last executing test programs: 8.945909861s ago: executing program 0 (id=1617): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = open(0x0, 0x163ac0, 0x47) statx$auto(r0, 0x0, 0x2001006, 0xdbe1, 0x0) mmap$auto(0x0, 0x4, 0xd8, 0x40eb1, r0, 0x300000000001) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x400000000000000, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d529b", 0x6) sysfs$auto(0x1, 0x2, 0xc) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), 0xffffffffffffffff) 7.804954281s ago: executing program 2 (id=1620): socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/fs/xfs/filestream_centisecs\x00', 0xa01, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0xfffffffffffffffd, 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r3, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES8=r2, @ANYBLOB="1836af3052af9fd6846da2bafbdee8d289d6022c2425a291a34f1a56bc822993bf0716668150c070019d8d3c3960544a36fb57a5731a9f8e9c84cb9f8b033cac7f4d092dfa5f11c51d2f42aa5ad4b30651b12d886f082398a83916f6608d053c961618ba30ea3bca28cec2a05b553a1b57d1016e98f5a5737e"], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x818) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000480)='/dev/audio1\x00e\xc8\x17\xae\xe8*\x1e\x17f\xd26\xa9R\xf0\xe2\x16\xe7V\xdd\x93\xd1\xc7\xb8\xa6<\xaeNq\x19S\xf205q\x01~\xe6\x00\x00\x00\x00\x00\x00\x00\x008\xf0\xeb\xbf\xf1\xf5\xf0\x17 \xc6\xb8\x8d\x13\xc0\xc7\x87\x85:\xd1\xb5\xfek\xd3<\x99\xc2IK+\x0f\x88\xe9\x7f\xb1\x18_a\xb5\xb4F\xaf[\xa1q\b?\xfe{\xc8\x87D\xb3\x85TF\x9b\xe3F\x90r\x17\xceE\x12o\xe4\x1a\x17f\xdb\xdbS\xdc\xe5\xb2\x15\xe6\xf2\x97(K\xb7eW', 0x7) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) 6.987039595s ago: executing program 0 (id=1621): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f03c4eab3e1fba8c53a2bbf50eb9b1c27f0100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x72) fcntl$auto(r5, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000000180)=""/250, 0xfa) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x400c058) io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) sendmsg$auto_BATADV_CMD_SET_MESH(r0, 0x0, 0x140000e4) pwritev$auto(r3, &(0x7f00000000c0)={&(0x7f0000000300), 0xfffffffffffffffd}, 0x8, 0x1d97, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) 5.421585649s ago: executing program 2 (id=1624): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/tty/ptyc1/uevent\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000001c0)='y\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x2, 0x8fd6, 0x948f, 0x3, 0x15f4da0a, 0x3, 0x7b, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0x32fa, &(0x7f0000000240)={[0x9, 0x5, 0x3, 0x5, 0x800, 0x2, 0x5, 0x1000, 0x9, 0x9, 0x8, 0x47, 0xd, 0x8, 0x5013, 0x1]}, &(0x7f00000003c0)={[0x9, 0xa, 0xfe, 0x2, 0x4, 0x2, 0x8, 0xa, 0x2, 0x69b11ec, 0x62a10e5, 0x9, 0x0, 0x7fffffffffffffff, 0x9, 0x7]}, &(0x7f0000000340)={[0x9, 0x7, 0x6000000000001, 0x3, 0xd6c, 0xc, 0x0, 0x1, 0x3b4, 0x2, 0x6b68, 0xeacb, 0x26, 0x99, 0xd5f, 0x3]}, &(0x7f0000000180)={0x8, 0x51a}) pkey_mprotect$auto(0x80000000, 0x0, 0x7, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x808000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(r3, 0x1, 0x8, 0x0, 0x7) sendto$auto(0x3, 0x0, 0xfdef, 0x101, 0x0, 0x1c) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\xb8\xdb2\xd3\x02\x00\x00\x00\xc7k', 0x800007e) write$auto(r4, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0x8, 0x9b72, 0x2, 0x7ffc) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf2501000000100007800c00018008000180000000000c00020006000000000000000c000500f7ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket(0x10, 0x2, 0x0) 4.841528563s ago: executing program 0 (id=1625): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x800006, 0x7fffffffffffffff, 0xffffffffffffffff, 0x7) r1 = socket(0x11, 0x80003, 0x81) setsockopt$auto(r1, 0x2, 0xf4, 0x0, 0x8) setsockopt$auto(r1, 0x107, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebe, r0, 0x8000) pipe$auto(0x0) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r3, 0x0, 0x8) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r5) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r6 = fsopen$auto(0x0, 0x1) ioctl$auto(0x3, 0x4020aeb2, r6) r7 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r7, 0xaf01, 0x5) 4.620791174s ago: executing program 1 (id=1627): memfd_secret$auto(0x2) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 64) socket(0x1a, 0x1, 0x0) (rerun: 64) epoll_create$auto(0x9) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 32) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto_SHM_STAT(0xf, 0xd, &(0x7f0000000680)={{0x9, 0x0, 0x0, 0x2, 0x9, 0x5, 0x100}, 0x7bfc, 0x2, 0x8, 0x400, @raw=0x8, @inferred, 0x200, 0x0, &(0x7f00000003c0)="1d6066c11f1239423629c36a6eee950bb7e2f5bd7dfeaca36d0d067e5c57568fc33f9a8f267420af7abb6ac6c200e4e5a455cf6e86ae7ff7bc810580d14419c7270341bae5cf2d18757cd13fdb52bbbd39388c7379e220a7a9bc0796fdfca997be8f896f4bb6b9adf80c92bf48e3c967f35797b48ee68555657116c2bc4cdb6f30b8e339e7bedac352daaa19ac", &(0x7f00000005c0)="935facca0bc393268040775d5b341ad16ebd698eb49e88546b8cd5f8576d1d9f23173c74e3cbccc2a8da9e66ab728d288e2a1e87b1045f5a312e8c9ee1e7552eb7e233c18bdbc71000ff18cb860e4eb38839e67e6e4958911513e91c1e06f9775cf414f3c080b4279e0fe3cb9369f4c4f58cec07a8db952bc7dce3c99033e3e7c7f611bd06362458bca7eba40fdc6a72d2ed1c9584058a36c691bac507eeea505b9fbf3e37cc2d1b70c9c48b"}) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xa) (async) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) ioctl$auto_VHOST_GET_FEATURES2(r1, 0x8008af00, &(0x7f0000000040)=0x8) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/ip6tnl0/accept_dad\x00', 0x242, 0x0) sendfile$auto(r2, r3, 0x0, 0x7) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x468040, 0x0) writev$auto(r5, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x5, @inferred, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x4) (async) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg0\x00', 0x200, 0x0) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) read$auto(r6, 0x0, 0x1f40) (async) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r8 = socket(0x8, 0x80000, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x5, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 32) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r9 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r9, 0x0) 4.404368179s ago: executing program 1 (id=1628): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a7665db4b1e04a788bfa03"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, r2) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) 4.401773514s ago: executing program 3 (id=1629): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = open(0x0, 0x163ac0, 0x47) statx$auto(r0, 0x0, 0x2001006, 0xdbe1, 0x0) mmap$auto(0x0, 0x4, 0xd8, 0x40eb1, r0, 0x300000000001) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x400000000000000, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d529b", 0x6) sysfs$auto(0x1, 0x2, 0xc) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), 0xffffffffffffffff) 3.480371243s ago: executing program 1 (id=1630): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000000), 0x7}, 0x10) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) fcntl$auto(0x3, 0x8, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x7}, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r1, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mprotect$auto(0x200000000000, 0x806121, 0x6) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 3.472566707s ago: executing program 3 (id=1631): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0x3, 0x11, 0x7, 0x28000) r0 = socket(0x2, 0x3, 0xa) unshare$auto(0x40000080) mmap$auto(0x6, 0x20009, 0x80000000df, 0x40000eb4, r0, 0x80000000) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto_SO_LOCK_FILTER(r1, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x772c5cb4) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000180)="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"/360, 0x10, &(0x7f00000000c0)={0x0, 0x80000000}, 0xffffffff, 0x0, 0x2, 0x1000b}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = socket(0x25, 0x2, 0x7) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x20040080) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000300)={{&(0x7f0000000380)="6f1ca2941f15cf7aa2", 0x5ab, &(0x7f0000000100)={&(0x7f0000000040)='L', 0x8000}, 0x100001, &(0x7f00000003c0)="ee471d6183f359a9717e267c50ad0c8aafedc9e52b9d7fbb7a8100becf7308dc068b78ba12f79e4de86f50fe34aac6895b3dbe1c47d469525580a1ab77a85a3b0dd689d3a35357a09332", 0xffffffffffffffff, 0x1}, 0x5}, 0x1, 0xffffffff) mmap$auto(0xffffffff, 0x2020009, 0x3, 0x1ff, 0xfffffffffffffffb, 0x8000) 3.367629458s ago: executing program 2 (id=1632): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xf92c, 0x4000000000df, 0xeb1, 0x401, 0x2000000000004000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 2.956299998s ago: executing program 3 (id=1633): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80a86f3d, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) 2.663734343s ago: executing program 0 (id=1634): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = open(0x0, 0x163ac0, 0x47) statx$auto(r0, 0x0, 0x2001006, 0xdbe1, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) write$auto(0xffffffffffffffff, 0x0, 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setresuid$auto(0xf5, 0x8000, 0x67) r3 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x2c4800, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x80, 0x9, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x5, 0x0, 0x3, @attach_btf_obj_fd=r3, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) 2.420408163s ago: executing program 1 (id=1635): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = open(0x0, 0x163ac0, 0x47) statx$auto(r0, 0x0, 0x2001006, 0xdbe1, 0x0) mmap$auto(0x0, 0x4, 0xd8, 0x40eb1, r0, 0x300000000001) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x400000000000000, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d529b", 0x6) sysfs$auto(0x1, 0x2, 0xc) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), 0xffffffffffffffff) 2.249974784s ago: executing program 3 (id=1636): socket(0x23, 0x80805, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, 0x0, 0x0, 0x7ff6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0xfffffeff, 0x2, 0x6, 0x3, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x117f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x1, 0x9a8a, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/lockd/nlm_end_grace\x00', 0x2800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r2, 0x0, 0x40) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyaf\x00', 0x40, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045430, 0x0) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) unshare$auto(0x40000080) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1.261750278s ago: executing program 2 (id=1637): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getdents64$auto(0xffffffffffffffff, &(0x7f0000000880)={0x3, 0x4, 0x84, 0x9, "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"}, 0x200) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x40000023, 0x400, 0x9}]}) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) sendto$auto(r3, 0x0, 0x3, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) socket(0x10, 0x2, 0x4) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r6, 0x40025504, 0xffffffffffffffff) write$auto(0xca, &(0x7f0000000140)='\x04\x14\xa8\x1bk|d\v\x00\x00@\x00\x81\x00\x12\x00\xf6\xf5\x00\xdf\xff\x00', 0x13) r7 = socket(0x1d, 0x2, 0x7) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@can={0x1d, r9}, 0x6e) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r10}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.159704398s ago: executing program 0 (id=1638): socket(0x2, 0x1, 0x106) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) (async) unshare$auto(0x40000080) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) (async) lsm_set_self_attr$auto(0x11, &(0x7f0000000040)={0x1, 0xd, 0x80000000}, 0x7, 0x0) (async) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0xd3bed26fbb0d8463, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, 'syz_tun\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x1c054) sendmsg$auto_SMC_PNETID_DEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendfile$auto(r4, r3, 0x0, 0x48) (async, rerun: 64) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) (rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) (async) madvise$auto(0x0, 0x53, 0x9) 1.030141465s ago: executing program 3 (id=1639): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.2/usb3/uevent\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/195, 0xc3) fsconfig$auto_FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='/dev/ttyS2\x00', &(0x7f0000000040)="74e731dbda0dc34aa62fedd62d5713025581202d4c9443bdf040cc152016661d6f3286798c7b4fefbea241dbeb271bcd1c254a3cea371c106f4c83a2750dc504119cbc1808702150f35f9d12e284763b6b51aa2e49cf0d7f8d3d70e85b824c13b1e4b9543b322ae311efebd152869f0d48c934a28aace4e8aa5983671917836989d6fe5580ee8edea603349cbaf6d296a40ff2414d", 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) execve$auto(0x0, 0x0, 0x0) mmap$auto(0xa, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0xffffffffffffffff, &(0x7f0000000300)='.o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2deb43, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r3, 0x400445a0, r3) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(r4, 0x0, 0x1ff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000c20d213404c37af90b80699b7a7ab22f898ce511f1d3ee29ccaf911925000000000100000003006a98", @ANYRES16=0x0, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.5/usb6/power/wakeup\x00', 0x752fbe9fa139d935, 0x0) read$auto(r5, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) r6 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) recvmmsg$auto(r6, &(0x7f0000000380)={{&(0x7f00000001c0)="a25af2b37a144ac62b9fb2178f6e4e67d779e2a56a0800ea4e6f014a3f783c4c2b0e9f39835077acc836e1460e0c65bb1b0dd40089b359c47032c53b2dc40c9fcd1bf0dedbc1c978a764a4", 0x9, &(0x7f0000000140)={&(0x7f00000005c0)="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", 0x4}, 0x6b26cc9, &(0x7f0000000440)="0d766eb91993b1260bf6e6629c5d69d1b0ec279368bf7bef725311c63f8ddb7118cc7afd1afaa68b9d285017e97f9a2a50e5f81a1f2ccccc5d10d4107d62c35269922697d6780d22ed226b35b4410f55b0f0ac96551f5760452181826646d7b54f0294ca0c8393d6be2ce9dfeb209958e445851b6ffc55d5e1e81ef822169e6baa2beff30131da7f43a4312f130e6d87e5a0aacfb1c0e277609a9ff166b5f765f1483525a1ab32b4fa2e2726651e1ec8634af52545f2eb6af91fb5734220340e901325eb5ba6cd57520a8222", 0x2, 0x1}, 0x80}, 0x8, 0x0, &(0x7f00000003c0)={0x1, 0x5a48}) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) open(0x0, 0x22240, 0x155) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r7, 0x540a, 0x0) 1.010945225s ago: executing program 2 (id=1640): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) r0 = open(0x0, 0x163ac0, 0x47) statx$auto(r0, 0x0, 0x2001006, 0xdbe1, 0x0) mmap$auto(0x0, 0x4, 0xd8, 0x40eb1, r0, 0x300000000001) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x2) ioctl$auto_LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80004001, 0x9) write$auto(0x6, 0x0, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x400000000000000, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d529b", 0x6) sysfs$auto(0x1, 0x2, 0xc) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), 0xffffffffffffffff) 483.093998ms ago: executing program 3 (id=1641): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, r0, 0x20000008000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2, 0x7f, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0x7, 0xa, 0x1, 0x4, 0x3, 0x9, 0x5, 0x3, 0x48, 0x8002001f, 0x79d, 0x6d3e, 0x4, 0x6, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x45) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80a86f3d, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) 235.828779ms ago: executing program 0 (id=1642): r0 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r0, 0x205, 0x5, r0, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r0, 0x4c82, 0x0) unshare$auto(0x40000080) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x102, 0x0) readv$auto(r1, &(0x7f0000000700)={0x0, 0x9}, 0x1) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003b2ddbfbbff96356f940fdd1e932c6a1a08abb20a2b6d04c0e30ed9288d139e35c0759c21430d43e5ab01a7bf108bfd5d36e72ade15f75a685f97a5296bcc7cef737732fc55dba8c3ce18873c0ac8df1118b38028e6e913701ea324df2c4f4b3b616fc33d687df7d8810be321cf758a1b31144db54a6bdf4bde153e24532d1258faf7703d9b30113f5f497bf45", @ANYRES16=0x0, @ANYBLOB="010026bd7004fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x5, 0xf, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) ioctl$auto(0x3, 0x40a0ae49, r4) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) r6 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) pipe$auto(0x0) newfstatat$auto(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x100, 0x80, 0xffffffffffffffff, 0xee00, 0x0, 0x200, 0x6114, 0x1, 0x9, 0x1000, 0xe80, 0x7, 0x100000001, 0x3, 0x9}, 0x80000003) dup2$auto(0x5, 0x4) 194.062553ms ago: executing program 1 (id=1643): r0 = eventfd2$auto(0x6, 0x0) fcntl$auto_F_SETFD(r0, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) (async) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000040), r0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x5a4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x80) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyw6\x00', 0x400081, 0x0) truncate$auto(&(0x7f0000000180)='./file0\x00', 0x5) (async) truncate$auto(&(0x7f0000000180)='./file0\x00', 0x5) ioctl$auto_IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) (async) ioctl$auto_IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xf2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0xbc0da242e2907eff) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0x3, 0x14, &(0x7f0000000300)='*\'\x00', &(0x7f0000000340)=0x4) ioctl$auto_PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000380)=0x5) madvise$auto(0x3, 0x200, 0x4) (async) madvise$auto(0x3, 0x200, 0x4) msgctl$auto(0xffffffff, 0xfffffffb, &(0x7f0000000480)={{0x7, 0xee01, 0xee01, 0xfff, 0x0, 0x3, 0x3}, &(0x7f0000000400)=0x4, &(0x7f0000000440)=0xfb, 0x9, 0x44, 0x25d, 0x6, 0xd, 0x3, 0x33, 0x8001, @raw=0x8, @inferred=0x0}) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '}+$)]+-'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x80}, @NBD_ATTR_SOCKETS={0x60, 0x7, 0x0, 0x1, [@nested={0x5a, 0x143, 0x0, 0x1, [@nested={0x4, 0x3a}, @nested={0x4, 0x77}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x1000}, @nested={0x4, 0x9e}, @generic="0924b539ece3e2fd1ac3f8cd551fe7f7aeffd3bc80e2c7ed80db289fd4911d7c382c95c894550fbd742ca41d3950a234ec21", @typed={0x8, 0x14f, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x3b, 0x0, 0x0, @u32=0x9}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2008054}, 0x40011) madvise$auto(0x5, 0xb0, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ram12\x00', 0x880, 0x0) r9 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000700), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'vlan1\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000000780)={0x11ac, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r10}, @OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3ff}, @OVS_VPORT_ATTR_UPCALL_STATS={0x1163, 0xa, 0x0, 0x1, [@nested={0x8, 0x44, 0x0, 0x1, [@nested={0x4, 0x115}]}, @nested={0x43, 0x115, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x135}, @generic="d5eb029506836853ab6647ce94f9faa70de70de8d7d1f382c9c700588930226c27ad93", @nested={0x4, 0x13b}, @nested={0x4, 0x9f}, @nested={0x4, 0xb2}, @nested={0x4, 0xba}]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="181f03c093b8d4a8f9e5e7d0100bb1b6ec4af15b8a313b1797d676ab2d9b729b948f56548b638c85cfc44222a398941d5801b1a3fb559c341047375d670154b29f3ba2b23dac4ee487818d68b80fbe08dce4ee418c73bea47e054b075281b929fb162571a87215d4d17997f01725a60133cdcfbad4afed9df313f5920cab469868a08facd6aa597b6ead80972857e1cc15d1542e138f263a2824673ec7d887c35bfecf0acabcfecdc38f9388da2e1b3ee195d668419b470475077018ee21f4f34bb2b398cd7f9835d863f22e57", @typed={0x8, 0xa1, 0x0, 0x0, @pid=r7}, @generic="dedc1523f01b9e93204893366bdef5caff3121cb2bbd7f6c05881c04a818fe7103eec03176f48eab9123f4524de86c58bb9cdac2bad6", @generic="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"]}, @OVS_VPORT_ATTR_NAME={0x12, 0x3, '\'p#.).