last executing test programs: 7.044782608s ago: executing program 3 (id=1207): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) eventfd$auto(0x2200000c) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x40000000000eb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x6, 0x43, &(0x7f0000000040)={@buf=&(0x7f00000007c0)="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", 0x3b98, 0x2, 0x2}, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0xff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) 6.247389681s ago: executing program 2 (id=1211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0xab) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x4085c2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000000c0)={r3, &(0x7f0000000140)="e43c5634d076dabbbe41d87eaa69457309260036d0ccb670486829231943b12bcf13dcc893d14bf3fd4206a7500f0bcf014a2a82b64b1741e4ae98176ec284796a2c6dbe235c85342235b289de74d95daa0c8e164a59f6c31633e2df6097105b0f04ec486027f7ad7ebdf86667d056c3203bc74eb53b51f0efd407fd6a707e450199e98a00fed5de04fffa4a4dabf9780c311eece47a04e24b8a311d8207c384f73a5a9c22ef9e52e6d76af7d2b424c4bef8a08ba86b2b37b45531e922de1cc1152e1f077d11c0d3b83b05ed83822f95d06aa97f6d", 0xd3d, &(0x7f0000000240)="8812030cd95246f35c40efc234e83bbbf0a055fdca03118eb325a5bc5519e659945460e46a64b7165ca4b4dae5e7a3f449b56b5f5bb850efab97b398fce6f8707ec981114ec7f244e19e3a3fb2393c20cc97c175b861afd9bd4768e9d7bda0942d754da4879c205a74448e5cf580c8d73cbca63a474c2f3e576b442cc80f87008417126520b3ab1630bfdaf76b6b2964946aaf5ebbedcd93b27865b6b81a4f970f6fee7569fbf2492e96335a39c5965769850a9fcbe9d3180b1859115852f479062e90ae96815d552cb45e101d0d", 0x33, &(0x7f0000000340)="c9b8bc90e395b61eef357695e802fb77840a1b380e779f4912596794e3fc10f21703ae444ed16bb143feb920b701f535ef4228022605474bbf9af3026425323a7befc041c935621d9209fdc9953eeccf99b70fbe4cccf512354a7463c83fd4f35801fbf33f22845cf946f00f9aecf2d102f4bb63b14654502142a99787bbbaba8950c7334a5b9ae8798930667af5adde95bcee252635cd6ab6ea5f5820e7fef7bc551e8c4fe0722d36d7ac21f8fc6f", &(0x7f0000000040)=0x1}) close_range$auto(r3, r4, 0x2) socket(0xa, 0x1, 0x84) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) alarm$auto(0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 5.882999624s ago: executing program 0 (id=1212): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x100000001ff, 0x7, 0x0, 0x1000000000008fd6, 0x948b, 0x100000000001000, 0x15f4da0a, 0x9, 0xfffffffffffffffb, 0x66, 0x9, 0x8000000020000005, 0x200000005, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r3, 0xc1205531, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) sendfile$auto(r4, r4, 0x0, 0x2) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 5.388726321s ago: executing program 3 (id=1213): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x80000000, 0x9, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xf, 0x3, 0x2) name_to_handle_at$auto(0x1010, 0x0, 0x0, 0x0, 0x202) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd23, 0x25dfdc02}, 0x14}, 0x1, 0x0, 0x0, 0x20008810}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = pipe$auto(0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1, 0xffffffffffff0006, 0x3) write$auto(r2, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r4, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4.593730893s ago: executing program 3 (id=1214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf25050000001c0001800800058004007d00100001800a"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "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"}) r2 = socket(0x2, 0x3, 0x4e7) getsockopt$auto(r2, 0x29, 0xcf, 0x0, 0x0) socket(0x2, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x9bb, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4) sysfs$auto(0x2, 0x17, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/213, 0xd5) close_range$auto(0x2, 0x8, 0x0) r4 = timerfd_create$auto_CLOCK_TAI(0xb, 0x6) write$auto_cachefiles_daemon_fops_internal(r4, &(0x7f0000001200)="f0f20128d4f30f17bdf2a43a44695669a40da8de294fd1c6a3e1365b73548c704703965b833c008a836a166c893d62eead1072a3a9c3c30e5cbd625d6c5ca0f94e68be0af3b6b6d152c1a2f13a6c6f82a3b27d9158343ba8ad4a86de41895a822bd2e0c25750d37f78262532933433388ef68798950fab3917eefe5f4af1910d985925778acfaca10e8f7c2d7dd96369d26203cfb81fe3c342edfe70989f1fdaab83a4c2446614844542a1af87164668765e462fdb7f9eecfbe8af6e07a54d9b45a169e97a3e2216d2b877015db49e142bf825162d1165a4cd81a2d80461286eabb1aeec13421a7629986555", 0xec) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) 4.577805739s ago: executing program 1 (id=1215): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) setresuid$auto(0x0, 0xee00, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xfffffffa, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) pselect6$auto(0x5, 0x0, &(0x7f0000000180)={[0x2, 0x8, 0x9, 0x3, 0x80000000101, 0x1c00000, 0xa1, 0x400000008, 0xfffffffffffffffe, 0x8, 0x1, 0x4, 0x1, 0x0, 0x80e, 0x80000001]}, 0x0, 0x0, &(0x7f0000001040)) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x200000, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x4354, 0x7ff, 0x0, 0x5891ffff) ioctl$auto_EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0xfffff001) write$auto_console_fops_tty_io(r1, &(0x7f0000000380)="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", 0xffffffffffffffe1) 3.980804752s ago: executing program 1 (id=1216): mmap$auto(0x0, 0x400006, 0xdc, 0x9b72, 0xffffffffffffffff, 0x80000008000) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyze\x00', 0x113280, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb4, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "29f08bcfd0a23f00", 0x0, r0, 0x5, 0x7, 0x7, 0x9}, 0x10) bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r1, 0x3, 0x81, @tracing={0x3, 0x4}}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88201, 0x0) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xd037, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) prctl$auto(0xe5, 0x7, 0x0, 0x0, 0x0) inotify_add_watch$auto(r2, 0x0, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{&(0x7f0000000080)="58dedaea6670dc2988f6dd18c912832260a37298cfcab065dbf3bd3917527cfffff8ccc94c48cb2a7136da3b72f17749ce3dd29771c15db3b709eaf35d03fa427a9b76404c753ae27b7bcff10b8dbcc06be5d6c6649cba30226e7b7e0d60fbe76249341977a08ee3f341e7d32f5a8e30", 0x306b, &(0x7f0000000140)={&(0x7f0000000180)="afe38fe06b9bf91bbe71d359cd12596df452d476f66e0af2", 0xfffffffffffffffb}, 0x7, &(0x7f0000000280)="01766177f975e94dd05729f932b49a9d2ef9c12cbf657b776733edf8b4c6d4bc4e6b2a64bb1f0d4a314fc0a89355acedb0b2e8ac996f253d395c56a6b1d66d929f7edf43b634ed8dff0cbe", 0x0, 0x4}, 0x20000000}, 0x80000000, 0x81) 3.924793011s ago: executing program 2 (id=1217): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0xab) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x4085c2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000000c0)={r3, &(0x7f0000000140)="e43c5634d076dabbbe41d87eaa69457309260036d0ccb670486829231943b12bcf13dcc893d14bf3fd4206a7500f0bcf014a2a82b64b1741e4ae98176ec284796a2c6dbe235c85342235b289de74d95daa0c8e164a59f6c31633e2df6097105b0f04ec486027f7ad7ebdf86667d056c3203bc74eb53b51f0efd407fd6a707e450199e98a00fed5de04fffa4a4dabf9780c311eece47a04e24b8a311d8207c384f73a5a9c22ef9e52e6d76af7d2b424c4bef8a08ba86b2b37b45531e922de1cc1152e1f077d11c0d3b83b05ed83822f95d06aa97f6d", 0xd3d, &(0x7f0000000240)="8812030cd95246f35c40efc234e83bbbf0a055fdca03118eb325a5bc5519e659945460e46a64b7165ca4b4dae5e7a3f449b56b5f5bb850efab97b398fce6f8707ec981114ec7f244e19e3a3fb2393c20cc97c175b861afd9bd4768e9d7bda0942d754da4879c205a74448e5cf580c8d73cbca63a474c2f3e576b442cc80f87008417126520b3ab1630bfdaf76b6b2964946aaf5ebbedcd93b27865b6b81a4f970f6fee7569fbf2492e96335a39c5965769850a9fcbe9d3180b1859115852f479062e90ae96815d552cb45e101d0d", 0x33, &(0x7f0000000340)="c9b8bc90e395b61eef357695e802fb77840a1b380e779f4912596794e3fc10f21703ae444ed16bb143feb920b701f535ef4228022605474bbf9af3026425323a7befc041c935621d9209fdc9953eeccf99b70fbe4cccf512354a7463c83fd4f35801fbf33f22845cf946f00f9aecf2d102f4bb63b14654502142a99787bbbaba8950c7334a5b9ae8798930667af5adde95bcee252635cd6ab6ea5f5820e7fef7bc551e8c4fe0722d36d7ac21f8fc6f17c30af915ac1dab7379cd738e", &(0x7f0000000040)=0x1}) close_range$auto(r3, r4, 0x2) socket(0xa, 0x1, 0x84) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) alarm$auto(0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 3.56934175s ago: executing program 0 (id=1218): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4b", 0x3a) 3.422901481s ago: executing program 0 (id=1219): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) shmctl$auto_SHM_UNLOCK(0x968, 0xc, &(0x7f00000000c0)={{0xfffffff9, 0x0, 0xee01, 0x8001, 0x7, 0x8, 0xfff0}, 0x400, 0x8001, 0x3, 0xfffffffffffffffe, @inferred, @inferred, 0x0, 0x0, 0x0, &(0x7f0000000200)="84666fc8db8184ebcda15d28e5df03da5155027e32ef43985f5797ca7b687b4a8eb26038d4e51847ff7562be99f6ea22311611b13ec6fccba35bcf688d0636eaf9b77856298a7e9fbd8660d876af5769bfd23193bceb9719d2ee9c401192fbc48a224f640db3588700fefd6e42748cb51ae00d24d39e380653dd5682ae19e7c18a66242b1f34d1e3fc55efc794264440f958fe5e12031a0818e0b5945305941d8fbe8be9c6f36219f1700d05bc8de3c744e431785ba1d4fb23b6511f0436dd2e837afedd"}) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x55) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) shmctl$auto(0xffffff6b, 0x7, &(0x7f00000003c0)={{0x7ff, 0x0, 0xee01, 0xfffff645, 0x9, 0x9, 0x1175}, 0x7, 0x4, 0x4, 0x0, @inferred=0xffffffffffffffff, @raw=0x400, 0x101, 0x0, &(0x7f0000000300)="2367711b142994635ddeec7a85cd79d0e3b635c38528467757c8cabfba475475f4cf91fa13bb5fddcc4dc1f73cb1b84db8cd9bc7c99340fce513cf9b05f12abe773be55dd0e108617bb2eb7c7884a1a7a2cd8fdd22fa19f75b4c4aab80b6124921e4b629351b5893ec0acf36b95c4965b73f5def10dd9d2206840ce31c03211d3aa82577eb", &(0x7f0000000140)="26c278691191e02a56c9f22e21793f3084e872f8a897c2719caf51e51f183190ed139261d71a78644ccbe3242997c5f567611149882c3e3e107f34bb6405"}) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0xa, 