b5661cf0ad4b0ee04c38a1c6d36c6b7398e38b9de5b3ef9e320d57afbb145f938a3f094ae45e4588fba599effd947d62dc52ed0d2d0fac39b09e9b568825dfc6670b298a88d4720b31e5abf6f1d3ae7dd6fecb6f75009718958", @ANYBLOB="010027bd7000f9dbdf2501000000060002000000000005000700"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x200000c0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x3, 0x80000001) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/numa/demotion_enabled\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) write$auto(r4, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x3, 0x80000001) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/numa/demotion_enabled\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) write$auto(r4, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x920x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x3, 0x80000001) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/numa/demotion_enabled\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103841, 0x0) write$auto(r4, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,\x14\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.666737][ T6570] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.666762][ T6570] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 142.666780][ T6570] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 142.666798][ T6570] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 142.666814][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.666830][ T6570] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 142.666868][ T6570] [ 142.666880][ T6570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.115099][ T6583] FAULT_INJECTION: forcing a failure. [ 143.115099][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 143.121244][ T6578] netlink: set zone limit has 8 unknown bytes [ 143.129552][ T6583] CPU: 1 UID: 0 PID: 6583 Comm: syz.0.148 Not tainted syzkaller #0 PREEMPT(full) [ 143.129587][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.129602][ T6583] Call Trace: [ 143.129611][ T6583] [ 143.129620][ T6583] dump_stack_lvl+0x16c/0x1f0 [ 143.129655][ T6583] should_fail_ex+0x512/0x640 [ 143.129702][ T6583] ? __kmalloc_noprof+0xca/0x880 [ 143.129755][ T6583] should_failslab+0xc2/0x120 [ 143.129789][ T6583] __kmalloc_noprof+0xdd/0x880 [ 143.129825][ T6583] ? ima_eventdigest_init_common+0x154/0x430 [ 143.129856][ T6583] ? ima_write_template_field_data+0x5d/0x1f0 [ 143.129893][ T6583] ? ima_write_template_field_data+0x5d/0x1f0 [ 143.129929][ T6583] ima_write_template_field_data+0x5d/0x1f0 [ 143.129967][ T6583] ima_eventname_init_common+0x1b8/0x260 [ 143.130002][ T6583] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 143.130039][ T6583] ? __kmalloc_noprof+0x34f/0x880 [ 143.130075][ T6583] ? __pfx_prepend_path+0x10/0x10 [ 143.130107][ T6583] ? ima_alloc_init_template+0x19d/0x720 [ 143.130166][ T6583] ima_alloc_init_template+0x3a0/0x720 [ 143.130216][ T6583] ima_store_measurement+0x1eb/0x5c0 [ 143.130262][ T6583] ? __pfx_ima_store_measurement+0x10/0x10 [ 143.130308][ T6583] ? vfs_getxattr_alloc+0xec/0x350 [ 143.130367][ T6583] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 143.130409][ T6583] process_measurement+0x1ddb/0x23e0 [ 143.130461][ T6583] ? __pfx_process_measurement+0x10/0x10 [ 143.130501][ T6583] ? __pfx___might_resched+0x10/0x10 [ 143.130533][ T6583] ? trace_contention_end+0xdd/0x130 [ 143.130568][ T6583] ? find_held_lock+0x2b/0x80 [ 143.130594][ T6583] ? tracing_buffers_open+0x280/0x360 [ 143.130665][ T6583] ? inode_to_bdi+0x9e/0x160 [ 143.130700][ T6583] ima_file_check+0xc5/0x110 [ 143.130736][ T6583] ? __pfx_ima_file_check+0x10/0x10 [ 143.130781][ T6583] security_file_post_open+0x8e/0x210 [ 143.130808][ T6583] path_openat+0x1404/0x2cb0 [ 143.130849][ T6583] ? __pfx_path_openat+0x10/0x10 [ 143.130879][ T6583] ? __lock_acquire+0xb8a/0x1c90 [ 143.130916][ T6583] do_filp_open+0x20b/0x470 [ 143.130945][ T6583] ? __pfx_do_filp_open+0x10/0x10 [ 143.130999][ T6583] ? alloc_fd+0x471/0x7d0 [ 143.131036][ T6583] do_sys_openat2+0x11b/0x1d0 [ 143.131071][ T6583] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.131121][ T6583] __x64_sys_openat+0x174/0x210 [ 143.131158][ T6583] ? __pfx___x64_sys_openat+0x10/0x10 [ 143.131209][ T6583] do_syscall_64+0xcd/0xfa0 [ 143.131241][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.131267][ T6583] RIP: 0033:0x7f396b58efc9 [ 143.131288][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.131312][ T6583] RSP: 002b:00007f396c4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.131344][ T6583] RAX: ffffffffffffffda RBX: 00007f396b7e6090 RCX: 00007f396b58efc9 [ 143.131363][ T6583] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 143.131379][ T6583] RBP: 00007f396b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 143.131396][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.131411][ T6583] R13: 00007f396b7e6128 R14: 00007f396b7e6090 R15: 00007ffd938f7998 [ 143.131449][ T6583] [ 143.140717][ T30] audit: type=1804 audit(4294967325.720:3): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.148" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=272 res=0 errno=0 [ 146.041633][ T6634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.049260][ T6634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.097212][ T6634] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 146.157409][ T6634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.174276][ T6634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.206257][ T6634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 146.241277][ T6646] delete_channel: no stack [ 146.256031][ T6634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.267730][ T6634] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.301454][ T6634] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 146.316168][ T6634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.331694][ T6634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.406307][ T6634] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 146.712242][ T6657] sp0: Synchronizing with TNC [ 147.618762][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.177975][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.258198][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.337802][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.705633][ T6684] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 149.697962][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 150.257828][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 150.292791][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 150.337790][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.418770][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.492056][ T6748] netlink: set zone limit has 8 unknown bytes [ 151.627000][ T5837] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 151.779147][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.881496][ T6757] usbip-vudc usbip-vudc.0: gadget not bound [ 152.339773][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.417809][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.499063][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.051975][ T6775] tipc: Started in network mode [ 153.062333][ T6775] tipc: Node identity ee00, cluster identity 4711 [ 153.108317][ T6775] tipc: Node number set to 60928 [ 153.540063][ T6795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 153.956167][ T6796] FAULT_INJECTION: forcing a failure. [ 153.956167][ T6796] name failslab, interval 1, probability 0, space 0, times 0 [ 153.973860][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 153.994864][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.2.200 Not tainted syzkaller #0 PREEMPT(full) [ 153.994902][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.994917][ T6796] Call Trace: [ 153.994926][ T6796] [ 153.994936][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 153.994973][ T6796] should_fail_ex+0x512/0x640 [ 153.995017][ T6796] ? __kmalloc_cache_noprof+0x5f/0x780 [ 153.995061][ T6796] should_failslab+0xc2/0x120 [ 153.995096][ T6796] __kmalloc_cache_noprof+0x72/0x780 [ 153.995135][ T6796] ? ima_add_digest_entry+0x52/0x540 [ 153.995175][ T6796] ? ima_add_digest_entry+0x52/0x540 [ 153.995206][ T6796] ima_add_digest_entry+0x52/0x540 [ 153.995255][ T6796] ima_add_template_entry+0x452/0x870 [ 153.995303][ T6796] ? __pfx_ima_add_template_entry+0x10/0x10 [ 153.995344][ T6796] ? ima_calc_field_array_hash+0x371/0x440 [ 153.995390][ T6796] ima_store_template+0xda/0x150 [ 153.995435][ T6796] ima_store_measurement+0x224/0x5c0 [ 153.995477][ T6796] ? __pfx_ima_store_measurement+0x10/0x10 [ 153.995517][ T6796] ? vfs_getxattr_alloc+0xec/0x350 [ 153.995553][ T6796] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 153.995596][ T6796] process_measurement+0x1ddb/0x23e0 [ 153.995646][ T6796] ? __pfx_process_measurement+0x10/0x10 [ 153.995692][ T6796] ? __pfx___might_resched+0x10/0x10 [ 153.995730][ T6796] ? trace_contention_end+0xdd/0x130 [ 153.995765][ T6796] ? find_held_lock+0x2b/0x80 [ 153.995793][ T6796] ? tracing_buffers_open+0x280/0x360 [ 153.995879][ T6796] ? inode_to_bdi+0x9e/0x160 [ 153.995916][ T6796] ima_file_check+0xc5/0x110 [ 153.995949][ T6796] ? __pfx_ima_file_check+0x10/0x10 [ 153.995994][ T6796] security_file_post_open+0x8e/0x210 [ 153.996021][ T6796] path_openat+0x1404/0x2cb0 [ 153.996057][ T6796] ? __pfx_path_openat+0x10/0x10 [ 153.996084][ T6796] ? __lock_acquire+0xb8a/0x1c90 [ 153.996115][ T6796] do_filp_open+0x20b/0x470 [ 153.996138][ T6796] ? __pfx_do_filp_open+0x10/0x10 [ 153.996186][ T6796] ? alloc_fd+0x471/0x7d0 [ 153.996223][ T6796] do_sys_openat2+0x11b/0x1d0 [ 153.996275][ T6796] ? __pfx_do_sys_openat2+0x10/0x10 [ 153.996335][ T6796] __x64_sys_openat+0x174/0x210 [ 153.996376][ T6796] ? __pfx___x64_sys_openat+0x10/0x10 [ 153.996429][ T6796] do_syscall_64+0xcd/0xfa0 [ 153.996467][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.996496][ T6796] RIP: 0033:0x7f3a03d8efc9 [ 153.996520][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.996548][ T6796] RSP: 002b:00007f3a04c1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 153.996575][ T6796] RAX: ffffffffffffffda RBX: 00007f3a03fe5fa0 RCX: 00007f3a03d8efc9 [ 153.996592][ T6796] RDX: 0000000000000600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 153.996608][ T6796] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 153.996623][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.996639][ T6796] R13: 00007f3a03fe6038 R14: 00007f3a03fe5fa0 R15: 00007ffe01410db8 [ 153.996677][ T6796] [ 154.310352][ T6796] ima: OUT OF MEMORY ERROR creating queue entry [ 154.360488][ T30] audit: type=1804 audit(4294967336.940:4): pid=6796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.200" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=272 res=0 errno=0 [ 154.385957][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.639625][ T6799] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 154.926947][ T6816] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 155.102952][ T6817] FAULT_INJECTION: forcing a failure. [ 155.102952][ T6817] name fail_futex, interval 1, probability 0, space 0, times 0 [ 155.150364][ T6817] CPU: 1 UID: 0 PID: 6817 Comm: syz.3.205 Not tainted syzkaller #0 PREEMPT(full) [ 155.150400][ T6817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.150415][ T6817] Call Trace: [ 155.150423][ T6817] [ 155.150434][ T6817] dump_stack_lvl+0x16c/0x1f0 [ 155.150471][ T6817] should_fail_ex+0x512/0x640 [ 155.150515][ T6817] get_futex_key+0x1d0/0x1560 [ 155.150552][ T6817] ? __pfx_get_futex_key+0x10/0x10 [ 155.150593][ T6817] futex_wake+0xea/0x530 [ 155.150628][ T6817] ? rcu_is_watching+0x12/0xc0 [ 155.150658][ T6817] ? __pfx_futex_wake+0x10/0x10 [ 155.150701][ T6817] ? kmem_cache_free+0x2d4/0x6c0 [ 155.150728][ T6817] ? putname+0x154/0x1a0 [ 155.150769][ T6817] do_futex+0x1e3/0x350 [ 155.150805][ T6817] ? __pfx_do_futex+0x10/0x10 [ 155.150848][ T6817] __x64_sys_futex+0x1e0/0x4c0 [ 155.150883][ T6817] ? __x64_sys_openat+0x174/0x210 [ 155.150920][ T6817] ? __pfx___x64_sys_futex+0x10/0x10 [ 155.150966][ T6817] do_syscall_64+0xcd/0xfa0 [ 155.150998][ T6817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.151025][ T6817] RIP: 0033:0x7fb93518efc9 [ 155.151046][ T6817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.151069][ T6817] RSP: 002b:00007fb93604d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.151093][ T6817] RAX: ffffffffffffffda RBX: 00007fb9353e5fa8 RCX: 00007fb93518efc9 [ 155.151109][ T6817] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9353e5fac [ 155.151123][ T6817] RBP: 00007fb9353e5fa0 R08: 00007fb93604e000 R09: 0000000000000000 [ 155.151138][ T6817] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 155.151152][ T6817] R13: 00007fb9353e6038 R14: 00007ffca1dc9e90 R15: 00007ffca1dc9f78 [ 155.151188][ T6817] [ 155.335728][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.356163][ T6819] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 155.532784][ T6835] netlink: zone id is out of range [ 155.538624][ T6835] netlink: zone id is out of range [ 155.545453][ T6835] netlink: zone id is out of range [ 155.587289][ T6835] netlink: zone id is out of range [ 155.593029][ T6835] netlink: zone id is out of range [ 155.617754][ T6835] netlink: zone id is out of range [ 155.627060][ T6835] netlink: zone id is out of range [ 155.638410][ T6835] netlink: del zone limit has 4 unknown bytes [ 155.783403][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 155.940410][ T6849] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 156.155928][ T6853] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 156.222723][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 156.555270][ T6873] netlink: 'syz.0.224': attribute type 1 has an invalid length. [ 156.861866][ T6878] usbip-vudc usbip-vudc.0: gadget not bound [ 157.235249][ T6901] hub 8-0:1.0: USB hub found [ 157.260066][ T6901] hub 8-0:1.0: 1 port detected [ 157.532018][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 157.681316][ T6907] input: f¬ as /devices/virtual/input/input19 [ 157.792663][ T6913] input: f¬ as /devices/virtual/input/input20 [ 157.826704][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'. [ 158.128500][ T6927] mkiss: ax0: crc mode is auto. [ 159.154731][ T6947] usbip-vudc usbip-vudc.0: gadget not bound [ 159.733079][ T6955] mkiss: ax0: crc mode is auto. [ 160.108494][ T6958] misc userio: Invalid payload size [ 160.174035][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 161.068601][ T6979] zswap: compressor not available [ 161.803022][ T6997] program syz.1.