+&+\':/*\x00'}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000) (async) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000000780)={0x11ac, r9, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_TYPE={0x8}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r10}, @OVS_VPORT_ATTR_IFINDEX={0x8}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x3ff}, @OVS_VPORT_ATTR_UPCALL_STATS={0x1163, 0xa, 0x0, 0x1, [@nested={0x8, 0x44, 0x0, 0x1, [@nested={0x4, 0x115}]}, @nested={0x43, 0x115, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x135}, @generic="d5eb029506836853ab6647ce94f9faa70de70de8d7d1f382c9c700588930226c27ad93", @nested={0x4, 0x13b}, @nested={0x4, 0x9f}, @nested={0x4, 0xb2}, @nested={0x4, 0xba}]}, @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="181f03c093b8d4a8f9e5e7d0100bb1b6ec4af15b8a313b1797d676ab2d9b729b948f56548b638c85cfc44222a398941d5801b1a3fb559c341047375d670154b29f3ba2b23dac4ee487818d68b80fbe08dce4ee418c73bea47e054b075281b929fb162571a87215d4d17997f01725a60133cdcfbad4afed9df313f5920cab469868a08facd6aa597b6ead80972857e1cc15d1542e138f263a2824673ec7d887c35bfecf0acabcfecdc38f9388da2e1b3ee195d668419b470475077018ee21f4f34bb2b398cd7f9835d863f22e57", @typed={0x8, 0xa1, 0x0, 0x0, @pid=r7}, @generic="dedc1523f01b9e93204893366bdef5caff3121cb2bbd7f6c05881c04a818fe7103eec03176f48eab9123f4524de86c58bb9cdac2bad6", @generic="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"]}, @OVS_VPORT_ATTR_NAME={0x12, 0x3, '\'p#.).+&+\':/*\x00'}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000000) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001b00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x8c, 0x2, 0x0, 0x1, [@generic="7ae673829bd71d4c1de8eb28c932b2", @nested={0xc, 0xa8, 0x0, 0x1, [@typed={0x8, 0x14e, 0x0, 0x0, @uid=r6}]}, @generic="76993a38a40093b4897bccbc42ccc703b3ff1dfa8282dff9c8f4a62d7c62c7a790a72e8813088db011fa1bc1e8f1c0eebdb9daa947fd05bf9f5c96e9a9065e1fa6a8cbc18010405304e57f6746b38605440aa1a449a315b88d1ae3004b353edf2c6248694affae71e4b2634965"]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x60008810}, 0x8801) close_range$auto(r8, r3, 0x4) (async) close_range$auto(r8, r3, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/bus/usb/026/001\x00', 0x10002, 0x0) (async) r11 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/bus/usb/026/001\x00', 0x10002, 0x0) madvise$auto(0x3f, 0x7, 0x3) (async) madvise$auto(0x3f, 0x7, 0x3) writev$auto(r11, &(0x7f0000001c80)={&(0x7f0000001b80)="8eadbca861097f7cd9e5ff5b80f4d21a67db83a0f57875afdb550a43e11eabbacaa0c170eee327b8438c8b2fed3313dfc6df43a4bc47a11d74fd15c6eab69e6487bf63dad7f0e5980af483ac961a6262be6bdfdfbaaf154bc2a1d5574b42c41badd6fd17ec6dd400b51d6f48eb510cb20f4eacdee65dc331f82c7ecbd6ee3d6d644b128010676900cd302019bf9c98d988c879feb44ebcdfa8be173252855b8b5ec71f7322c6f0e01de3231512a4a7212c04865878398f37e2f8680e16d8ff2df393f163e4cfe19e344f79fc36f174444d"}, 0xfff) r12 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r12, 0x8) 53.633927ms ago: executing program 2 (id=1644): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) write$auto(r0, &(0x7f0000000040)='\xdb\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xb, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES16=0x0, @ANYRESHEX=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) write$auto(r3, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, 0x0) 0s ago: executing program 1 (id=1645): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) getdents64$auto(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x4, 0x5, 0xd4, "24423268e809ac55c5379de57cd0e8f136a33f7530dd6dac0de984998ccede3286b06b2d1fcb56d7440c338b4a81d84f9db5880413fc5a36b2fcd83222ac5a769fc6868cdc24f6592f5f6c584ea87e35d539ebfe8f8214832c5bbe98ad1904f30e00a0902a90066e1b99afb60856b47589ebda102737e1c6174823f4827c6361e38554a529c9aeb5d37dbab2ec73ccc427e96579bcbb364e1f3382ff3bffcb23b52584f0923396da2c9c81e9b07d12ccac88a452e100c5c7cd100629a3a7db3b2238d68f56e013db63ffb092031d87cc322c364bec598af92b00d9858d85212df3159e8b4d9771f57472392a2032d636b65b1d3cbb63603db20f4957c0d8c6717986055dfee564239dc65135c503730d8608bb1620e69efb4eefb93f85ad59d49c920e17d13b861489d9bdff69f872bb563b657fac9bfef85b2c4222c652e97b96c7685ec88d1e0066142d842a4e73e4a0b378e3745276d60ebcbae0fd68dd2585be18e77f9a09aec83c727a78c1aee8a065f1656cea98c5ce1783402a92cf6b197cd915a6e7b2a507ffc828e58b46879fe0c1839c30e58b7c96dea89f7da1e876fbffacb48e5f3a306dcb8b843498bb51dc2dd622445934629ae028ace5b78278edfa907516c423a378a215cc95ccf320c709c9411f096390a068285d9d8cac68cf8b83e6c3d6c7e8c9dae16bb19f67a0c8829fe906747dbde5d1f1635d3534c750be2d0f5da8e08739cbc788a38f1533ee6890548db23bb3eb775347432d87bbfe502149c23d1ee034a96eb61867d4d3797abafd0fae98e3b555f84a222fb533534bc9227ea1155936e4ccab8d97804f7c8c59175046f3520177f066fc679726d21b61ed20a83b0eaba136b1e55a13c9c43448c5ec4617974dd6fe4856f434990c931131c3c2dcd102a3cec102e16c20a280ed12011e65a1df32ead53f02e54e266d9ea8938a15eae8ef2c511db3762262f98f2ec8118c95ef0579a48828a7bbf16d576629b374cd1250e87e605a406d52fe22c857dcdc6bc76c24922ff7b078746c3393efd4dce04a53559c2962b496cd48483e1d11f6fa6ac916e036d5558c25b815d380e0a01a3ecf826f7629e2bc6ba39f2ed42476f18d636e6e63dfb14d097ebf716868153b647d7a71ce0f5fb4f2493d7bd4bb691fbab937f4d7455a"}, 0x200) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r0, 0x0, 0x6fffff9, 0xfffffff8, &(0x7f0000000440)=@can, 0x36) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r6}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0xfe, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): nth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 311.778098][T10241] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 312.864605][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597d6c00: rx timeout, send abort [ 312.873181][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597d6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 313.010546][T10273] __vm_enough_memory: pid: 10273, comm: syz.1.737, bytes: 9223372036854775808 not enough memory for the allocation [ 313.244565][T10255] net_ratelimit: 698 callbacks suppressed [ 313.244613][T10255] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.749571][T10312] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input113 [ 315.095813][T10320] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 315.109606][T10320] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 315.314722][T10314] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input114 [ 315.731000][T10327] openvswitch: HfR: Dropping previously announced user features [ 315.831138][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.837851][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.996615][ T30] audit: type=1800 audit(4294967365.498:6): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.743" name="dbroot" dev="configfs" ino=28596 res=0 errno=0 [ 316.023420][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888042650400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 317.285901][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042650800: rx timeout, send abort [ 317.302395][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888042650800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 317.972321][T10375] netlink: zone id is out of range [ 317.978146][T10375] netlink: zone id is out of range [ 317.989079][T10375] netlink: zone id is out of range [ 318.056143][T10375] netlink: zone id is out of range [ 318.096831][T10375] netlink: zone id is out of range [ 318.140838][T10375] netlink: zone id is out of range [ 318.168201][T10375] netlink: zone id is out of range [ 318.203137][T10375] netlink: zone id is out of range [ 318.240925][T10375] netlink: zone id is out of range [ 318.246184][T10375] netlink: zone id is out of range [ 318.251597][T10375] netlink: zone id is out of range [ 318.257035][T10375] netlink: zone id is out of range [ 318.262147][T10375] netlink: zone id is out of range [ 318.267809][T10375] netlink: zone id is out of range [ 318.272925][T10375] netlink: zone id is out of range [ 318.279379][T10375] netlink: zone id is out of range [ 318.284540][T10375] netlink: zone id is out of range [ 318.290194][T10375] netlink: zone id is out of range [ 319.066407][T10389] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 319.093031][T10389] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 319.456268][T10393] netlink: 354 bytes leftover after parsing attributes in process `syz.0.756'. [ 320.903631][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584e0c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 322.171488][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e568c00: rx timeout, send abort [ 322.179905][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e568c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 323.748099][T10464] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 323.804563][T10464] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 325.463812][T10496] netlink: 354 bytes leftover after parsing attributes in process `syz.2.771'. [ 326.501189][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888072518800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 327.767559][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807251a000: rx timeout, send abort [ 327.784663][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807251a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 328.276931][T10539] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 328.301399][T10539] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 331.931332][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880716b1800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 333.038774][T10610] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 333.048845][T10610] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 333.228176][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880716b0400: rx timeout, send abort [ 333.236816][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880716b0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 333.424590][T10618] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 333.503287][T10618] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 334.524488][T10642] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input115 [ 336.119197][T10644] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input116 [ 336.425744][T10642] openvswitch: HfR: Dropping previously announced user features [ 337.631172][T10670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input117 [ 337.776467][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880585eac00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 337.913546][T10684] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 337.922313][T10684] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 337.933049][T10679] openvswitch: HfR: Dropping previously announced user features [ 338.018074][T10676] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input118 [ 339.037876][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880585eb400: rx timeout, send abort [ 339.046223][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880585eb400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 339.496599][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.810'. [ 339.513391][T10705] bridge_slave_1: left allmulticast mode [ 339.519155][T10705] bridge_slave_1: left promiscuous mode [ 339.528009][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.592399][T10705] bridge_slave_0: left allmulticast mode [ 339.609275][T10705] bridge_slave_0: left promiscuous mode [ 339.621192][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.651808][T10708] netlink: 330 bytes leftover after parsing attributes in process `syz.1.810'. [ 341.118766][T10754] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 341.153107][T10754] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 341.793942][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801defcc00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 342.698510][T10778] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input119 [ 342.890904][T10779] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input120 [ 343.152730][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ddafc00: rx timeout, send abort [ 343.161368][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ddafc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 343.268384][T10789] Console: switching to colour VGA+ 80x25 [ 343.288691][T10787] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input121 [ 343.778766][T10778] openvswitch: HfR: Dropping previously announced user features [ 343.787123][T10790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input122 [ 344.305418][T10787] openvswitch: HfR: Dropping previously announced user features [ 345.717124][T10832] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 345.744425][T10832] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 346.821057][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88814c7a9400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 347.389354][T10859] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input123 [ 347.724031][T10861] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input124 [ 348.110753][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814c7a8800: rx timeout, send abort [ 348.119159][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88814c7a8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 348.258734][T10859] openvswitch: HfR: Dropping previously announced user features [ 351.235374][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880587ffc00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 351.576628][ T30] audit: type=1800 audit(4294967401.287:7): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.847" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 352.320886][T10934] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 352.336591][T10934] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 352.444926][T10939] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input125 [ 352.518943][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d873800: rx timeout, send abort [ 352.527519][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d873800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.992690][T10942] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input126 [ 355.667807][ T30] audit: type=1800 audit(4294967405.391:8): pid=10988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.859" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 356.173556][T10999] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input127 [ 356.416163][T11000] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input128 [ 356.852289][T11003] openvswitch: HfR: Dropping previously announced user features [ 356.911439][ T7092] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 357.056884][T11019] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 357.110393][T11019] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 358.920472][ T7081] Bluetooth: hci2: command 0x0c1a tx timeout [ 361.531912][T11082] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 361.564066][T11082] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 362.350060][T11097] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input129 [ 362.580281][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888069800800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 362.644315][T11102] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 362.688142][T11102] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 363.085342][T11099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input130 [ 363.156856][T11104] openvswitch: HfR: Dropping previously announced user features [ 363.895124][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580aa800: rx timeout, send abort [ 363.895254][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580aa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 364.195535][ T7081] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 365.680192][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584c6000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 366.237793][T11128] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.361983][T11173] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 366.376694][T11173] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 366.975803][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080faec00: rx timeout, send abort [ 366.984413][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888080faec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 