0x8, 0x5, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x401, 0x7, 0x3, 0x710, 0x100000001, 0x8, 0x4, 0x0, 0x8, 0x100000000}, 0x100) keyctl$auto(0x67, r1, r2, r3, 0x3) close_range$auto(0x2, 0x8, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffffff, &(0x7f00000001c0)="239cb8", 0x3) ioctl$auto_TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000600)=0x80) setsockopt$auto_SO_REUSEPORT(r0, 0x80000001, 0xf, &(0x7f0000000540)='\x00', 0x10000000) r4 = ioctl$auto_NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r4, 0x101, &(0x7f0000000580)="f036de1b7671b614d15eeecbb54d97dd08d1c2f765886db004df10e519137bb460ccbf0bc9a9e1d9a7cbdbdc587735647e625c1dcf85a42759174673d91cd4b6f74380aca7d5e6ac57d42e0ceb5f352c7b7e55e3c4dabeeacb8a85f1cfd471f332a12970a4c969c1525e8c7714931dc5a06918") 3.422435051s ago: executing program 1 (id=1220): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0xeb) read$auto(r2, &(0x7f0000000040)='\x00', 0x3) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) 3.160794516s ago: executing program 3 (id=1221): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) eventfd$auto(0x2200000c) mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x40000000000eb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x1, 0x400, 0x0, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x2, 0x8000000000000001, 0xfffffffffffffffc]}, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) kexec_load$auto(0x6, 0x43, &(0x7f0000000040)={@buf=&(0x7f00000007c0)="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", 0x3b98, 0x2, 0x2}, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x8, 0xff, r1, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xb) 2.469692478s ago: executing program 0 (id=1222): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x442400, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f00000000c0)={0x8, 0x5, &(0x7f0000000080)='[)\x00'}) ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000000100)={0x8287, r0}) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY2(r2, 0xc0406618, &(0x7f0000000140)={{0xaf180000, 0x0, @identifier="cc346628164b2a993be8add19053cf01"}, 0x7}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/admmidi2\x00', 0x220000, 0x0) mmap$auto(0x5, 0xe5, 0x8, 0x80000011, r0, 0x1) r5 = waitid$auto(0x7, r2, &(0x7f0000000200)={@siginfo_0_0={0x5, 0x8, 0xe, @_sigpoll={0x1, r4}}}, 0x7, &(0x7f0000000280)={{0x0, 0xa7e2}, {0x1ff, 0x1}, 0xfffffffffffff53a, 0x9, 0x3ff, 0x0, 0xfffffffffffffff9, 0x8380, 0x7fff, 0xff, 0x9, 0xffffffff, 0x5, 0x6, 0x1, 0x7fffffffffffffff}) r7 = prctl$auto_SECCOMP_MODE_FILTER(0x9cd, 0x2, r5, 0x9, 0xdbd) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x8}, @NL80211_ATTR_SAE_PASSWORD={0x32, 0x115, "84dbdb53159ec07f6146bcc11ae673db6857326bf8b6dc943e3c5c938f07ea4f9a765dfab611c6d923ff140a4cbe"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'pim6reg1\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000064}, 0x90) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2, 0x0) r10 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000640), r6) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r7, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r10, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x8, 0xb, '\x95\x9b-\x97'}, @CIFS_GENL_ATTR_SWN_IP_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_PASSWORD={0x5, 0xa, '.'}, @CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x9}, @CIFS_GENL_ATTR_SWN_IP_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_SHARE_NAME_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_NET_NAME={0xd, 0x2, 'pim6reg1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) read$auto(r7, &(0x7f0000000780)='\x00', 0x8) mount$auto(&(0x7f00000007c0)='team0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='+@@))!\x01\x00', 0x100, &(0x7f0000000880)="7d6f1a267a24c5366218e2e6d92cc9a1d94cee4306b1c69f7baaf950013687ab188e08c69f511a5dce60142d2d3b1c7900e5e46622b8eafd79f39bfbfaa951f039158f8978c8a05f288b6a5290e17f37b0ce5f083a8a5de4d3f495488b67f43cd72c977f2e8672d7e3753f3cd84993e58a7549c1fcf21c84be8e197905f5cec2ba27b46582d296a096dec8038f289e32b3009f7392331dcb8664ebf93dc09c02639a5671e1f6c2490c8cda17a3abe53be857be571df703324b2fed095a8e03195cc4751b73557033a2447ba2994a2aa770702dbc13caf9a4a3a172430012690f40d85c6fc7a4f336a61d1ebae81adc20a7c8b34338c03ffedf5148") sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f00000009c0)={0x144, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, 0xd78}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3ce6}, @NL80211_ATTR_KEY_DATA={0x12, 0x7, "2e5b94f2c30148870ead3f3a1a6d"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xfd, 0xcd, "879a4e2d1fa236f7642449f9f00da5ae3cf6b97780766ade5a52f807a897217f2a576c4122c59e9882fb02fad6365ac504da43686c793576192acc23506e2020af3d03dba1a1cb22868b8dabc2f04034fc6d59a678df3937d68623f562df85036f5e5cd20b8502f2137f21270954c6e6af7802a7da9d3435d968b69150c53c1cfde7e2afed3f8e00422d70f2f10baede67945275fba3cbe9563c35b37599ded74ee7cfaf7e8176578d985d1ed1db59e61b1af1b341ce27b07edc5f666adb4d164f66612fd2b99fef320388cd84735bbd51259c5b1417990a0e500710a0151780b2af05f29251ddf810eec9434943ed98ec858ec8a0def816ed"}]}, 0x144}, 0x1, 0x0, 0x0, 0x2000c044}, 0x800) socket(0x15, 0x1, 0x9a960ae) r11 = syz_clone3(&(0x7f0000000e80)={0x40100800, &(0x7f0000000bc0)=0xffffffffffffffff, &(0x7f0000000c00), &(0x7f0000000c40), {0x3b}, &(0x7f0000000c80)=""/174, 0xae, &(0x7f0000000d40)=""/252, &(0x7f0000000e40)=[r5, r5, r5, r5, r5], 0x5, {r6}}, 0x58) process_madvise$auto_MADV_WIPEONFORK(r12, &(0x7f0000001000)={&(0x7f0000000f00)="f95ae8844bcea92b002b02a6c7c663d201712873202d8d9f4fb0253f93f40a9291e20a9a17bcb8d9107970e95cd23a4431ca1abe5f6d56db195257ef4d8c237da646bbf208d373d3cb08fe72dbe53c4b184ef4f843ba15fd32752ab519bb53d8d5567f91014e6d851e949c620f8e89fb409ee95042b185284da90458b3682afa9eee25c846e2ebced9b44cf3b530fdaf7f6c9334e552cb41ac5f267a31c6d01ad811ee97ebb8c4177c0fb9f80b7aea1df9e2ceddaf7a63d10e33f1d1431f3fc38918671ba136cfb55debc26a5f2c681d84801854b1513b5a256ee4a857a932d09fb3aa", 0x4}, 0xfffffffffffffff8, 0x12, 0x9) modify_ldt$auto(0x7, &(0x7f0000001040)="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", 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001140)='/dev/bus/usb/029/001\x00', 0x40, 0x0) unshare$auto(0x2728) mkdir$auto(&(0x7f0000001180)='./file0\x00', 0x800) execve$auto(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001240)=&(0x7f0000001200)='(\x00', &(0x7f00000012c0)=&(0x7f0000001280)='\x95\x9b-\x97') ioctl$auto_EXT4_IOC_SHUTDOWN(r6, 0x8004587d, &(0x7f0000001300)=0x3) pidfd_open$auto(r11, 0xe) 2.309705209s ago: executing program 1 (id=1223): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x100000001ff, 0x7, 0x0, 0x1000000000008fd6, 0x948b, 0x100000000001000, 0x15f4da0a, 0x9, 0xfffffffffffffffb, 0x66, 0x9, 0x8000000020000005, 0x200000005, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r3, 0xc1205531, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) sendfile$auto(r4, r4, 0x0, 0x2) sysfs$auto(0x5, 0x100000074e, 0x0) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 2.216125568s ago: executing program 2 (id=1224): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) fchown$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10810000000000, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x8502, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) 2.206521889s ago: executing program 0 (id=1225): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r2, &(0x7f0000000040)='\x00', 0x3) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) 2.156702695s ago: executing program 3 (id=1226): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x6a8800, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r0, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x60100, 0x0) read$auto(r2, &(0x7f0000000040)='\x00', 0x3) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, 0xffffffffffffffff, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, 0x0, 0x7, 0x4008) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rxrpc/peers\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0xee90ce37eb497475, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) 1.972437639s ago: executing program 2 (id=1227): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64$auto(0x0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0xa, 0xab) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x4085c2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000000c0)={r3, &(0x7f0000000140)="e43c5634d076dabbbe41d87eaa69457309260036d0ccb670486829231943b12bcf13dcc893d14bf3fd4206a7500f0bcf014a2a82b64b1741e4ae98176ec284796a2c6dbe235c85342235b289de74d95daa0c8e164a59f6c31633e2df6097105b0f04ec486027f7ad7ebdf86667d056c3203bc74eb53b51f0efd407fd6a707e450199e98a00fed5de04fffa4a4dabf9780c311eece47a04e24b8a311d8207c384f73a5a9c22ef9e52e6d76af7d2b424c4bef8a08ba86b2b37b45531e922de1cc1152e1f077d11c0d3b83b05ed83822f95d06aa97f6d", 0xd3d, &(0x7f0000000240)="8812030cd95246f35c40efc234e83bbbf0a055fdca03118eb325a5bc5519e659945460e46a64b7165ca4b4dae5e7a3f449b56b5f5bb850efab97b398fce6f8707ec981114ec7f244e19e3a3fb2393c20cc97c175b861afd9bd4768e9d7bda0942d754da4879c205a74448e5cf580c8d73cbca63a474c2f3e576b442cc80f87008417126520b3ab1630bfdaf76b6b2964946aaf5ebbedcd93b27865b6b81a4f970f6fee7569fbf2492e96335a39c5965769850a9fcbe9d3180b1859115852f479062e90ae96815d552cb45e101d0d", 0x33, &(0x7f0000000340)="c9b8bc90e395b61eef357695e802fb77840a1b380e779f4912596794e3fc10f21703ae444ed16bb143feb920b701f535ef4228022605474bbf9af3026425323a7befc041c935621d9209fdc9953eeccf99b70fbe4cccf512354a7463c83fd4f35801fbf33f22845cf946f00f9aecf2d102f4bb63b14654502142a99787bbbaba8950c7334a5b9ae8798930667af5adde95bcee252635cd6ab6ea5f5820e7fef7bc551e8c4fe0722d36d7ac21f8fc6f17c30af915ac1dab7379cd738e", &(0x7f0000000040)=0x1}) close_range$auto(r3, r4, 0x2) socket(0xa, 0x1, 0x84) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r5, 