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.897546][ T6997] can: request_module (can-proto-0) failed. [ 162.126700][ T7003] usbip-vudc usbip-vudc.0: gadget not bound [ 162.668276][ T7009] FAULT_INJECTION: forcing a failure. [ 162.668276][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 162.703614][ T7009] CPU: 0 UID: 0 PID: 7009 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 162.703652][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 162.703667][ T7009] Call Trace: [ 162.703676][ T7009] [ 162.703686][ T7009] dump_stack_lvl+0x16c/0x1f0 [ 162.703721][ T7009] should_fail_ex+0x512/0x640 [ 162.703759][ T7009] ? __kmalloc_noprof+0xca/0x880 [ 162.703803][ T7009] should_failslab+0xc2/0x120 [ 162.703839][ T7009] __kmalloc_noprof+0xdd/0x880 [ 162.703879][ T7009] ? lsm_blob_alloc+0x68/0x90 [ 162.703916][ T7009] ? lsm_blob_alloc+0x68/0x90 [ 162.703945][ T7009] lsm_blob_alloc+0x68/0x90 [ 162.703976][ T7009] security_prepare_creds+0x30/0x270 [ 162.704009][ T7009] prepare_creds+0x56f/0x7d0 [ 162.704050][ T7009] copy_creds+0xa7/0xa50 [ 162.704091][ T7009] copy_process+0xffc/0x76a0 [ 162.704122][ T7009] ? __pfx___futex_wait+0x10/0x10 [ 162.704174][ T7009] ? __pfx_copy_process+0x10/0x10 [ 162.704203][ T7009] ? futex_private_hash_put+0x176/0x300 [ 162.704240][ T7009] ? futex_private_hash_put+0x18a/0x300 [ 162.704278][ T7009] kernel_clone+0xfc/0x930 [ 162.704312][ T7009] ? __pfx_kernel_clone+0x10/0x10 [ 162.704363][ T7009] __do_sys_clone+0xce/0x120 [ 162.704394][ T7009] ? __pfx___do_sys_clone+0x10/0x10 [ 162.704449][ T7009] ? xfd_validate_state+0x61/0x180 [ 162.704499][ T7009] do_syscall_64+0xcd/0xfa0 [ 162.704531][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.704558][ T7009] RIP: 0033:0x7fc563d8efc9 [ 162.704579][ T7009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.704602][ T7009] RSP: 002b:00007fc564b47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 162.704627][ T7009] RAX: ffffffffffffffda RBX: 00007fc563fe5fa0 RCX: 00007fc563d8efc9 [ 162.704644][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.704659][ T7009] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 162.704674][ T7009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.704689][ T7009] R13: 00007fc563fe6038 R14: 00007fc563fe5fa0 R15: 00007ffca04e61b8 [ 162.704724][ T7009] [ 163.255838][ T7027] program syz.1.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.863878][ T7037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 163.888313][ T7041] misc userio: Invalid payload size [ 164.106464][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 164.503138][ T7044] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 165.957730][ T7072] mkiss: ax0: crc mode is auto. [ 169.593385][ T7146] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 169.844855][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 170.048795][ T7148] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 170.231836][ T7151] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 170.290603][ T7153] usb usb36: usbfs: process 7153 (syz.3.267) did not claim interface 0 before use [ 170.427499][ T7167] misc userio: Invalid payload size [ 170.466302][ T7166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 170.790303][ T7175] usbip-vudc usbip-vudc.0: gadget not bound [ 170.942120][ T7184] netlink: 'syz.3.274': attribute type 2 has an invalid length. [ 170.997891][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 172.651684][ T7218] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 172.945544][ T7221] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 172.990720][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 173.615582][ T7236] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2 is already present [ 173.669924][ T7239] FAULT_INJECTION: forcing a failure. [ 173.669924][ T7239] name failslab, interval 1, probability 0, space 0, times 0 [ 173.684044][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.0.284 Not tainted syzkaller #0 PREEMPT(full) [ 173.684082][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.684097][ T7239] Call Trace: [ 173.684105][ T7239] [ 173.684116][ T7239] dump_stack_lvl+0x16c/0x1f0 [ 173.684152][ T7239] should_fail_ex+0x512/0x640 [ 173.684189][ T7239] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 173.684220][ T7239] should_failslab+0xc2/0x120 [ 173.684266][ T7239] kmem_cache_alloc_node_noprof+0x78/0x770 [ 173.684294][ T7239] ? alloc_vmap_area+0x648/0x29e0 [ 173.684332][ T7239] ? alloc_vmap_area+0x648/0x29e0 [ 173.684359][ T7239] alloc_vmap_area+0x648/0x29e0 [ 173.684403][ T7239] ? __pfx_alloc_vmap_area+0x10/0x10 [ 173.684444][ T7239] __get_vm_area_node+0x1ca/0x330 [ 173.684481][ T7239] __vmalloc_node_range_noprof+0x271/0x1480 [ 173.684519][ T7239] ? kernel_clone+0xfc/0x930 [ 173.684561][ T7239] ? kernel_clone+0xfc/0x930 [ 173.684596][ T7239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 173.684640][ T7239] ? rcu_is_watching+0x12/0xc0 [ 173.684671][ T7239] ? kernel_clone+0xfc/0x930 [ 173.684697][ T7239] __vmalloc_node_noprof+0xad/0xf0 [ 173.684732][ T7239] ? kernel_clone+0xfc/0x930 [ 173.684764][ T7239] copy_process+0x2c77/0x76a0 [ 173.684793][ T7239] ? __pfx___futex_wait+0x10/0x10 [ 173.684843][ T7239] ? __pfx_copy_process+0x10/0x10 [ 173.684869][ T7239] ? futex_private_hash_put+0x176/0x300 [ 173.684906][ T7239] ? futex_private_hash_put+0x18a/0x300 [ 173.684943][ T7239] kernel_clone+0xfc/0x930 [ 173.684972][ T7239] ? __pfx_kernel_clone+0x10/0x10 [ 173.685021][ T7239] __do_sys_clone+0xce/0x120 [ 173.685052][ T7239] ? __pfx___do_sys_clone+0x10/0x10 [ 173.685093][ T7239] ? xfd_validate_state+0x61/0x180 [ 173.685140][ T7239] do_syscall_64+0xcd/0xfa0 [ 173.685173][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.685198][ T7239] RIP: 0033:0x7f396b58efc9 [ 173.685220][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.685254][ T7239] RSP: 002b:00007f396c4defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 173.685280][ T7239] RAX: ffffffffffffffda RBX: 00007f396b7e6090 RCX: 00007f396b58efc9 [ 173.685297][ T7239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.685311][ T7239] RBP: 00007f396b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 173.685326][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.685341][ T7239] R13: 00007f396b7e6128 R14: 00007f396b7e6090 R15: 00007ffd938f7998 [ 173.685377][ T7239] [ 173.685593][ T7239] syz.0.284: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 173.777370][ T7241] nvme_fcloop: unknown parameter or missing value 'Ù›ª' [ 173.817784][ T7239] ,cpuset= [ 173.893783][ T7247] FAULT_INJECTION: forcing a failure. [ 173.893783][ T7247] name failslab, interval 1, probability 0, space 0, times 0 [ 173.939269][ T7239] / [ 174.000840][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.2.288 Not tainted syzkaller #0 PREEMPT(full) [ 174.000879][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.000894][ T7247] Call Trace: [ 174.000902][ T7247] [ 174.000913][ T7247] dump_stack_lvl+0x16c/0x1f0 [ 174.000949][ T7247] should_fail_ex+0x512/0x640 [ 174.000989][ T7247] ? __kmalloc_noprof+0xca/0x880 [ 174.001034][ T7247] should_failslab+0xc2/0x120 [ 174.001070][ T7247] __kmalloc_noprof+0xdd/0x880 [ 174.001111][ T7247] ? __register_sysctl_table+0xb3/0x1900 [ 174.001157][ T7247] ? __register_sysctl_table+0xb3/0x1900 [ 174.001195][ T7247] __register_sysctl_table+0xb3/0x1900 [ 174.001233][ T7247] ? is_module_address+0x5f/0xf0 [ 174.001278][ T7247] ? __pfx___register_sysctl_table+0x10/0x10 [ 174.001317][ T7247] ? is_module_address+0x69/0xf0 [ 174.001353][ T7247] ? register_net_sysctl_sz+0x228/0x3e0 [ 174.001392][ T7247] ? __asan_memcpy+0x3c/0x60 [ 174.001423][ T7247] xfrm4_net_init+0xf0/0x1c0 [ 174.001456][ T7247] ? __pfx_xfrm4_net_init+0x10/0x10 [ 174.001499][ T7247] ops_init+0x1e2/0x5f0 [ 174.001531][ T7247] setup_net+0x100/0x390 [ 174.001559][ T7247] ? __pfx_setup_net+0x10/0x10 [ 174.001587][ T7247] ? debug_mutex_init+0x37/0x70 [ 174.001619][ T7247] copy_net_ns+0x2f8/0x690 [ 174.001653][ T7247] create_new_namespaces+0x3ea/0xa90 [ 174.001691][ T7247] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 174.001724][ T7247] ksys_unshare+0x45b/0xa40 [ 174.001757][ T7247] ? __pfx_ksys_unshare+0x10/0x10 [ 174.001792][ T7247] ? xfd_validate_state+0x61/0x180 [ 174.001838][ T7247] __x64_sys_unshare+0x31/0x40 [ 174.001872][ T7247] do_syscall_64+0xcd/0xfa0 [ 174.001904][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.001932][ T7247] RIP: 0033:0x7f3a03d8efc9 [ 174.001955][ T7247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.001982][ T7247] RSP: 002b:00007f3a04bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.002008][ T7247] RAX: ffffffffffffffda RBX: 00007f3a03fe6090 RCX: 00007f3a03d8efc9 [ 174.002027][ T7247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 174.002044][ T7247] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.002061][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.002078][ T7247] R13: 00007f3a03fe6128 R14: 00007f3a03fe6090 R15: 00007ffe01410db8 [ 174.002118][ T7247] [ 174.251304][ T7239] ,mems_allowed=0-1 [ 174.255179][ T7239] CPU: 0 UID: 0 PID: 7239 Comm: syz.0.284 Not tainted syzkaller #0 PREEMPT(full) [ 174.255211][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.255226][ T7239] Call Trace: [ 174.255234][ T7239] [ 174.255243][ T7239] dump_stack_lvl+0x16c/0x1f0 [ 174.255278][ T7239] warn_alloc+0x248/0x3a0 [ 174.255305][ T7239] ? __pfx_warn_alloc+0x10/0x10 [ 174.255334][ T7239] ? kfree+0x2b8/0x6d0 [ 174.255352][ T7239] ? __get_vm_area_node+0x2cd/0x330 [ 174.255391][ T7239] ? __get_vm_area_node+0x2cd/0x330 [ 174.255423][ T7239] ? __get_vm_area_node+0x208/0x330 [ 174.255471][ T7239] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 174.255517][ T7239] ? kernel_clone+0xfc/0x930 [ 174.255555][ T7239] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.255598][ T7239] ? rcu_is_watching+0x12/0xc0 [ 174.255629][ T7239] ? kernel_clone+0xfc/0x930 [ 174.255659][ T7239] __vmalloc_node_noprof+0xad/0xf0 [ 174.255695][ T7239] ? kernel_clone+0xfc/0x930 [ 174.255729][ T7239] copy_process+0x2c77/0x76a0 [ 174.255758][ T7239] ? __pfx___futex_wait+0x10/0x10 [ 174.255808][ T7239] ? __pfx_copy_process+0x10/0x10 [ 174.255838][ T7239] ? futex_private_hash_put+0x176/0x300 [ 174.255874][ T7239] ? futex_private_hash_put+0x18a/0x300 [ 174.255910][ T7239] kernel_clone+0xfc/0x930 [ 174.255941][ T7239] ? __pfx_kernel_clone+0x10/0x10 [ 174.255985][ T7239] __do_sys_clone+0xce/0x120 [ 174.256014][ T7239] ? __pfx___do_sys_clone+0x10/0x10 [ 174.256057][ T7239] ? xfd_validate_state+0x61/0x180 [ 174.256100][ T7239] do_syscall_64+0xcd/0xfa0 [ 174.256128][ T7239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.256153][ T7239] RIP: 0033:0x7f396b58efc9 [ 174.256173][ T7239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.256198][ T7239] RSP: 002b:00007f396c4defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 174.256222][ T7239] RAX: ffffffffffffffda RBX: 00007f396b7e6090 RCX: 00007f396b58efc9 [ 174.256240][ T7239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.256255][ T7239] RBP: 00007f396b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.256272][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.256287][ T7239] R13: 00007f396b7e6128 R14: 00007f396b7e6090 R15: 00007ffd938f7998 [ 174.256326][ T7239] [ 174.256336][ T7239] Mem-Info: [ 174.496266][ T7239] active_anon:10960 inactive_anon:2712 isolated_anon:0 [ 174.496266][ T7239] active_file:16813 inactive_file:39801 isolated_file:0 [ 174.496266][ T7239] unevictable:768 dirty:1586 writeback:0 [ 174.496266][ T7239] slab_reclaimable:11270 slab_unreclaimable:92984 [ 174.496266][ T7239] mapped:24953 shmem:1364 pagetables:1189 [ 174.496266][ T7239] sec_pagetables:0 bounce:0 [ 174.496266][ T7239] kernel_misc_reclaimable:0 [ 174.496266][ T7239] free:1324089 free_pcp:11107 free_cma:0 [ 174.559712][ T7239] Node 0 active_anon:43744kB inactive_anon:10748kB active_file:67328kB inactive_file:158928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103896kB dirty:6380kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11748kB pagetables:4696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.635198][ T7239] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.667427][ T7239] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.700677][ T7239] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 174.742653][ T7239] Node 0 DMA32 free:1382800kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43744kB inactive_anon:10748kB active_file:67328kB inactive_file:158928kB unevictable:1536kB writepending:6480kB zspages:12kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:27952kB local_pcp:20856kB free_cma:0kB [ 174.840297][ T7239] lowmem_reserve[]: 0 0 1 1 1 [ 174.845036][ T7239] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.931893][ T7239] lowmem_reserve[]: 0 0 0 0 0 [ 174.936779][ T7239] Node 1 Normal free:3897496kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16068kB local_pcp:5092kB free_cma:0kB [ 174.971007][ T7239] lowmem_reserve[]: 0 0 0 0 0 [ 174.976569][ T7239] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.996005][ T7239] Node 0 DMA32: 1570*4kB (ME) 880*8kB (UM) 1081*16kB (UME) 820*32kB (UM) 419*64kB (UME) 313*128kB (UM) 156*256kB (UME) 33*512kB (M) 8*1024kB (UME) 5*2048kB (UME) 289*4096kB (UM) = 1382744kB [ 175.035589][ T7239] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 175.128632][ T7239] Node 1 Normal: 170*4kB (UE) 48*8kB (UME) 25*16kB (UME) 125*32kB (UME) 45*64kB (UME) 8*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3897496kB [ 175.222443][ T7239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.242503][ T7239] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.265223][ T7239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 175.337935][ T7239] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 175.395824][ T7239] 57979 total pagecache pages [ 175.424414][ T7239] 0 pages in swap cache [ 175.446607][ T7239] Free swap = 124992kB [ 175.469218][ T7239] Total swap = 124996kB [ 175.473401][ T7239] 2097051 pages RAM [ 175.587456][ T7239] 0 pages HighMem/MovableOnly [ 175.610787][ T7239] 428687 pages reserved [ 175.614982][ T7239] 0 pages cma reserved [ 177.759199][ T7308] nvme_fcloop: unknown parameter or missing value 'Ù›ª' [ 177.825767][ T7308] FAULT_INJECTION: forcing a failure. [ 177.825767][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 177.840809][ T7308] CPU: 0 UID: 0 PID: 7308 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 177.840844][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.840860][ T7308] Call Trace: [ 177.840868][ T7308] [ 177.840878][ T7308] dump_stack_lvl+0x16c/0x1f0 [ 177.840923][ T7308] should_fail_ex+0x512/0x640 [ 177.840961][ T7308] ? __kmalloc_noprof+0xca/0x880 [ 177.841005][ T7308] should_failslab+0xc2/0x120 [ 177.841039][ T7308] __kmalloc_noprof+0xdd/0x880 [ 177.841079][ T7308] ? __register_sysctl_table+0xb3/0x1900 [ 177.841122][ T7308] ? __register_sysctl_table+0xb3/0x1900 [ 177.841157][ T7308] __register_sysctl_table+0xb3/0x1900 [ 177.841194][ T7308] ? is_module_address+0x5f/0xf0 [ 177.841236][ T7308] ? __pfx___register_sysctl_table+0x10/0x10 [ 177.841274][ T7308] ? is_module_address+0x69/0xf0 [ 177.841309][ T7308] ? register_net_sysctl_sz+0x228/0x3e0 [ 177.841346][ T7308] ? __asan_memcpy+0x3c/0x60 [ 177.841376][ T7308] xfrm4_net_init+0xf0/0x1c0 [ 177.841412][ T7308] ? __pfx_xfrm4_net_init+0x10/0x10 [ 177.841445][ T7308] ops_init+0x1e2/0x5f0 [ 177.841477][ T7308] setup_net+0x100/0x390 [ 177.841504][ T7308] ? __pfx_setup_net+0x10/0x10 [ 177.841532][ T7308] ? debug_mutex_init+0x37/0x70 [ 177.841564][ T7308] copy_net_ns+0x2f8/0x690 [ 177.841596][ T7308] create_new_namespaces+0x3ea/0xa90 [ 177.841632][ T7308] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 177.841664][ T7308] ksys_unshare+0x45b/0xa40 [ 177.841697][ T7308] ? __pfx_ksys_unshare+0x10/0x10 [ 177.841729][ T7308] ? xfd_validate_state+0x61/0x180 [ 177.841773][ T7308] __x64_sys_unshare+0x31/0x40 [ 177.841802][ T7308] do_syscall_64+0xcd/0xfa0 [ 177.841829][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.841850][ T7308] RIP: 0033:0x7fc563d8efc9 [ 177.841869][ T7308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.841897][ T7308] RSP: 002b:00007fc564b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.841920][ T7308] RAX: ffffffffffffffda RBX: 00007fc563fe5fa0 RCX: 00007fc563d8efc9 [ 177.841937][ T7308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 177.841952][ T7308] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 177.841967][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.841979][ T7308] R13: 00007fc563fe6038 R14: 00007fc563fe5fa0 R15: 00007ffca04e61b8 [ 177.842012][ T7308] [ 178.210340][ T7305] usb usb36: usbfs: process 7305 (syz.2.298) did not claim interface 0 before use [ 178.644135][ T7319] FAULT_INJECTION: forcing a failure. [ 178.644135][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 178.659318][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.2.301 Not tainted syzkaller #0 PREEMPT(full) [ 178.659355][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.659371][ T7319] Call Trace: [ 178.659380][ T7319] [ 178.659390][ T7319] dump_stack_lvl+0x16c/0x1f0 [ 178.659425][ T7319] should_fail_ex+0x512/0x640 [ 178.659464][ T7319] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 178.659499][ T7319] should_failslab+0xc2/0x120 [ 178.659534][ T7319] kmem_cache_alloc_node_noprof+0x78/0x770 [ 178.659562][ T7319] ? alloc_vmap_area+0x648/0x29e0 [ 178.659601][ T7319] ? alloc_vmap_area+0x648/0x29e0 [ 178.659631][ T7319] alloc_vmap_area+0x648/0x29e0 [ 178.659678][ T7319] ? __pfx_alloc_vmap_area+0x10/0x10 [ 178.659720][ T7319] __get_vm_area_node+0x1ca/0x330 [ 178.659761][ T7319] __vmalloc_node_range_noprof+0x271/0x1480 [ 178.659799][ T7319] ? kernel_clone+0xfc/0x930 [ 178.659840][ T7319] ? kernel_clone+0xfc/0x930 [ 178.659882][ T7319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.659934][ T7319] ? rcu_is_watching+0x12/0xc0 [ 178.659968][ T7319] ? kernel_clone+0xfc/0x930 [ 178.659999][ T7319] __vmalloc_node_noprof+0xad/0xf0 [ 178.660039][ T7319] ? kernel_clone+0xfc/0x930 [ 178.660081][ T7319] copy_process+0x2c77/0x76a0 [ 178.660114][ T7319] ? __pfx___futex_wait+0x10/0x10 [ 178.660168][ T7319] ? __pfx_copy_process+0x10/0x10 [ 178.660200][ T7319] ? futex_private_hash_put+0x176/0x300 [ 178.660238][ T7319] ? futex_private_hash_put+0x18a/0x300 [ 178.660274][ T7319] kernel_clone+0xfc/0x930 [ 178.660308][ T7319] ? __pfx_kernel_clone+0x10/0x10 [ 178.660362][ T7319] __do_sys_clone+0xce/0x120 [ 178.660394][ T7319] ? __pfx___do_sys_clone+0x10/0x10 [ 178.660443][ T7319] ? xfd_validate_state+0x61/0x180 [ 178.660491][ T7319] do_syscall_64+0xcd/0xfa0 [ 178.660524][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.660551][ T7319] RIP: 0033:0x7f3a03d8efc9 [ 178.660573][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.660599][ T7319] RSP: 002b:00007f3a04bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 178.660626][ T7319] RAX: ffffffffffffffda RBX: 00007f3a03fe6090 RCX: 00007f3a03d8efc9 [ 178.660644][ T7319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.660661][ T7319] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.660678][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.660694][ T7319] R13: 00007f3a03fe6128 R14: 00007f3a03fe6090 R15: 00007ffe01410db8 [ 178.660733][ T7319] [ 179.264881][ T7318] netlink: set zone limit has 8 unknown bytes [ 179.493993][ T7335] FAULT_INJECTION: forcing a failure. [ 179.493993][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 179.525845][ T7329] zswap: compressor not available [ 179.629705][ T7335] CPU: 1 UID: 0 PID: 7335 Comm: syz.2.305 Not tainted syzkaller #0 PREEMPT(full) [ 179.629744][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.629762][ T7335] Call Trace: [ 179.629771][ T7335] [ 179.629782][ T7335] dump_stack_lvl+0x16c/0x1f0 [ 179.629818][ T7335] should_fail_ex+0x512/0x640 [ 179.629859][ T7335] ? fs_reclaim_acquire+0xae/0x150 [ 179.629898][ T7335] should_failslab+0xc2/0x120 [ 179.629935][ T7335] __kmalloc_noprof+0xdd/0x880 [ 179.629978][ T7335] ? tomoyo_profile+0x47/0x60 [ 179.630009][ T7335] ? tomoyo_supervisor+0x45b/0x13b0 [ 179.630050][ T7335] ? tomoyo_supervisor+0x45b/0x13b0 [ 179.630083][ T7335] tomoyo_supervisor+0x45b/0x13b0 [ 179.630124][ T7335] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 179.630184][ T7335] ? tomoyo_check_path_acl+0xad/0x210 [ 179.630227][ T7335] ? tomoyo_check_acl+0x1f7/0x410 [ 179.630271][ T7335] tomoyo_path_permission+0x270/0x3b0 [ 179.630313][ T7335] tomoyo_check_open_permission+0x37b/0x3c0 [ 179.630351][ T7335] ? _raw_spin_unlock+0x28/0x50 [ 179.630375][ T7335] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 179.630446][ T7335] ? do_raw_spin_lock+0x12c/0x2b0 [ 179.630491][ T7335] tomoyo_file_open+0x6b/0x90 [ 179.630523][ T7335] security_file_open+0x84/0x1e0 [ 179.630549][ T7335] do_dentry_open+0x596/0x1530 [ 179.630587][ T7335] vfs_open+0x82/0x3f0 [ 179.630624][ T7335] path_openat+0x1de4/0x2cb0 [ 179.630703][ T7335] ? __pfx_path_openat+0x10/0x10 [ 179.630732][ T7335] ? __lock_acquire+0xb8a/0x1c90 [ 179.630768][ T7335] do_filp_open+0x20b/0x470 [ 179.630797][ T7335] ? __pfx_do_filp_open+0x10/0x10 [ 179.630847][ T7335] ? alloc_fd+0x471/0x7d0 [ 179.630882][ T7335] do_sys_openat2+0x11b/0x1d0 [ 179.630916][ T7335] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.630962][ T7335] __x64_sys_openat+0x174/0x210 [ 179.630996][ T7335] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.631044][ T7335] do_syscall_64+0xcd/0xfa0 [ 179.631073][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.631098][ T7335] RIP: 0033:0x7f3a03d8efc9 [ 179.631118][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.631142][ T7335] RSP: 002b:00007f3a04bfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 179.631173][ T7335] RAX: ffffffffffffffda RBX: 00007f3a03fe6090 RCX: 00007f3a03d8efc9 [ 179.631191][ T7335] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 179.631207][ T7335] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 179.631222][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.631237][ T7335] R13: 00007f3a03fe6128 R14: 00007f3a03fe6090 R15: 00007ffe01410db8 [ 179.631271][ T7335] [ 182.862046][ T7376] nvme_fcloop: unknown parameter or missing value 'Ù›ª' [ 182.876048][ T7376] FAULT_INJECTION: forcing a failure. [ 182.876048][ T7376] name failslab, interval 1, probability 0, space 0, times 0 [ 182.896978][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 182.897015][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.897032][ T7376] Call Trace: [ 182.897042][ T7376] [ 182.897053][ T7376] dump_stack_lvl+0x16c/0x1f0 [ 182.897087][ T7376] should_fail_ex+0x512/0x640 [ 182.897117][ T7376] ? __kmalloc_noprof+0xca/0x880 [ 182.897159][ T7376] should_failslab+0xc2/0x120 [ 182.897191][ T7376] __kmalloc_noprof+0xdd/0x880 [ 182.897230][ T7376] ? udp_init_sock+0x24e/0x450 [ 182.897261][ T7376] ? udp_init_sock+0x24e/0x450 [ 182.897284][ T7376] udp_init_sock+0x24e/0x450 [ 182.897306][ T7376] ? __pfx_udp_init_sock+0x10/0x10 [ 182.897332][ T7376] inet_create+0x939/0x1040 [ 182.897369][ T7376] ? inet_create+0x93/0x1040 [ 182.897409][ T7376] __sock_create+0x338/0x8d0 [ 182.897462][ T7376] inet_ctl_sock_create+0x94/0x230 [ 182.897500][ T7376] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 182.897538][ T7376] ? lockdep_init_map_type+0x5c/0x280 [ 182.897578][ T7376] ? lockdep_init_map_type+0x5c/0x280 [ 182.897619][ T7376] ? __pfx_igmp_net_init+0x10/0x10 [ 182.897652][ T7376] igmp_net_init+0xd0/0x1a0 [ 182.897688][ T7376] ops_init+0x1e2/0x5f0 [ 182.897717][ T7376] setup_net+0x100/0x390 [ 182.897743][ T7376] ? __pfx_setup_net+0x10/0x10 [ 182.897772][ T7376] ? debug_mutex_init+0x37/0x70 [ 182.897802][ T7376] copy_net_ns+0x2f8/0x690 [ 182.897836][ T7376] create_new_namespaces+0x3ea/0xa90 [ 182.897874][ T7376] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 182.897910][ T7376] ksys_unshare+0x45b/0xa40 [ 182.897945][ T7376] ? __pfx_ksys_unshare+0x10/0x10 [ 182.897980][ T7376] ? xfd_validate_state+0x61/0x180 [ 182.898025][ T7376] __x64_sys_unshare+0x31/0x40 [ 182.898059][ T7376] do_syscall_64+0xcd/0xfa0 [ 182.898091][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.898117][ T7376] RIP: 0033:0x7f396b58efc9 [ 182.898138][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.898163][ T7376] RSP: 002b:00007f396c500038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 182.898189][ T7376] RAX: ffffffffffffffda RBX: 00007f396b7e5fa0 RCX: 00007f396b58efc9 [ 182.898208][ T7376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 182.898223][ T7376] RBP: 00007f396b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 182.898239][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.898254][ T7376] R13: 00007f396b7e6038 R14: 00007f396b7e5fa0 R15: 00007ffd938f7998 [ 182.898292][ T7376] [ 183.150708][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.172676][ T7376] Failed to initialize the IGMP autojoin socket (err -12) [ 183.774880][ T7396] FAULT_INJECTION: forcing a failure. [ 183.774880][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 183.806058][ T7396] CPU: 0 UID: 0 PID: 7396 Comm: syz.3.314 Not tainted syzkaller #0 PREEMPT(full) [ 183.806095][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.806111][ T7396] Call Trace: [ 183.806120][ T7396] [ 183.806131][ T7396] dump_stack_lvl+0x16c/0x1f0 [ 183.806155][ T7396] should_fail_ex+0x512/0x640 [ 183.806177][ T7396] ? __kmalloc_noprof+0xca/0x880 [ 183.806201][ T7396] should_failslab+0xc2/0x120 [ 183.806219][ T7396] __kmalloc_noprof+0xdd/0x880 [ 183.806240][ T7396] ? lsm_blob_alloc+0x68/0x90 [ 183.806259][ T7396] ? lsm_blob_alloc+0x68/0x90 [ 183.806274][ T7396] lsm_blob_alloc+0x68/0x90 [ 183.806290][ T7396] security_task_alloc+0x2d/0x260 [ 183.806306][ T7396] copy_process+0x220b/0x76a0 [ 183.806323][ T7396] ? __pfx___futex_wait+0x10/0x10 [ 183.806343][ T7396] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 183.806372][ T7396] ? __pfx_copy_process+0x10/0x10 [ 183.806389][ T7396] ? futex_private_hash_put+0x176/0x300 [ 183.806409][ T7396] ? futex_private_hash_put+0x18a/0x300 [ 183.806433][ T7396] kernel_clone+0xfc/0x930 [ 183.806451][ T7396] ? __pfx_kernel_clone+0x10/0x10 [ 183.806478][ T7396] __do_sys_clone+0xce/0x120 [ 183.806494][ T7396] ? __pfx___do_sys_clone+0x10/0x10 [ 183.806519][ T7396] ? xfd_validate_state+0x61/0x180 [ 183.806543][ T7396] do_syscall_64+0xcd/0xfa0 [ 183.806560][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.806574][ T7396] RIP: 0033:0x7fb93518efc9 [ 183.806586][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.806600][ T7396] RSP: 002b:00007fb93602bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 183.806616][ T7396] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 183.806626][ T7396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.806634][ T7396] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.806643][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.806651][ T7396] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 183.806670][ T7396] [ 184.572297][ T7408] FAULT_INJECTION: forcing a failure. [ 184.572297][ T7408] name failslab, interval 1, probability 0, space 0, times 0 [ 184.648206][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(full) [ 184.648244][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.648260][ T7408] Call Trace: [ 184.648269][ T7408] [ 184.648279][ T7408] dump_stack_lvl+0x16c/0x1f0 [ 184.648315][ T7408] should_fail_ex+0x512/0x640 [ 184.648357][ T7408] ? __kmalloc_noprof+0xca/0x880 [ 184.648401][ T7408] should_failslab+0xc2/0x120 [ 184.648436][ T7408] __kmalloc_noprof+0xdd/0x880 [ 184.648476][ T7408] ? ops_init+0x77/0x5f0 [ 184.648508][ T7408] ? ops_init+0x77/0x5f0 [ 184.648541][ T7408] ops_init+0x77/0x5f0 [ 184.648573][ T7408] setup_net+0x100/0x390 [ 184.648602][ T7408] ? __pfx_setup_net+0x10/0x10 [ 184.648632][ T7408] ? debug_mutex_init+0x37/0x70 [ 184.648665][ T7408] copy_net_ns+0x2f8/0x690 [ 184.648699][ T7408] create_new_namespaces+0x3ea/0xa90 [ 184.648738][ T7408] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 184.648768][ T7408] ksys_unshare+0x45b/0xa40 [ 184.648802][ T7408] ? __pfx_ksys_unshare+0x10/0x10 [ 184.648838][ T7408] ? xfd_validate_state+0x61/0x180 [ 184.648885][ T7408] __x64_sys_unshare+0x31/0x40 [ 184.648919][ T7408] do_syscall_64+0xcd/0xfa0 [ 184.648952][ T7408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.648979][ T7408] RIP: 0033:0x7fb93518efc9 [ 184.649000][ T7408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.649026][ T7408] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.649049][ T7408] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 184.649066][ T7408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 184.649082][ T7408] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 184.649098][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.649113][ T7408] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 184.649151][ T7408] [ 184.853543][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.104824][ T7476] netlink: 98 bytes leftover after parsing attributes in process `syz.2.329'. [ 187.142270][ T7476] netlink: 2 bytes leftover after parsing attributes in process `syz.2.329'. [ 187.534651][ T7482] FAULT_INJECTION: forcing a failure. [ 187.534651][ T7482] name failslab, interval 1, probability 0, space 0, times 0 [ 187.603933][ T7482] CPU: 1 UID: 0 PID: 7482 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT(full) [ 187.603971][ T7482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.603988][ T7482] Call Trace: [ 187.603997][ T7482] [ 187.604008][ T7482] dump_stack_lvl+0x16c/0x1f0 [ 187.604044][ T7482] should_fail_ex+0x512/0x640 [ 187.604082][ T7482] ? __kmalloc_noprof+0xca/0x880 [ 187.604129][ T7482] should_failslab+0xc2/0x120 [ 187.604165][ T7482] __kmalloc_noprof+0xdd/0x880 [ 187.604206][ T7482] ? ops_init+0x77/0x5f0 [ 187.604238][ T7482] ? ops_init+0x77/0x5f0 [ 187.604270][ T7482] ops_init+0x77/0x5f0 [ 187.604302][ T7482] setup_net+0x100/0x390 [ 187.604331][ T7482] ? __pfx_setup_net+0x10/0x10 [ 187.604360][ T7482] ? debug_mutex_init+0x37/0x70 [ 187.604393][ T7482] copy_net_ns+0x2f8/0x690 [ 187.604427][ T7482] create_new_namespaces+0x3ea/0xa90 [ 187.604466][ T7482] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 187.604500][ T7482] ksys_unshare+0x45b/0xa40 [ 187.604536][ T7482] ? __pfx_ksys_unshare+0x10/0x10 [ 187.604571][ T7482] ? xfd_validate_state+0x61/0x180 [ 187.604619][ T7482] __x64_sys_unshare+0x31/0x40 [ 187.604653][ T7482] do_syscall_64+0xcd/0xfa0 [ 187.604684][ T7482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.604711][ T7482] RIP: 0033:0x7fc563d8efc9 [ 187.604732][ T7482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.604758][ T7482] RSP: 002b:00007fc564b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 187.604784][ T7482] RAX: ffffffffffffffda RBX: 00007fc563fe5fa0 RCX: 00007fc563d8efc9 [ 187.604823][ T7482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 187.604841][ T7482] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.604857][ T7482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.604874][ T7482] R13: 00007fc563fe6038 R14: 00007fc563fe5fa0 R15: 00007ffca04e61b8 [ 187.604914][ T7482] [ 189.274557][ T7518] mmap: syz.0.340 (7518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 189.388187][ T7522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 189.712206][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 189.881337][ T7523] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 190.672582][ T7552] FAULT_INJECTION: forcing a failure. [ 190.672582][ T7552] name failslab, interval 1, probability 0, space 0, times 0 [ 190.687038][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.3.346 Not tainted syzkaller #0 PREEMPT(full) [ 190.687076][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.687091][ T7552] Call Trace: [ 190.687099][ T7552] [ 190.687109][ T7552] dump_stack_lvl+0x16c/0x1f0 [ 190.687144][ T7552] should_fail_ex+0x512/0x640 [ 190.687177][ T7552] ? __kmalloc_cache_noprof+0x5f/0x780 [ 190.687217][ T7552] should_failslab+0xc2/0x120 [ 190.687246][ T7552] __kmalloc_cache_noprof+0x72/0x780 [ 190.687284][ T7552] ? single_open+0x4d/0x1f0 [ 190.687321][ T7552] ? __pfx_snd_info_seq_show+0x10/0x10 [ 190.687352][ T7552] ? single_open+0x4d/0x1f0 [ 190.687384][ T7552] ? kasan_save_track+0x14/0x30 [ 190.687412][ T7552] single_open+0x4d/0x1f0 [ 190.687445][ T7552] snd_info_text_entry_open+0x179/0x2e0 [ 190.687479][ T7552] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 190.687512][ T7552] ? proc_reg_open+0x23f/0x5f0 [ 190.687547][ T7552] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 190.687582][ T7552] proc_reg_open+0x2ab/0x5f0 [ 190.687622][ T7552] do_dentry_open+0x982/0x1530 [ 190.687650][ T7552] ? __pfx_proc_reg_open+0x10/0x10 [ 190.687688][ T7552] vfs_open+0x82/0x3f0 [ 190.687732][ T7552] path_openat+0x1de4/0x2cb0 [ 190.687771][ T7552] ? __pfx_path_openat+0x10/0x10 [ 190.687800][ T7552] ? __lock_acquire+0xb8a/0x1c90 [ 190.687840][ T7552] do_filp_open+0x20b/0x470 [ 190.687870][ T7552] ? __pfx_do_filp_open+0x10/0x10 [ 190.687926][ T7552] ? alloc_fd+0x471/0x7d0 [ 190.687963][ T7552] do_sys_openat2+0x11b/0x1d0 [ 190.687998][ T7552] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.688049][ T7552] __x64_sys_openat+0x174/0x210 [ 190.688086][ T7552] ? __pfx___x64_sys_openat+0x10/0x10 [ 190.688136][ T7552] do_syscall_64+0xcd/0xfa0 [ 190.688170][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.688196][ T7552] RIP: 0033:0x7fb93518efc9 [ 190.688218][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.688244][ T7552] RSP: 002b:00007fb93602c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 190.688269][ T7552] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 190.688287][ T7552] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 190.688303][ T7552] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 190.688319][ T7552] R10: 00000000000041b1 R11: 0000000000000246 R12: 0000000000000000 [ 190.688335][ T7552] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 190.688373][ T7552] [ 190.936773][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.247475][ T7559] FAULT_INJECTION: forcing a failure. [ 191.247475][ T7559] name failslab, interval 1, probability 0, space 0, times 0 [ 191.302013][ T7559] CPU: 0 UID: 0 PID: 7559 Comm: syz.0.349 Not tainted syzkaller #0 PREEMPT(full) [ 191.302051][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.302067][ T7559] Call Trace: [ 191.302075][ T7559] [ 191.302086][ T7559] dump_stack_lvl+0x16c/0x1f0 [ 191.302123][ T7559] should_fail_ex+0x512/0x640 [ 191.302161][ T7559] ? fs_reclaim_acquire+0xae/0x150 [ 191.302207][ T7559] should_failslab+0xc2/0x120 [ 191.302243][ T7559] __kmalloc_noprof+0xdd/0x880 [ 191.302283][ T7559] ? tomoyo_profile+0x47/0x60 [ 191.302313][ T7559] ? tomoyo_supervisor+0x45b/0x13b0 [ 191.302352][ T7559] ? tomoyo_supervisor+0x45b/0x13b0 [ 191.302384][ T7559] tomoyo_supervisor+0x45b/0x13b0 [ 191.302424][ T7559] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 191.302487][ T7559] ? tomoyo_check_path_acl+0xad/0x210 [ 191.302529][ T7559] ? tomoyo_check_acl+0x1f7/0x410 [ 191.302571][ T7559] tomoyo_path_permission+0x270/0x3b0 [ 191.302623][ T7559] tomoyo_check_open_permission+0x37b/0x3c0 [ 191.302665][ T7559] ? _raw_spin_unlock+0x28/0x50 [ 191.302691][ T7559] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 191.302772][ T7559] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.302821][ T7559] tomoyo_file_open+0x6b/0x90 [ 191.302856][ T7559] security_file_open+0x84/0x1e0 [ 191.302884][ T7559] do_dentry_open+0x596/0x1530 [ 191.302926][ T7559] vfs_open+0x82/0x3f0 [ 191.302966][ T7559] path_openat+0x1de4/0x2cb0 [ 191.303007][ T7559] ? __pfx_path_openat+0x10/0x10 [ 191.303038][ T7559] ? __lock_acquire+0xb8a/0x1c90 [ 191.303076][ T7559] do_filp_open+0x20b/0x470 [ 191.303105][ T7559] ? __pfx_do_filp_open+0x10/0x10 [ 191.303161][ T7559] ? alloc_fd+0x471/0x7d0 [ 191.303197][ T7559] do_sys_openat2+0x11b/0x1d0 [ 191.303233][ T7559] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.303284][ T7559] __x64_sys_openat+0x174/0x210 [ 191.303319][ T7559] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.303369][ T7559] do_syscall_64+0xcd/0xfa0 [ 191.303402][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.303429][ T7559] RIP: 0033:0x7f396b58efc9 [ 191.303450][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.303475][ T7559] RSP: 002b:00007f396c4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.303498][ T7559] RAX: ffffffffffffffda RBX: 00007f396b7e6090 RCX: 00007f396b58efc9 [ 191.303512][ T7559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 191.303527][ T7559] RBP: 00007f396b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.303544][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.303558][ T7559] R13: 00007f396b7e6128 R14: 00007f396b7e6090 R15: 00007ffd938f7998 [ 191.303601][ T7559] [ 191.943160][ T7575] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 192.086881][ T7578] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 192.095875][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 194.241508][ T7613] FAULT_INJECTION: forcing a failure. [ 194.241508][ T7613] name failslab, interval 1, probability 0, space 0, times 0 [ 194.258696][ T7613] CPU: 0 UID: 0 PID: 7613 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT(full) [ 194.258735][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.258752][ T7613] Call Trace: [ 194.258761][ T7613] [ 194.258772][ T7613] dump_stack_lvl+0x16c/0x1f0 [ 194.258810][ T7613] should_fail_ex+0x512/0x640 [ 194.258850][ T7613] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 194.258883][ T7613] should_failslab+0xc2/0x120 [ 194.258919][ T7613] kmem_cache_alloc_noprof+0x75/0x6e0 [ 194.258947][ T7613] ? getname_flags.part.0+0x4c/0x550 [ 194.258992][ T7613] ? getname_flags.part.0+0x4c/0x550 [ 194.259028][ T7613] getname_flags.part.0+0x4c/0x550 [ 194.259069][ T7613] getname_flags+0x93/0xf0 [ 194.259094][ T7613] user_path_at+0x24/0x60 [ 194.259119][ T7613] __x64_sys_mount+0x1fb/0x310 [ 194.259151][ T7613] ? __pfx___x64_sys_mount+0x10/0x10 [ 194.259194][ T7613] do_syscall_64+0xcd/0xfa0 [ 194.259231][ T7613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.259259][ T7613] RIP: 0033:0x7fb93518efc9 [ 194.259282][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.259308][ T7613] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 194.259336][ T7613] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 194.259355][ T7613] RDX: 0000200000000040 RSI: 0000200000000540 RDI: 0000000000000000 [ 194.259374][ T7613] RBP: 00007fb935211f91 R08: 00002000000003c0 R09: 0000000000000000 [ 194.259391][ T7613] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 194.259407][ T7613] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 194.259445][ T7613] [ 194.764083][ T7620] netlink: 98 bytes leftover after parsing attributes in process `syz.1.364'. [ 194.787953][ T7620] netlink: 2 bytes leftover after parsing attributes in process `syz.1.364'. [ 195.130081][ T7627] mkiss: ax0: crc mode is auto. [ 195.585534][ T7641] FAULT_INJECTION: forcing a failure. [ 195.585534][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 195.629152][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.1.370 Not tainted syzkaller #0 PREEMPT(full) [ 195.629188][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.629204][ T7641] Call Trace: [ 195.629209][ T7641] [ 195.629214][ T7641] dump_stack_lvl+0x16c/0x1f0 [ 195.629238][ T7641] should_fail_ex+0x512/0x640 [ 195.629260][ T7641] ? __kmalloc_noprof+0xca/0x880 [ 195.629284][ T7641] should_failslab+0xc2/0x120 [ 195.629304][ T7641] __kmalloc_noprof+0xdd/0x880 [ 195.629324][ T7641] ? lsm_blob_alloc+0x68/0x90 [ 195.629344][ T7641] ? lsm_blob_alloc+0x68/0x90 [ 195.629359][ T7641] lsm_blob_alloc+0x68/0x90 [ 195.629375][ T7641] security_task_alloc+0x2d/0x260 [ 195.629391][ T7641] copy_process+0x220b/0x76a0 [ 195.629408][ T7641] ? __pfx___futex_wait+0x10/0x10 [ 195.629428][ T7641] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 195.629450][ T7641] ? __pfx_copy_process+0x10/0x10 [ 195.629465][ T7641] ? futex_private_hash_put+0x176/0x300 [ 195.629493][ T7641] ? futex_private_hash_put+0x18a/0x300 [ 195.629514][ T7641] kernel_clone+0xfc/0x930 [ 195.629532][ T7641] ? __pfx_kernel_clone+0x10/0x10 [ 195.629560][ T7641] __do_sys_clone+0xce/0x120 [ 195.629577][ T7641] ? __pfx___do_sys_clone+0x10/0x10 [ 195.629605][ T7641] ? xfd_validate_state+0x61/0x180 [ 195.629631][ T7641] do_syscall_64+0xcd/0xfa0 [ 195.629647][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.629661][ T7641] RIP: 0033:0x7fc563d8efc9 [ 195.629673][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.629687][ T7641] RSP: 002b:00007fc561ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 195.629701][ T7641] RAX: ffffffffffffffda RBX: 00007fc563fe6090 RCX: 00007fc563d8efc9 [ 195.629710][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.629718][ T7641] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 195.629727][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.629735][ T7641] R13: 00007fc563fe6128 R14: 00007fc563fe6090 R15: 00007ffca04e61b8 [ 195.629754][ T7641] [ 195.846521][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.144763][ T7655] FAULT_INJECTION: forcing a failure. [ 196.144763][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 196.159596][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) [ 196.159633][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.159648][ T7655] Call Trace: [ 196.159657][ T7655] [ 196.159667][ T7655] dump_stack_lvl+0x16c/0x1f0 [ 196.159704][ T7655] should_fail_ex+0x512/0x640 [ 196.159741][ T7655] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 196.159774][ T7655] should_failslab+0xc2/0x120 [ 196.159810][ T7655] kmem_cache_alloc_node_noprof+0x78/0x770 [ 196.159838][ T7655] ? alloc_vmap_area+0x648/0x29e0 [ 196.159877][ T7655] ? alloc_vmap_area+0x648/0x29e0 [ 196.159908][ T7655] alloc_vmap_area+0x648/0x29e0 [ 196.159954][ T7655] ? __pfx_alloc_vmap_area+0x10/0x10 [ 196.159995][ T7655] __get_vm_area_node+0x1ca/0x330 [ 196.160037][ T7655] __vmalloc_node_range_noprof+0x271/0x1480 [ 196.160070][ T7655] ? kernel_clone+0xfc/0x930 [ 196.160110][ T7655] ? kernel_clone+0xfc/0x930 [ 196.160156][ T7655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.160201][ T7655] ? rcu_is_watching+0x12/0xc0 [ 196.160227][ T7655] ? kernel_clone+0xfc/0x930 [ 196.160252][ T7655] __vmalloc_node_noprof+0xad/0xf0 [ 196.160283][ T7655] ? kernel_clone+0xfc/0x930 [ 196.160314][ T7655] copy_process+0x2c77/0x76a0 [ 196.160342][ T7655] ? __pfx___futex_wait+0x10/0x10 [ 196.160394][ T7655] ? __pfx_copy_process+0x10/0x10 [ 196.160421][ T7655] ? futex_private_hash_put+0x176/0x300 [ 196.160457][ T7655] ? futex_private_hash_put+0x18a/0x300 [ 196.160494][ T7655] kernel_clone+0xfc/0x930 [ 196.160525][ T7655] ? __pfx_kernel_clone+0x10/0x10 [ 196.160575][ T7655] __do_sys_clone+0xce/0x120 [ 196.160607][ T7655] ? __pfx___do_sys_clone+0x10/0x10 [ 196.160653][ T7655] ? xfd_validate_state+0x61/0x180 [ 196.160701][ T7655] do_syscall_64+0xcd/0xfa0 [ 196.160732][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.160759][ T7655] RIP: 0033:0x7f3a03d8efc9 [ 196.160782][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.160808][ T7655] RSP: 002b:00007f3a04bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 196.160833][ T7655] RAX: ffffffffffffffda RBX: 00007f3a03fe6090 RCX: 00007f3a03d8efc9 [ 196.160851][ T7655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.160867][ T7655] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.160884][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.160899][ T7655] R13: 00007f3a03fe6128 R14: 00007f3a03fe6090 R15: 00007ffe01410db8 [ 196.160935][ T7655] [ 196.160976][ T7655] warn_alloc: 1 callbacks suppressed [ 196.160989][ T7655] syz.2.372: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 196.297904][ T7647] zswap: compressor not available [ 196.306117][ T7655] ,cpuset=/,mems_allowed=0-1 [ 196.453806][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.372 Not tainted syzkaller #0 PREEMPT(full) [ 196.453842][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.453858][ T7655] Call Trace: [ 196.453867][ T7655] [ 196.453877][ T7655] dump_stack_lvl+0x16c/0x1f0 [ 196.453911][ T7655] warn_alloc+0x248/0x3a0 [ 196.453936][ T7655] ? __pfx_warn_alloc+0x10/0x10 [ 196.453962][ T7655] ? kfree+0x2b8/0x6d0 [ 196.453980][ T7655] ? __get_vm_area_node+0x2cd/0x330 [ 196.454022][ T7655] ? __get_vm_area_node+0x2cd/0x330 [ 196.454056][ T7655] ? __get_vm_area_node+0x208/0x330 [ 196.454099][ T7655] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 196.454146][ T7655] ? kernel_clone+0xfc/0x930 [ 196.454187][ T7655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.454231][ T7655] ? rcu_is_watching+0x12/0xc0 [ 196.454261][ T7655] ? kernel_clone+0xfc/0x930 [ 196.454291][ T7655] __vmalloc_node_noprof+0xad/0xf0 [ 196.454327][ T7655] ? kernel_clone+0xfc/0x930 [ 196.454362][ T7655] copy_process+0x2c77/0x76a0 [ 196.454393][ T7655] ? __pfx___futex_wait+0x10/0x10 [ 196.454449][ T7655] ? __pfx_copy_process+0x10/0x10 [ 196.454487][ T7655] ? futex_private_hash_put+0x176/0x300 [ 196.454524][ T7655] ? futex_private_hash_put+0x18a/0x300 [ 196.454554][ T7655] kernel_clone+0xfc/0x930 [ 196.454589][ T7655] ? __pfx_kernel_clone+0x10/0x10 [ 196.454641][ T7655] __do_sys_clone+0xce/0x120 [ 196.454674][ T7655] ? __pfx___do_sys_clone+0x10/0x10 [ 196.454720][ T7655] ? xfd_validate_state+0x61/0x180 [ 196.454766][ T7655] do_syscall_64+0xcd/0xfa0 [ 196.454798][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.454823][ T7655] RIP: 0033:0x7f3a03d8efc9 [ 196.454843][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.454868][ T7655] RSP: 002b:00007f3a04bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 196.454893][ T7655] RAX: ffffffffffffffda RBX: 00007f3a03fe6090 RCX: 00007f3a03d8efc9 [ 196.454912][ T7655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.454928][ T7655] RBP: 00007f3a03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.454945][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.454961][ T7655] R13: 00007f3a03fe6128 R14: 00007f3a03fe6090 R15: 00007ffe01410db8 [ 196.454996][ T7655] [ 196.455006][ T7655] Mem-Info: [ 196.619502][ T7662] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 196.639077][ T7655] active_anon:10350 inactive_anon:3327 isolated_anon:0 [ 196.639077][ T7655] active_file:16996 inactive_file:39570 isolated_file:0 [ 196.639077][ T7655] unevictable:768 dirty:1722 writeback:0 [ 196.639077][ T7655] slab_reclaimable:11375 slab_unreclaimable:93911 [ 196.639077][ T7655] mapped:26060 shmem:1379 pagetables:1197 [ 196.639077][ T7655] sec_pagetables:0 bounce:0 [ 196.639077][ T7655] kernel_misc_reclaimable:0 [ 196.639077][ T7655] free:1318737 free_pcp:15422 free_cma:0 [ 196.751961][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.776007][ T7655] Node 0 active_anon:41400kB inactive_anon:13308kB active_file:67976kB inactive_file:158088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104340kB dirty:6888kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11736kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.808281][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.889737][ T7655] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.926416][ T7655] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.956365][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.995561][ T7655] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 197.021252][ T7655] Node 0 DMA32 free:1363372kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41400kB inactive_anon:13208kB active_file:67976kB inactive_file:158088kB unevictable:1536kB writepending:6888kB zspages:0kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:45492kB local_pcp:24696kB free_cma:0kB [ 197.115247][ T7655] lowmem_reserve[]: 0 0 1 1 1 [ 197.120152][ T7655] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.151840][ T7655] lowmem_reserve[]: 0 0 0 0 0 [ 197.157777][ T7655] Node 1 Normal free:3897752kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:4832kB free_cma:0kB [ 197.190105][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.199706][ T7655] lowmem_reserve[]: 0 0 0 0 0 [ 197.221019][ T7672] netlink: 110 bytes leftover after parsing attributes in process `syz.0.376'. [ 197.227795][ T7655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.249454][ T7655] Node 0 DMA32: 1303*4kB (UME) 470*8kB (UM) 184*16kB (UME) 796*32kB (UM) 468*64kB (UME) 324*128kB (UME) 163*256kB (UM) 37*512kB (UME) 8*1024kB (UME) 1*2048kB (M) 289*4096kB (UM) = 1363468kB [ 197.270965][ T7655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.287769][ T7655] Node 1 Normal: 170*4kB (UE) 48*8kB (UME) 25*16kB (UME) 127*32kB [ 197.290069][ T7672] netlink: 2 bytes leftover after parsing attributes in process `syz.0.376'. [ 197.337744][ T7655] (UME) 46*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3897752kB [ 197.375659][ T7655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.389190][ T7655] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 197.399077][ T7655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.411647][ T7655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.443609][ T7655] 57948 total pagecache pages [ 197.449038][ T7655] 25 pages in swap cache [ 197.453781][ T7655] Free swap = 124888kB [ 197.460217][ T7655] Total swap = 124996kB [ 197.464501][ T7655] 2097051 pages RAM [ 197.470520][ T7655] 0 pages HighMem/MovableOnly [ 197.475326][ T7655] 428687 pages reserved [ 197.486904][ T7655] 0 pages cma reserved [ 198.461116][ T7707] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 198.692733][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 199.704844][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.711602][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.467304][ T7747] zswap: compressor not available [ 200.636727][ T7756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 200.820304][ T7756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 202.544159][ T7791] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 202.853763][ T7795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 203.033522][ T30] audit: type=1804 audit(4294967385.620:5): pid=7804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.397" name="/newroot/sys/kernel/tracing/error_log" dev="tracefs" ino=261 res=1 errno=0 [ 203.056294][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.070236][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 203.207110][ T7805] usbip-vudc usbip-vudc.0: gadget not bound [ 203.709100][ T7812] misc userio: Invalid payload size [ 204.231597][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.401'. [ 204.277935][ T7822] bridge_slave_1: left allmulticast mode [ 204.307807][ T7822] bridge_slave_1: left promiscuous mode [ 204.315180][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.429128][ T7822] bridge_slave_0: left allmulticast mode [ 204.435059][ T7822] bridge_slave_0: left promiscuous mode [ 204.451944][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.488071][ T7824] zswap: compressor not available [ 204.856018][ T7832] netlink: 146 bytes leftover after parsing attributes in process `syz.0.404'. [ 205.056861][ T7841] netlink: set zone limit has 8 unknown bytes [ 205.608187][ T7858] program syz.0.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.406852][ T7869] openvswitch: netlink: IP tunnel dst address not specified [ 206.811804][ T7872] FAULT_INJECTION: forcing a failure. [ 206.811804][ T7872] name failslab, interval 1, probability 0, space 0, times 0 [ 206.868498][ T7872] CPU: 1 UID: 0 PID: 7872 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT(full) [ 206.868537][ T7872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.868553][ T7872] Call Trace: [ 206.868563][ T7872] [ 206.868573][ T7872] dump_stack_lvl+0x16c/0x1f0 [ 206.868608][ T7872] should_fail_ex+0x512/0x640 [ 206.868648][ T7872] ? __kmalloc_cache_noprof+0x5f/0x780 [ 206.868694][ T7872] should_failslab+0xc2/0x120 [ 206.868729][ T7872] __kmalloc_cache_noprof+0x72/0x780 [ 206.868774][ T7872] ? kernfs_fop_open+0xa3a/0xda0 [ 206.868806][ T7872] ? kernfs_fop_open+0xa3a/0xda0 [ 206.868830][ T7872] kernfs_fop_open+0xa3a/0xda0 [ 206.868864][ T7872] do_dentry_open+0x982/0x1530 [ 206.868896][ T7872] ? __pfx_kernfs_fop_open+0x10/0x10 [ 206.868928][ T7872] vfs_open+0x82/0x3f0 [ 206.868970][ T7872] path_openat+0x1de4/0x2cb0 [ 206.869012][ T7872] ? __pfx_path_openat+0x10/0x10 [ 206.869044][ T7872] ? __lock_acquire+0xb8a/0x1c90 [ 206.869083][ T7872] do_filp_open+0x20b/0x470 [ 206.869112][ T7872] ? __pfx_do_filp_open+0x10/0x10 [ 206.869167][ T7872] ? alloc_fd+0x471/0x7d0 [ 206.869207][ T7872] do_sys_openat2+0x11b/0x1d0 [ 206.869243][ T7872] ? __pfx_do_sys_openat2+0x10/0x10 [ 206.869290][ T7872] __x64_sys_openat+0x174/0x210 [ 206.869326][ T7872] ? __pfx___x64_sys_openat+0x10/0x10 [ 206.869374][ T7872] do_syscall_64+0xcd/0xfa0 [ 206.869405][ T7872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.869428][ T7872] RIP: 0033:0x7fb93518efc9 [ 206.869448][ T7872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.869473][ T7872] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 206.869497][ T7872] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 206.869514][ T7872] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 206.869529][ T7872] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.869543][ T7872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.869557][ T7872] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 206.869589][ T7872] [ 207.157805][ T7880] FAULT_INJECTION: forcing a failure. [ 207.157805][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 207.178298][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.1.413 Not tainted syzkaller #0 PREEMPT(full) [ 207.178337][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.178353][ T7880] Call Trace: [ 207.178362][ T7880] [ 207.178373][ T7880] dump_stack_lvl+0x16c/0x1f0 [ 207.178408][ T7880] should_fail_ex+0x512/0x640 [ 207.178461][ T7880] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 207.178499][ T7880] should_failslab+0xc2/0x120 [ 207.178532][ T7880] kmem_cache_alloc_node_noprof+0x78/0x770 [ 207.178556][ T7880] ? alloc_vmap_area+0x648/0x29e0 [ 207.178591][ T7880] ? alloc_vmap_area+0x648/0x29e0 [ 207.178619][ T7880] alloc_vmap_area+0x648/0x29e0 [ 207.178663][ T7880] ? __pfx_alloc_vmap_area+0x10/0x10 [ 207.178704][ T7880] __get_vm_area_node+0x1ca/0x330 [ 207.178742][ T7880] __vmalloc_node_range_noprof+0x271/0x1480 [ 207.178778][ T7880] ? kernel_clone+0xfc/0x930 [ 207.178822][ T7880] ? kernel_clone+0xfc/0x930 [ 207.178861][ T7880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.178907][ T7880] ? rcu_is_watching+0x12/0xc0 [ 207.178938][ T7880] ? kernel_clone+0xfc/0x930 [ 207.178967][ T7880] __vmalloc_node_noprof+0xad/0xf0 [ 207.179002][ T7880] ? kernel_clone+0xfc/0x930 [ 207.179036][ T7880] copy_process+0x2c77/0x76a0 [ 207.179068][ T7880] ? __pfx___futex_wait+0x10/0x10 [ 207.179121][ T7880] ? __pfx_copy_process+0x10/0x10 [ 207.179150][ T7880] ? futex_private_hash_put+0x176/0x300 [ 207.179186][ T7880] ? futex_private_hash_put+0x18a/0x300 [ 207.179223][ T7880] kernel_clone+0xfc/0x930 [ 207.179258][ T7880] ? __pfx_kernel_clone+0x10/0x10 [ 207.179311][ T7880] __do_sys_clone+0xce/0x120 [ 207.179343][ T7880] ? __pfx___do_sys_clone+0x10/0x10 [ 207.179392][ T7880] ? xfd_validate_state+0x61/0x180 [ 207.179450][ T7880] do_syscall_64+0xcd/0xfa0 [ 207.179485][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.179513][ T7880] RIP: 0033:0x7fc563d8efc9 [ 207.179534][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.179560][ T7880] RSP: 002b:00007fc561ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 207.179587][ T7880] RAX: ffffffffffffffda RBX: 00007fc563fe6090 RCX: 00007fc563d8efc9 [ 207.179606][ T7880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.179622][ T7880] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.179639][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.179654][ T7880] R13: 00007fc563fe6128 R14: 00007fc563fe6090 R15: 00007ffca04e61b8 [ 207.179693][ T7880] [ 207.179724][ T7880] syz.1.413: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.466614][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.1.413 Not tainted syzkaller #0 PREEMPT(full) [ 207.466649][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.466664][ T7880] Call Trace: [ 207.466671][ T7880] [ 207.466680][ T7880] dump_stack_lvl+0x16c/0x1f0 [ 207.466712][ T7880] warn_alloc+0x248/0x3a0 [ 207.466739][ T7880] ? __pfx_warn_alloc+0x10/0x10 [ 207.466768][ T7880] ? kfree+0x2b8/0x6d0 [ 207.466786][ T7880] ? __get_vm_area_node+0x2cd/0x330 [ 207.466819][ T7880] ? __get_vm_area_node+0x2cd/0x330 [ 207.466848][ T7880] ? __get_vm_area_node+0x208/0x330 [ 207.466885][ T7880] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 207.466932][ T7880] ? kernel_clone+0xfc/0x930 [ 207.466972][ T7880] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.467016][ T7880] ? rcu_is_watching+0x12/0xc0 [ 207.467045][ T7880] ? kernel_clone+0xfc/0x930 [ 207.467073][ T7880] __vmalloc_node_noprof+0xad/0xf0 [ 207.467108][ T7880] ? kernel_clone+0xfc/0x930 [ 207.467138][ T7880] copy_process+0x2c77/0x76a0 [ 207.467167][ T7880] ? __pfx___futex_wait+0x10/0x10 [ 207.467214][ T7880] ? __pfx_copy_process+0x10/0x10 [ 207.467243][ T7880] ? futex_private_hash_put+0x176/0x300 [ 207.467277][ T7880] ? futex_private_hash_put+0x18a/0x300 [ 207.467307][ T7880] kernel_clone+0xfc/0x930 [ 207.467327][ T7880] ? __pfx_kernel_clone+0x10/0x10 [ 207.467363][ T7880] __do_sys_clone+0xce/0x120 [ 207.467381][ T7880] ? __pfx___do_sys_clone+0x10/0x10 [ 207.467413][ T7880] ? xfd_validate_state+0x61/0x180 [ 207.467440][ T7880] do_syscall_64+0xcd/0xfa0 [ 207.467458][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.467472][ T7880] RIP: 0033:0x7fc563d8efc9 [ 207.467484][ T7880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.467498][ T7880] RSP: 002b:00007fc561ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 207.467512][ T7880] RAX: ffffffffffffffda RBX: 00007fc563fe6090 RCX: 00007fc563d8efc9 [ 207.467522][ T7880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.467530][ T7880] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.467539][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.467547][ T7880] R13: 00007fc563fe6128 R14: 00007fc563fe6090 R15: 00007ffca04e61b8 [ 207.467566][ T7880] [ 207.697472][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.710551][ T7880] Mem-Info: [ 207.713079][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.414'. [ 207.713696][ T7880] active_anon:10325 inactive_anon:3416 isolated_anon:0 [ 207.713696][ T7880] active_file:16999 inactive_file:39553 isolated_file:0 [ 207.713696][ T7880] unevictable:768 dirty:970 writeback:0 [ 207.713696][ T7880] slab_reclaimable:11518 slab_unreclaimable:94038 [ 207.713696][ T7880] mapped:25065 