367.010353][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880435dec00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 367.287417][T11192] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input131 [ 368.029287][T11194] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input132 [ 368.313718][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880435de800: rx timeout, send abort [ 368.322140][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880435de800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 368.871925][T11222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input133 [ 369.336360][T11224] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input134 [ 369.498144][T11228] openvswitch: HfR: Dropping previously announced user features [ 369.902125][T11246] vivid-003: ================= START STATUS ================= [ 369.910288][T11246] vivid-003: Radio HW Seek Mode: Bounded [ 369.946424][T11246] vivid-003: Radio Programmable HW Seek: false [ 369.953854][T11246] vivid-003: RDS Rx I/O Mode: Block I/O [ 369.965125][T11246] vivid-003: Generate RBDS Instead of RDS: false [ 369.971864][T11246] vivid-003: RDS Reception: true [ 369.987978][T11246] vivid-003: RDS Program Type: 0 inactive [ 370.001328][T11246] vivid-003: RDS PS Name: inactive [ 370.011497][T11246] vivid-003: RDS Radio Text: inactive [ 370.021262][T11252] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 370.033390][T11246] vivid-003: RDS Traffic Announcement: false inactive [ 370.041493][T11246] vivid-003: RDS Traffic Program: false inactive [ 370.046426][T11252] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 370.066724][T11246] vivid-003: RDS Music: false inactive [ 370.074135][T11246] vivid-003: ================== END STATUS ================== [ 370.321860][T11255] block nbd0: Unsupported socket: shutdown callout must be supported. [ 370.869813][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888077a82400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 371.084488][T11276] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input135 [ 371.516875][T11279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input136 [ 371.653442][T11276] openvswitch: HfR: Dropping previously announced user features [ 372.212665][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df5fc00: rx timeout, send abort [ 372.221543][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807df5fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 373.677662][T11307] openvswitch: HfR: Dropping previously announced user features [ 373.910517][T11321] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 373.920145][T11321] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 374.144519][T11323] can0: slcan on pty238. [ 374.332042][T11322] can0 (unregistered): slcan off pty238. [ 374.815734][T11355] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input137 [ 375.430603][T11370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input138 [ 375.514202][T11355] openvswitch: HfR: Dropping previously announced user features [ 375.759793][T11371] openvswitch: HfR: Dropping previously announced user features [ 376.069606][T11385] netlink: 476 bytes leftover after parsing attributes in process `syz.2.928'. [ 376.914046][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.926533][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.128054][T11431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input139 [ 378.781444][T11435] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input140 [ 379.240841][T11444] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 379.465244][T11447] openvswitch: HfR: Dropping previously announced user features [ 379.536686][T11446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 380.658984][T11477] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 380.748857][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 380.790639][T11477] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 381.537568][T11506] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input143 [ 382.459652][T11524] openvswitch: HfR: Dropping previously announced user features [ 382.600535][T11515] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input144 [ 383.246975][T11559] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input145 [ 383.864625][T11564] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 384.884700][T11559] openvswitch: HfR: Dropping previously announced user features [ 385.359405][T11604] FAULT_INJECTION: forcing a failure. [ 385.359405][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 385.376978][T11607] usb usb36: usbfs: process 11607 (syz.1.963) did not claim interface 0 before use [ 385.421379][T11604] CPU: 0 UID: 0 PID: 11604 Comm: syz.3.961 Not tainted syzkaller #0 PREEMPT(full) [ 385.421419][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.421436][T11604] Call Trace: [ 385.421445][T11604] [ 385.421456][T11604] dump_stack_lvl+0x16c/0x1f0 [ 385.421500][T11604] should_fail_ex+0x512/0x640 [ 385.421536][T11604] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 385.421572][T11604] should_failslab+0xc2/0x120 [ 385.421606][T11604] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 385.421646][T11604] ? prepare_creds+0x2c/0x7d0 [ 385.421690][T11604] prepare_creds+0x2c/0x7d0 [ 385.421730][T11604] __sys_setresgid+0x4af/0x1150 [ 385.421765][T11604] do_syscall_64+0xcd/0x4c0 [ 385.421804][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.421831][T11604] RIP: 0033:0x7f3aea58eba9 [ 385.421852][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.421876][T11604] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 385.421902][T11604] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 385.421919][T11604] RDX: 000000000000ee00 RSI: 000000000000ee01 RDI: 000000000000ee00 [ 385.421935][T11604] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 385.421951][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.421967][T11604] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 385.422003][T11604] [ 385.873850][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888071696800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 387.204955][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805711fc00: rx timeout, send abort [ 387.213471][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805711fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 387.479694][T11670] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input147 [ 388.128970][T11678] openvswitch: HfR: Dropping previously announced user features [ 388.802054][T11676] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input148 [ 392.024190][T11740] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 392.059281][T11740] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 392.248681][T11748] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input149 [ 392.855384][T11749] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input150 [ 393.954206][T11748] openvswitch: HfR: Dropping previously announced user features [ 394.823149][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880573a1400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 396.106804][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807219ac00: rx timeout, send abort [ 396.115188][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807219ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 396.148450][T11807] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 396.237353][T11807] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 396.803197][T11823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input151 [ 397.599248][T11826] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input152 [ 399.506373][T11855] FAULT_INJECTION: forcing a failure. [ 399.506373][T11855] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 399.520958][T11855] CPU: 1 UID: 0 PID: 11855 Comm: syz.0.997 Not tainted syzkaller #0 PREEMPT(full) [ 399.520990][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 399.521004][T11855] Call Trace: [ 399.521012][T11855] [ 399.521021][T11855] dump_stack_lvl+0x16c/0x1f0 [ 399.521061][T11855] should_fail_ex+0x512/0x640 [ 399.521101][T11855] _copy_from_user+0x2e/0xd0 [ 399.521128][T11855] __sys_bpf+0x21d/0x4de0 [ 399.521167][T11855] ? __pfx___sys_bpf+0x10/0x10 [ 399.521201][T11855] ? ksys_write+0x190/0x250 [ 399.521221][T11855] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 399.521253][T11855] ? fput+0x9b/0xd0 [ 399.521272][T11855] ? ksys_write+0x1ac/0x250 [ 399.521287][T11855] ? __pfx_ksys_write+0x10/0x10 [ 399.521306][T11855] __x64_sys_bpf+0x78/0xc0 [ 399.521318][T11855] ? lockdep_hardirqs_on+0x7c/0x110 [ 399.521338][T11855] do_syscall_64+0xcd/0x4c0 [ 399.521360][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.521374][T11855] RIP: 0033:0x7f922ad8eba9 [ 399.521386][T11855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.521398][T11855] RSP: 002b:00007f922bc85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.521412][T11855] RAX: ffffffffffffffda RBX: 00007f922afd6090 RCX: 00007f922ad8eba9 [ 399.521421][T11855] RDX: 000000000000000f RSI: 0000200000000340 RDI: 0000000000000012 [ 399.521429][T11855] RBP: 00007f922bc85090 R08: 0000000000000000 R09: 0000000000000000 [ 399.521437][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.521444][T11855] R13: 00007f922afd6128 R14: 00007f922afd6090 R15: 00007ffd4df235b8 [ 399.521462][T11855] [ 402.307059][T11930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input153 [ 403.162441][T11935] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input154 [ 403.774532][T11930] openvswitch: HfR: Dropping previously announced user features [ 404.196150][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584e3000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 404.492446][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069803400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 405.458012][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805847f000: rx timeout, send abort [ 405.470956][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805847f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 405.765245][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069800400: rx timeout, send abort [ 405.773608][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069800400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 408.024161][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880296f6400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 408.449438][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888085fe1000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 409.287619][ C1] vcan0: j1939_tp_rxtimer: 0xffff888071696c00: rx timeout, send abort [ 409.296189][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888071696c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.566713][T12072] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input155 [ 409.711570][ C1] vcan0: j1939_tp_rxtimer: 0xffff888067b64c00: rx timeout, send abort [ 409.719930][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888067b64c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 410.078881][T12079] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input156 [ 410.121634][T12077] openvswitch: HfR: Dropping previously announced user features [ 410.137561][T12072] openvswitch: HfR: Dropping previously announced user features [ 413.395994][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583a2000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 414.664439][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880581d4400: rx timeout, send abort [ 414.672879][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880581d4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 415.203390][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'. [ 415.407630][T12164] could not allocate digest TFM handle 0 [ 418.325243][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057ddd000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 418.539499][T12232] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input157 [ 418.814412][T12233] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input158 [ 418.948843][T12233] openvswitch: HfR: Dropping previously announced user features [ 419.251024][T12243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input159 [ 419.336069][T12240] could not allocate digest TFM handle - [ 419.462757][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1060'. [ 419.468915][T12245] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input160 [ 419.590986][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057ddec00: rx timeout, send abort [ 419.599511][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057ddec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 419.975591][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580d4800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 420.064837][T12243] openvswitch: HfR: Dropping previously announced user features [ 421.277304][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880580d6c00: rx timeout, send abort [ 421.285786][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580d6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 423.275517][T12315] block nbd0: Unsupported socket: shutdown callout must be supported. [ 424.096049][T12325] Console: switching to colour frame buffer device 128x48 [ 424.234781][T12335] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input161 [ 424.850016][T12339] openvswitch: HfR: Dropping previously announced user features [ 424.867091][T12348] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1076'. [ 424.904507][T12337] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input162 [ 424.914964][T12348] team_slave_0: entered allmulticast mode [ 425.207118][T12335] openvswitch: HfR: Dropping previously announced user features [ 425.515247][T12349] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input163 [ 425.719705][T12368] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 425.776756][T12350] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input164 [ 425.977882][T12366] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input165 [ 426.173439][T12371] openvswitch: HfR: Dropping previously announced user features [ 426.308299][T12378] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 426.324879][T12378] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 426.478517][T12370] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input166 [ 427.036748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888046b46400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 428.324670][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046b47c00: rx timeout, send abort [ 428.333109][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888046b47c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 428.760286][T12420] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input167 [ 428.857498][T12424] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 429.471448][T12422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input168 [ 429.512776][T12429] openvswitch: HfR: Dropping previously announced user features [ 429.605077][T12431] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input169 [ 430.120202][T12421] openvswitch: HfR: Dropping previously announced user features [ 430.247376][T12427] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input170 [ 430.521068][T12446] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 430.544492][T12446] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 430.646866][T12453] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input171 [ 431.036819][T12456] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input172 [ 431.563092][T12458] openvswitch: HfR: Dropping previously announced user features [ 432.735119][T12498] binder: 12493:12498 ioctl c0306201 200000001040 returned -14 [ 433.249211][T12507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input173 [ 433.809795][T12508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input174 [ 433.911898][T12507] openvswitch: HfR: Dropping previously announced user features [ 434.246827][T12515] FAULT_INJECTION: forcing a failure. [ 434.246827][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 434.265598][T12515] CPU: 0 UID: 0 PID: 12515 Comm: syz.1.1105 Not tainted syzkaller #0 PREEMPT(full) [ 434.265634][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.265649][T12515] Call Trace: [ 434.265657][T12515] [ 434.265667][T12515] dump_stack_lvl+0x16c/0x1f0 [ 434.265709][T12515] should_fail_ex+0x512/0x640 [ 434.265746][T12515] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 434.265780][T12515] should_failslab+0xc2/0x120 [ 434.265814][T12515] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 434.265843][T12515] ? create_new_namespaces+0x30/0xa90 [ 434.265878][T12515] create_new_namespaces+0x30/0xa90 [ 434.265905][T12515] ? bpf_lsm_capable+0x9/0x10 [ 434.265928][T12515] ? security_capable+0x7e/0x260 [ 434.265959][T12515] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 434.265991][T12515] ksys_unshare+0x45b/0xa40 [ 434.266026][T12515] ? __pfx_ksys_unshare+0x10/0x10 [ 434.266059][T12515] ? xfd_validate_state+0x61/0x180 [ 434.266117][T12515] __x64_sys_unshare+0x31/0x40 [ 434.266151][T12515] do_syscall_64+0xcd/0x4c0 [ 434.266192][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.266219][T12515] RIP: 0033:0x7f23e418eba9 [ 434.266240][T12515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.266265][T12515] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 434.266289][T12515] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 434.266308][T12515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 434.266323][T12515] RBP: 00007f23e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 434.266338][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.266353][T12515] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 434.266388][T12515] [ 434.575314][T12515] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 434.583189][T12515] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1105'. [ 435.766372][T12555] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input175 [ 436.107306][T12561] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 436.119384][T12561] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 436.838281][T12557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input176 [ 437.344453][T12558] openvswitch: HfR: Dropping previously announced user features [ 437.422466][T12578] openvswitch: HfR: Dropping previously announced user features [ 