0x400064c8, r5) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) alarm$auto(0x2) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 660.831202ms ago: executing program 2 (id=1228): mmap$auto(0x0, 0x400006, 0xdc, 0x9b72, 0xffffffffffffffff, 0x80000008000) getcwd$auto(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyze\x00', 0x113280, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb4, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "29f08bcfd0a23f00", 0x0, r0, 0x5, 0x7, 0x7, 0x9}, 0x10) bpf$auto(0x19, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r1, 0x3, 0x81, @tracing={0x3, 0x4}}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88201, 0x0) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xd037, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) prctl$auto(0xe5, 0x7, 0x0, 0x0, 0x0) inotify_add_watch$auto(r2, 0x0, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{&(0x7f0000000080)="58dedaea6670dc2988f6dd18c912832260a37298cfcab065dbf3bd3917527cfffff8ccc94c48cb2a7136da3b72f17749ce3dd29771c15db3b709eaf35d03fa427a9b76404c753ae27b7bcff10b8dbcc06be5d6c6649cba30226e7b7e0d60fbe76249341977a08ee3f341e7d32f5a8e30", 0x306b, &(0x7f0000000140)={&(0x7f0000000180)="afe38fe06b9bf91bbe71d359cd12596df452d476f66e0af2", 0xfffffffffffffffb}, 0x7, &(0x7f0000000280)="01766177f975e94dd05729f932b49a9d2ef9c12cbf657b776733edf8b4c6d4bc4e6b2a64bb1f0d4a314fc0a89355acedb0b2e8ac996f253d395c56a6b1d66d929f7edf43b634ed8dff0cbe", 0x0, 0x4}, 0x20000000}, 0x80000000, 0x81) 487.432294ms ago: executing program 1 (id=1229): ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000000)="eb1d542130ef9185d583073c320fee45a13537a7204f151914e50ba4f7992f2bad70bad178dd0cce77428283e823d10aa8b50c561bef137c25602f4c2dafab0fd435bf11b2fa6d84219e071b133794d9b4223bc2848499a6cf1081", 0x8, &(0x7f0000000080)="a93f9b9e4d074a0fe615c7d8a9aee97da609fc2c4b47c63e4f0d753317a4907818ec57395c367fb2448e193faaf8504c57", 0x6, &(0x7f00000000c0)='`', &(0x7f0000000100)=0x6}, {[0x5b, 0x401, 0xc3db, 0x3]}, 0xd64, 0x3, &(0x7f0000000140)="910e4d92905817d2409d467126d528b53a1b26b664e0672a0f20eed0e2917037c80b178cd0abe86d64748e032b969036559e78c03eb0c89dc3133ae0699ec8fee7e915d4381fe66bd51a5c3e5d193dff365f472f7e1326445d6374fa6f25a6851c0785dbbb9d202068013ae5d928f672c57bf52e70c2a836ec3e03bf0066ca88488f2d405b0013725284f168337a49dc99111a60f5e7793748877c55eab3ccc2f908af31a7cef7060e3f5e27c151d35e46aadfc097731ff92b26a590af648f37affdeba7d4"}) mmap$auto(0x0, 0x4020009, 0x7fff, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x81, 0x0, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20809, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 379.695833ms ago: executing program 0 (id=1230): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000440)={0x1, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0x20eb90, 0x2, @stream_id=0x100, 0x3, 0x476, 0x0, [{0x8, 0x1, 0x3}, {0x7fff, 0x7, 0x101}, {0xfffffff7, 0x7, 0x5dd}, {0x3, 0x5, 0x81}, {0x80000001, 0x4}, {0x7, 0x2, 0x1}, {0x718, 0x0, 0x2}, {0x0, 0x5f, 0x2e}]}) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108002, 0x0) epoll_create$auto(0x4) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048800}, 0x804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x4, 0x2000063, 0x0, 0x0, 0x0, 0x1000, 0xb, 0x2005, 0x40000402, 0x4009, 0x9, 0xffffffff80000000, 0x9, 0x3, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) read$auto(r2, &(0x7f0000000080)='\xbb\x00', 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptyd9\x00', 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1022, 0xff) read$auto(0x3, 0x0, 0x8080) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)=@link_detach={r3}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c2397199", @ANYRES16=0x0, @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8c5) settimeofday$auto(&(0x7f0000000240)={0x800000100000001, 0x2}, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) 216.838893ms ago: executing program 3 (id=1231): sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x10, 0x2, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab04, r0) 132.690604ms ago: executing program 1 (id=1232): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/97, 0x61) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) socket(0x23, 0x80805, 0x0) listen$auto(0x3, 0x83) listen$auto(0x3, 0x81) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000000040)=""/136, 0x88) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) mmap$auto(0x200004, 0xa0ff, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/v4l-subdev7\x00', 0x0, 0x0) ioctl$auto(r5, 0x4020565b, r5) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) 0s ago: executing program 2 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010034bd700006dcdf25140000000c00018008000100", @ANYRES32, @ANYBLOB="08000d0006000000"], 0x28}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) mmap$auto(0x8000000000000, 0x0, 0x4000000000df, 0x6b74, r0, 0x9) mmap$auto(0x200000000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) bind$auto(r0, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1}, 0x3}}, 0xe) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xc6, 0xb) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0xca40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x400001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_INCOMING_CPU(r2, 0x0, 0x31, &(0x7f0000000140)='*\x00', &(0x7f0000000180)=0x2) select$auto(0x4, 0x0, 0x0, &(0x7f00000002c0)={[0x5242bac0, 0x7, 0xd, 0x4, 0x948a, 0x3, 0x1, 0x3, 0x4003, 0xb8, 0x80000001, 0x7, 0x81, 0x9, 0x2b, 0xfffffffffffffffa]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = socket(0x25, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mlockall$auto(0x5) rt_sigprocmask$auto(0x424, &(0x7f00000000c0)={0x9}, &(0x7f0000000080)={0x1000000009}, 0x8) setsockopt$auto(r2, 0x6a, 0x7, 0xffffffffffffffff, 0x1) mmap$auto(0x914d, 0x800000000000b0c, 0xe3, 0xe635, r0, 0x2) close_range$auto(r4, 0x8, 0x4000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) kernel console output (not intermixed with test programs): dmsg+0x10/0x10 [ 315.367809][ T8762] ? __lock_acquire+0x622/0x1c90 [ 315.367901][ T8762] __sys_sendmsg+0x16d/0x220 [ 315.367932][ T8762] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.367990][ T8762] do_syscall_64+0xcd/0x490 [ 315.368025][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.368058][ T8762] RIP: 0033:0x7f267918e929 [ 315.368083][ T8762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.368113][ T8762] RSP: 002b:00007f2679f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.368141][ T8762] RAX: ffffffffffffffda RBX: 00007f26793b6080 RCX: 00007f267918e929 [ 315.368159][ T8762] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000004 [ 315.368177][ T8762] RBP: 00007f2679f89090 R08: 0000000000000000 R09: 0000000000000000 [ 315.368194][ T8762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.368210][ T8762] R13: 0000000000000000 R14: 00007f26793b6080 R15: 00007ffcb9711e08 [ 315.368249][ T8762] [ 315.531523][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.014001][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 316.493527][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.579'. [ 316.858838][ T8778] hsr_slave_0 (unregistering): left promiscuous mode [ 320.113388][ T8833] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input213 [ 320.631880][ T8835] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input214 [ 322.052245][ T8865] busy [ 322.361723][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.369356][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.898937][ T8892] busy [ 325.952294][ T8916] busy [ 326.008798][ T8917] netlink: 'syz.2.606': attribute type 21 has an invalid length. [ 326.026658][ T8917] netlink: 334 bytes leftover after parsing attributes in process `syz.2.606'. [ 326.094714][ T8923] FAULT_INJECTION: forcing a failure. [ 326.094714][ T8923] name failslab, interval 1, probability 0, space 0, times 0 [ 326.135723][ T8923] CPU: 0 UID: 0 PID: 8923 Comm: syz.3.607 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 326.135773][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.135791][ T8923] Call Trace: [ 326.135802][ T8923] [ 326.135814][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 326.135868][ T8923] should_fail_ex+0x512/0x640 [ 326.135913][ T8923] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 326.135966][ T8923] should_failslab+0xc2/0x120 [ 326.135996][ T8923] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 326.136046][ T8923] ? alloc_inode+0x61/0x240 [ 326.136078][ T8923] ? __pfx_rpc_fill_super+0x10/0x10 [ 326.136124][ T8923] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 326.136162][ T8923] alloc_inode+0x61/0x240 [ 326.136194][ T8923] new_inode+0x22/0x1c0 [ 326.136227][ T8923] ? __pfx_rpc_fill_super+0x10/0x10 [ 326.136275][ T8923] rpc_fill_super+0x19c/0x840 [ 326.136321][ T8923] ? sget_fc+0x808/0xc20 [ 326.136364][ T8923] ? __pfx_set_anon_super_fc+0x10/0x10 [ 326.136406][ T8923] ? __pfx_rpc_fill_super+0x10/0x10 [ 326.136451][ T8923] get_tree_keyed+0x10b/0x1d0 [ 326.136496][ T8923] vfs_get_tree+0x8e/0x340 [ 326.136532][ T8923] vfs_cmd_create+0xd7/0x2a0 [ 326.136563][ T8923] __do_sys_fsconfig+0x7b8/0xbe0 [ 326.136596][ T8923] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 326.136624][ T8923] ? fput+0x70/0xf0 [ 326.136673][ T8923] do_syscall_64+0xcd/0x490 [ 326.136706][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.136736][ T8923] RIP: 0033:0x7f267918e929 [ 326.136767][ T8923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.136803][ T8923] RSP: 002b:00007f2679faa038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 326.136832][ T8923] RAX: ffffffffffffffda RBX: 00007f26793b5fa0 RCX: 00007f267918e929 [ 326.136851][ T8923] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 326.136868][ T8923] RBP: 00007f2679faa090 R08: 0000000000000000 