shmem:1378 pagetables:1180 [ 207.713696][ T7880] sec_pagetables:0 bounce:0 [ 207.713696][ T7880] kernel_misc_reclaimable:0 [ 207.713696][ T7880] free:1319651 free_pcp:14112 free_cma:0 [ 207.722852][ T7884] bridge_slave_1: left allmulticast mode [ 207.768188][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.769492][ T7880] Node 0 active_anon:41300kB inactive_anon:13664kB active_file:67988kB inactive_file:158020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100260kB dirty:3880kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11684kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.813218][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.819428][ T7880] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.849254][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.857639][ T7880] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.888342][ T7880] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 207.894158][ T7880] Node 0 DMA32 free:1366452kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41300kB inactive_anon:13664kB active_file:67988kB inactive_file:158020kB unevictable:1536kB writepending:3880kB zspages:0kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:39068kB local_pcp:21052kB free_cma:0kB [ 207.927900][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.933928][ T7880] lowmem_reserve[]: 0 0 1 1 1 [ 207.938696][ T7880] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.968225][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.976053][ T7880] lowmem_reserve[]: 0 0 0 0 0 [ 207.980845][ T7880] Node 1 Normal free:3896792kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16716kB local_pcp:11416kB free_cma:0kB [ 208.013192][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.023747][ T7884] bridge_slave_1: left promiscuous mode [ 208.039639][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.053736][ T7880] lowmem_reserve[]: 0 0 0 0 0 [ 208.061799][ T7880] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.063513][ T7884] bridge_slave_0: left allmulticast mode [ 208.075338][ T7880] Node 0 DMA32: 1187*4kB (UME) 777*8kB (UM) 475*16kB (UME) 740*32kB (UM) 487*64kB (UME) 324*128kB (UME) 165*256kB (UM) 35*512kB (M) 7*1024kB (ME) 0*2048kB 289*4096kB (UM) = 1365956kB [ 208.098934][ T7884] bridge_slave_0: left promiscuous mode [ 208.099223][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.112994][ T7880] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 208.138419][ T7880] Node 1 Normal: 2*4kB (E) 6*8kB (ME) 24*16kB (UME) 129*32kB (UME) 46*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896792kB [ 208.164148][ T7880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.174940][ T7880] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.185383][ T7880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 208.198943][ T7880] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 208.210748][ T7880] 58428 total pagecache pages [ 208.215440][ T7880] 7 pages in swap cache [ 208.228095][ T7880] Free swap = 124904kB [ 208.234069][ T7880] Total swap = 124996kB [ 208.238597][ T7880] 2097051 pages RAM [ 208.242446][ T7880] 0 pages HighMem/MovableOnly [ 208.257590][ T7880] 428687 pages reserved [ 208.262047][ T7880] 0 pages cma reserved [ 208.672171][ T7888] zswap: compressor not available [ 209.551909][ T7910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 209.830103][ T7912] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 211.376195][ T7951] openvswitch: netlink: IP tunnel dst address not specified [ 211.423053][ T7955] usbip-vudc usbip-vudc.0: gadget not bound [ 211.760644][ T7965] FAULT_INJECTION: forcing a failure. [ 211.760644][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 211.773864][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(full) [ 211.773901][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.773917][ T7965] Call Trace: [ 211.773926][ T7965] [ 211.773936][ T7965] dump_stack_lvl+0x16c/0x1f0 [ 211.773970][ T7965] should_fail_ex+0x512/0x640 [ 211.774008][ T7965] ? fs_reclaim_acquire+0xae/0x150 [ 211.774045][ T7965] should_failslab+0xc2/0x120 [ 211.774075][ T7965] __kmalloc_noprof+0xdd/0x880 [ 211.774112][ T7965] ? __pfx_from_kuid+0x10/0x10 [ 211.774134][ T7965] ? tomoyo_init_log+0x1385/0x2140 [ 211.774169][ T7965] ? tomoyo_init_log+0x1385/0x2140 [ 211.774193][ T7965] tomoyo_init_log+0x1385/0x2140 [ 211.774240][ T7965] ? __pfx_tomoyo_init_log+0x10/0x10 [ 211.774267][ T7965] ? tomoyo_profile+0x47/0x60 [ 211.774299][ T7965] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 211.774343][ T7965] tomoyo_supervisor+0x302/0x13b0 [ 211.774383][ T7965] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 211.774441][ T7965] ? tomoyo_check_path_acl+0xad/0x210 [ 211.774488][ T7965] ? tomoyo_check_acl+0x1f7/0x410 [ 211.774532][ T7965] tomoyo_path_permission+0x270/0x3b0 [ 211.774579][ T7965] tomoyo_check_open_permission+0x37b/0x3c0 [ 211.774621][ T7965] ? _raw_spin_unlock+0x3e/0x50 [ 211.774647][ T7965] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 211.774725][ T7965] ? do_raw_spin_lock+0x12c/0x2b0 [ 211.774774][ T7965] tomoyo_file_open+0x6b/0x90 [ 211.774815][ T7965] security_file_open+0x84/0x1e0 [ 211.774845][ T7965] do_dentry_open+0x596/0x1530 [ 211.774884][ T7965] vfs_open+0x82/0x3f0 [ 211.774922][ T7965] path_openat+0x1de4/0x2cb0 [ 211.774961][ T7965] ? __pfx_path_openat+0x10/0x10 [ 211.774991][ T7965] ? __lock_acquire+0xb8a/0x1c90 [ 211.775030][ T7965] do_filp_open+0x20b/0x470 [ 211.775060][ T7965] ? __pfx_do_filp_open+0x10/0x10 [ 211.775115][ T7965] ? alloc_fd+0x471/0x7d0 [ 211.775152][ T7965] do_sys_openat2+0x11b/0x1d0 [ 211.775189][ T7965] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.775241][ T7965] __x64_sys_openat+0x174/0x210 [ 211.775279][ T7965] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.775333][ T7965] do_syscall_64+0xcd/0xfa0 [ 211.775366][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.775393][ T7965] RIP: 0033:0x7fc563d8efc9 [ 211.775414][ T7965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.775440][ T7965] RSP: 002b:00007fc564b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.775466][ T7965] RAX: ffffffffffffffda RBX: 00007fc563fe5fa0 RCX: 00007fc563d8efc9 [ 211.775485][ T7965] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 211.775503][ T7965] RBP: 00007fc563e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.775520][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.775536][ T7965] R13: 00007fc563fe6038 R14: 00007fc563fe5fa0 R15: 00007ffca04e61b8 [ 211.775575][ T7965] [ 212.062562][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.133566][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.440'. [ 214.157877][ T8004] bridge_slave_1: left allmulticast mode [ 214.168106][ T8004] bridge_slave_1: left promiscuous mode [ 214.173975][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.286807][ T8004] bridge_slave_0: left allmulticast mode [ 214.294815][ T8004] bridge_slave_0: left promiscuous mode [ 214.304737][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.329358][ T8013] openvswitch: netlink: IP tunnel dst address not specified [ 220.999983][ T8141] syz.3.475: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 221.064696][ T8141] CPU: 1 UID: 7 PID: 8141 Comm: syz.3.475 Not tainted syzkaller #0 PREEMPT(full) [ 221.064732][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.064748][ T8141] Call Trace: [ 221.064757][ T8141] [ 221.064767][ T8141] dump_stack_lvl+0x16c/0x1f0 [ 221.064802][ T8141] warn_alloc+0x248/0x3a0 [ 221.064831][ T8141] ? __pfx_warn_alloc+0x10/0x10 [ 221.064879][ T8141] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 221.064927][ T8141] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 221.064970][ T8141] ? __pfx___might_resched+0x10/0x10 [ 221.064999][ T8141] ? rcu_is_watching+0x12/0xc0 [ 221.065027][ T8141] ? trace_contention_end+0xdd/0x130 [ 221.065063][ T8141] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 221.065099][ T8141] ? tomoyo_path_number_perm+0x295/0x580 [ 221.065144][ T8141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 221.065179][ T8141] ? __pfx___mutex_lock+0x10/0x10 [ 221.065213][ T8141] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.065261][ T8141] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 221.065294][ T8141] __vmalloc_node_noprof+0xad/0xf0 [ 221.065330][ T8141] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 221.065369][ T8141] dvb_dvr_do_ioctl+0x15d/0x290 [ 221.065410][ T8141] dvb_usercopy+0x167/0x340 [ 221.065439][ T8141] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 221.065476][ T8141] ? __pfx_dvb_usercopy+0x10/0x10 [ 221.065524][ T8141] ? __fget_files+0x20e/0x3c0 [ 221.065557][ T8141] dvb_dvr_ioctl+0x29/0x40 [ 221.065589][ T8141] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 221.065623][ T8141] __x64_sys_ioctl+0x18e/0x210 [ 221.065663][ T8141] do_syscall_64+0xcd/0xfa0 [ 221.065695][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.065722][ T8141] RIP: 0033:0x7fb93518efc9 [ 221.065744][ T8141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.065769][ T8141] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.065795][ T8141] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 221.065812][ T8141] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 221.065829][ T8141] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.065844][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.065860][ T8141] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 221.065906][ T8141] [ 221.065916][ T8141] Mem-Info: [ 221.365904][ T8141] active_anon:10338 inactive_anon:81930 isolated_anon:0 [ 221.365904][ T8141] active_file:16536 inactive_file:41705 isolated_file:0 [ 221.365904][ T8141] unevictable:768 dirty:753 writeback:0 [ 221.365904][ T8141] slab_reclaimable:11651 slab_unreclaimable:93750 [ 221.365904][ T8141] mapped:57415 shmem:79763 pagetables:1351 [ 221.365904][ T8141] sec_pagetables:0 bounce:0 [ 221.365904][ T8141] kernel_misc_reclaimable:0 [ 221.365904][ T8141] free:1240850 free_pcp:12429 free_cma:0 [ 221.438028][ T8141] Node 0 active_anon:41352kB inactive_anon:329920kB active_file:66136kB inactive_file:166628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:230260kB dirty:3012kB writeback:0kB shmem:319616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11572kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.537886][ T8141] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.632762][ T8141] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.745417][ T8141] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 221.773324][ T8141] Node 0 DMA32 free:1043936kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41352kB inactive_anon:332320kB active_file:66136kB inactive_file:166628kB unevictable:1536kB writepending:3012kB zspages:496kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:36332kB local_pcp:16596kB free_cma:0kB [ 221.867674][ T8141] lowmem_reserve[]: 0 0 1 1 1 [ 221.876880][ T8141] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.979771][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 221.984577][ T8141] Node 1 Normal free:3896804kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16348kB local_pcp:11168kB free_cma:0kB [ 222.038198][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 222.048019][ T8141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.081190][ T8141] Node 0 DMA32: 2*4kB (ME) 0*8kB 2*16kB (ME) 203*32kB (UME) 156*64kB (UE) 44*128kB (UE) 21*256kB (U) 1*512kB (E) 0*1024kB 1*2048kB (M) 244*4096kB (UM) = 1029512kB [ 222.151449][ T8141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 222.177832][ T8141] Node 1 Normal: 48*4kB (UE) 35*8kB (UME) 13*16kB (UM) 121*32kB (UME) 48*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3896904kB [ 222.208805][ T8141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.227746][ T8141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.237228][ T8141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 222.257913][ T8141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 222.267288][ T8141] 141886 total pagecache pages [ 222.277947][ T8141] 0 pages in swap cache [ 222.284457][ T8141] Free swap = 123160kB [ 222.308136][ T8141] Total swap = 124996kB [ 222.312335][ T8141] 2097051 pages RAM [ 222.316229][ T8141] 0 pages HighMem/MovableOnly [ 222.338307][ T8141] 428687 pages reserved [ 222.342565][ T8141] 0 pages cma reserved [ 223.513035][ T8166] openvswitch: netlink: IP tunnel dst address not specified [ 223.735035][ T8170] openvswitch: netlink: IP tunnel dst address not specified [ 225.517825][ T5837] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 225.910810][ T8220] netlink: 334 bytes leftover after parsing attributes in process `syz.3.496'. [ 227.029552][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.504'. [ 227.537749][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.234631][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 229.763381][ T8307] openvswitch: netlink: IP tunnel dst address not specified [ 230.122144][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 230.272825][ T8321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 230.486906][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 230.598381][ T8336] netlink: 'syz.0.530': attribute type 1 has an invalid length. [ 230.627056][ T8324] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 230.938852][ T8343] openvswitch: netlink: IP tunnel dst address not specified [ 231.093496][ T8350] FAULT_INJECTION: forcing a failure. [ 231.093496][ T8350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.109713][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.3.535 Not tainted syzkaller #0 PREEMPT(full) [ 231.109753][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.109770][ T8350] Call Trace: [ 231.109779][ T8350] [ 231.109790][ T8350] dump_stack_lvl+0x16c/0x1f0 [ 231.109827][ T8350] should_fail_ex+0x512/0x640 [ 231.109873][ T8350] should_fail_alloc_page+0xe7/0x130 [ 231.109913][ T8350] prepare_alloc_pages+0x3c2/0x610 [ 231.109954][ T8350] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 231.109989][ T8350] ? rcu_is_watching+0x12/0xc0 [ 231.110017][ T8350] ? trace_mm_page_alloc+0x11f/0x1a0 [ 231.110054][ T8350] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 231.110088][ T8350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.110127][ T8350] ? is_bpf_text_address+0x8a/0x1a0 [ 231.110165][ T8350] ? bpf_ksym_find+0x124/0x1c0 [ 231.110198][ T8350] ? is_bpf_text_address+0x94/0x1a0 [ 231.110235][ T8350] ? kernel_text_address+0x8d/0x100 [ 231.110284][ T8350] ? __kernel_text_address+0xd/0x40 [ 231.110309][ T8350] ? unwind_get_return_address+0x59/0xa0 [ 231.110351][ T8350] alloc_pages_bulk_noprof+0x71c/0x1410 [ 231.110379][ T8350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 231.110424][ T8350] ? policy_nodemask+0xea/0x4e0 [ 231.110464][ T8350] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 231.110494][ T8350] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 231.110546][ T8350] kasan_populate_vmalloc+0x112/0x2d0 [ 231.110576][ T8350] ? alloc_vmap_area+0x8b5/0x29e0 [ 231.110617][ T8350] alloc_vmap_area+0x960/0x29e0 [ 231.110664][ T8350] ? __pfx_alloc_vmap_area+0x10/0x10 [ 231.110706][ T8350] __get_vm_area_node+0x1ca/0x330 [ 231.110748][ T8350] __vmalloc_node_range_noprof+0x271/0x1480 [ 231.110787][ T8350] ? kernel_clone+0xfc/0x930 [ 231.110830][ T8350] ? kernel_clone+0xfc/0x930 [ 231.110871][ T8350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.110918][ T8350] ? rcu_is_watching+0x12/0xc0 [ 231.110950][ T8350] ? kernel_clone+0xfc/0x930 [ 231.110981][ T8350] __vmalloc_node_noprof+0xad/0xf0 [ 231.111017][ T8350] ? kernel_clone+0xfc/0x930 [ 231.111053][ T8350] copy_process+0x2c77/0x76a0 [ 231.111085][ T8350] ? __pfx___futex_wait+0x10/0x10 [ 231.111125][ T8350] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.111154][ T8350] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.111195][ T8350] ? __pfx_copy_process+0x10/0x10 [ 231.111228][ T8350] ? futex_private_hash_put+0x176/0x300 [ 231.111273][ T8350] ? futex_private_hash_put+0x18a/0x300 [ 231.111314][ T8350] kernel_clone+0xfc/0x930 [ 231.111348][ T8350] ? __pfx_kernel_clone+0x10/0x10 [ 231.111403][ T8350] __do_sys_clone+0xce/0x120 [ 231.111436][ T8350] ? __pfx___do_sys_clone+0x10/0x10 [ 231.111486][ T8350] ? xfd_validate_state+0x61/0x180 [ 231.111535][ T8350] do_syscall_64+0xcd/0xfa0 [ 231.111568][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.111596][ T8350] RIP: 0033:0x7fb93518efc9 [ 231.111618][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.111645][ T8350] RSP: 002b:00007fb93602bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 231.111671][ T8350] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 231.111689][ T8350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.111706][ T8350] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.111723][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.111740][ T8350] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 231.111778][ T8350] [ 231.111861][ T8350] syz.3.535: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.608319][ T8350] CPU: 1 UID: 0 PID: 8350 Comm: syz.3.535 Not tainted syzkaller #0 PREEMPT(full) [ 231.608358][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.608393][ T8350] Call Trace: [ 231.608402][ T8350] [ 231.608413][ T8350] dump_stack_lvl+0x16c/0x1f0 [ 231.608450][ T8350] warn_alloc+0x248/0x3a0 [ 231.608480][ T8350] ? __pfx_warn_alloc+0x10/0x10 [ 231.608509][ T8350] ? kfree+0x2b8/0x6d0 [ 231.608530][ T8350] ? __get_vm_area_node+0x2cd/0x330 [ 231.608572][ T8350] ? __get_vm_area_node+0x2cd/0x330 [ 231.608606][ T8350] ? __get_vm_area_node+0x208/0x330 [ 231.608649][ T8350] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 231.608699][ T8350] ? kernel_clone+0xfc/0x930 [ 231.608741][ T8350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.608787][ T8350] ? rcu_is_watching+0x12/0xc0 [ 231.608819][ T8350] ? kernel_clone+0xfc/0x930 [ 231.608849][ T8350] __vmalloc_node_noprof+0xad/0xf0 [ 231.608886][ T8350] ? kernel_clone+0xfc/0x930 [ 231.608922][ T8350] copy_process+0x2c77/0x76a0 [ 231.608952][ T8350] ? __pfx___futex_wait+0x10/0x10 [ 231.608988][ T8350] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 231.609014][ T8350] ? lockdep_hardirqs_on+0x7c/0x110 [ 231.609051][ T8350] ? __pfx_copy_process+0x10/0x10 [ 231.609083][ T8350] ? futex_private_hash_put+0x176/0x300 [ 231.609122][ T8350] ? futex_private_hash_put+0x18a/0x300 [ 231.609162][ T8350] kernel_clone+0xfc/0x930 [ 231.609197][ T8350] ? __pfx_kernel_clone+0x10/0x10 [ 231.609256][ T8350] __do_sys_clone+0xce/0x120 [ 231.609289][ T8350] ? __pfx___do_sys_clone+0x10/0x10 [ 231.609342][ T8350] ? xfd_validate_state+0x61/0x180 [ 231.609391][ T8350] do_syscall_64+0xcd/0xfa0 [ 231.609423][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.609450][ T8350] RIP: 0033:0x7fb93518efc9 [ 231.609471][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.609497][ T8350] RSP: 002b:00007fb93602bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 231.609523][ T8350] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 231.609541][ T8350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.609557][ T8350] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 231.609574][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.609589][ T8350] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 231.609627][ T8350] [ 231.853400][ T8350] Mem-Info: [ 231.865034][ T8350] active_anon:11200 inactive_anon:72431 isolated_anon:32 [ 231.865034][ T8350] active_file:16359 inactive_file:41775 isolated_file:0 [ 231.865034][ T8350] unevictable:768 dirty:481 writeback:125 [ 231.865034][ T8350] slab_reclaimable:11812 slab_unreclaimable:95164 [ 231.865034][ T8350] mapped:53028 shmem:71273 pagetables:1318 [ 231.865034][ T8350] sec_pagetables:0 bounce:0 [ 231.865034][ T8350] kernel_misc_reclaimable:0 [ 231.865034][ T8350] free:1245423 free_pcp:15425 free_cma:0 [ 231.911373][ T8350] Node 0 active_anon:44800kB inactive_anon:289604kB active_file:65428kB inactive_file:166908kB unevictable:1536kB isolated(anon):128kB isolated(file):0kB mapped:212012kB dirty:1924kB writeback:500kB shmem:283456kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11564kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 231.945173][ T8350] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 231.975800][ T8350] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.005860][ T8350] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 232.011741][ T8350] Node 0 DMA32 free:1068100kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44800kB inactive_anon:288968kB active_file:65428kB inactive_file:166908kB unevictable:1536kB writepending:2424kB zspages:464kB present:3129332kB managed:2545096kB mlocked:0kB bounce:0kB free_pcp:47448kB local_pcp:25284kB free_cma:0kB [ 232.046768][ T8350] lowmem_reserve[]: 0 0 1 1 1 [ 232.052222][ T8350] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.082173][ T8350] lowmem_reserve[]: 0 0 0 0 0 [ 232.086925][ T8350] Node 1 Normal free:3898232kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:4352kB free_cma:0kB [ 232.119433][ T8350] lowmem_reserve[]: 0 0 0 0 0 [ 232.125419][ T8350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.141771][ T8350] Node 0 DMA32: 7651*4kB (UME) 623*8kB (UM) 324*16kB (UME) 326*32kB (UM) 273*64kB (UM) 98*128kB (UM) 59*256kB (UM) 20*512kB (UME) 3*1024kB (M) 2*2048kB (UM) 233*4096kB (UM) = 1068100kB [ 232.161487][ T8350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 232.184170][ T8350] Node 1 Normal: 136*4kB (UE) 49*8kB (UME) 23*16kB (UME) 139*32kB (UME) 54*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3898488kB [ 232.258092][ T8350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.284076][ T8350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.326461][ T8360] : Can't lookup blockdev [ 232.329078][ T8350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 232.390739][ T8350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 232.408373][ T8350] 129409 total pagecache pages [ 232.413180][ T8350] 45 pages in swap cache [ 232.417422][ T8350] Free swap = 115312kB [ 232.422564][ T8350] Total swap = 124996kB [ 232.447695][ T8350] 2097051 pages RAM [ 232.451556][ T8350] 0 pages HighMem/MovableOnly [ 232.456245][ T8350] 428687 pages reserved [ 232.472905][ T8350] 0 pages cma reserved [ 233.054835][ T8376] openvswitch: netlink: IP tunnel dst address not specified [ 234.568783][ T8415] FAULT_INJECTION: forcing a failure. [ 234.568783][ T8415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.652412][ T8415] CPU: 0 UID: 0 PID: 8415 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT(full) [ 234.652448][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.652463][ T8415] Call Trace: [ 234.652471][ T8415] [ 234.652481][ T8415] dump_stack_lvl+0x16c/0x1f0 [ 234.652517][ T8415] should_fail_ex+0x512/0x640 [ 234.652559][ T8415] should_fail_alloc_page+0xe7/0x130 [ 234.652597][ T8415] prepare_alloc_pages+0x3c2/0x610 [ 234.652634][ T8415] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 234.652670][ T8415] ? find_held_lock+0x2b/0x80 [ 234.652696][ T8415] ? is_bpf_text_address+0x8a/0x1a0 [ 234.652730][ T8415] ? bpf_ksym_find+0x124/0x1c0 [ 234.652759][ T8415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 234.652787][ T8415] ? is_bpf_text_address+0x94/0x1a0 [ 234.652819][ T8415] ? kernel_text_address+0x8d/0x100 [ 234.652856][ T8415] ? __kernel_text_address+0xd/0x40 [ 234.652876][ T8415] ? unwind_get_return_address+0x59/0xa0 [ 234.652918][ T8415] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.652965][ T8415] ? policy_nodemask+0xea/0x4e0 [ 234.653014][ T8415] alloc_pages_mpol+0x1fb/0x550 [ 234.653049][ T8415] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 234.653086][ T8415] ? kasan_save_stack+0x33/0x60 [ 234.653114][ T8415] ? kasan_save_track+0x14/0x30 [ 234.653143][ T8415] ? __kasan_kmalloc+0xaa/0xb0 [ 234.653171][ T8415] ? __get_vm_area_node+0x101/0x330 [ 234.653211][ T8415] alloc_pages_noprof+0x131/0x390 [ 234.653248][ T8415] get_free_pages_noprof+0x10/0xb0 [ 234.653280][ T8415] kasan_populate_vmalloc+0x9f/0x2d0 [ 234.653310][ T8415] ? alloc_vmap_area+0x8b5/0x29e0 [ 234.653350][ T8415] alloc_vmap_area+0x960/0x29e0 [ 234.653398][ T8415] ? __pfx_alloc_vmap_area+0x10/0x10 [ 234.653442][ T8415] __get_vm_area_node+0x1ca/0x330 [ 234.653494][ T8415] __vmalloc_node_range_noprof+0x271/0x1480 [ 234.653548][ T8415] ? kernel_clone+0xfc/0x930 [ 234.653607][ T8415] ? kernel_clone+0xfc/0x930 [ 234.653652][ T8415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.653707][ T8415] ? rcu_is_watching+0x12/0xc0 [ 234.653736][ T8415] ? kernel_clone+0xfc/0x930 [ 234.653768][ T8415] __vmalloc_node_noprof+0xad/0xf0 [ 234.653833][ T8415] ? kernel_clone+0xfc/0x930 [ 234.653867][ T8415] copy_process+0x2c77/0x76a0 [ 234.653903][ T8415] ? __pfx___futex_wait+0x10/0x10 [ 234.653965][ T8415] ? __pfx_copy_process+0x10/0x10 [ 234.654003][ T8415] ? futex_private_hash_put+0x176/0x300 [ 234.654047][ T8415] ? futex_private_hash_put+0x18a/0x300 [ 234.654084][ T8415] kernel_clone+0xfc/0x930 [ 234.654123][ T8415] ? __pfx_kernel_clone+0x10/0x10 [ 234.654176][ T8415] __do_sys_clone+0xce/0x120 [ 234.654210][ T8415] ? __pfx___do_sys_clone+0x10/0x10 [ 234.654260][ T8415] ? xfd_validate_state+0x61/0x180 [ 234.654309][ T8415] do_syscall_64+0xcd/0xfa0 [ 234.654341][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.654369][ T8415] RIP: 0033:0x7fb93518efc9 [ 234.654391][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.654417][ T8415] RSP: 002b:00007fb93602bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 234.654442][ T8415] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 234.654460][ T8415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 234.654477][ T8415] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 234.654494][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.654510][ T8415] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 234.654547][ T8415] [ 235.087881][ T5837] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 235.389624][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 235.454016][ T8413] netlink: 334 bytes leftover after parsing attributes in process `syz.0.550'. [ 237.138752][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.317642][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 238.638520][ T8481] netlink: 334 bytes leftover after parsing attributes in process `syz.1.563'. [ 239.057810][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.564'. [ 239.640678][ T8496] FAULT_INJECTION: forcing a failure. [ 239.640678][ T8496] name failslab, interval 1, probability 0, space 0, times 0 [ 239.657729][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.3.568 Not tainted syzkaller #0 PREEMPT(full) [ 239.657764][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 239.657780][ T8496] Call Trace: [ 239.657788][ T8496] [ 239.657798][ T8496] dump_stack_lvl+0x16c/0x1f0 [ 239.657830][ T8496] should_fail_ex+0x512/0x640 [ 239.657867][ T8496] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 239.657900][ T8496] should_failslab+0xc2/0x120 [ 239.657936][ T8496] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 239.657965][ T8496] ? __d_alloc+0x32/0xae0 [ 239.658001][ T8496] ? __d_alloc+0x32/0xae0 [ 239.658029][ T8496] __d_alloc+0x32/0xae0 [ 239.658063][ T8496] d_alloc_pseudo+0x1c/0xc0 [ 239.658099][ T8496] alloc_file_pseudo+0xcf/0x230 [ 239.658139][ T8496] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 239.658176][ T8496] ? alloc_fd+0x471/0x7d0 [ 239.658207][ T8496] sock_alloc_file+0x50/0x210 [ 239.658234][ T8496] __sys_socket+0x1c0/0x260 [ 239.658266][ T8496] ? __x64_sys_openat+0x174/0x210 [ 239.658302][ T8496] ? __pfx___sys_socket+0x10/0x10 [ 239.658336][ T8496] ? xfd_validate_state+0x61/0x180 [ 239.658380][ T8496] __x64_sys_socket+0x72/0xb0 [ 239.658413][ T8496] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.658452][ T8496] do_syscall_64+0xcd/0xfa0 [ 239.658486][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.658513][ T8496] RIP: 0033:0x7fb93518efc9 [ 239.658534][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.658559][ T8496] RSP: 002b:00007fb93602c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 239.658585][ T8496] RAX: ffffffffffffffda RBX: 00007fb9353e6090 RCX: 00007fb93518efc9 [ 239.658604][ T8496] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 239.658621][ T8496] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 239.658638][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.658654][ T8496] R13: 00007fb9353e6128 R14: 00007fb9353e6090 R15: 00007ffca1dc9f78 [ 239.658691][ T8496] [ 240.356647][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 240.758695][ T52] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 241.210219][ T8530] netlink: 334 bytes leftover after parsing attributes in process `syz.2.576'. [ 242.818919][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.805478][ T8634] netlink: set zone limit has 8 unknown bytes [ 244.871276][ T8642] openvswitch: netlink: IP tunnel dst address not specified [ 245.040370][ T8644] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[8644] [ 245.049501][ T8645] ptrace attach of "./syz-executor exec"[5834] was attempted by ""[8645] [ 246.951080][ T8687] openvswitch: netlink: IP tunnel dst address not specified [ 247.240490][ T8690] FAULT_INJECTION: forcing a failure. [ 247.240490][ T8690] name