438.017918][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.035547][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.747978][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a6d5400: rx timeout, send abort [ 440.756516][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a6d5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 440.862611][T12660] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input177 [ 441.258161][T12665] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input178 [ 441.263540][T12660] openvswitch: HfR: Dropping previously announced user features [ 442.345674][T12681] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input179 [ 442.859978][T12685] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input180 [ 443.065895][T12681] openvswitch: HfR: Dropping previously announced user features [ 444.641957][T12725] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input181 [ 444.769634][T12726] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input182 [ 444.845047][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807df80400: rx timeout, send abort [ 444.853551][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807df80400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 445.049972][T12725] openvswitch: HfR: Dropping previously announced user features [ 445.418443][T12737] XFS: Clearing xfsstats [ 447.955044][ T30] audit: type=1800 audit(4294967498.381:9): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1154" name="dbroot" dev="configfs" ino=41690 res=0 errno=0 [ 447.975179][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.254188][T12804] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input183 [ 448.483211][T12807] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input184 [ 448.670951][T12807] openvswitch: HfR: Dropping previously announced user features [ 449.128095][T12816] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 449.145183][T12816] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 454.385923][T12911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input185 [ 454.584750][T12913] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input186 [ 455.238594][T12931] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input187 [ 456.060276][T12936] openvswitch: HfR: Dropping previously announced user features [ 456.254573][T12945] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 456.284620][T12945] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 456.530332][T12947] block nbd0: Unsupported socket: shutdown callout must be supported. [ 456.547029][T12934] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input188 [ 456.885912][T12951] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 456.895387][T12951] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 458.130083][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d06c00: rx timeout, send abort [ 458.141071][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057d06c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 458.684634][T12976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input189 [ 459.418835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803412f400: rx timeout, send abort [ 459.428024][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803412f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 459.447875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803412ec00: rx timeout, send abort [ 459.456342][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803412ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 459.629905][T12984] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 459.653331][T12978] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input190 [ 459.662040][T12986] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 459.690113][T12984] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 459.719895][T12986] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 460.562566][T13001] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input191 [ 461.183722][T13002] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input192 [ 462.190660][T13022] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 462.199654][T13022] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 462.596554][T13028] block nbd0: Unsupported socket: shutdown callout must be supported. [ 462.711182][T13033] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 462.723677][T13033] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 463.670193][T13050] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input193 [ 464.682526][T13051] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input194 [ 465.866424][T13068] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input195 [ 466.398200][T13069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input196 [ 466.943617][T13084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input197 [ 467.584606][T13085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input198 [ 467.732133][T13108] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input199 [ 468.451992][T13109] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input200 [ 469.054658][T13108] openvswitch: HfR: Dropping previously announced user features [ 469.228034][T13127] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input201 [ 469.231000][T13129] openvswitch: HfR: Dropping previously announced user features [ 469.567487][T13128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input202 [ 470.149671][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ab04800: rx timeout, send abort [ 470.158121][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ab04800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 470.431954][T13155] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input203 [ 471.137913][T13158] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input204 [ 471.246321][T13147] delete_channel: no stack [ 472.027092][T13189] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input205 [ 472.058093][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880519e1000: rx timeout, send abort [ 472.066483][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880519e1000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 472.332196][T13190] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input206 [ 472.522281][T13194] openvswitch: HfR: Dropping previously announced user features [ 472.994053][T13199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input207 [ 473.375821][T13202] openvswitch: HfR: Dropping previously announced user features [ 473.576617][T13200] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input208 [ 474.667961][T13233] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 474.730010][T13233] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 476.770764][T13260] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 476.824695][T13260] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 476.937566][T13265] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input209 [ 477.858501][T13269] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input210 [ 478.084029][T13287] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 478.100421][T13287] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 479.398867][T13310] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input211 [ 479.541997][T13299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1240'. [ 479.609865][T13311] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input212 [ 480.329108][T13310] openvswitch: HfR: Dropping previously announced user features [ 482.007541][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801defcc00: rx timeout, send abort [ 482.016352][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801defcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 482.349615][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888043720400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 483.448670][T13373] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input213 [ 483.626097][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043721800: rx timeout, send abort [ 483.634452][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888043721800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 483.677361][T13376] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input214 [ 484.454632][T13391] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 484.475242][T13391] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 485.091159][T13395] block nbd0: Unsupported socket: shutdown callout must be supported. [ 485.568214][T13407] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 485.580687][T13407] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 487.668116][T13452] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 487.971630][T13459] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 487.987974][T13459] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 491.256245][T13518] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 493.016791][T13561] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input215 [ 493.606395][T13563] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input216 [ 493.913085][T13566] openvswitch: HfR: Dropping previously announced user features [ 495.591103][ T30] audit: type=1800 audit(4294967546.604:10): pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=45688 res=0 errno=0 [ 496.998790][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 498.321218][T13660] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input217 [ 498.615374][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.621709][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.101203][T13662] openvswitch: HfR: Dropping previously announced user features [ 499.138195][T13661] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input218 [ 499.839716][T13682] syz.0.1315: vmalloc error: size 1163264, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.887495][T13682] CPU: 1 UID: 0 PID: 13682 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) [ 499.887517][T13682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.887527][T13682] Call Trace: [ 499.887533][T13682] [ 499.887539][T13682] dump_stack_lvl+0x16c/0x1f0 [ 499.887565][T13682] warn_alloc+0x248/0x3a0 [ 499.887585][T13682] ? __pfx_warn_alloc+0x10/0x10 [ 499.887603][T13682] ? alloc_pages_mpol+0x25a/0x550 [ 499.887632][T13682] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 499.887660][T13682] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 499.887681][T13682] ? dvb_dvr_open+0x442/0x6c0 [ 499.887702][T13682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.887724][T13682] ? dvb_dvr_open+0x442/0x6c0 [ 499.887737][T13682] __vmalloc_node_noprof+0xad/0xf0 [ 499.887750][T13682] ? dvb_dvr_open+0x442/0x6c0 [ 499.887766][T13682] dvb_dvr_open+0x442/0x6c0 [ 499.887780][T13682] ? __pfx_dvb_dvr_open+0x10/0x10 [ 499.887795][T13682] dvb_device_open+0x26d/0x3b0 [ 499.887809][T13682] ? __pfx_dvb_device_open+0x10/0x10 [ 499.887822][T13682] chrdev_open+0x234/0x6a0 [ 499.887841][T13682] ? __pfx_chrdev_open+0x10/0x10 [ 499.887861][T13682] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 499.887881][T13682] do_dentry_open+0x982/0x1530 [ 499.887899][T13682] ? __pfx_chrdev_open+0x10/0x10 [ 499.887921][T13682] vfs_open+0x82/0x3f0 [ 499.887944][T13682] path_openat+0x1de4/0x2cb0 [ 499.887968][T13682] ? __pfx_path_openat+0x10/0x10 [ 499.887990][T13682] do_filp_open+0x20b/0x470 [ 499.888011][T13682] ? __pfx_do_filp_open+0x10/0x10 [ 499.888043][T13682] ? alloc_fd+0x471/0x7d0 [ 499.888064][T13682] do_sys_openat2+0x11b/0x1d0 [ 499.888085][T13682] ? __pfx_do_sys_openat2+0x10/0x10 [ 499.888107][T13682] ? find_held_lock+0x2b/0x80 [ 499.888127][T13682] __x64_sys_openat+0x174/0x210 [ 499.888140][T13682] ? __pfx___x64_sys_openat+0x10/0x10 [ 499.888160][T13682] do_syscall_64+0xcd/0x4c0 [ 499.888183][T13682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.888198][T13682] RIP: 0033:0x7f922ad8eba9 [ 499.888210][T13682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.888224][T13682] RSP: 002b:00007f922bca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 499.888238][T13682] RAX: ffffffffffffffda RBX: 00007f922afd5fa0 RCX: 00007f922ad8eba9 [ 499.888247][T13682] RDX: 0000000000008440 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 499.888256][T13682] RBP: 00007f922ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 499.888265][T13682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.888274][T13682] R13: 00007f922afd6038 R14: 00007f922afd5fa0 R15: 00007ffd4df235b8 [ 499.888293][T13682] [ 499.888300][T13682] Mem-Info: [ 500.252371][T13682] active_anon:12418 inactive_anon:4910 isolated_anon:0 [ 500.252371][T13682] active_file:15142 inactive_file:43273 isolated_file:0 [ 500.252371][T13682] unevictable:768 dirty:846 writeback:0 [ 500.252371][T13682] slab_reclaimable:11628 slab_unreclaimable:93871 [ 500.252371][T13682] mapped:28105 shmem:1362 pagetables:1260 [ 500.252371][T13682] sec_pagetables:0 bounce:0 [ 500.252371][T13682] kernel_misc_reclaimable:0 [ 500.252371][T13682] free:1305558 free_pcp:19336 free_cma:0 [ 500.302258][T13682] Node 0 active_anon:49672kB inactive_anon:19640kB active_file:60540kB inactive_file:172956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112396kB dirty:3384kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12292kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.339378][T13682] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 500.443475][T13682] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 500.488770][T13682] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 500.627083][T13682] Node 0 DMA32 free:1334276kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49624kB inactive_anon:20140kB active_file:59308kB inactive_file:172884kB unevictable:1536kB writepending:3384kB present:3129332kB managed:2539544kB mlocked:0kB bounce:0kB free_pcp:36804kB local_pcp:19024kB free_cma:0kB [ 500.700760][T13682] lowmem_reserve[]: 0 0 1 1 1 [ 500.723992][T13682] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:1232kB inactive_file:72kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 500.771230][T13682] lowmem_reserve[]: 0 0 0 0 0 [ 500.776180][T13682] Node 1 Normal free:3871880kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39152kB local_pcp:18384kB free_cma:0kB [ 500.813076][T13682] lowmem_reserve[]: 0 0 0 0 0 [ 500.834939][T13682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 500.868045][T13682] Node 0 DMA32: 4237*4kB (UME) 3361*8kB (UM) 2177*16kB (UME) 1668*32kB (UME) 1060*64kB (UME) 652*128kB (UME) 445*256kB (UME) 292*512kB (UME) 199*1024kB (UM) 15*2048kB (UME) 135*4096kB (M) = 1334220kB [ 500.896595][T13682] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 500.912677][T13682] Node 1 Normal: 191*4kB (UE) 74*8kB (UE) 41*16kB (UE) 45*32kB (UME) 25*64kB (UME) 14*128kB (UME) 10*256kB (UME) 10*512kB (UM) 7*1024kB (U) 8*2048kB (UME) 936*4096kB (UM) = 3871932kB [ 500.952326][T13682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.962491][T13682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.973411][T13682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.023610][T13682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.039497][T13682] 59542 total pagecache pages [ 501.044277][T13682] 12 pages in swap cache [ 501.057173][T13682] Free swap = 124948kB [ 501.096851][T13682] Total swap = 124996kB [ 501.118731][T13682] 2097051 pages RAM [ 501.123103][T13682] 0 pages HighMem/MovableOnly [ 501.130798][T13682] 430203 pages reserved [ 501.134973][T13682] 0 pages cma reserved [ 501.305111][T13708] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'. [ 501.349297][T13711] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 501.384218][T13711] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 502.202791][T13717] bond0: option peer_notif_delay: invalid value () [ 502.239184][T13717] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 502.878311][T13742] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 502.887281][T13742] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 503.093184][T13743] block nbd0: Unsupported socket: shutdown callout must be supported. [ 503.425956][T13750] FAULT_INJECTION: forcing a failure. [ 503.425956][T13750] name failslab, interval 1, probability 0, space 0, times 0 [ 503.457751][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.3.1328 Not tainted syzkaller #0 PREEMPT(full) [ 503.457772][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 503.457781][T13750] Call Trace: [ 503.457786][T13750] [ 503.457792][T13750] dump_stack_lvl+0x16c/0x1f0 [ 503.457819][T13750] should_fail_ex+0x512/0x640 [ 503.457840][T13750] ? __kmalloc_noprof+0xbf/0x510 [ 503.457859][T13750] ? iter_file_splice_write+0x1cc/0x12e0 [ 503.457874][T13750] should_failslab+0xc2/0x120 [ 503.457892][T13750] __kmalloc_noprof+0xd2/0x510 [ 503.457912][T13750] iter_file_splice_write+0x1cc/0x12e0 [ 503.457929][T13750] ? aa_file_perm+0x29e/0x12e0 [ 503.457952][T13750] ? __lock_acquire+0x62e/0x1ce0 [ 503.457972][T13750] ? __pfx_aa_file_perm+0x10/0x10 [ 503.457994][T13750] ? __pfx_iter_file_splice_write+0x10/0x10 [ 503.458013][T13750] ? find_held_lock+0x2b/0x80 [ 503.458033][T13750] ? bpf_lsm_file_permission+0x9/0x10 [ 503.458053][T13750] ? security_file_permission+0x71/0x210 [ 503.458073][T13750] ? rw_verify_area+0xcf/0x6c0 [ 503.458087][T13750] ? __pfx_iter_file_splice_write+0x10/0x10 [ 503.458103][T13750] do_splice+0x1475/0x1fc0 [ 503.458119][T13750] ? __lock_acquire+0x62e/0x1ce0 [ 503.458143][T13750] ? __pfx_do_splice+0x10/0x10 [ 503.458156][T13750] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 503.458171][T13750] ? find_held_lock+0x2b/0x80 [ 503.458186][T13750] __do_splice+0x32a/0x360 [ 503.458202][T13750] ? __pfx___do_splice+0x10/0x10 [ 503.458222][T13750] __x64_sys_splice+0x187/0x250 [ 503.458239][T13750] do_syscall_64+0xcd/0x4c0 [ 503.458262][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.458277][T13750] RIP: 0033:0x7f3aea58eba9 [ 503.458289][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.458302][T13750] RSP: 002b:00007f3aeb4a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 503.458316][T13750] RAX: ffffffffffffffda RBX: 00007f3aea7d6090 RCX: 00007f3aea58eba9 [ 503.458336][T13750] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 503.458344][T13750] RBP: 00007f3aeb4a5090 R08: 0000000080004001 R09: 0000000000000009 [ 503.458353][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.458361][T13750] R13: 00007f3aea7d6128 R14: 00007f3aea7d6090 R15: 00007ffdd542d948 [ 503.458378][T13750] [ 504.510761][T13773] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input219 [ 505.324632][T13775] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input220 [ 505.585870][T13777] openvswitch: HfR: Dropping previously announced user features [ 506.051894][T13792] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input221 [ 506.189048][T13795] openvswitch: HfR: Dropping previously announced user features [ 506.427948][T13794] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input222 [ 507.573820][ T30] audit: type=1800 audit(4294967558.661:11): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=46724 res=0 errno=0 [ 508.000160][T13835] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(9.8683.2047), cmd(1) [ 509.990256][T13862] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 510.094409][T13862] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 510.111776][T13865] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input223 [ 510.682272][T13871] block nbd0: Unsupported socket: shutdown callout must be supported. [ 510.694544][T13867] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input224 [ 511.109872][T13865] openvswitch: HfR: Dropping previously announced user features [ 511.851365][T13885] blktrace: Concurrent blktraces are not allowed on nbd3 [ 512.326734][T13892] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 512.374814][T13892] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 512.475885][T13892] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 512.486822][T13892] raw: ffff888078000dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 512.498808][T13892] page dumped because: unmovable page [ 512.505059][T13892] page_owner tracks the page as allocated [ 512.523732][T13892] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6003, tgid 5998 (syz.3.9), ts 93642340299, free_ts 93624351948 [ 512.543246][T13892] post_alloc_hook+0x1c0/0x230 [ 512.548208][T13892] get_page_from_freelist+0x132b/0x38e0 [ 512.671099][T13892] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 512.963828][T13892] alloc_pages_mpol+0x1fb/0x550 [ 512.985885][T13892] alloc_pages_noprof+0x131/0x390 [ 512.999082][T13892] brd_submit_bio+0x942/0x1180 [ 513.058170][T13892] __submit_bio+0x301/0x690 [ 513.062736][T13892] submit_bio_noacct_nocheck+0x852/0xd30 [ 513.068572][T13892] submit_bio_noacct+0xc20/0x1ed0 [ 513.073595][T13892] __block_write_full_folio+0x735/0xe00 [ 513.079326][T13892] block_write_full_folio+0x341/0x400 [ 513.084738][T13892] blkdev_writepages+0xb8/0x140 [ 513.085422][T13898] futex_wake_op: syz.0.1355 tries to shift op by -2048; fix this program [ 513.089801][T13892] do_writepages+0x277/0x600 [ 513.102821][T13892] filemap_fdatawrite_wbc+0x104/0x160 [ 513.108263][T13892] __filemap_fdatawrite_range+0xb9/0x100 [ 513.114050][T13892] filemap_write_and_wait_range+0xa3/0x130 [ 513.119997][T13892] page last free pid 15 tgid 15 stack trace: [ 513.127214][T13898] futex_wake_op: syz.0.1355 tries to shift op by -2048; fix this program [ 513.154732][T13892] __free_frozen_pages+0x7d5/0x10f0 [ 513.161159][T13892] rcu_core+0x799/0x1530 [ 513.165629][T13892] handle_softirqs+0x216/0x8e0 [ 513.170505][T13892] run_ksoftirqd+0x3a/0x60 [ 513.175007][T13892] smpboot_thread_fn+0x3f7/0xae0 [ 513.185393][T13892] kthread+0x3c5/0x780 [ 513.189501][T13892] ret_from_fork+0x56d/0x730 [ 513.204475][T13892] ret_from_fork_asm+0x1a/0x30 [ 514.319789][T13924] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 515.932616][T13965] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input225 [ 515.998775][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880587a6800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 516.387184][T13973] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input226 [ 517.301135][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058074800: rx timeout, send abort [ 517.309563][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058074800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 520.693968][T14066] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input227 [ 521.104730][T14067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input228 [ 521.374248][T14066] openvswitch: HfR: Dropping previously announced user features [ 521.867627][T14084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input229 [ 522.200168][T14086] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input230 [ 527.115534][T14188] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 528.338698][T14212] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 528.347421][T14212] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 528.715082][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 530.102831][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807df55c00: rx timeout, send abort [ 530.111233][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807df55c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 530.696493][T14267] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 532.808279][T14309] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 532.823277][T14309] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 532.995906][T14311] block nbd0: Unsupported socket: shutdown callout must be supported. [ 534.289517][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880519e1400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 534.537284][T14336] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 535.197522][T14346] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 535.255318][T14346] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 535.554846][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880519e2800: rx timeout, send abort [ 535.563311][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880519e2800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 536.004505][T14364] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 536.021209][T14364] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 537.002802][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 538.271225][T14399] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 539.268965][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 540.416749][T14446] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 540.459430][T14446] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 540.987895][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 541.252627][T14459] netlink: 'syz.1.1439': attribute type 1 has an invalid length. [ 541.374433][T14464] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 541.753328][T14479] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input231 [ 542.249676][T14483] openvswitch: HfR: Dropping previously announced user features [ 542.414232][T14481] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input232 [ 542.541214][T14474] random: crng reseeded on system resumption [ 542.603390][T14469] FAULT_INJECTION: forcing a failure. [ 542.603390][T14469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.637152][T14469] CPU: 1 UID: 0 PID: 14469 Comm: syz.2.1443 Not tainted syzkaller #0 PREEMPT(full) [ 542.637191][T14469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 542.637206][T14469] Call Trace: [ 542.637214][T14469] [ 542.637223][T14469] dump_stack_lvl+0x16c/0x1f0 [ 542.637261][T14469] should_fail_ex+0x512/0x640 [ 542.637310][T14469] _copy_from_user+0x2e/0xd0 [ 542.637336][T14469] get_timespec64+0x8b/0x1b0 [ 542.637365][T14469] ? __pfx_get_timespec64+0x10/0x10 [ 542.637391][T14469] ? ktime_get+0x200/0x310 [ 542.637426][T14469] __x64_sys_futex+0x288/0x4c0 [ 542.637460][T14469] ? __pfx___x64_sys_futex+0x10/0x10 [ 542.637490][T14469] ? xfd_validate_state+0x61/0x180 [ 542.637534][T14469] do_syscall_64+0xcd/0x4c0 [ 542.637572][T14469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.637596][T14469] RIP: 0033:0x7f7bf158eba9 [ 542.637615][T14469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.637638][T14469] RSP: 002b:00007ffd8d74d8b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 542.637661][T14469] RAX: ffffffffffffffda RBX: 0000000000085368 RCX: 00007f7bf158eba9 [ 542.637677][T14469] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7bf17d609c [ 542.637691][T14469] RBP: 0000000000000032 R08: 00007f7bf2332000 R09: 0000001b8d74dbaf [ 542.637707][T14469] R10: 00007ffd8d74d9b0 R11: 0000000000000246 R12: 00007f7bf17d609c [ 542.637721][T14469] R13: 00007ffd8d74d9b0 R14: 000000000008539a R15: 00007ffd8d74d9d0 [ 542.637754][T14469] [ 543.373455][T11128] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 543.373491][T11128] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 543.389608][T11128] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 543.392382][T11128] Bluetooth: hci3: adv larger than maximum supported [ 543.399619][T11128] Bluetooth: hci3: Unknown advertising packet type: 0x71 [ 543.406311][T11128] Bluetooth: hci3: adv larger than maximum supported [ 543.413430][T11128] Bluetooth: hci3: Malformed LE Event: 0x0d [ 543.605094][T14507] openvswitch: HfR: Dropping previously announced user features [ 544.075677][T14507] FAULT_INJECTION: forcing a failure. [ 544.075677][T14507] name fail_futex, interval 1, probability 0, space 0, times 0 [ 544.112140][T14507] CPU: 1 UID: 0 PID: 14507 Comm: syz.1.1448 Not tainted syzkaller #0 PREEMPT(full) [ 544.112175][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 544.112189][T14507] Call Trace: [ 544.112196][T14507] [ 544.112206][T14507] dump_stack_lvl+0x16c/0x1f0 [ 544.112245][T14507] should_fail_ex+0x512/0x640 [ 544.112285][T14507] get_futex_key+0xff0/0x1560 [ 544.112319][T14507] ? __pfx_get_futex_key+0x10/0x10 [ 544.112347][T14507] ? __mutex_trylock_common+0xe9/0x250 [ 544.112388][T14507] futex_wake+0xea/0x530 [ 544.112434][T14507] ? __pfx_futex_wake+0x10/0x10 [ 544.112483][T14507] do_futex+0x1e3/0x350 [ 544.112513][T14507] ? __pfx_do_futex+0x10/0x10 [ 544.112539][T14507] ? __might_fault+0xe3/0x190 [ 544.112576][T14507] mm_release+0x24e/0x300 [ 544.112605][T14507] do_exit+0x68e/0x2bf0 [ 544.112644][T14507] ? __pfx_do_exit+0x10/0x10 [ 544.112674][T14507] ? do_raw_spin_lock+0x12c/0x2b0 [ 544.112708][T14507] ? find_held_lock+0x2b/0x80 [ 544.112736][T14507] do_group_exit+0xd3/0x2a0 [ 544.112770][T14507] get_signal+0x2673/0x26d0 [ 544.112810][T14507] ? __pfx_get_signal+0x10/0x10 [ 544.112836][T14507] ? do_futex+0x122/0x350 [ 544.112865][T14507] ? __pfx_do_futex+0x10/0x10 [ 544.112897][T14507] arch_do_signal_or_restart+0x8f/0x790 [ 544.112930][T14507] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 544.112970][T14507] ? xfd_validate_state+0x61/0x180 [ 544.113011][T14507] exit_to_user_mode_loop+0x84/0x110 [ 544.113046][T14507] do_syscall_64+0x41c/0x4c0 [ 544.113082][T14507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.113106][T14507] RIP: 0033:0x7f23e418eba9 [ 544.113125][T14507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.113148][T14507] RSP: 002b:00007f23e4fab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 544.113171][T14507] RAX: fffffffffffffe00 RBX: 00007f23e43d6188 RCX: 00007f23e418eba9 [ 544.113188][T14507] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f23e43d6188 [ 544.113203][T14507] RBP: 00007f23e43d6180 R08: 0000000000000000 R09: 0000000000000000 [ 544.113217][T14507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.113231][T14507] R13: 00007f23e43d6218 R14: 00007ffce9318e60 R15: 00007ffce9318f48 [ 544.113264][T14507] [ 544.364847][T14519] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input233 [ 544.608225][T14524] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 544.616908][T14524] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 545.221531][T14520] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input234 [ 546.088807][T14550] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(9.8683.2047), cmd(1) [ 546.338463][T14519] openvswitch: HfR: Dropping previously announced user features [ 547.751195][T14584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1463'. [ 549.050415][T14614] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input235 [ 549.311954][T14616] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input236 [ 549.781385][T14621] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 549.970336][T14627] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input237 [ 550.499291][T14635] FAULT_INJECTION: forcing a failure. [ 550.499291][T14635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.740672][T14635] CPU: 0 UID: 0 PID: 14635 Comm: syz.1.1472 Not tainted syzkaller #0 PREEMPT(full) [ 550.740706][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 550.740720][T14635] Call Trace: [ 550.740728][T14635] [ 550.740737][T14635] dump_stack_lvl+0x16c/0x1f0 [ 550.740777][T14635] should_fail_ex+0x512/0x640 [ 550.740815][T14635] _copy_from_user+0x2e/0xd0 [ 550.740841][T14635] copy_msghdr_from_user+0x98/0x160 [ 550.740875][T14635] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 550.740912][T14635] ? __pfx__kstrtoull+0x10/0x10 [ 550.740950][T14635] ___sys_sendmsg+0xfe/0x1d0 [ 550.740984][T14635] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.741032][T14635] ? find_held_lock+0x2b/0x80 [ 550.741076][T14635] __sys_sendmmsg+0x200/0x420 [ 550.741114][T14635] ? __pfx___sys_sendmmsg+0x10/0x10 [ 550.741157][T14635] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.741205][T14635] ? fput+0x9b/0xd0 [ 550.741237][T14635] ? ksys_write+0x1ac/0x250 [ 550.741263][T14635] ? __pfx_ksys_write+0x10/0x10 [ 550.741295][T14635] __x64_sys_sendmmsg+0x9c/0x100 [ 550.741328][T14635] ? lockdep_hardirqs_on+0x7c/0x110 [ 550.741364][T14635] do_syscall_64+0xcd/0x4c0 [ 550.741401][T14635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.741426][T14635] RIP: 0033:0x7f23e418eba9 [ 550.741445][T14635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.741469][T14635] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 550.741492][T14635] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 550.741508][T14635] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 550.741523][T14635] RBP: 00007f23e4fed090 R08: 0000000000000000 R09: 0000000000000000 [ 550.741538][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.741552][T14635] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 550.741586][T14635] [ 551.240647][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880418fc400: rx timeout, send abort [ 551.258397][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880418fc400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 551.494022][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888057090400: 0x40000: (2) System resources were needed for another task so this connection managed session was terminated. [ 551.523662][T14631] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input238 [ 551.790755][T14627] openvswitch: HfR: Dropping previously announced user features [ 552.526322][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880418fc800: rx timeout, send abort [ 552.535955][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880418fc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 552.564995][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880418fd800: rx timeout, send abort [ 552.573740][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880418fd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 552.853760][T14671] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 553.298464][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 553.392692][T14685] netlink: 'syz.1.1481': attribute type 1 has an invalid length. [ 553.561448][T14694] FAULT_INJECTION: forcing a failure. [ 553.561448][T14694] name failslab, interval 1, probability 0, space 0, times 0 [ 553.600543][T14694] CPU: 1 UID: 0 PID: 14694 Comm: syz.2.1482 Not tainted syzkaller #0 PREEMPT(full) [ 553.600577][T14694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 553.600591][T14694] Call Trace: [ 553.600599][T14694] [ 553.600609][T14694] dump_stack_lvl+0x16c/0x1f0 [ 553.600649][T14694] should_fail_ex+0x512/0x640 [ 553.600683][T14694] ? __kmalloc_noprof+0xbf/0x510 [ 553.600714][T14694] ? iter_file_splice_write+0x1cc/0x12e0 [ 553.600746][T14694] should_failslab+0xc2/0x120 [ 553.600777][T14694] __kmalloc_noprof+0xd2/0x510 [ 553.600813][T14694] iter_file_splice_write+0x1cc/0x12e0 [ 553.600844][T14694] ? aa_file_perm+0x29e/0x12e0 [ 553.600882][T14694] ? __lock_acquire+0x62e/0x1ce0 [ 553.600915][T14694] ? __pfx_aa_file_perm+0x10/0x10 [ 553.600952][T14694] ? __pfx_iter_file_splice_write+0x10/0x10 [ 553.600987][T14694] ? find_held_lock+0x2b/0x80 [ 553.601023][T14694] ? bpf_lsm_file_permission+0x9/0x10 [ 553.601055][T14694] ? security_file_permission+0x71/0x210 [ 553.601086][T14694] ? rw_verify_area+0xcf/0x6c0 [ 553.601109][T14694] ? __pfx_iter_file_splice_write+0x10/0x10 [ 553.601139][T14694] do_splice+0x1475/0x1fc0 [ 553.601166][T14694] ? __lock_acquire+0x62e/0x1ce0 [ 553.601205][T14694] ? __pfx_do_splice+0x10/0x10 [ 553.601227][T14694] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 553.601253][T14694] ? find_held_lock+0x2b/0x80 [ 553.601280][T14694] __do_splice+0x32a/0x360 [ 553.601308][T14694] ? __pfx___do_splice+0x10/0x10 [ 553.601342][T14694] __x64_sys_splice+0x187/0x250 [ 553.601373][T14694] do_syscall_64+0xcd/0x4c0 [ 553.601410][T14694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.601435][T14694] RIP: 0033:0x7f7bf158eba9 [ 553.601453][T14694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.601477][T14694] RSP: 002b:00007f7bef7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 553.601499][T14694] RAX: ffffffffffffffda RBX: 00007f7bf17d6090 RCX: 00007f7bf158eba9 [ 553.601513][T14694] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 553.601527][T14694] RBP: 00007f7bef7f6090 R08: 0000000080004001 R09: 0000000000000009 [ 553.601543][T14694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.601556][T14694] R13: 00007f7bf17d6128 R14: 00007f7bf17d6090 R15: 00007ffd8d74d758 [ 553.601588][T14694] [ 554.554211][T14717] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input239 [ 554.956968][T14725] FAULT_INJECTION: forcing a failure. [ 554.956968][T14725] name failslab, interval 1, probability 0, space 0, times 0 [ 555.015858][T14725] CPU: 1 UID: 0 PID: 14725 Comm: syz.0.1490 Not tainted syzkaller #0 PREEMPT(full) [ 555.015893][T14725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 555.015907][T14725] Call Trace: [ 555.015915][T14725] [ 555.015924][T14725] dump_stack_lvl+0x16c/0x1f0 [ 555.015964][T14725] should_fail_ex+0x512/0x640 [ 555.015999][T14725] ? fs_reclaim_acquire+0xae/0x150 [ 555.016036][T14725] ? tomoyo_encode2+0x100/0x3e0 [ 555.016066][T14725] should_failslab+0xc2/0x120 [ 555.016097][T14725] __kmalloc_noprof+0xd2/0x510 [ 555.016126][T14725] ? d_absolute_path+0x136/0x1a0 [ 555.016166][T14725] tomoyo_encode2+0x100/0x3e0 [ 555.016204][T14725] tomoyo_encode+0x29/0x50 [ 555.016236][T14725] tomoyo_realpath_from_path+0x18f/0x6e0 [ 555.016280][T14725] tomoyo_path_number_perm+0x245/0x580 [ 555.016308][T14725] ? tomoyo_path_number_perm+0x237/0x580 [ 555.016341][T14725] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 555.016373][T14725] ? find_held_lock+0x2b/0x80 [ 555.016437][T14725] ? find_held_lock+0x2b/0x80 [ 555.016464][T14725] ? hook_file_ioctl_common+0x145/0x410 [ 555.016503][T14725] ? __fget_files+0x20e/0x3c0 [ 555.016543][T14725] security_file_ioctl+0x9b/0x240 [ 555.016575][T14725] __x64_sys_ioctl+0xb7/0x210 [ 555.016615][T14725] do_syscall_64+0xcd/0x4c0 [ 555.016652][T14725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.016677][T14725] RIP: 0033:0x7f922ad8eba9 [ 555.016697][T14725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.016721][T14725] RSP: 002b:00007f922bca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.016748][T14725] RAX: ffffffffffffffda RBX: 00007f922afd5fa0 RCX: 00007f922ad8eba9 [ 555.016765][T14725] RDX: 0000000000000000 RSI: 000000000000227d RDI: 0000000000000003 [ 555.016779][T14725] RBP: 00007f922bca6090 R08: 0000000000000000 R09: 0000000000000000 [ 555.016795][T14725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.016810][T14725] R13: 00007f922afd6038 R14: 00007f922afd5fa0 R15: 00007ffd4df235b8 [ 555.016845][T14725] [ 555.018926][T14725] ERROR: Out of memory at tomoyo_realpath_from_path. syzkaller syzkaller login: [ 555.557347][T14719] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input240 [ 556.487999][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'. [ 556.554779][T14756] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 556.561824][T14763] FAULT_INJECTION: forcing a failure. [ 556.561824][T14763] name failslab, interval 1, probability 0, space 0, times 0 [ 556.612729][T14763] CPU: 0 UID: 0 PID: 14763 Comm: syz.3.1495 Not tainted syzkaller #0 PREEMPT(full) [ 556.612751][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.612759][T14763] Call Trace: [ 556.612765][T14763] [ 556.612770][T14763] dump_stack_lvl+0x16c/0x1f0 [ 556.612797][T14763] should_fail_ex+0x512/0x640 [ 556.612819][T14763] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 556.612839][T14763] should_failslab+0xc2/0x120 [ 556.612861][T14763] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 556.612878][T14763] ? __alloc_skb+0x2b2/0x380 [ 556.612901][T14763] __alloc_skb+0x2b2/0x380 [ 556.612920][T14763] ? __pfx___alloc_skb+0x10/0x10 [ 556.612939][T14763] ? __print_lock_name+0x40/0xe0 [ 556.612954][T14763] ? process_measurement+0x4a6/0x23e0 [ 556.612969][T14763] ? down_write+0x14d/0x200 [ 556.612985][T14763] alloc_skb_with_frags+0xe0/0x860 [ 556.613015][T14763] sock_alloc_send_pskb+0x7fb/0x990 [ 556.613056][T14763] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 556.613106][T14763] ? __local_bh_enable_ip+0xa4/0x120 [ 556.613127][T14763] j1939_sk_sendmsg+0x6bc/0x13d0 [ 556.613152][T14763] ? __pfx_aa_sk_perm+0x10/0x10 [ 556.613170][T14763] ? import_ubuf+0x1b6/0x220 [ 556.613186][T14763] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 556.613207][T14763] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 556.613227][T14763] ____sys_sendmsg+0xa98/0xc70 [ 556.613244][T14763] ? copy_msghdr_from_user+0x10a/0x160 [ 556.613265][T14763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.613283][T14763] ? __pfx__kstrtoull+0x10/0x10 [ 556.613306][T14763] ___sys_sendmsg+0x134/0x1d0 [ 556.613328][T14763] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.613358][T14763] ? find_held_lock+0x2b/0x80 [ 556.613383][T14763] __sys_sendmmsg+0x200/0x420 [ 556.613406][T14763] ? __pfx___sys_sendmmsg+0x10/0x10 [ 556.613433][T14763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 556.613462][T14763] ? fput+0x9b/0xd0 [ 556.613487][T14763] ? ksys_write+0x1ac/0x250 [ 556.613503][T14763] ? __pfx_ksys_write+0x10/0x10 [ 556.613522][T14763] __x64_sys_sendmmsg+0x9c/0x100 [ 556.613543][T14763] ? lockdep_hardirqs_on+0x7c/0x110 [ 556.613563][T14763] do_syscall_64+0xcd/0x4c0 [ 556.613586][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.613600][T14763] RIP: 0033:0x7f3aea58eba9 [ 556.613612][T14763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.613625][T14763] RSP: 002b:00007f3aeb4a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 556.613639][T14763] RAX: ffffffffffffffda RBX: 00007f3aea7d6090 RCX: 00007f3aea58eba9 [ 556.613649][T14763] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 556.613657][T14763] RBP: 00007f3aeb4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 556.613666][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.613674][T14763] R13: 00007f3aea7d6128 R14: 00007f3aea7d6090 R15: 00007ffdd542d948 [ 556.613692][T14763] [ 556.918295][T14766] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input241 [ 557.146182][T14772] openvswitch: HfR: Dropping previously announced user features [ 558.255299][T14767] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input242 [ 558.826242][T14797] FAULT_INJECTION: forcing a failure. [ 558.826242][T14797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.840811][T14797] CPU: 0 UID: 0 PID: 14797 Comm: syz.1.1504 Not tainted syzkaller #0 PREEMPT(full) [ 558.840843][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 558.840857][T14797] Call Trace: [ 558.840865][T14797] [ 558.840873][T14797] dump_stack_lvl+0x16c/0x1f0 [ 558.840910][T14797] should_fail_ex+0x512/0x640 [ 558.840949][T14797] _copy_from_iter+0x29f/0x1720 [ 558.840992][T14797] ? __pfx__copy_from_iter+0x10/0x10 [ 558.841024][T14797] ? __pfx___might_resched+0x10/0x10 [ 558.841056][T14797] file_tty_write.constprop.0+0x488/0x9b0 [ 558.841101][T14797] vfs_write+0x7d3/0x11d0 [ 558.841130][T14797] ? __pfx_tty_write+0x10/0x10 [ 558.841167][T14797] ? __pfx_vfs_write+0x10/0x10 [ 558.841193][T14797] ? find_held_lock+0x2b/0x80 [ 558.841242][T14797] ksys_write+0x12a/0x250 [ 558.841267][T14797] ? __pfx_ksys_write+0x10/0x10 [ 558.841303][T14797] do_syscall_64+0xcd/0x4c0 [ 558.841346][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.841368][T14797] RIP: 0033:0x7f23e418eba9 [ 558.841386][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.841410][T14797] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 558.841432][T14797] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 558.841449][T14797] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 558.841465][T14797] RBP: 00007f23e4fed090 R08: 0000000000000000 R09: 0000000000000000 [ 558.841480][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.841495][T14797] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 558.841530][T14797] [ 559.099936][T14799] binder: 14798:14799 ioctl c018620c 0 returned -1 [ 559.311415][T14806] delete_channel: no stack [ 559.508132][T14814] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input243 [ 559.694448][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 559.701421][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.186769][T14822] openvswitch: HfR: Dropping previously announced user features [ 560.299426][T14821] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input244 [ 560.338019][T14826] FAULT_INJECTION: forcing a failure. [ 560.338019][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 560.355489][T14826] CPU: 0 UID: 0 PID: 14826 Comm: syz.1.1509 Not tainted syzkaller #0 PREEMPT(full) [ 560.355524][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 560.355540][T14826] Call Trace: [ 560.355549][T14826] [ 560.355559][T14826] dump_stack_lvl+0x16c/0x1f0 [ 560.355602][T14826] should_fail_ex+0x512/0x640 [ 560.355637][T14826] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 560.355673][T14826] should_failslab+0xc2/0x120 [ 560.355706][T14826] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 560.355737][T14826] ? security_file_alloc+0x34/0x2b0 [ 560.355777][T14826] security_file_alloc+0x34/0x2b0 [ 560.355811][T14826] init_file+0x93/0x4c0 [ 560.355844][T14826] alloc_empty_file+0x73/0x1e0 [ 560.355880][T14826] alloc_file_pseudo+0x13a/0x230 [ 560.355917][T14826] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 560.355954][T14826] ? _raw_spin_unlock+0x28/0x50 [ 560.355981][T14826] ? alloc_fd+0x471/0x7d0 [ 560.356007][T14826] __anon_inode_getfile+0xe8/0x280 [ 560.356043][T14826] anon_inode_getfd+0x52/0xb0 [ 560.356074][T14826] __do_sys_landlock_create_ruleset+0x294/0x4e0 [ 560.356104][T14826] ? __pfx___do_sys_landlock_create_ruleset+0x10/0x10 [ 560.356147][T14826] do_syscall_64+0xcd/0x4c0 [ 560.356186][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.356301][T14826] RIP: 0033:0x7f23e418eba9 [ 560.356326][T14826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.356353][T14826] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bc [ 560.356379][T14826] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 560.356397][T14826] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000000 [ 560.356412][T14826] RBP: 00007f23e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 560.356428][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.356443][T14826] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 560.356478][T14826] [ 561.092940][T14840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input245 [ 561.291804][T14843] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input246 [ 561.536261][T14840] openvswitch: HfR: Dropping previously announced user features [ 561.638228][T14853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 561.760651][T14847] can: request_module (can-proto-4) failed. [ 562.904551][T14870] zswap: compressor not available [ 563.046243][T14899] binder: 14896:14899 ioctl c0046209 9 returned -22 [ 563.067327][T14869] zswap: compressor not available [ 563.136713][T14894] FAULT_INJECTION: forcing a failure. [ 563.136713][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 563.208079][T14894] CPU: 1 UID: 0 PID: 14894 Comm: syz.3.1522 Not tainted syzkaller #0 PREEMPT(full) [ 563.208114][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 563.208129][T14894] Call Trace: [ 563.208139][T14894] [ 563.208148][T14894] dump_stack_lvl+0x16c/0x1f0 [ 563.208187][T14894] should_fail_ex+0x512/0x640 [ 563.208225][T14894] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 563.208257][T14894] should_failslab+0xc2/0x120 [ 563.208290][T14894] __kmalloc_cache_noprof+0x6a/0x3e0 [ 563.208313][T14894] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x305/0x610 [ 563.208343][T14894] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x3b3/0x610 [ 563.208372][T14894] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 563.208406][T14894] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 563.208440][T14894] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 563.208463][T14894] snd_mixer_oss_ioctl1+0xb4f/0x1e40 [ 563.208500][T14894] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.208548][T14894] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 563.208575][T14894] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 563.208609][T14894] ? tomoyo_path_number_perm+0x295/0x580 [ 563.208646][T14894] ? tomoyo_path_number_perm+0x18d/0x580 [ 563.208680][T14894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 563.208726][T14894] snd_mixer_oss_ioctl_card+0x102/0x170 [ 563.208764][T14894] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 563.208821][T14894] snd_pcm_oss_ioctl+0x137c/0x37a0 [ 563.208854][T14894] ? find_held_lock+0x2b/0x80 [ 563.208880][T14894] ? hook_file_ioctl_common+0x145/0x410 [ 563.208915][T14894] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 563.208950][T14894] ? __fget_files+0x20e/0x3c0 [ 563.208985][T14894] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 563.209026][T14894] __x64_sys_ioctl+0x18b/0x210 [ 563.209070][T14894] do_syscall_64+0xcd/0x4c0 [ 563.209110][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.209137][T14894] RIP: 0033:0x7f3aea58eba9 [ 563.209158][T14894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.209183][T14894] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.209209][T14894] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 563.209226][T14894] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000002 [ 563.209242][T14894] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 563.209259][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.209274][T14894] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 563.209311][T14894] [ 563.488941][T14906] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 563.497596][T14906] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 564.774507][T14932] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input247 [ 565.108117][T14933] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input248 [ 565.144112][T14938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 565.204126][T14936] openvswitch: HfR: Dropping previously announced user features [ 565.254076][T14938] HfR: left promiscuous mode [ 565.386050][T14934] openvswitch: HfR: Dropping previously announced user features [ 565.769570][T14957] FAULT_INJECTION: forcing a failure. [ 565.769570][T14957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 565.795866][T14957] CPU: 1 UID: 0 PID: 14957 Comm: syz.1.1534 Not tainted syzkaller #0 PREEMPT(full) [ 565.795899][T14957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 565.795911][T14957] Call Trace: [ 565.795919][T14957] [ 565.795927][T14957] dump_stack_lvl+0x16c/0x1f0 [ 565.795967][T14957] should_fail_ex+0x512/0x640 [ 565.796008][T14957] should_fail_alloc_page+0xe7/0x130 [ 565.796042][T14957] prepare_alloc_pages+0x3c2/0x610 [ 565.796076][T14957] ? kasan_save_stack+0x33/0x60 [ 565.796101][T14957] ? kasan_save_track+0x14/0x30 [ 565.796129][T14957] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 565.796160][T14957] ? __lock_acquire+0x62e/0x1ce0 [ 565.796196][T14957] ? __lock_acquire+0x62e/0x1ce0 [ 565.796228][T14957] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 565.796263][T14957] ? __lock_acquire+0x62e/0x1ce0 [ 565.796302][T14957] ? __lock_acquire+0x62e/0x1ce0 [ 565.796338][T14957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 565.796374][T14957] ? policy_nodemask+0xea/0x4e0 [ 565.796406][T14957] alloc_pages_mpol+0x1fb/0x550 [ 565.796438][T14957] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 565.796468][T14957] ? bpf_ksym_find+0x124/0x1c0 [ 565.796499][T14957] folio_alloc_mpol_noprof+0x36/0x2f0 [ 565.796532][T14957] shmem_alloc_folio+0x135/0x160 [ 565.796556][T14957] shmem_alloc_and_add_folio+0x499/0xc20 [ 565.796599][T14957] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 565.796630][T14957] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 565.796664][T14957] shmem_get_folio_gfp+0x67f/0x1600 [ 565.796701][T14957] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 565.796733][T14957] ? filemap_map_pages+0xf58/0x1670 [ 565.796777][T14957] shmem_fault+0x1fe/0xa30 [ 565.796808][T14957] ? __pfx_shmem_fault+0x10/0x10 [ 565.796842][T14957] ? __pfx_filemap_map_pages+0x10/0x10 [ 565.796880][T14957] ? __pfx_filemap_map_pages+0x10/0x10 [ 565.796906][T14957] __do_fault+0x10d/0x490 [ 565.796939][T14957] ? __pfx_filemap_map_pages+0x10/0x10 [ 565.796966][T14957] do_pte_missing+0xf50/0x3ba0 [ 565.796992][T14957] ? find_held_lock+0x2b/0x80 [ 565.797018][T14957] ? __handle_mm_fault+0x14fd/0x2a50 [ 565.797048][T14957] __handle_mm_fault+0x152a/0x2a50 [ 565.797077][T14957] ? mt_find+0x3ef/0xa30 [ 565.797102][T14957] ? __pfx___handle_mm_fault+0x10/0x10 [ 565.797126][T14957] ? __pfx_mt_find+0x10/0x10 [ 565.797168][T14957] ? find_vma+0xbf/0x140 [ 565.797198][T14957] ? __pfx_find_vma+0x10/0x10 [ 565.797232][T14957] handle_mm_fault+0x589/0xd10 [ 565.797259][T14957] ? trace_raw_output_exceptions+0x131/0x150 [ 565.797300][T14957] do_user_addr_fault+0x7a6/0x1370 [ 565.797339][T14957] ? rcu_is_watching+0x12/0xc0 [ 565.797370][T14957] exc_page_fault+0x5c/0xb0 [ 565.797402][T14957] asm_exc_page_fault+0x26/0x30 [ 565.797425][T14957] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 565.797454][T14957] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 565.797478][T14957] RSP: 0018:ffffc9000437fb78 EFLAGS: 00050206 [ 565.797498][T14957] RAX: 0000000000000001 RBX: 0000000000000800 RCX: 0000000000000800 [ 565.797514][T14957] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff888081756000 [ 565.797530][T14957] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10102eacff [ 565.797545][T14957] R10: ffff8880817567ff R11: 0000000000000000 R12: ffffc9000437fda0 [ 565.797560][T14957] R13: 0000000000001800 R14: ffff888081756000 R15: 00007ffffffff000 [ 565.797601][T14957] _copy_from_iter+0x383/0x1720 [ 565.797638][T14957] ? __pfx__copy_from_iter+0x10/0x10 [ 565.797672][T14957] ? __pfx___might_resched+0x10/0x10 [ 565.797706][T14957] file_tty_write.constprop.0+0x488/0x9b0 [ 565.797752][T14957] vfs_write+0x7d3/0x11d0 [ 565.797782][T14957] ? __pfx_tty_write+0x10/0x10 [ 565.797819][T14957] ? __pfx_vfs_write+0x10/0x10 [ 565.797844][T14957] ? find_held_lock+0x2b/0x80 [ 565.797893][T14957] ksys_write+0x12a/0x250 [ 565.797921][T14957] ? __pfx_ksys_write+0x10/0x10 [ 565.797960][T14957] do_syscall_64+0xcd/0x4c0 [ 565.797997][T14957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.798021][T14957] RIP: 0033:0x7f23e418eba9 [ 565.798040][T14957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.798064][T14957] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.798087][T14957] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 565.798103][T14957] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 565.798118][T14957] RBP: 00007f23e4fed090 R08: 0000000000000000 R09: 0000000000000000 [ 565.798133][T14957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.798148][T14957] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 565.798182][T14957] [ 566.740927][T14972] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 566.749504][T14972] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 567.675745][T14993] QAT: Stopping all acceleration devices. [ 568.700500][T15017] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input249 [ 569.245662][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'. [ 569.304684][T15040] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 569.488683][T15020] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input250 [ 569.621941][T15024] openvswitch: HfR: Dropping previously announced user features [ 569.936843][T15046] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 570.030054][T15048] delete_channel: no stack [ 570.169280][T15056] FAULT_INJECTION: forcing a failure. [ 