R09: 0000000000000000 [ 326.136885][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.136902][ T8923] R13: 0000000000000000 R14: 00007f26793b5fa0 R15: 00007ffcb9711e08 [ 326.136943][ T8923] [ 326.354003][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.448685][ T8947] sysfs_service_op_show: Client not running :-5: [ 328.067721][ T8965] busy [ 328.320828][ T8964] netlink: 'syz.1.617': attribute type 21 has an invalid length. [ 328.378375][ T8964] netlink: 334 bytes leftover after parsing attributes in process `syz.1.617'. [ 328.896666][ T8976] FAULT_INJECTION: forcing a failure. [ 328.896666][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 328.911246][ T8977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input215 [ 328.988523][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.1.620 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 328.988557][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.988571][ T8976] Call Trace: [ 328.988578][ T8976] [ 328.988586][ T8976] dump_stack_lvl+0x16c/0x1f0 [ 328.988629][ T8976] should_fail_ex+0x512/0x640 [ 328.988678][ T8976] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 328.988726][ T8976] should_failslab+0xc2/0x120 [ 328.988745][ T8976] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 328.988775][ T8976] ? __alloc_skb+0x2b2/0x380 [ 328.988815][ T8976] __alloc_skb+0x2b2/0x380 [ 328.988847][ T8976] ? __pfx___alloc_skb+0x10/0x10 [ 328.988882][ T8976] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 328.988912][ T8976] netlink_alloc_large_skb+0x69/0x130 [ 328.988938][ T8976] netlink_sendmsg+0x6a1/0xdd0 [ 328.988967][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.989002][ T8976] ____sys_sendmsg+0xa95/0xc70 [ 328.989030][ T8976] ? copy_msghdr_from_user+0x10a/0x160 [ 328.989065][ T8976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.989104][ T8976] ___sys_sendmsg+0x134/0x1d0 [ 328.989141][ T8976] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.989174][ T8976] ? __lock_acquire+0x622/0x1c90 [ 328.989234][ T8976] __sys_sendmsg+0x16d/0x220 [ 328.989254][ T8976] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.989290][ T8976] do_syscall_64+0xcd/0x490 [ 328.989312][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.989334][ T8976] RIP: 0033:0x7f943118e929 [ 328.989351][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.989371][ T8976] RSP: 002b:00007f9431f10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.989390][ T8976] RAX: ffffffffffffffda RBX: 00007f94313b6080 RCX: 00007f943118e929 [ 328.989404][ T8976] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000004 [ 328.989417][ T8976] RBP: 00007f9431f10090 R08: 0000000000000000 R09: 0000000000000000 [ 328.989430][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.989442][ T8976] R13: 0000000000000000 R14: 00007f94313b6080 R15: 00007ffebdfaba38 [ 328.989468][ T8976] [ 329.703149][ T8978] ubi0: attaching mtd0 [ 329.707506][ T8978] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 329.865776][ T8979] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input216 [ 332.179042][ T9015] busy [ 332.379776][ T9017] netlink: 'syz.2.628': attribute type 21 has an invalid length. [ 332.389862][ T9017] netlink: 334 bytes leftover after parsing attributes in process `syz.2.628'. [ 333.199254][ T9025] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input217 [ 333.536052][ T9030] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input218 [ 333.642524][ T9034] Invalid ELF header magic: != ELF [ 334.244334][ T9047] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input219 [ 334.424050][ T5854] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 334.424095][ T5854] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 334.443909][ T5854] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 334.723349][ T9053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input220 [ 335.491615][ T9060] busy [ 335.809622][ T9061] netlink: 'syz.2.638': attribute type 21 has an invalid length. [ 335.917973][ T9061] netlink: 334 bytes leftover after parsing attributes in process `syz.2.638'. [ 336.296768][ T9071] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 337.089824][ T9085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input221 [ 337.353148][ T9089] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input222 [ 338.988154][ T9114] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input223 [ 339.025398][ T9113] FAULT_INJECTION: forcing a failure. [ 339.025398][ T9113] name failslab, interval 1, probability 0, space 0, times 0 [ 339.050148][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.3.652 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 339.050191][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.050209][ T9113] Call Trace: [ 339.050219][ T9113] [ 339.050231][ T9113] dump_stack_lvl+0x16c/0x1f0 [ 339.050285][ T9113] should_fail_ex+0x512/0x640 [ 339.050330][ T9113] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 339.050379][ T9113] should_failslab+0xc2/0x120 [ 339.050407][ T9113] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 339.050452][ T9113] ? __kernfs_new_node+0xd2/0x8e0 [ 339.050498][ T9113] __kernfs_new_node+0xd2/0x8e0 [ 339.050544][ T9113] ? __pfx___kernfs_new_node+0x10/0x10 [ 339.050596][ T9113] ? find_held_lock+0x2b/0x80 [ 339.050626][ T9113] ? kernfs_root+0xee/0x2a0 [ 339.050675][ T9113] kernfs_new_node+0x13c/0x1e0 [ 339.050727][ T9113] __kernfs_create_file+0x53/0x350 [ 339.050766][ T9113] sysfs_add_file_mode_ns+0x207/0x3c0 [ 339.050815][ T9113] internal_create_group+0x578/0xf30 [ 339.050868][ T9113] ? __pfx_internal_create_group+0x10/0x10 [ 339.050916][ T9113] ? kernfs_create_link+0x1bd/0x240 [ 339.050962][ T9113] internal_create_groups+0x9d/0x150 [ 339.051008][ T9113] device_add+0x77f/0x1a70 [ 339.051046][ T9113] ? __pfx_device_add+0x10/0x10 [ 339.051093][ T9113] __add_disk+0x457/0xf00 [ 339.051137][ T9113] ? find_held_lock+0x2b/0x80 [ 339.051170][ T9113] add_disk_fwnode+0x3f8/0x5d0 [ 339.051219][ T9113] zram_add+0x4c8/0x700 [ 339.051253][ T9113] ? __pfx_zram_add+0x10/0x10 [ 339.051313][ T9113] ? find_held_lock+0x2b/0x80 [ 339.051349][ T9113] ? __pfx_hot_add_show+0x10/0x10 [ 339.051382][ T9113] ? __pfx_class_attr_show+0x10/0x10 [ 339.051412][ T9113] hot_add_show+0x21/0x80 [ 339.051447][ T9113] class_attr_show+0x72/0xa0 [ 339.051479][ T9113] sysfs_kf_seq_show+0x216/0x3e0 [ 339.051522][ T9113] seq_read_iter+0x506/0x12c0 [ 339.051576][ T9113] kernfs_fop_read_iter+0x40f/0x5a0 [ 339.051606][ T9113] ? rw_verify_area+0xcf/0x680 [ 339.051648][ T9113] vfs_read+0x8bc/0xc60 [ 339.051695][ T9113] ? __pfx___mutex_lock+0x10/0x10 [ 339.051723][ T9113] ? __pfx_vfs_read+0x10/0x10 [ 339.051792][ T9113] ksys_read+0x12a/0x250 [ 339.051831][ T9113] ? __pfx_ksys_read+0x10/0x10 [ 339.051883][ T9113] do_syscall_64+0xcd/0x490 [ 339.051914][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.051944][ T9113] RIP: 0033:0x7f267918e929 [ 339.051973][ T9113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.052002][ T9113] RSP: 002b:00007f2679faa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.052030][ T9113] RAX: ffffffffffffffda RBX: 00007f26793b5fa0 RCX: 00007f267918e929 [ 339.052050][ T9113] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 339.052067][ T9113] RBP: 00007f2679210b39 R08: 0000000000000000 R09: 0000000000000000 [ 339.052084][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.052102][ T9113] R13: 0000000000000000 R14: 00007f26793b5fa0 R15: 00007ffcb9711e08 [ 339.052140][ T9113] [ 339.356787][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.191941][ T9131] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input224 [ 341.725881][ T9152] FAULT_INJECTION: forcing a failure. [ 341.725881][ T9152] name failslab, interval 1, probability 0, space 0, times 0 [ 341.745868][ T9152] CPU: 1 UID: 0 PID: 9152 Comm: syz.1.660 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 341.745911][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.745929][ T9152] Call Trace: [ 341.745939][ T9152] [ 341.745951][ T9152] dump_stack_lvl+0x16c/0x1f0 [ 341.746006][ T9152] should_fail_ex+0x512/0x640 [ 341.746053][ T9152] ? __kvmalloc_node_noprof+0x124/0x620 [ 341.746113][ T9152] should_failslab+0xc2/0x120 [ 341.746142][ T9152] __kvmalloc_node_noprof+0x137/0x620 [ 341.746188][ T9152] ? seq_read_iter+0x826/0x12c0 [ 341.746233][ T9152] ? seq_read_iter+0x826/0x12c0 [ 341.746270][ T9152] seq_read_iter+0x826/0x12c0 [ 341.746309][ T9152] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 341.746371][ T9152] kernfs_fop_read_iter+0x40f/0x5a0 [ 341.746411][ T9152] copy_splice_read+0x615/0xba0 [ 341.746460][ T9152] ? __pfx_copy_splice_read+0x10/0x10 [ 341.746504][ T9152] ? look_up_lock_class+0x6b/0x150 [ 341.746557][ T9152] ? lockdep_init_map_type+0x5c/0x280 [ 341.746601][ T9152] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 341.746648][ T9152] ? __pfx_copy_splice_read+0x10/0x10 [ 341.746686][ T9152] do_splice_read+0x285/0x370 [ 341.746736][ T9152] splice_direct_to_actor+0x2a1/0xa30 [ 341.746780][ T9152] ? __pfx_direct_splice_actor+0x10/0x10 [ 341.746828][ T9152] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 341.746867][ T9152] ? get_pid_task+0xfc/0x250 [ 341.746920][ T9152] do_splice_direct+0x174/0x240 [ 341.746960][ T9152] ? __pfx_do_splice_direct+0x10/0x10 [ 341.747001][ T9152] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 341.747067][ T9152] ? rw_verify_area+0xcf/0x680 [ 341.747112][ T9152] do_sendfile+0xb06/0xe50 [ 341.747164][ T9152] ? __pfx_do_sendfile+0x10/0x10 [ 341.747209][ T9152] ? __fget_files+0x20e/0x3c0 [ 341.747262][ T9152] __x64_sys_sendfile64+0x1d8/0x220 [ 341.747290][ T9152] ? ksys_write+0x1ac/0x250 [ 341.747333][ T9152] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 341.747378][ T9152] do_syscall_64+0xcd/0x490 [ 341.747411][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.747444][ T9152] RIP: 0033:0x7f943118e929 [ 341.747470][ T9152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.747500][ T9152] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 341.747529][ T9152] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 341.747549][ T9152] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 341.747566][ T9152] RBP: 00007f9431f31090 R08: 0000000000000000 R09: 0000000000000000 [ 341.747583][ T9152] R10: 0000000000000071 R11: 0000000000000246 R12: 0000000000000001 [ 341.747600][ T9152] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 341.747642][ T9152] [ 342.073185][ T9154] mmap: syz.3.662 (9154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 343.383849][ T9188] usb usb36: usbfs: process 9188 (syz.1.668) did not claim interface 0 before use [ 343.972108][ T9196] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input225 [ 346.432727][ T9225] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input226 [ 347.813824][ T9237] can: request_module (can-proto-0) failed. [ 348.176184][ T9247] busy [ 349.948456][ T9272] random: crng reseeded on system resumption [ 349.961075][ T9272] FAULT_INJECTION: forcing a failure. [ 349.961075][ T9272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.989325][ T9272] CPU: 1 UID: 0 PID: 9272 Comm: syz.2.683 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 349.989369][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.989388][ T9272] Call Trace: [ 349.989398][ T9272] [ 349.989411][ T9272] dump_stack_lvl+0x16c/0x1f0 [ 349.989466][ T9272] should_fail_ex+0x512/0x640 [ 349.989523][ T9272] should_fail_alloc_page+0xe7/0x130 [ 349.989557][ T9272] prepare_alloc_pages+0x3c2/0x610 [ 349.989601][ T9272] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 349.989663][ T9272] ? stack_trace_save+0x8e/0xc0 [ 349.989699][ T9272] ? __pfx_stack_trace_save+0x10/0x10 [ 349.989732][ T9272] ? stack_depot_save_flags+0x28/0xa40 [ 349.989786][ T9272] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.989843][ T9272] ? kasan_save_stack+0x42/0x60 [ 349.989891][ T9272] ? kasan_save_stack+0x33/0x60 [ 349.989945][ T9272] ? do_dentry_open+0x744/0x1c10 [ 349.989990][ T9272] ? vfs_open+0x82/0x3f0 [ 349.990021][ T9272] ? path_openat+0x1de4/0x2cb0 [ 349.990063][ T9272] ? do_filp_open+0x20b/0x470 [ 349.990114][ T9272] ? do_sys_openat2+0x11b/0x1d0 [ 349.990147][ T9272] ? __x64_sys_openat+0x174/0x210 [ 349.990182][ T9272] ? do_syscall_64+0xcd/0x490 [ 349.990210][ T9272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.990246][ T9272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.990294][ T9272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.990345][ T9272] ? policy_nodemask+0xea/0x4e0 [ 349.990380][ T9272] alloc_pages_mpol+0x1fb/0x550 [ 349.990413][ T9272] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 349.990457][ T9272] alloc_pages_noprof+0x131/0x390 [ 349.990489][ T9272] get_zeroed_page_noprof+0x18/0xb0 [ 349.990525][ T9272] get_image_page+0x18/0x190 [ 349.990558][ T9272] alloc_rtree_node+0x3c/0xb0 [ 349.990591][ T9272] memory_bm_create+0x519/0x810 [ 349.990641][ T9272] create_basic_memory_bitmaps+0x10b/0x320 [ 349.990685][ T9272] snapshot_open+0x235/0x2b0 [ 349.990724][ T9272] ? __pfx_snapshot_open+0x10/0x10 [ 349.990765][ T9272] misc_open+0x35d/0x420 [ 349.990807][ T9272] ? __pfx_misc_open+0x10/0x10 [ 349.990850][ T9272] chrdev_open+0x231/0x6a0 [ 349.990899][ T9272] ? __pfx_apparmor_file_open+0x10/0x10 [ 349.990941][ T9272] ? __pfx_chrdev_open+0x10/0x10 [ 349.990993][ T9272] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 349.991045][ T9272] do_dentry_open+0x744/0x1c10 [ 349.991102][ T9272] ? __pfx_chrdev_open+0x10/0x10 [ 349.991161][ T9272] vfs_open+0x82/0x3f0 [ 349.991203][ T9272] path_openat+0x1de4/0x2cb0 [ 349.991268][ T9272] ? __pfx_path_openat+0x10/0x10 [ 349.991316][ T9272] ? __lock_acquire+0xb8a/0x1c90 [ 349.991364][ T9272] do_filp_open+0x20b/0x470 [ 349.991412][ T9272] ? __pfx_do_filp_open+0x10/0x10 [ 349.991492][ T9272] ? alloc_fd+0x471/0x7d0 [ 349.991548][ T9272] do_sys_openat2+0x11b/0x1d0 [ 349.991583][ T9272] ? __pfx_do_sys_openat2+0x10/0x10 [ 349.991638][ T9272] __x64_sys_openat+0x174/0x210 [ 349.991676][ T9272] ? __pfx___x64_sys_openat+0x10/0x10 [ 349.991732][ T9272] do_syscall_64+0xcd/0x490 [ 349.991766][ T9272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.991817][ T9272] RIP: 0033:0x7f619598e929 [ 349.991844][ T9272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.991875][ T9272] RSP: 002b:00007f6196822038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 349.991906][ T9272] RAX: ffffffffffffffda RBX: 00007f6195bb6160 RCX: 00007f619598e929 [ 349.991928][ T9272] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 349.991948][ T9272] RBP: 00007f6195a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 349.991966][ T9272] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000000 [ 349.991985][ T9272] R13: 0000000000000000 R14: 00007f6195bb6160 R15: 00007ffc709eb5f8 [ 349.992026][ T9272] [ 350.791639][ T9265] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.930606][ T9277] random: crng reseeded on system resumption [ 350.951217][ T9277] FAULT_INJECTION: forcing a failure. [ 350.951217][ T9277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.016293][ T9277] CPU: 0 UID: 0 PID: 9277 Comm: syz.1.686 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 351.016336][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.016353][ T9277] Call Trace: [ 351.016363][ T9277] [ 351.016373][ T9277] dump_stack_lvl+0x16c/0x1f0 [ 351.016426][ T9277] should_fail_ex+0x512/0x640 [ 351.016475][ T9277] should_fail_alloc_page+0xe7/0x130 [ 351.016505][ T9277] prepare_alloc_pages+0x3c2/0x610 [ 351.016537][ T9277] ? rcu_is_watching+0x12/0xc0 [ 351.016569][ T9277] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 351.016622][ T9277] ? stack_trace_save+0x8e/0xc0 [ 351.016651][ T9277] ? __pfx_stack_trace_save+0x10/0x10 [ 351.016679][ T9277] ? stack_depot_save_flags+0x28/0xa40 [ 351.016734][ T9277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.016782][ T9277] ? kasan_save_stack+0x42/0x60 [ 351.016821][ T9277] ? kasan_save_stack+0x33/0x60 [ 351.016864][ T9277] ? do_dentry_open+0x744/0x1c10 [ 351.016905][ T9277] ? vfs_open+0x82/0x3f0 [ 351.016934][ T9277] ? path_openat+0x1de4/0x2cb0 [ 351.016977][ T9277] ? do_filp_open+0x20b/0x470 [ 351.017019][ T9277] ? do_sys_openat2+0x11b/0x1d0 [ 351.017051][ T9277] ? __x64_sys_openat+0x174/0x210 [ 351.017086][ T9277] ? do_syscall_64+0xcd/0x490 [ 351.017116][ T9277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.017152][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.017203][ T9277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 351.017256][ T9277] ? policy_nodemask+0xea/0x4e0 [ 351.017290][ T9277] alloc_pages_mpol+0x1fb/0x550 [ 351.017323][ T9277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 351.017367][ T9277] alloc_pages_noprof+0x131/0x390 [ 351.017402][ T9277] get_zeroed_page_noprof+0x18/0xb0 [ 351.017438][ T9277] get_image_page+0x18/0x190 [ 351.017471][ T9277] alloc_rtree_node+0x3c/0xb0 [ 351.017502][ T9277] memory_bm_create+0x519/0x810 [ 351.017552][ T9277] create_basic_memory_bitmaps+0x10b/0x320 [ 351.017595][ T9277] snapshot_open+0x235/0x2b0 [ 351.017634][ T9277] ? __pfx_snapshot_open+0x10/0x10 [ 351.017673][ T9277] misc_open+0x35d/0x420 [ 351.017728][ T9277] ? __pfx_misc_open+0x10/0x10 [ 351.017768][ T9277] chrdev_open+0x231/0x6a0 [ 351.017817][ T9277] ? __pfx_apparmor_file_open+0x10/0x10 [ 351.017859][ T9277] ? __pfx_chrdev_open+0x10/0x10 [ 351.017912][ T9277] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 351.017962][ T9277] do_dentry_open+0x744/0x1c10 [ 351.018011][ T9277] ? __pfx_chrdev_open+0x10/0x10 [ 351.018072][ T9277] vfs_open+0x82/0x3f0 [ 351.018111][ T9277] path_openat+0x1de4/0x2cb0 [ 351.018170][ T9277] ? __pfx_path_openat+0x10/0x10 [ 351.018220][ T9277] ? __lock_acquire+0xb8a/0x1c90 [ 351.018268][ T9277] do_filp_open+0x20b/0x470 [ 351.018317][ T9277] ? __pfx_do_filp_open+0x10/0x10 [ 351.018397][ T9277] ? alloc_fd+0x471/0x7d0 [ 351.018454][ T9277] do_sys_openat2+0x11b/0x1d0 [ 351.018490][ T9277] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.018543][ T9277] __x64_sys_openat+0x174/0x210 [ 351.018581][ T9277] ? __pfx___x64_sys_openat+0x10/0x10 [ 351.018636][ T9277] do_syscall_64+0xcd/0x490 [ 351.018670][ T9277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.018702][ T9277] RIP: 0033:0x7f943118e929 [ 351.018737][ T9277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.018769][ T9277] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.018801][ T9277] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 351.018822][ T9277] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 351.018842][ T9277] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 351.018861][ T9277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.018879][ T9277] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 351.018920][ T9277] [ 351.394251][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.892570][ T9286] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input228 [ 352.152316][ T9288] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input229 [ 352.241466][ T9291] netlink: 'syz.1.690': attribute type 21 has an invalid length. [ 352.382008][ T9291] netlink: 334 bytes leftover after parsing attributes in process `syz.1.690'. [ 352.678557][ T9283] Invalid ELF header magic: != ELF [ 353.161037][ T9302] netlink: 'syz.1.692': attribute type 21 has an invalid length. [ 353.178591][ T9302] netlink: 334 bytes leftover after parsing attributes in process `syz.1.692'. [ 353.665065][ T9313] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input230 [ 353.700006][ T9316] vivid-003: ================= START STATUS ================= [ 353.721759][ T9316] vivid-003: Radio HW Seek Mode: Bounded [ 353.730747][ T9316] vivid-003: Radio Programmable HW Seek: false [ 353.737040][ T9316] vivid-003: RDS Rx I/O Mode: Block I/O [ 353.742847][ T9316] vivid-003: Generate RBDS Instead of RDS: false [ 353.751221][ T9316] vivid-003: RDS Reception: true [ 353.756312][ T9316] vivid-003: RDS Program Type: 0 inactive [ 353.762155][ T9316] vivid-003: RDS PS Name: inactive [ 353.776823][ T9316] vivid-003: RDS Radio Text: inactive [ 353.782680][ T9316] vivid-003: RDS Traffic Announcement: false inactive [ 353.931270][ T9316] vivid-003: RDS Traffic Program: false inactive [ 353.946821][ T9316] vivid-003: RDS Music: false inactive [ 353.994245][ T9316] vivid-003: ================== END STATUS ================== [ 354.333649][ T9322] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input231 syzkaller syzkaller login: [ 354.987846][ T9341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input232 [ 355.099048][ T9330] Invalid ELF header magic: != ELF [ 355.631885][ T9342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input233 [ 356.925632][ T9366] netlink: 334 bytes leftover after parsing attributes in process `syz.3.703'. [ 357.533900][ T9378] busy [ 359.082306][ T9394] Invalid ELF header magic: != ELF [ 359.160087][ T9397] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input234 [ 359.196676][ T9396] usb usb36: usbfs: process 9396 (syz.1.711) did not claim interface 0 before use [ 359.660866][ T9398] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input235 [ 360.809408][ T9412] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input236 [ 361.462423][ T9414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input238 [ 361.928872][ T9425] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input239 [ 362.316083][ T9430] capability: warning: `syz.1.717' uses 32-bit capabilities (legacy support in use) [ 363.331817][ T9430] FAULT_INJECTION: forcing a failure. [ 363.331817][ T9430] name failslab, interval 1, probability 0, space 0, times 0 [ 363.385240][ T9430] CPU: 1 UID: 0 PID: 9430 Comm: syz.1.717 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 363.385287][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 363.385306][ T9430] Call Trace: [ 363.385317][ T9430] [ 363.385329][ T9430] dump_stack_lvl+0x16c/0x1f0 [ 363.385386][ T9430] should_fail_ex+0x512/0x640 [ 363.385433][ T9430] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 363.385487][ T9430] should_failslab+0xc2/0x120 [ 363.385516][ T9430] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 363.385565][ T9430] ? __d_alloc+0x31/0xaa0 [ 363.385621][ T9430] __d_alloc+0x31/0xaa0 [ 363.385672][ T9430] d_alloc+0x4a/0x1e0 [ 363.385720][ T9430] __rpc_lookup_create_exclusive+0x119/0x140 [ 363.385761][ T9430] ? __pfx___rpc_lookup_create_exclusive+0x10/0x10 [ 363.385813][ T9430] rpc_populate.constprop.0+0xbe/0x5d0 [ 363.385870][ T9430] rpc_fill_super+0x345/0x840 [ 363.385917][ T9430] ? sget_fc+0x808/0xc20 [ 363.385972][ T9430] ? __pfx_rpc_fill_super+0x10/0x10 [ 363.386020][ T9430] get_tree_keyed+0x10b/0x1d0 [ 363.386064][ T9430] vfs_get_tree+0x8e/0x340 [ 363.386102][ T9430] vfs_cmd_create+0xd7/0x2a0 [ 363.386133][ T9430] __do_sys_fsconfig+0x7b8/0xbe0 [ 363.386167][ T9430] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 363.386218][ T9430] do_syscall_64+0xcd/0x490 [ 363.386252][ T9430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.386284][ T9430] RIP: 0033:0x7f943118e929 [ 363.386311][ T9430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.386340][ T9430] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 363.386370][ T9430] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 363.386390][ T9430] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000c [ 363.386419][ T9430] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 363.386436][ T9430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.386452][ T9430] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 363.386510][ T9430] [ 363.386529][ T9430] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory gssd [ 364.036689][ T9446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input240 [ 365.854384][ T9459] Invalid ELF header magic: != ELF [ 367.525378][ T9486] random: crng reseeded on system resumption [ 367.555347][ T9486] FAULT_INJECTION: forcing a failure. [ 367.555347][ T9486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.694262][ T9486] CPU: 0 UID: 0 PID: 9486 Comm: syz.2.728 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 367.694307][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.694323][ T9486] Call Trace: [ 367.694333][ T9486] [ 367.694345][ T9486] dump_stack_lvl+0x16c/0x1f0 [ 367.694401][ T9486] should_fail_ex+0x512/0x640 [ 367.694454][ T9486] should_fail_alloc_page+0xe7/0x130 [ 367.694488][ T9486] prepare_alloc_pages+0x3c2/0x610 [ 367.694534][ T9486] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 367.694601][ T9486] ? stack_trace_save+0x8e/0xc0 [ 367.694636][ T9486] ? __pfx_stack_trace_save+0x10/0x10 [ 367.694671][ T9486] ? stack_depot_save_flags+0x28/0xa40 [ 367.694722][ T9486] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.694777][ T9486] ? kasan_save_stack+0x42/0x60 [ 367.694820][ T9486] ? kasan_save_stack+0x33/0x60 [ 367.694870][ T9486] ? do_dentry_open+0x744/0x1c10 [ 367.694915][ T9486] ? vfs_open+0x82/0x3f0 [ 367.694944][ T9486] ? path_openat+0x1de4/0x2cb0 [ 367.694985][ T9486] ? do_filp_open+0x20b/0x470 [ 367.695027][ T9486] ? do_sys_openat2+0x11b/0x1d0 [ 367.695059][ T9486] ? __x64_sys_openat+0x174/0x210 [ 367.695092][ T9486] ? do_syscall_64+0xcd/0x490 [ 367.695119][ T9486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.695153][ T9486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.695197][ T9486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 367.695246][ T9486] ? policy_nodemask+0xea/0x4e0 [ 367.695279][ T9486] alloc_pages_mpol+0x1fb/0x550 [ 367.695312][ T9486] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 367.695356][ T9486] alloc_pages_noprof+0x131/0x390 [ 367.695388][ T9486] get_zeroed_page_noprof+0x18/0xb0 [ 367.695423][ T9486] get_image_page+0x18/0x190 [ 367.695455][ T9486] alloc_rtree_node+0x3c/0xb0 [ 367.695485][ T9486] memory_bm_create+0x519/0x810 [ 367.695535][ T9486] create_basic_memory_bitmaps+0x10b/0x320 [ 367.695584][ T9486] snapshot_open+0x235/0x2b0 [ 367.695638][ T9486] ? __pfx_snapshot_open+0x10/0x10 [ 367.695678][ T9486] misc_open+0x35d/0x420 [ 367.695722][ T9486] ? __pfx_misc_open+0x10/0x10 [ 367.695763][ T9486] chrdev_open+0x231/0x6a0 [ 367.695824][ T9486] ? __pfx_apparmor_file_open+0x10/0x10 [ 367.695866][ T9486] ? __pfx_chrdev_open+0x10/0x10 [ 367.695918][ T9486] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 367.695967][ T9486] do_dentry_open+0x744/0x1c10 [ 367.696014][ T9486] ? __pfx_chrdev_open+0x10/0x10 [ 367.696069][ T9486] vfs_open+0x82/0x3f0 [ 367.696107][ T9486] path_openat+0x1de4/0x2cb0 [ 367.696168][ T9486] ? __pfx_path_openat+0x10/0x10 [ 367.696216][ T9486] ? __lock_acquire+0xb8a/0x1c90 [ 367.696262][ T9486] do_filp_open+0x20b/0x470 [ 367.696309][ T9486] ? __pfx_do_filp_open+0x10/0x10 [ 367.696387][ T9486] ? alloc_fd+0x471/0x7d0 [ 367.696441][ T9486] do_sys_openat2+0x11b/0x1d0 [ 367.696475][ T9486] ? __pfx_do_sys_openat2+0x10/0x10 [ 367.696525][ T9486] __x64_sys_openat+0x174/0x210 [ 367.696562][ T9486] ? __pfx___x64_sys_openat+0x10/0x10 [ 367.696624][ T9486] do_syscall_64+0xcd/0x490 [ 367.696657][ T9486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.696688][ T9486] RIP: 0033:0x7f619598e929 [ 367.696715][ T9486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.696746][ T9486] RSP: 002b:00007f6196822038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 367.696775][ T9486] RAX: ffffffffffffffda RBX: 00007f6195bb6160 RCX: 00007f619598e929 [ 367.696795][ T9486] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 367.696815][ T9486] RBP: 00007f6195a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 367.696833][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.696851][ T9486] R13: 0000000000000000 R14: 00007f6195bb6160 R15: 00007ffc709eb5f8 [ 367.696896][ T9486] [ 368.068953][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.125542][ T9495] netlink: 7 bytes leftover after parsing attributes in process `syz.3.731'. [ 368.163857][ T9491] FAULT_INJECTION: forcing a failure. [ 368.163857][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.177037][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.1.730 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 368.177068][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.177081][ T9491] Call Trace: [ 368.177089][ T9491] [ 368.177097][ T9491] dump_stack_lvl+0x16c/0x1f0 [ 368.177137][ T9491] should_fail_ex+0x512/0x640 [ 368.177176][ T9491] _copy_from_iter+0x29f/0x16f0 [ 368.177217][ T9491] ? __alloc_skb+0x200/0x380 [ 368.177254][ T9491] ? __pfx__copy_from_iter+0x10/0x10 [ 368.177292][ T9491] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 368.177327][ T9491] netlink_sendmsg+0x829/0xdd0 [ 368.177359][ T9491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.177401][ T9491] ____sys_sendmsg+0xa95/0xc70 [ 368.177430][ T9491] ? copy_msghdr_from_user+0x10a/0x160 [ 368.177469][ T9491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.177528][ T9491] ___sys_sendmsg+0x134/0x1d0 [ 368.177568][ T9491] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.177603][ T9491] ? __lock_acquire+0x622/0x1c90 [ 368.177669][ T9491] __sys_sendmsg+0x16d/0x220 [ 368.177691][ T9491] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.177743][ T9491] do_syscall_64+0xcd/0x490 [ 368.177776][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.177807][ T9491] RIP: 0033:0x7f943118e929 [ 368.177832][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.177860][ T9491] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.177886][ T9491] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 368.177905][ T9491] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000004 [ 368.177923][ T9491] RBP: 00007f9431f31090 R08: 