failslab, interval 1, probability 0, space 0, times 0 [ 247.253299][ T8690] CPU: 0 UID: 0 PID: 8690 Comm: syz.3.614 Not tainted syzkaller #0 PREEMPT(full) [ 247.253321][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.253330][ T8690] Call Trace: [ 247.253335][ T8690] [ 247.253341][ T8690] dump_stack_lvl+0x16c/0x1f0 [ 247.253362][ T8690] should_fail_ex+0x512/0x640 [ 247.253384][ T8690] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 247.253402][ T8690] should_failslab+0xc2/0x120 [ 247.253422][ T8690] kmem_cache_alloc_node_noprof+0x78/0x770 [ 247.253436][ T8690] ? __alloc_skb+0x2b2/0x380 [ 247.253460][ T8690] ? __alloc_skb+0x2b2/0x380 [ 247.253479][ T8690] __alloc_skb+0x2b2/0x380 [ 247.253499][ T8690] ? __pfx___alloc_skb+0x10/0x10 [ 247.253529][ T8690] ? idr_get_next+0xec/0x150 [ 247.253544][ T8690] ? __pfx_idr_get_next+0x10/0x10 [ 247.253561][ T8690] ctrl_build_family_msg+0x36/0xa0 [ 247.253582][ T8690] ctrl_getfamily+0x354/0x540 [ 247.253600][ T8690] ? __pfx_ctrl_getfamily+0x10/0x10 [ 247.253619][ T8690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 247.253637][ T8690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 247.253659][ T8690] genl_family_rcv_msg_doit+0x209/0x2f0 [ 247.253677][ T8690] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.253693][ T8690] ? genl_get_cmd+0x194/0x580 [ 247.253714][ T8690] ? netlink_sendmsg+0x698/0xdd0 [ 247.253727][ T8690] ? __sys_sendto+0x4a3/0x520 [ 247.253745][ T8690] ? __radix_tree_lookup+0x21f/0x2c0 [ 247.253769][ T8690] genl_rcv_msg+0x55c/0x800 [ 247.253788][ T8690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.253805][ T8690] ? __pfx_ctrl_getfamily+0x10/0x10 [ 247.253824][ T8690] ? __lock_acquire+0x622/0x1c90 [ 247.253846][ T8690] netlink_rcv_skb+0x158/0x420 [ 247.253860][ T8690] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.253877][ T8690] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.253900][ T8690] ? netlink_deliver_tap+0x1ae/0xd30 [ 247.253916][ T8690] genl_rcv+0x28/0x40 [ 247.253930][ T8690] netlink_unicast+0x5aa/0x870 [ 247.253946][ T8690] ? __pfx_netlink_unicast+0x10/0x10 [ 247.253968][ T8690] netlink_sendmsg+0x8c8/0xdd0 [ 247.253986][ T8690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.254002][ T8690] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 247.254026][ T8690] __sys_sendto+0x4a3/0x520 [ 247.254046][ T8690] ? __pfx___sys_sendto+0x10/0x10 [ 247.254071][ T8690] ? find_held_lock+0x2b/0x80 [ 247.254099][ T8690] __x64_sys_sendto+0xe0/0x1c0 [ 247.254118][ T8690] ? do_syscall_64+0x91/0xfa0 [ 247.254133][ T8690] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.254148][ T8690] do_syscall_64+0xcd/0xfa0 [ 247.254164][ T8690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.254179][ T8690] RIP: 0033:0x7fb935190e5c [ 247.254191][ T8690] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 247.254204][ T8690] RSP: 002b:00007fb936009ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 247.254218][ T8690] RAX: ffffffffffffffda RBX: 00007fb936009fc0 RCX: 00007fb935190e5c [ 247.254227][ T8690] RDX: 0000000000000024 RSI: 00007fb93600a010 RDI: 0000000000000006 [ 247.254237][ T8690] RBP: 0000000000000000 R08: 00007fb936009f14 R09: 000000000000000c [ 247.254245][ T8690] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 247.254254][ T8690] R13: 00007fb936009f68 R14: 00007fb93600a010 R15: 0000000000000000 [ 247.254274][ T8690] [ 247.767892][ T8695] netlink: 350 bytes leftover after parsing attributes in process `syz.0.619'. [ 247.894442][ T8714] netlink: 350 bytes leftover after parsing attributes in process `syz.0.619'. [ 248.489839][ T8727] delete_channel: no stack [ 249.261303][ T8750] FAULT_INJECTION: forcing a failure. [ 249.261303][ T8750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.277726][ T8753] openvswitch: netlink: IP tunnel dst address not specified [ 249.279728][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.3.626 Not tainted syzkaller #0 PREEMPT(full) [ 249.279764][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.279781][ T8750] Call Trace: [ 249.279791][ T8750] [ 249.279802][ T8750] dump_stack_lvl+0x16c/0x1f0 [ 249.279838][ T8750] should_fail_ex+0x512/0x640 [ 249.279883][ T8750] should_fail_alloc_page+0xe7/0x130 [ 249.279920][ T8750] prepare_alloc_pages+0x3c2/0x610 [ 249.279954][ T8750] ? rcu_is_watching+0x12/0xc0 [ 249.279986][ T8750] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 249.280027][ T8750] ? __lock_acquire+0x622/0x1c90 [ 249.280065][ T8750] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 249.280102][ T8750] ? css_rstat_updated+0x1c2/0x510 [ 249.280142][ T8750] ? __lock_acquire+0x622/0x1c90 [ 249.280183][ T8750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 249.280227][ T8750] ? policy_nodemask+0xea/0x4e0 [ 249.280264][ T8750] alloc_pages_mpol+0x1fb/0x550 [ 249.280300][ T8750] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 249.280343][ T8750] folio_alloc_mpol_noprof+0x36/0x2f0 [ 249.280384][ T8750] vma_alloc_folio_noprof+0xed/0x1e0 [ 249.280432][ T8750] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 249.280484][ T8750] do_pte_missing+0x2202/0x3ba0 [ 249.280526][ T8750] ? find_held_lock+0x2b/0x80 [ 249.280563][ T8750] __handle_mm_fault+0x1556/0x2aa0 [ 249.280611][ T8750] ? __pfx___handle_mm_fault+0x10/0x10 [ 249.280650][ T8750] ? __pte_offset_map_lock+0x174/0x310 [ 249.280682][ T8750] ? find_held_lock+0x2b/0x80 [ 249.280719][ T8750] ? follow_page_pte+0x5cf/0x1390 [ 249.280760][ T8750] handle_mm_fault+0x589/0xd10 [ 249.280805][ T8750] __get_user_pages+0x54e/0x3530 [ 249.280853][ T8750] ? __pfx___get_user_pages+0x10/0x10 [ 249.280898][ T8750] populate_vma_page_range+0x267/0x3f0 [ 249.280936][ T8750] ? __pfx_populate_vma_page_range+0x10/0x10 [ 249.280971][ T8750] ? __pfx_find_vma_intersection+0x10/0x10 [ 249.281005][ T8750] ? do_mmap+0x69c/0x1210 [ 249.281040][ T8750] __mm_populate+0x1d8/0x380 [ 249.281078][ T8750] ? __pfx___mm_populate+0x10/0x10 [ 249.281115][ T8750] ? up_write+0x1b2/0x520 [ 249.281156][ T8750] vm_mmap_pgoff+0x37f/0x470 [ 249.281193][ T8750] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 249.281233][ T8750] ? __x64_sys_futex+0x1e0/0x4c0 [ 249.281266][ T8750] ? __x64_sys_futex+0x1e9/0x4c0 [ 249.281303][ T8750] ksys_mmap_pgoff+0x7d/0x5c0 [ 249.281334][ T8750] ? xfd_validate_state+0x61/0x180 [ 249.281367][ T8750] ? __pfx_do_writev+0x10/0x10 [ 249.281405][ T8750] __x64_sys_mmap+0x125/0x190 [ 249.281449][ T8750] do_syscall_64+0xcd/0xfa0 [ 249.281484][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.281511][ T8750] RIP: 0033:0x7fb93518efc9 [ 249.281533][ T8750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.281559][ T8750] RSP: 002b:00007fb93604d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 249.281584][ T8750] RAX: ffffffffffffffda RBX: 00007fb9353e5fa0 RCX: 00007fb93518efc9 [ 249.281601][ T8750] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 249.281617][ T8750] RBP: 00007fb935211f91 R08: 0000000000000002 R09: 0000000000008000 [ 249.281634][ T8750] R10: 0000100000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 249.281650][ T8750] R13: 00007fb9353e6038 R14: 00007fb9353e5fa0 R15: 00007ffca1dc9f78 [ 249.281687][ T8750] [ 251.927555][ T8804] zswap: compressor not available [ 252.065246][ T8816] openvswitch: netlink: IP tunnel dst address not specified [ 252.552638][ T8827] syz.0.644 uses obsolete (PF_INET,SOCK_PACKET) [ 253.764151][ T8863] usbip-vudc usbip-vudc.0: gadget not bound [ 254.655612][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 255.710310][ T8908] ================================================================== [ 255.710327][ T8908] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 255.710361][ T8908] Write of size 8 at addr ffffc90003f393e0 by task syz.3.664/8908 [ 255.710382][ T8908] [ 255.710395][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.3.664 Not tainted syzkaller #0 PREEMPT(full) [ 255.710426][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.710443][ T8908] Call Trace: [ 255.710451][ T8908] [ 255.710461][ T8908] dump_stack_lvl+0x116/0x1f0 [ 255.710492][ T8908] print_report+0xcd/0x630 [ 255.710525][ T8908] ? __virt_addr_valid+0x81/0x610 [ 255.710562][ T8908] ? sys_imageblit+0x1a6f/0x1e60 [ 255.710591][ T8908] kasan_report+0xe0/0x110 [ 255.710622][ T8908] ? sys_imageblit+0x1a6f/0x1e60 [ 255.710654][ T8908] sys_imageblit+0x1a6f/0x1e60 [ 255.710684][ T8908] ? __pfx_sys_imageblit+0x10/0x10 [ 255.710708][ T8908] ? __pfx__prb_read_valid+0x10/0x10 [ 255.710744][ T8908] ? find_held_lock+0x2b/0x80 [ 255.710766][ T8908] ? up+0xcb/0x140 [ 255.710798][ T8908] ? do_raw_spin_unlock+0x172/0x230 [ 255.710838][ T8908] ? prb_read_valid+0x78/0xa0 [ 255.710876][ T8908] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 255.710904][ T8908] soft_cursor+0x524/0xa10 [ 255.710944][ T8908] ? fb_get_color_depth+0x120/0x250 [ 255.710980][ T8908] bit_cursor+0xe8c/0x17e0 [ 255.711027][ T8908] ? __pfx_bit_cursor+0x10/0x10 [ 255.711070][ T8908] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.711110][ T8908] ? get_color+0x1da/0x450 [ 255.711143][ T8908] ? __pfx_bit_cursor+0x10/0x10 [ 255.711179][ T8908] fbcon_cursor+0x40c/0x5a0 [ 255.711213][ T8908] ? do_blank_screen+0x591/0x5a0 [ 255.711240][ T8908] set_cursor+0x1db/0x250 [ 255.711263][ T8908] con_write+0x89/0xb0 [ 255.711290][ T8908] n_tty_write+0x41e/0x11e0 [ 255.711330][ T8908] ? __pfx_n_tty_write+0x10/0x10 [ 255.711363][ T8908] ? trace_kmalloc+0x2b/0xd0 [ 255.711395][ T8908] ? __pfx_woken_wake_function+0x10/0x10 [ 255.711435][ T8908] ? kfree+0x252/0x6d0 [ 255.711458][ T8908] ? __pfx_n_tty_write+0x10/0x10 [ 255.711488][ T8908] file_tty_write.constprop.0+0x503/0x9b0 [ 255.711518][ T8908] redirected_tty_write+0xd4/0x150 [ 255.711540][ T8908] vfs_write+0x7d3/0x11d0 [ 255.711566][ T8908] ? __pfx_redirected_tty_write+0x10/0x10 [ 255.711595][ T8908] ? __pfx_vfs_write+0x10/0x10 [ 255.711619][ T8908] ? find_held_lock+0x2b/0x80 [ 255.711655][ T8908] ksys_write+0x12a/0x250 [ 255.711680][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 255.711713][ T8908] do_syscall_64+0xcd/0xfa0 [ 255.711743][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.711768][ T8908] RIP: 0033:0x7fb93518efc9 [ 255.711789][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.711816][ T8908] RSP: 002b:00007fb935fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.711843][ T8908] RAX: ffffffffffffffda RBX: 00007fb9353e6270 RCX: 00007fb93518efc9 [ 255.711861][ T8908] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 255.711895][ T8908] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.711912][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.711929][ T8908] R13: 00007fb9353e6308 R14: 00007fb9353e6270 R15: 00007ffca1dc9f78 [ 255.711959][ T8908] [ 255.711968][ T8908] [ 255.711975][ T8908] The buggy address belongs to a vmalloc virtual mapping [ 255.712003][ T8908] Memory state around the buggy address: [ 255.712018][ T8908] ffffc90003f39280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.712038][ T8908] ffffc90003f39300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.712057][ T8908] >ffffc90003f39380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.712073][ T8908] ^ [ 255.712088][ T8908] ffffc90003f39400: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.712107][ T8908] ffffc90003f39480: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 255.712122][ T8908] ================================================================== [ 255.712553][ T8908] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.712573][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.3.664 Not tainted syzkaller #0 PREEMPT(full) [ 255.712605][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.712621][ T8908] Call Trace: [ 255.712630][ T8908] [ 255.712639][ T8908] dump_stack_lvl+0x3d/0x1f0 [ 255.712672][ T8908] vpanic+0x640/0x6f0 [ 255.712710][ T8908] panic+0xca/0xd0 [ 255.712746][ T8908] ? __pfx_panic+0x10/0x10 [ 255.712781][ T8908] ? sys_imageblit+0x1a6f/0x1e60 [ 255.712811][ T8908] ? preempt_schedule_common+0x44/0xc0 [ 255.712840][ T8908] ? preempt_schedule_thunk+0x16/0x30 [ 255.712882][ T8908] check_panic_on_warn+0xab/0xb0 [ 255.712920][ T8908] end_report+0x107/0x170 [ 255.712953][ T8908] kasan_report+0xee/0x110 [ 255.712988][ T8908] ? sys_imageblit+0x1a6f/0x1e60 [ 255.713030][ T8908] sys_imageblit+0x1a6f/0x1e60 [ 255.713067][ T8908] ? __pfx_sys_imageblit+0x10/0x10 [ 255.713099][ T8908] ? __pfx__prb_read_valid+0x10/0x10 [ 255.713137][ T8908] ? find_held_lock+0x2b/0x80 [ 255.713165][ T8908] ? up+0xcb/0x140 [ 255.713195][ T8908] ? do_raw_spin_unlock+0x172/0x230 [ 255.713239][ T8908] ? prb_read_valid+0x78/0xa0 [ 255.713277][ T8908] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 255.713309][ T8908] soft_cursor+0x524/0xa10 [ 255.713352][ T8908] ? fb_get_color_depth+0x120/0x250 [ 255.713391][ T8908] bit_cursor+0xe8c/0x17e0 [ 255.713434][ T8908] ? __pfx_bit_cursor+0x10/0x10 [ 255.713478][ T8908] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.713521][ T8908] ? get_color+0x1da/0x450 [ 255.713556][ T8908] ? __pfx_bit_cursor+0x10/0x10 [ 255.713594][ T8908] fbcon_cursor+0x40c/0x5a0 [ 255.713629][ T8908] ? do_blank_screen+0x591/0x5a0 [ 255.713656][ T8908] set_cursor+0x1db/0x250 [ 255.713680][ T8908] con_write+0x89/0xb0 [ 255.713710][ T8908] n_tty_write+0x41e/0x11e0 [ 255.713750][ T8908] ? __pfx_n_tty_write+0x10/0x10 [ 255.713785][ T8908] ? trace_kmalloc+0x2b/0xd0 [ 255.713817][ T8908] ? __pfx_woken_wake_function+0x10/0x10 [ 255.713859][ T8908] ? kfree+0x252/0x6d0 [ 255.713883][ T8908] ? __pfx_n_tty_write+0x10/0x10 [ 255.713919][ T8908] file_tty_write.constprop.0+0x503/0x9b0 [ 255.713954][ T8908] redirected_tty_write+0xd4/0x150 [ 255.713985][ T8908] vfs_write+0x7d3/0x11d0 [ 255.714022][ T8908] ? __pfx_redirected_tty_write+0x10/0x10 [ 255.714056][ T8908] ? __pfx_vfs_write+0x10/0x10 [ 255.714083][ T8908] ? find_held_lock+0x2b/0x80 [ 255.714121][ T8908] ksys_write+0x12a/0x250 [ 255.714149][ T8908] ? __pfx_ksys_write+0x10/0x10 [ 255.714181][ T8908] do_syscall_64+0xcd/0xfa0 [ 255.714212][ T8908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.714239][ T8908] RIP: 0033:0x7fb93518efc9 [ 255.714260][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.714287][ T8908] RSP: 002b:00007fb935fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.714313][ T8908] RAX: ffffffffffffffda RBX: 00007fb9353e6270 RCX: 00007fb93518efc9 [ 255.714334][ T8908] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 255.714352][ T8908] RBP: 00007fb935211f91 R08: 0000000000000000 R09: 0000000000000000 [ 255.714369][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.714387][ T8908] R13: 00007fb9353e6308 R14: 00007fb9353e6270 R15: 00007ffca1dc9f78 [ 255.714413][ T8908] [ 255.714715][ T8908] Kernel Offset: disabled