570.169280][T15056] name failslab, interval 1, probability 0, space 0, times 0 [ 570.194525][T15056] CPU: 0 UID: 0 PID: 15056 Comm: syz.0.1559 Not tainted syzkaller #0 PREEMPT(full) [ 570.194558][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 570.194572][T15056] Call Trace: [ 570.194581][T15056] [ 570.194590][T15056] dump_stack_lvl+0x16c/0x1f0 [ 570.194630][T15056] should_fail_ex+0x512/0x640 [ 570.194664][T15056] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 570.194698][T15056] should_failslab+0xc2/0x120 [ 570.194730][T15056] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 570.194764][T15056] ? __alloc_skb+0x2b2/0x380 [ 570.194803][T15056] __alloc_skb+0x2b2/0x380 [ 570.194835][T15056] ? __pfx___alloc_skb+0x10/0x10 [ 570.194864][T15056] ? __schedule+0x11a3/0x5de0 [ 570.194900][T15056] ? ktime_get+0x171/0x310 [ 570.194936][T15056] alloc_skb_with_frags+0xe0/0x860 [ 570.194968][T15056] sock_alloc_send_pskb+0x7fb/0x990 [ 570.195003][T15056] ? mark_held_locks+0x49/0x80 [ 570.195035][T15056] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 570.195064][T15056] ? preempt_schedule_common+0x44/0xc0 [ 570.195096][T15056] ? preempt_schedule_thunk+0x16/0x30 [ 570.195135][T15056] j1939_sk_sendmsg+0x6bc/0x13d0 [ 570.195174][T15056] ? import_ubuf+0xf1/0x220 [ 570.195201][T15056] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 570.195242][T15056] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 570.195275][T15056] ____sys_sendmsg+0xa98/0xc70 [ 570.195302][T15056] ? copy_msghdr_from_user+0x10a/0x160 [ 570.195335][T15056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.195365][T15056] ? __pfx__kstrtoull+0x10/0x10 [ 570.195403][T15056] ___sys_sendmsg+0x134/0x1d0 [ 570.195439][T15056] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.195487][T15056] ? find_held_lock+0x2b/0x80 [ 570.195534][T15056] __sys_sendmmsg+0x200/0x420 [ 570.195572][T15056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 570.195618][T15056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.195669][T15056] ? fput+0x9b/0xd0 [ 570.195701][T15056] ? ksys_write+0x1ac/0x250 [ 570.195727][T15056] ? __pfx_ksys_write+0x10/0x10 [ 570.195761][T15056] __x64_sys_sendmmsg+0x9c/0x100 [ 570.195793][T15056] ? lockdep_hardirqs_on+0x7c/0x110 [ 570.195822][T15056] do_syscall_64+0xcd/0x4c0 [ 570.195857][T15056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.195880][T15056] RIP: 0033:0x7f922ad8eba9 [ 570.195901][T15056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.195922][T15056] RSP: 002b:00007f922bc85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 570.195943][T15056] RAX: ffffffffffffffda RBX: 00007f922afd6090 RCX: 00007f922ad8eba9 [ 570.195959][T15056] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 570.195973][T15056] RBP: 00007f922bc85090 R08: 0000000000000000 R09: 0000000000000000 [ 570.195988][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.196001][T15056] R13: 00007f922afd6128 R14: 00007f922afd6090 R15: 00007ffd4df235b8 [ 570.196036][T15056] [ 570.912574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ec2c000: rx timeout, send abort [ 570.920980][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058236000: rx timeout, send abort [ 570.929552][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ec2c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 570.943979][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058236000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 571.286959][T15081] FAULT_INJECTION: forcing a failure. [ 571.286959][T15081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.302061][T15081] CPU: 1 UID: 0 PID: 15081 Comm: syz.3.1556 Not tainted syzkaller #0 PREEMPT(full) [ 571.302096][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 571.302110][T15081] Call Trace: [ 571.302119][T15081] [ 571.302128][T15081] dump_stack_lvl+0x16c/0x1f0 [ 571.302168][T15081] should_fail_ex+0x512/0x640 [ 571.302210][T15081] _copy_to_user+0x32/0xd0 [ 571.302239][T15081] simple_read_from_buffer+0xcb/0x170 [ 571.302268][T15081] proc_fail_nth_read+0x197/0x240 [ 571.302296][T15081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.302326][T15081] ? rw_verify_area+0xcf/0x6c0 [ 571.302350][T15081] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 571.302376][T15081] vfs_read+0x1e1/0xcf0 [ 571.302408][T15081] ? __pfx___mutex_lock+0x10/0x10 [ 571.302452][T15081] ? __pfx_vfs_read+0x10/0x10 [ 571.302489][T15081] ? __fget_files+0x20e/0x3c0 [ 571.302526][T15081] ksys_read+0x12a/0x250 [ 571.302552][T15081] ? __pfx_ksys_read+0x10/0x10 [ 571.302591][T15081] do_syscall_64+0xcd/0x4c0 [ 571.302628][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.302652][T15081] RIP: 0033:0x7f3aea58d5bc [ 571.302672][T15081] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 571.302695][T15081] RSP: 002b:00007f3aeb4c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 571.302718][T15081] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58d5bc [ 571.302734][T15081] RDX: 000000000000000f RSI: 00007f3aeb4c60a0 RDI: 0000000000000004 [ 571.302747][T15081] RBP: 00007f3aeb4c6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.302761][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.302775][T15081] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 571.302809][T15081] [ 571.670076][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1558'. [ 571.788879][T15096] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 572.748256][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030fc1c00: rx timeout, send abort [ 572.761526][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888030fc1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 573.124423][T15101] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 573.376925][T15107] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input251 [ 573.395749][T15109] delete_channel: no stack [ 574.463028][T15114] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input252 [ 574.611557][T15121] openvswitch: HfR: Dropping previously announced user features [ 575.471979][T15143] ovs_ÿþÿž: entered promiscuous mode [ 575.534680][T15142] openvswitch: ovs_ÿþÿž: Dropping previously announced user features [ 576.636473][ T30] audit: type=1326 audit(4294967628.111:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15150 comm=6E6C696E650A exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f922ad8eba9 code=0x0 [ 577.307363][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880583a3800: rx timeout, send abort [ 577.325048][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583a3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 577.447360][T15164] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 577.483125][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 577.493816][T15167] netlink: 'syz.0.1573': attribute type 1 has an invalid length. [ 577.959467][T15181] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input253 [ 578.583613][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e97400: rx timeout, send abort [ 578.591979][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058e97400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.606689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058e96400: rx timeout, send abort [ 578.616990][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058e96400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.878436][T15183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input254 [ 579.343160][T15181] openvswitch: HfR: Dropping previously announced user features [ 580.101424][T15225] Format for deleting device is "id" (uint). [ 580.109100][T15224] Format for deleting device is "id" (uint). [ 581.182863][T15243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input255 [ 582.190442][T15250] openvswitch: HfR: Dropping previously announced user features [ 582.202796][T15247] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input256 [ 582.224470][T15258] blktrace: Concurrent blktraces are not allowed on loop2 [ 583.774565][T15272] FAULT_INJECTION: forcing a failure. [ 583.774565][T15272] name failslab, interval 1, probability 0, space 0, times 0 [ 583.811064][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584bec00: rx timeout, send abort [ 583.834556][T15272] CPU: 1 UID: 0 PID: 15272 Comm: syz.0.1591 Not tainted syzkaller #0 PREEMPT(full) [ 583.834577][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 583.834585][T15272] Call Trace: [ 583.834591][T15272] [ 583.834596][T15272] dump_stack_lvl+0x16c/0x1f0 [ 583.834621][T15272] should_fail_ex+0x512/0x640 [ 583.834644][T15272] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 583.834664][T15272] should_failslab+0xc2/0x120 [ 583.834688][T15272] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 583.834705][T15272] ? __alloc_skb+0x2b2/0x380 [ 583.834729][T15272] __alloc_skb+0x2b2/0x380 [ 583.834749][T15272] ? __pfx___alloc_skb+0x10/0x10 [ 583.834767][T15272] ? __schedule+0x11a3/0x5de0 [ 583.834792][T15272] alloc_skb_with_frags+0xe0/0x860 [ 583.834807][T15272] ? __lock_acquire+0xb97/0x1ce0 [ 583.834828][T15272] sock_alloc_send_pskb+0x7fb/0x990 [ 583.834847][T15272] ? _copy_from_iter+0x15d/0x1720 [ 583.834867][T15272] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 583.834887][T15272] ? find_held_lock+0x2b/0x80 [ 583.834902][T15272] ? mark_held_locks+0x49/0x80 [ 583.834919][T15272] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 583.834940][T15272] j1939_sk_sendmsg+0x6bc/0x13d0 [ 583.834966][T15272] ? import_ubuf+0xf1/0x220 [ 583.834982][T15272] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 583.835002][T15272] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 583.835022][T15272] ____sys_sendmsg+0xa98/0xc70 [ 583.835038][T15272] ? copy_msghdr_from_user+0x10a/0x160 [ 583.835059][T15272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.835077][T15272] ? __pfx__kstrtoull+0x10/0x10 [ 583.835100][T15272] ___sys_sendmsg+0x134/0x1d0 [ 583.835122][T15272] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.835152][T15272] ? find_held_lock+0x2b/0x80 [ 583.835177][T15272] __sys_sendmmsg+0x200/0x420 [ 583.835201][T15272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 583.835227][T15272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.835256][T15272] ? fput+0x9b/0xd0 [ 583.835281][T15272] ? ksys_write+0x1ac/0x250 [ 583.835297][T15272] ? __pfx_ksys_write+0x10/0x10 [ 583.835317][T15272] __x64_sys_sendmmsg+0x9c/0x100 [ 583.835337][T15272] ? lockdep_hardirqs_on+0x7c/0x110 [ 583.835357][T15272] do_syscall_64+0xcd/0x4c0 [ 583.835380][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.835394][T15272] RIP: 0033:0x7f922ad8eba9 [ 583.835406][T15272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.835419][T15272] RSP: 002b:00007f922bc85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 583.835434][T15272] RAX: ffffffffffffffda RBX: 00007f922afd6090 RCX: 00007f922ad8eba9 [ 583.835443][T15272] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 583.835451][T15272] RBP: 00007f922bc85090 R08: 0000000000000000 R09: 0000000000000000 [ 583.835460][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.835468][T15272] R13: 00007f922afd6128 R14: 00007f922afd6090 R15: 00007ffd4df235b8 [ 583.835485][T15272] [ 583.835518][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584bec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.578932][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c351000: rx timeout, send abort [ 584.587267][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ae4000: rx timeout, send abort [ 584.595871][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803c351000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.610230][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ae4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 584.855236][T15282] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1593'. [ 584.936582][T15282] veth1_macvtap: left promiscuous mode [ 585.111533][T15276] FAULT_INJECTION: forcing a failure. [ 585.111533][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 585.124735][T15276] CPU: 1 UID: 0 PID: 15276 Comm: syz.3.1592 Not tainted syzkaller #0 PREEMPT(full) [ 585.124762][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.124771][T15276] Call Trace: [ 585.124777][T15276] [ 585.124782][T15276] dump_stack_lvl+0x16c/0x1f0 [ 585.124810][T15276] should_fail_ex+0x512/0x640 [ 585.124832][T15276] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 585.124853][T15276] should_failslab+0xc2/0x120 [ 585.124872][T15276] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 585.124890][T15276] ? alloc_vfsmnt+0x23/0x6b0 [ 585.124913][T15276] alloc_vfsmnt+0x23/0x6b0 [ 585.124933][T15276] clone_mnt+0x6d/0xbf0 [ 585.124945][T15276] ? copy_mnt_ns+0x1a9/0xac0 [ 585.124965][T15276] copy_tree+0x31d/0xbd0 [ 585.124986][T15276] copy_mnt_ns+0x1a9/0xac0 [ 585.125002][T15276] ? trace_kmem_cache_alloc+0x28/0xc0 [ 585.125024][T15276] ? create_new_namespaces+0x30/0xa90 [ 585.125045][T15276] create_new_namespaces+0xd3/0xa90 [ 585.125060][T15276] ? bpf_lsm_capable+0x9/0x10 [ 585.125073][T15276] ? security_capable+0x7e/0x260 [ 585.125090][T15276] copy_namespaces+0x468/0x560 [ 585.125107][T15276] copy_process+0x2822/0x7690 [ 585.125133][T15276] ? __pfx_copy_process+0x10/0x10 [ 585.125150][T15276] ? futex_private_hash_put+0x176/0x300 [ 585.125199][T15276] ? futex_private_hash_put+0x18a/0x300 [ 585.125220][T15276] kernel_clone+0xfc/0x930 [ 585.125239][T15276] ? __pfx_kernel_clone+0x10/0x10 [ 585.125269][T15276] __do_sys_clone+0xce/0x120 [ 585.125288][T15276] ? __pfx___do_sys_clone+0x10/0x10 [ 585.125316][T15276] ? xfd_validate_state+0x61/0x180 [ 585.125336][T15276] ? __pfx_do_writev+0x10/0x10 [ 585.125357][T15276] do_syscall_64+0xcd/0x4c0 [ 585.125380][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.125394][T15276] RIP: 0033:0x7f3aea58eba9 [ 585.125406][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.125420][T15276] RSP: 002b:00007f3aeb4a4fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 585.125434][T15276] RAX: ffffffffffffffda RBX: 00007f3aea7d6090 RCX: 00007f3aea58eba9 [ 585.125444][T15276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 585.125453][T15276] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 585.125462][T15276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 585.125470][T15276] R13: 00007f3aea7d6128 R14: 00007f3aea7d6090 R15: 00007ffdd542d948 [ 585.125495][T15276] [ 585.386602][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584bc000: rx timeout, send abort [ 585.394964][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584bc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.414505][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584bf000: rx timeout, send abort [ 585.422891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880584bf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 586.368449][T15300] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 586.413131][T15300] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 586.950844][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803c352000: rx timeout, send abort [ 586.961121][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803c352000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 586.979301][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053e15000: rx timeout, send abort [ 586.987890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888053e15000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.723864][T15331] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(5.0.1), cmd(1) [ 592.171316][T15378] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 592.239897][T15378] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 596.535466][T15446] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 597.732323][T15457] FAULT_INJECTION: forcing a failure. [ 597.732323][T15457] name failslab, interval 1, probability 0, space 0, times 0 [ 597.777997][T15457] CPU: 0 UID: 0 PID: 15457 Comm: syz.1.1623 Not tainted syzkaller #0 PREEMPT(full) [ 597.778036][T15457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 597.778051][T15457] Call Trace: [ 597.778060][T15457] [ 597.778070][T15457] dump_stack_lvl+0x16c/0x1f0 [ 597.778112][T15457] should_fail_ex+0x512/0x640 [ 597.778150][T15457] ? __kmalloc_noprof+0xbf/0x510 [ 597.778183][T15457] ? lsm_blob_alloc+0x68/0x90 [ 597.778206][T15457] should_failslab+0xc2/0x120 [ 597.778239][T15457] __kmalloc_noprof+0xd2/0x510 [ 597.778277][T15457] lsm_blob_alloc+0x68/0x90 [ 597.778303][T15457] security_sk_alloc+0x30/0x270 [ 597.778334][T15457] sk_prot_alloc+0xfb/0x2a0 [ 597.778364][T15457] sk_alloc+0x36/0xc20 [ 597.778399][T15457] inet6_create+0x381/0x12b0 [ 597.778431][T15457] ? inet6_create+0x7f/0x12b0 [ 597.778463][T15457] __sock_create+0x338/0x8d0 [ 597.778497][T15457] inet_ctl_sock_create+0x94/0x230 [ 597.778540][T15457] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 597.778571][T15457] ? ndisc_net_init+0x1bc/0x250 [ 597.778602][T15457] ? __pfx_ndisc_net_init+0x10/0x10 [ 597.778640][T15457] igmp6_net_init+0x1b2/0x470 [ 597.778674][T15457] ? __pfx_igmp6_net_init+0x10/0x10 [ 597.778706][T15457] ops_init+0x1e2/0x5f0 [ 597.778747][T15457] setup_net+0x10f/0x380 [ 597.778767][T15457] ? lockdep_init_map_type+0x5c/0x280 [ 597.778803][T15457] ? __pfx_setup_net+0x10/0x10 [ 597.778843][T15457] ? debug_mutex_init+0x37/0x70 [ 597.778873][T15457] copy_net_ns+0x2a6/0x5f0 [ 597.778903][T15457] create_new_namespaces+0x3ea/0xa90 [ 597.778939][T15457] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 597.778971][T15457] ksys_unshare+0x45b/0xa40 [ 597.779004][T15457] ? __pfx_ksys_unshare+0x10/0x10 [ 597.779038][T15457] ? xfd_validate_state+0x61/0x180 [ 597.779084][T15457] __x64_sys_unshare+0x31/0x40 [ 597.779117][T15457] do_syscall_64+0xcd/0x4c0 [ 597.779157][T15457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.779183][T15457] RIP: 0033:0x7f23e418eba9 [ 597.779205][T15457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.779231][T15457] RSP: 002b:00007f23e4fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 597.779257][T15457] RAX: ffffffffffffffda RBX: 00007f23e43d5fa0 RCX: 00007f23e418eba9 [ 597.779274][T15457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 597.779290][T15457] RBP: 00007f23e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.779306][T15457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.779321][T15457] R13: 00007f23e43d6038 R14: 00007f23e43d5fa0 R15: 00007ffce9318f48 [ 597.779358][T15457] [ 597.779488][T15457] Failed to initialize the IGMP6 autojoin socket (err -105) [ 597.973082][T15463] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 598.255123][T15463] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 598.672708][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 598.695810][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 599.725476][T15510] usb usb28: usbfs: process 15510 (syz.1.1630) did not claim interface 12 before use [ 600.652121][T15531] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 601.124118][T15542] FAULT_INJECTION: forcing a failure. [ 601.124118][T15542] name failslab, interval 1, probability 0, space 0, times 0 [ 601.137214][T15542] CPU: 1 UID: 0 PID: 15542 Comm: syz.3.1636 Not tainted syzkaller #0 PREEMPT(full) [ 601.137254][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.137269][T15542] Call Trace: [ 601.137278][T15542] [ 601.137288][T15542] dump_stack_lvl+0x16c/0x1f0 [ 601.137333][T15542] should_fail_ex+0x512/0x640 [ 601.137370][T15542] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 601.137406][T15542] should_failslab+0xc2/0x120 [ 601.137440][T15542] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 601.137472][T15542] ? sock_alloc_inode+0x25/0x1c0 [ 601.137503][T15542] ? __pfx_sock_alloc_inode+0x10/0x10 [ 601.137528][T15542] sock_alloc_inode+0x25/0x1c0 [ 601.137554][T15542] alloc_inode+0x64/0x240 [ 601.137589][T15542] sock_alloc+0x40/0x280 [ 601.137614][T15542] __sock_create+0xc1/0x8d0 [ 601.137644][T15542] ? _raw_write_unlock+0x28/0x50 [ 601.137682][T15542] inet_ctl_sock_create+0x94/0x230 [ 601.137713][T15542] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 601.137744][T15542] ? proc_create_net_data+0x155/0x1c0 [ 601.137786][T15542] ndisc_net_init+0x89/0x250 [ 601.137820][T15542] ? __pfx_ndisc_net_init+0x10/0x10 [ 601.137854][T15542] ? __pfx_ip6mr_net_init+0x10/0x10 [ 601.137892][T15542] ? ip6mr_net_init+0x2d8/0x4e0 [ 601.137935][T15542] ? __pfx_ndisc_net_init+0x10/0x10 [ 601.137968][T15542] ops_init+0x1e2/0x5f0 [ 601.138009][T15542] setup_net+0x10f/0x380 [ 601.138029][T15542] ? lockdep_init_map_type+0x5c/0x280 [ 601.138064][T15542] ? __pfx_setup_net+0x10/0x10 [ 601.138103][T15542] ? debug_mutex_init+0x37/0x70 [ 601.138132][T15542] copy_net_ns+0x2a6/0x5f0 [ 601.138160][T15542] create_new_namespaces+0x3ea/0xa90 [ 601.138198][T15542] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 601.138231][T15542] ksys_unshare+0x45b/0xa40 [ 601.138272][T15542] ? __pfx_ksys_unshare+0x10/0x10 [ 601.138308][T15542] ? xfd_validate_state+0x61/0x180 [ 601.138355][T15542] __x64_sys_unshare+0x31/0x40 [ 601.138388][T15542] do_syscall_64+0xcd/0x4c0 [ 601.138428][T15542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.138454][T15542] RIP: 0033:0x7f3aea58eba9 [ 601.138476][T15542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.138500][T15542] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 601.138524][T15542] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 601.138540][T15542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 601.138555][T15542] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.138569][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.138584][T15542] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 601.138620][T15542] [ 601.414145][T15542] net_ratelimit: 15 callbacks suppressed [ 601.414166][T15542] socket: no more sockets [ 601.424532][T15542] ICMPv6: NDISC: Failed to initialize the control socket (err -23) [ 601.437705][T15522] FAULT_INJECTION: forcing a failure. [ 601.437705][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 601.451443][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.2.1632 Not tainted syzkaller #0 PREEMPT(full) [ 601.451474][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 601.451487][T15522] Call Trace: [ 601.451494][T15522] [ 601.451503][T15522] dump_stack_lvl+0x16c/0x1f0 [ 601.451544][T15522] should_fail_ex+0x512/0x640 [ 601.451581][T15522] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 601.451614][T15522] should_failslab+0xc2/0x120 [ 601.451647][T15522] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 601.451677][T15522] ? alloc_vfsmnt+0x23/0x6b0 [ 601.451717][T15522] alloc_vfsmnt+0x23/0x6b0 [ 601.451751][T15522] clone_mnt+0x6d/0xbf0 [ 601.451773][T15522] ? copy_mnt_ns+0x1a9/0xac0 [ 601.451806][T15522] copy_tree+0x31d/0xbd0 [ 601.451843][T15522] copy_mnt_ns+0x1a9/0xac0 [ 601.451870][T15522] ? trace_kmem_cache_alloc+0x28/0xc0 [ 601.451909][T15522] ? create_new_namespaces+0x30/0xa90 [ 601.451945][T15522] create_new_namespaces+0xd3/0xa90 [ 601.451972][T15522] ? bpf_lsm_capable+0x9/0x10 [ 601.451995][T15522] ? security_capable+0x7e/0x260 [ 601.452027][T15522] copy_namespaces+0x468/0x560 [ 601.452059][T15522] copy_process+0x2822/0x7690 [ 601.452110][T15522] ? __pfx_copy_process+0x10/0x10 [ 601.452141][T15522] ? futex_private_hash_put+0x176/0x300 [ 601.452177][T15522] ? futex_private_hash_put+0x18a/0x300 [ 601.452213][T15522] kernel_clone+0xfc/0x930 [ 601.452253][T15522] ? __pfx_kernel_clone+0x10/0x10 [ 601.452306][T15522] __do_sys_clone+0xce/0x120 [ 601.452336][T15522] ? __pfx___do_sys_clone+0x10/0x10 [ 601.452386][T15522] ? xfd_validate_state+0x61/0x180 [ 601.452420][T15522] ? __pfx_do_writev+0x10/0x10 [ 601.452459][T15522] do_syscall_64+0xcd/0x4c0 [ 601.452499][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.452526][T15522] RIP: 0033:0x7f7bf158eba9 [ 601.452548][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.452573][T15522] RSP: 002b:00007f7bef7f5fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 601.452597][T15522] RAX: ffffffffffffffda RBX: 00007f7bf17d6090 RCX: 00007f7bf158eba9 [ 601.452612][T15522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 601.452625][T15522] RBP: 00007f7bf1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.452636][T15522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.452648][T15522] R13: 00007f7bf17d6128 R14: 00007f7bf17d6090 R15: 00007ffd8d74d758 [ 601.452685][T15522] [ 601.883825][T11128] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 602.196654][T15563] FAULT_INJECTION: forcing a failure. [ 602.196654][T15563] name failslab, interval 1, probability 0, space 0, times 0 [ 602.219046][T15563] CPU: 0 UID: 0 PID: 15563 Comm: syz.3.1639 Not tainted syzkaller #0 PREEMPT(full) [ 602.219082][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 602.219097][T15563] Call Trace: [ 602.219106][T15563] [ 602.219116][T15563] dump_stack_lvl+0x16c/0x1f0 [ 602.219158][T15563] should_fail_ex+0x512/0x640 [ 602.219206][T15563] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 602.219238][T15563] should_failslab+0xc2/0x120 [ 602.219272][T15563] __kmalloc_cache_noprof+0x6a/0x3e0 [ 602.219301][T15563] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 602.219346][T15563] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 602.219388][T15563] devlink_fmsg_arr_pair_nest_end+0xb4/0x180 [ 602.219431][T15563] nsim_dev_dummy_fmsg_put+0x151/0x1e0 [ 602.219470][T15563] devlink_health_do_dump+0x243/0x620 [ 602.219501][T15563] devlink_health_report+0x3c9/0x9c0 [ 602.219533][T15563] ? __pfx_devlink_health_report+0x10/0x10 [ 602.219560][T15563] ? _copy_from_user+0x59/0xd0 [ 602.219592][T15563] nsim_dev_health_break_write+0x166/0x210 [ 602.219629][T15563] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 602.219680][T15563] full_proxy_write+0x12e/0x1a0 [ 602.219720][T15563] ? __pfx_full_proxy_write+0x10/0x10 [ 602.219757][T15563] vfs_write+0x2a0/0x11d0 [ 602.219793][T15563] ? __pfx___mutex_lock+0x10/0x10 [ 602.219830][T15563] ? __pfx_vfs_write+0x10/0x10 [ 602.219871][T15563] ? __fget_files+0x20e/0x3c0 [ 602.219909][T15563] ksys_write+0x12a/0x250 [ 602.219938][T15563] ? __pfx_ksys_write+0x10/0x10 [ 602.219979][T15563] do_syscall_64+0xcd/0x4c0 [ 602.220019][T15563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.220045][T15563] RIP: 0033:0x7f3aea58eba9 [ 602.220067][T15563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.220092][T15563] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 602.220117][T15563] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 602.220135][T15563] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000005 [ 602.220150][T15563] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 602.220166][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.220182][T15563] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 602.220226][T15563] [ 603.099630][T15570] ================================================================== [ 603.107698][T15570] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 603.115397][T15570] Read of size 8 at addr ffff888141ab5818 by task syz.3.1641/15570 [ 603.123266][T15570] [ 603.125584][T15570] CPU: 1 UID: 0 PID: 15570 Comm: syz.3.1641 Not tainted syzkaller #0 PREEMPT(full) [ 603.125615][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 603.125628][T15570] Call Trace: [ 603.125637][T15570] [ 603.125647][T15570] dump_stack_lvl+0x116/0x1f0 [ 603.125686][T15570] print_report+0xcd/0x630 [ 603.125717][T15570] ? __virt_addr_valid+0x81/0x610 [ 603.125745][T15570] ? __phys_addr+0xe8/0x180 [ 603.125772][T15570] ? dvb_device_open+0x36a/0x3b0 [ 603.125793][T15570] kasan_report+0xe0/0x110 [ 603.125825][T15570] ? dvb_device_open+0x36a/0x3b0 [ 603.125849][T15570] ? __pfx_dvb_device_open+0x10/0x10 [ 603.125872][T15570] dvb_device_open+0x36a/0x3b0 [ 603.125902][T15570] ? __pfx_dvb_device_open+0x10/0x10 [ 603.125925][T15570] chrdev_open+0x234/0x6a0 [ 603.125955][T15570] ? __pfx_apparmor_file_open+0x10/0x10 [ 603.125981][T15570] ? __pfx_chrdev_open+0x10/0x10 [ 603.126001][T15570] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 603.126019][T15570] do_dentry_open+0x982/0x1530 [ 603.126037][T15570] ? __pfx_chrdev_open+0x10/0x10 [ 603.126056][T15570] vfs_open+0x82/0x3f0 [ 603.126077][T15570] path_openat+0x1de4/0x2cb0 [ 603.126096][T15570] ? __pfx_path_openat+0x10/0x10 [ 603.126114][T15570] do_filp_open+0x20b/0x470 [ 603.126132][T15570] ? __pfx_do_filp_open+0x10/0x10 [ 603.126154][T15570] ? alloc_fd+0x471/0x7d0 [ 603.126171][T15570] do_sys_openat2+0x11b/0x1d0 [ 603.126192][T15570] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.126214][T15570] ? __pfx___might_resched+0x10/0x10 [ 603.126231][T15570] __x64_sys_openat+0x174/0x210 [ 603.126243][T15570] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.126258][T15570] do_syscall_64+0xcd/0x4c0 [ 603.126286][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.126300][T15570] RIP: 0033:0x7f3aea58eba9 [ 603.126312][T15570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.126327][T15570] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.126341][T15570] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 603.126351][T15570] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 603.126360][T15570] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 603.126368][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.126377][T15570] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 603.126390][T15570] [ 603.126395][T15570] [ 603.370882][T15570] Allocated by task 1: [ 603.374927][T15570] kasan_save_stack+0x33/0x60 [ 603.379589][T15570] kasan_save_track+0x14/0x30 [ 603.384259][T15570] __kasan_kmalloc+0xaa/0xb0 [ 603.388829][T15570] dvb_register_device+0x1e4/0x2370 [ 603.394020][T15570] dvb_register_frontend+0x5a6/0x880 [ 603.399288][T15570] vidtv_bridge_probe+0x459/0xa90 [ 603.404312][T15570] platform_probe+0x106/0x1d0 [ 603.408972][T15570] really_probe+0x23e/0xa90 [ 603.413462][T15570] __driver_probe_device+0x1de/0x440 [ 603.418730][T15570] driver_probe_device+0x4c/0x1b0 [ 603.423737][T15570] __driver_attach+0x283/0x580 [ 603.428488][T15570] bus_for_each_dev+0x13b/0x1d0 [ 603.433337][T15570] bus_add_driver+0x2e9/0x690 [ 603.438002][T15570] driver_register+0x15c/0x4b0 [ 603.442747][T15570] vidtv_bridge_init+0x45/0x80 [ 603.447492][T15570] do_one_initcall+0x120/0x6e0 [ 603.452236][T15570] kernel_init_freeable+0x5c2/0x910 [ 603.457421][T15570] kernel_init+0x1c/0x2b0 [ 603.461731][T15570] ret_from_fork+0x56d/0x730 [ 603.466310][T15570] ret_from_fork_asm+0x1a/0x30 [ 603.471063][T15570] [ 603.473367][T15570] Freed by task 15531: [ 603.477419][T15570] kasan_save_stack+0x33/0x60 [ 603.482080][T15570] kasan_save_track+0x14/0x30 [ 603.486739][T15570] kasan_save_free_info+0x3b/0x60 [ 603.491742][T15570] __kasan_slab_free+0x60/0x70 [ 603.496508][T15570] kfree+0x2b4/0x4d0 [ 603.500409][T15570] dvb_device_put.part.0+0x60/0x90 [ 603.505509][T15570] dvb_device_open+0x2a4/0x3b0 [ 603.510262][T15570] chrdev_open+0x234/0x6a0 [ 603.514681][T15570] do_dentry_open+0x982/0x1530 [ 603.519427][T15570] vfs_open+0x82/0x3f0 [ 603.523502][T15570] path_openat+0x1de4/0x2cb0 [ 603.528086][T15570] do_filp_open+0x20b/0x470 [ 603.532581][T15570] do_sys_openat2+0x11b/0x1d0 [ 603.537272][T15570] __x64_sys_openat+0x174/0x210 [ 603.542103][T15570] do_syscall_64+0xcd/0x4c0 [ 603.546598][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.552477][T15570] [ 603.554786][T15570] The buggy address belongs to the object at ffff888141ab5800 [ 603.554786][T15570] which belongs to the cache kmalloc-256 of size 256 [ 603.568892][T15570] The buggy address is located 24 bytes inside of [ 603.568892][T15570] freed 256-byte region [ffff888141ab5800, ffff888141ab5900) [ 603.582760][T15570] [ 603.585071][T15570] The buggy address belongs to the physical page: [ 603.591476][T15570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141ab4 [ 603.600360][T15570] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 603.608846][T15570] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 603.616463][T15570] page_type: f5(slab) [ 603.620429][T15570] raw: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 603.629000][T15570] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 603.637573][T15570] head: 057ff00000000040 ffff88801b841b40 dead000000000122 0000000000000000 [ 603.646224][T15570] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 603.654881][T15570] head: 057ff00000000001 ffffea000506ad01 00000000ffffffff 00000000ffffffff [ 603.663536][T15570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 603.672183][T15570] page dumped because: kasan: bad access detected [ 603.678574][T15570] page_owner tracks the page as allocated [ 603.684266][T15570] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18743450534, free_ts 0 [ 603.703970][T15570] post_alloc_hook+0x1c0/0x230 [ 603.708722][T15570] get_page_from_freelist+0x132b/0x38e0 [ 603.714247][T15570] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 603.720132][T15570] alloc_pages_mpol+0x1fb/0x550 [ 603.724965][T15570] new_slab+0x247/0x330 [ 603.729095][T15570] ___slab_alloc+0xcf2/0x1750 [ 603.733748][T15570] __slab_alloc.constprop.0+0x56/0xb0 [ 603.739097][T15570] __kmalloc_cache_noprof+0xfb/0x3e0 [ 603.744363][T15570] bus_add_driver+0x92/0x690 [ 603.748936][T15570] driver_register+0x15c/0x4b0 [ 603.753779][T15570] usb_register_driver+0x216/0x4d0 [ 603.758875][T15570] do_one_initcall+0x120/0x6e0 [ 603.763619][T15570] kernel_init_freeable+0x5c2/0x910 [ 603.768800][T15570] kernel_init+0x1c/0x2b0 [ 603.773139][T15570] ret_from_fork+0x56d/0x730 [ 603.777713][T15570] ret_from_fork_asm+0x1a/0x30 [ 603.782459][T15570] page_owner free stack trace missing [ 603.787809][T15570] [ 603.790131][T15570] Memory state around the buggy address: [ 603.795736][T15570] ffff888141ab5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 603.803777][T15570] ffff888141ab5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 603.811813][T15570] >ffff888141ab5800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 603.819875][T15570] ^ [ 603.824720][T15570] ffff888141ab5880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 603.832761][T15570] ffff888141ab5900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 603.840798][T15570] ================================================================== [ 603.873836][T15570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 603.881070][T15570] CPU: 0 UID: 0 PID: 15570 Comm: syz.3.1641 Not tainted syzkaller #0 PREEMPT(full) [ 603.890446][T15570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 603.900527][T15570] Call Trace: [ 603.903793][T15570] [ 603.906704][T15570] dump_stack_lvl+0x3d/0x1f0 [ 603.911294][T15570] vpanic+0x6e8/0x7a0 [ 603.915289][T15570] ? __pfx_vpanic+0x10/0x10 [ 603.919876][T15570] ? __pfx_vprintk_emit+0x10/0x10 [ 603.924889][T15570] ? dvb_device_open+0x36a/0x3b0 [ 603.929810][T15570] panic+0xca/0xd0 [ 603.933545][T15570] ? __pfx_panic+0x10/0x10 [ 603.937952][T15570] ? dvb_device_open+0x36a/0x3b0 [ 603.942873][T15570] ? preempt_schedule_common+0x44/0xc0 [ 603.948326][T15570] ? preempt_schedule_thunk+0x16/0x30 [ 603.953688][T15570] check_panic_on_warn+0xab/0xb0 [ 603.958616][T15570] end_report+0x107/0x170 [ 603.962943][T15570] kasan_report+0xee/0x110 [ 603.967373][T15570] ? dvb_device_open+0x36a/0x3b0 [ 603.972303][T15570] ? __pfx_dvb_device_open+0x10/0x10 [ 603.977597][T15570] dvb_device_open+0x36a/0x3b0 [ 603.982355][T15570] ? __pfx_dvb_device_open+0x10/0x10 [ 603.987649][T15570] chrdev_open+0x234/0x6a0 [ 603.992085][T15570] ? __pfx_apparmor_file_open+0x10/0x10 [ 603.997619][T15570] ? __pfx_chrdev_open+0x10/0x10 [ 604.002546][T15570] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 604.008861][T15570] do_dentry_open+0x982/0x1530 [ 604.013625][T15570] ? __pfx_chrdev_open+0x10/0x10 [ 604.018558][T15570] vfs_open+0x82/0x3f0 [ 604.022650][T15570] path_openat+0x1de4/0x2cb0 [ 604.027237][T15570] ? __pfx_path_openat+0x10/0x10 [ 604.032177][T15570] do_filp_open+0x20b/0x470 [ 604.036696][T15570] ? __pfx_do_filp_open+0x10/0x10 [ 604.041740][T15570] ? alloc_fd+0x471/0x7d0 [ 604.046089][T15570] do_sys_openat2+0x11b/0x1d0 [ 604.050773][T15570] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.055983][T15570] ? __pfx___might_resched+0x10/0x10 [ 604.061270][T15570] __x64_sys_openat+0x174/0x210 [ 604.066115][T15570] ? __pfx___x64_sys_openat+0x10/0x10 [ 604.071488][T15570] do_syscall_64+0xcd/0x4c0 [ 604.075999][T15570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.081885][T15570] RIP: 0033:0x7f3aea58eba9 [ 604.086293][T15570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.105981][T15570] RSP: 002b:00007f3aeb4c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.114387][T15570] RAX: ffffffffffffffda RBX: 00007f3aea7d5fa0 RCX: 00007f3aea58eba9 [ 604.122354][T15570] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 604.130337][T15570] RBP: 00007f3aea611e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.138304][T15570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.146367][T15570] R13: 00007f3aea7d6038 R14: 00007f3aea7d5fa0 R15: 00007ffdd542d948 [ 604.154340][T15570] [ 604.157625][T15570] Kernel Offset: disabled [ 604.161931][T15570] Rebooting in 86400 seconds..