0000000000000000 R09: 0000000000000000 [ 368.177940][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.177956][ T9491] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 368.177990][ T9491] [ 368.372014][ C0] vkms_vblank_simulate: vblank timer overrun [ 368.656927][ T9501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input242 [ 369.120128][ T9504] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input243 [ 369.326574][ T9507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input244 [ 370.273430][ T9508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input245 [ 371.621155][ T9532] random: crng reseeded on system resumption [ 371.666895][ T9532] FAULT_INJECTION: forcing a failure. [ 371.666895][ T9532] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.666960][ T9532] CPU: 1 UID: 0 PID: 9532 Comm: syz.3.739 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 371.667002][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.667021][ T9532] Call Trace: [ 371.667031][ T9532] [ 371.667043][ T9532] dump_stack_lvl+0x16c/0x1f0 [ 371.667103][ T9532] should_fail_ex+0x512/0x640 [ 371.667159][ T9532] should_fail_alloc_page+0xe7/0x130 [ 371.667194][ T9532] prepare_alloc_pages+0x3c2/0x610 [ 371.667239][ T9532] ? rcu_is_watching+0x12/0xc0 [ 371.667282][ T9532] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 371.667348][ T9532] ? stack_trace_save+0x8e/0xc0 [ 371.667384][ T9532] ? __pfx_stack_trace_save+0x10/0x10 [ 371.667418][ T9532] ? stack_depot_save_flags+0x28/0xa40 [ 371.667472][ T9532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 371.667527][ T9532] ? kasan_save_stack+0x42/0x60 [ 371.667570][ T9532] ? kasan_save_stack+0x33/0x60 [ 371.667623][ T9532] ? do_dentry_open+0x744/0x1c10 [ 371.667669][ T9532] ? vfs_open+0x82/0x3f0 [ 371.667699][ T9532] ? path_openat+0x1de4/0x2cb0 [ 371.667746][ T9532] ? do_filp_open+0x20b/0x470 [ 371.667786][ T9532] ? do_sys_openat2+0x11b/0x1d0 [ 371.667818][ T9532] ? __x64_sys_openat+0x174/0x210 [ 371.667853][ T9532] ? do_syscall_64+0xcd/0x490 [ 371.667879][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.667915][ T9532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.667961][ T9532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.668011][ T9532] ? policy_nodemask+0xea/0x4e0 [ 371.668045][ T9532] alloc_pages_mpol+0x1fb/0x550 [ 371.668078][ T9532] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 371.668122][ T9532] alloc_pages_noprof+0x131/0x390 [ 371.668154][ T9532] get_zeroed_page_noprof+0x18/0xb0 [ 371.668191][ T9532] get_image_page+0x18/0x190 [ 371.668223][ T9532] alloc_rtree_node+0x3c/0xb0 [ 371.668266][ T9532] memory_bm_create+0x419/0x810 [ 371.668316][ T9532] create_basic_memory_bitmaps+0x10b/0x320 [ 371.668361][ T9532] snapshot_open+0x235/0x2b0 [ 371.668402][ T9532] ? __pfx_snapshot_open+0x10/0x10 [ 371.668441][ T9532] misc_open+0x35d/0x420 [ 371.668488][ T9532] ? __pfx_misc_open+0x10/0x10 [ 371.668531][ T9532] chrdev_open+0x231/0x6a0 [ 371.668579][ T9532] ? __pfx_apparmor_file_open+0x10/0x10 [ 371.668621][ T9532] ? __pfx_chrdev_open+0x10/0x10 [ 371.668672][ T9532] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 371.668723][ T9532] do_dentry_open+0x744/0x1c10 [ 371.668772][ T9532] ? __pfx_chrdev_open+0x10/0x10 [ 371.668833][ T9532] vfs_open+0x82/0x3f0 [ 371.668874][ T9532] path_openat+0x1de4/0x2cb0 [ 371.668936][ T9532] ? __pfx_path_openat+0x10/0x10 [ 371.668987][ T9532] ? __lock_acquire+0xb8a/0x1c90 [ 371.669036][ T9532] do_filp_open+0x20b/0x470 [ 371.669085][ T9532] ? __pfx_do_filp_open+0x10/0x10 [ 371.669168][ T9532] ? alloc_fd+0x471/0x7d0 [ 371.669225][ T9532] do_sys_openat2+0x11b/0x1d0 [ 371.669279][ T9532] ? __pfx_do_sys_openat2+0x10/0x10 [ 371.669334][ T9532] __x64_sys_openat+0x174/0x210 [ 371.669381][ T9532] ? __pfx___x64_sys_openat+0x10/0x10 [ 371.669438][ T9532] do_syscall_64+0xcd/0x490 [ 371.669472][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.669506][ T9532] RIP: 0033:0x7f267918e929 [ 371.669532][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.669564][ T9532] RSP: 002b:00007f2679f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 371.669595][ T9532] RAX: ffffffffffffffda RBX: 00007f26793b6160 RCX: 00007f267918e929 [ 371.669616][ T9532] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 371.669636][ T9532] RBP: 00007f2679210b39 R08: 0000000000000000 R09: 0000000000000000 [ 371.669655][ T9532] R10: 0000000000000028 R11: 0000000000000246 R12: 0000000000000000 [ 371.669674][ T9532] R13: 0000000000000000 R14: 00007f26793b6160 R15: 00007ffcb9711e08 [ 371.669715][ T9532] [ 372.595524][ T9539] tty tty17: ldisc open failed (-12), clearing slot 16 [ 373.802886][ T9566] Console: switching to colour VGA+ 80x25 [ 376.418874][ T9598] busy [ 377.216163][ T9608] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input246 [ 377.907124][ T9610] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input247 [ 378.673360][ T9623] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input248 [ 379.342072][ T9624] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input249 [ 381.069321][ T9652] busy [ 382.352525][ T9674] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input250 [ 383.105196][ T9682] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input251 [ 383.818510][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.827284][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.993764][ T9695] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input252 [ 384.498734][ T9697] busy [ 385.529389][ T9699] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input253 [ 385.550788][ T9713] busy [ 387.791642][ T9736] random: crng reseeded on system resumption [ 387.806869][ T9736] FAULT_INJECTION: forcing a failure. [ 387.806869][ T9736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.822512][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.0.782 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 387.822552][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.822570][ T9736] Call Trace: [ 387.822579][ T9736] [ 387.822589][ T9736] dump_stack_lvl+0x16c/0x1f0 [ 387.822640][ T9736] should_fail_ex+0x512/0x640 [ 387.822697][ T9736] should_fail_alloc_page+0xe7/0x130 [ 387.822727][ T9736] prepare_alloc_pages+0x3c2/0x610 [ 387.822760][ T9736] ? rcu_is_watching+0x12/0xc0 [ 387.822791][ T9736] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 387.822842][ T9736] ? stack_trace_save+0x8e/0xc0 [ 387.822871][ T9736] ? __pfx_stack_trace_save+0x10/0x10 [ 387.822899][ T9736] ? stack_depot_save_flags+0x28/0xa40 [ 387.822944][ T9736] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 387.822990][ T9736] ? kasan_save_stack+0x42/0x60 [ 387.823027][ T9736] ? kasan_save_stack+0x33/0x60 [ 387.823069][ T9736] ? do_dentry_open+0x744/0x1c10 [ 387.823108][ T9736] ? vfs_open+0x82/0x3f0 [ 387.823132][ T9736] ? path_openat+0x1de4/0x2cb0 [ 387.823167][ T9736] ? do_filp_open+0x20b/0x470 [ 387.823202][ T9736] ? do_sys_openat2+0x11b/0x1d0 [ 387.823229][ T9736] ? __x64_sys_openat+0x174/0x210 [ 387.823257][ T9736] ? do_syscall_64+0xcd/0x490 [ 387.823280][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.823309][ T9736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.823349][ T9736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 387.823391][ T9736] ? policy_nodemask+0xea/0x4e0 [ 387.823418][ T9736] alloc_pages_mpol+0x1fb/0x550 [ 387.823445][ T9736] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 387.823480][ T9736] alloc_pages_noprof+0x131/0x390 [ 387.823507][ T9736] get_zeroed_page_noprof+0x18/0xb0 [ 387.823537][ T9736] get_image_page+0x18/0x190 [ 387.823564][ T9736] alloc_rtree_node+0x3c/0xb0 [ 387.823589][ T9736] memory_bm_create+0x519/0x810 [ 387.823629][ T9736] create_basic_memory_bitmaps+0x10b/0x320 [ 387.823663][ T9736] snapshot_open+0x235/0x2b0 [ 387.823710][ T9736] ? __pfx_snapshot_open+0x10/0x10 [ 387.823743][ T9736] misc_open+0x35d/0x420 [ 387.823780][ T9736] ? __pfx_misc_open+0x10/0x10 [ 387.823813][ T9736] chrdev_open+0x231/0x6a0 [ 387.823856][ T9736] ? __pfx_apparmor_file_open+0x10/0x10 [ 387.823891][ T9736] ? __pfx_chrdev_open+0x10/0x10 [ 387.823937][ T9736] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 387.823980][ T9736] do_dentry_open+0x744/0x1c10 [ 387.824020][ T9736] ? __pfx_chrdev_open+0x10/0x10 [ 387.824067][ T9736] vfs_open+0x82/0x3f0 [ 387.824099][ T9736] path_openat+0x1de4/0x2cb0 [ 387.824167][ T9736] ? __pfx_path_openat+0x10/0x10 [ 387.824222][ T9736] ? __lock_acquire+0xb8a/0x1c90 [ 387.824260][ T9736] do_filp_open+0x20b/0x470 [ 387.824299][ T9736] ? __pfx_do_filp_open+0x10/0x10 [ 387.824362][ T9736] ? alloc_fd+0x471/0x7d0 [ 387.824409][ T9736] do_sys_openat2+0x11b/0x1d0 [ 387.824438][ T9736] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.824481][ T9736] __x64_sys_openat+0x174/0x210 [ 387.824517][ T9736] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.824569][ T9736] do_syscall_64+0xcd/0x490 [ 387.824607][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.824640][ T9736] RIP: 0033:0x7f1044b8e929 [ 387.824663][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.824702][ T9736] RSP: 002b:00007f10459ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.824730][ T9736] RAX: ffffffffffffffda RBX: 00007f1044db5fa0 RCX: 00007f1044b8e929 [ 387.824749][ T9736] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 387.824769][ T9736] RBP: 00007f1044c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 387.824787][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.824805][ T9736] R13: 0000000000000000 R14: 00007f1044db5fa0 R15: 00007ffde1a1c748 [ 387.824843][ T9736] [ 389.042058][ T9753] busy [ 389.811069][ T9764] FAULT_INJECTION: forcing a failure. [ 389.811069][ T9764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.811117][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.1.788 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 389.811154][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.811172][ T9764] Call Trace: [ 389.811181][ T9764] [ 389.811192][ T9764] dump_stack_lvl+0x16c/0x1f0 [ 389.811245][ T9764] should_fail_ex+0x512/0x640 [ 389.811300][ T9764] should_fail_alloc_page+0xe7/0x130 [ 389.811333][ T9764] prepare_alloc_pages+0x3c2/0x610 [ 389.811378][ T9764] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 389.811430][ T9764] ? copy_splice_read+0x1a8/0xba0 [ 389.811467][ T9764] ? stack_trace_save+0x8e/0xc0 [ 389.811502][ T9764] ? __pfx_stack_trace_save+0x10/0x10 [ 389.811535][ T9764] ? stack_depot_save_flags+0x28/0xa40 [ 389.811593][ T9764] ? bpf_ksym_find+0x124/0x1c0 [ 389.811632][ T9764] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.811679][ T9764] ? kasan_save_stack+0x33/0x60 [ 389.811726][ T9764] ? __kasan_kmalloc+0xaa/0xb0 [ 389.811770][ T9764] ? copy_splice_read+0x1a8/0xba0 [ 389.811805][ T9764] ? do_splice_read+0x285/0x370 [ 389.811843][ T9764] ? splice_direct_to_actor+0x2a1/0xa30 [ 389.811883][ T9764] ? do_splice_direct+0x174/0x240 [ 389.811919][ T9764] ? do_sendfile+0xb06/0xe50 [ 389.811958][ T9764] ? __x64_sys_sendfile64+0x1d8/0x220 [ 389.811986][ T9764] ? do_syscall_64+0xcd/0x490 [ 389.812045][ T9764] alloc_pages_bulk_noprof+0x71c/0x1410 [ 389.812105][ T9764] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 389.812166][ T9764] ? trace_kmalloc+0x2b/0xd0 [ 389.812195][ T9764] ? __kmalloc_noprof+0x242/0x510 [ 389.812249][ T9764] copy_splice_read+0x1e1/0xba0 [ 389.812299][ T9764] ? __pfx_copy_splice_read+0x10/0x10 [ 389.812343][ T9764] ? look_up_lock_class+0x6b/0x150 [ 389.812398][ T9764] ? lockdep_init_map_type+0x5c/0x280 [ 389.812444][ T9764] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 389.812494][ T9764] ? __pfx_copy_splice_read+0x10/0x10 [ 389.812533][ T9764] do_splice_read+0x285/0x370 [ 389.812584][ T9764] splice_direct_to_actor+0x2a1/0xa30 [ 389.812628][ T9764] ? __pfx_direct_splice_actor+0x10/0x10 [ 389.812679][ T9764] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 389.812718][ T9764] ? get_pid_task+0xfc/0x250 [ 389.812768][ T9764] do_splice_direct+0x174/0x240 [ 389.812806][ T9764] ? __pfx_do_splice_direct+0x10/0x10 [ 389.812847][ T9764] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 389.812893][ T9764] ? rw_verify_area+0xcf/0x680 [ 389.812937][ T9764] do_sendfile+0xb06/0xe50 [ 389.812986][ T9764] ? __pfx_do_sendfile+0x10/0x10 [ 389.813029][ T9764] ? __fget_files+0x20e/0x3c0 [ 389.813083][ T9764] __x64_sys_sendfile64+0x1d8/0x220 [ 389.813112][ T9764] ? ksys_write+0x1ac/0x250 [ 389.813154][ T9764] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 389.813196][ T9764] do_syscall_64+0xcd/0x490 [ 389.813226][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.813256][ T9764] RIP: 0033:0x7f943118e929 [ 389.813277][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.813303][ T9764] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 389.813331][ T9764] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 389.813350][ T9764] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 389.813368][ T9764] RBP: 00007f9431f31090 R08: 0000000000000000 R09: 0000000000000000 [ 389.813385][ T9764] R10: 000000004f64a1d2 R11: 0000000000000246 R12: 0000000000000001 [ 389.813403][ T9764] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 389.813443][ T9764] [ 390.589849][ T9761] tty tty53: ldisc open failed (-12), clearing slot 52 [ 392.347479][ T9801] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input254 [ 393.381463][ T9803] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input255 [ 394.215620][ T9822] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input256 [ 394.650832][ T9823] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input257 [ 396.648504][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.804'. [ 396.826070][ T9848] Console: switching to colour frame buffer device 128x48 [ 397.096790][ T9863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input258 [ 397.676058][ T9871] FAULT_INJECTION: forcing a failure. [ 397.676058][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 397.731887][ T9871] CPU: 0 UID: 0 PID: 9871 Comm: syz.2.809 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 397.731928][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.731945][ T9871] Call Trace: [ 397.731956][ T9871] [ 397.731967][ T9871] dump_stack_lvl+0x16c/0x1f0 [ 397.732020][ T9871] should_fail_ex+0x512/0x640 [ 397.732066][ T9871] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 397.732118][ T9871] should_failslab+0xc2/0x120 [ 397.732148][ T9871] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 397.732199][ T9871] ? nfs_netns_identifier_store+0xe3/0x150 [ 397.732239][ T9871] kmemdup_nul+0x49/0xf0 [ 397.732284][ T9871] nfs_netns_identifier_store+0xe3/0x150 [ 397.732321][ T9871] ? __pfx_nfs_netns_identifier_store+0x10/0x10 [ 397.732354][ T9871] kobj_attr_store+0x55/0x80 [ 397.732381][ T9871] ? __pfx_kobj_attr_store+0x10/0x10 [ 397.732409][ T9871] sysfs_kf_write+0xf2/0x150 [ 397.732447][ T9871] kernfs_fop_write_iter+0x351/0x510 [ 397.732477][ T9871] ? __pfx_sysfs_kf_write+0x10/0x10 [ 397.732518][ T9871] iter_file_splice_write+0x91c/0x1150 [ 397.732583][ T9871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 397.732631][ T9871] ? __pfx_copy_splice_read+0x10/0x10 [ 397.732692][ T9871] ? __pfx_iter_file_splice_write+0x10/0x10 [ 397.732735][ T9871] direct_splice_actor+0x18f/0x6c0 [ 397.732781][ T9871] splice_direct_to_actor+0x342/0xa30 [ 397.732824][ T9871] ? __pfx_direct_splice_actor+0x10/0x10 [ 397.732871][ T9871] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 397.732916][ T9871] ? get_pid_task+0xfc/0x250 [ 397.732977][ T9871] do_splice_direct+0x174/0x240 [ 397.733014][ T9871] ? __pfx_do_splice_direct+0x10/0x10 [ 397.733052][ T9871] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 397.733095][ T9871] ? rw_verify_area+0xcf/0x680 [ 397.733135][ T9871] do_sendfile+0xb06/0xe50 [ 397.733179][ T9871] ? __pfx_do_sendfile+0x10/0x10 [ 397.733218][ T9871] ? __fget_files+0x20e/0x3c0 [ 397.733267][ T9871] __x64_sys_sendfile64+0x1d8/0x220 [ 397.733294][ T9871] ? ksys_write+0x1ac/0x250 [ 397.733332][ T9871] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 397.733372][ T9871] do_syscall_64+0xcd/0x490 [ 397.733400][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.733429][ T9871] RIP: 0033:0x7f619598e929 [ 397.733452][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.733479][ T9871] RSP: 002b:00007f6196864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 397.733506][ T9871] RAX: ffffffffffffffda RBX: 00007f6195bb5fa0 RCX: 00007f619598e929 [ 397.733524][ T9871] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 397.733540][ T9871] RBP: 00007f6196864090 R08: 0000000000000000 R09: 0000000000000000 [ 397.733556][ T9871] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000001 [ 397.733572][ T9871] R13: 0000000000000000 R14: 00007f6195bb5fa0 R15: 00007ffc709eb5f8 [ 397.733627][ T9871] [ 398.276603][ T9864] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input259 [ 398.339376][ T9874] usb usb15: usbfs: process 9874 (syz.2.810) did not claim interface 0 before use [ 398.581915][ T9880] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input260 [ 398.765254][ T9881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input261 [ 400.487297][ T9919] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input262 [ 401.029874][ T9920] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input263 [ 402.751975][ T9949] Invalid ELF header magic: != ELF [ 403.004698][ T9945] busy [ 403.338110][ T9952] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input264 [ 404.470788][ T9953] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input265 [ 404.558510][ T9957] FAULT_INJECTION: forcing a failure. [ 404.558510][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 404.571572][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.1.827 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 404.571606][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.571620][ T9957] Call Trace: [ 404.571628][ T9957] [ 404.571637][ T9957] dump_stack_lvl+0x16c/0x1f0 [ 404.571681][ T9957] should_fail_ex+0x512/0x640 [ 404.571717][ T9957] ? __kmalloc_noprof+0xbf/0x510 [ 404.571756][ T9957] ? lsm_blob_alloc+0x68/0x90 [ 404.571792][ T9957] should_failslab+0xc2/0x120 [ 404.571815][ T9957] __kmalloc_noprof+0xd2/0x510 [ 404.571849][ T9957] ? find_held_lock+0x2b/0x80 [ 404.571879][ T9957] lsm_blob_alloc+0x68/0x90 [ 404.571917][ T9957] security_prepare_creds+0x30/0x270 [ 404.571954][ T9957] prepare_kernel_cred+0x4a8/0x750 [ 404.571992][ T9957] _request_firmware+0x3ae/0x1470 [ 404.572030][ T9957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 404.572069][ T9957] ? __rtnl_unlock+0x68/0xf0 [ 404.572096][ T9957] ? netdev_run_todo+0x864/0x1320 [ 404.572122][ T9957] ? __pfx__request_firmware+0x10/0x10 [ 404.572154][ T9957] ? __pfx_netdev_run_todo+0x10/0x10 [ 404.572177][ T9957] ? __pfx___mutex_lock+0x10/0x10 [ 404.572208][ T9957] request_firmware+0x35/0x50 [ 404.572241][ T9957] reg_reload_regdb+0x89/0x460 [ 404.572272][ T9957] ? __pfx_reg_reload_regdb+0x10/0x10 [ 404.572303][ T9957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 404.572342][ T9957] ? nl80211_pre_doit+0x1b0/0xb10 [ 404.572391][ T9957] genl_family_rcv_msg_doit+0x206/0x2f0 [ 404.572428][ T9957] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 404.572460][ T9957] ? rcu_is_watching+0x12/0xc0 [ 404.572494][ T9957] ? bpf_lsm_capable+0x9/0x10 [ 404.572523][ T9957] ? security_capable+0x7e/0x260 [ 404.572552][ T9957] genl_rcv_msg+0x55c/0x800 [ 404.572593][ T9957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.572626][ T9957] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 404.572664][ T9957] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 404.572693][ T9957] ? __pfx_nl80211_post_doit+0x10/0x10 [ 404.572744][ T9957] netlink_rcv_skb+0x155/0x420 [ 404.572772][ T9957] ? __pfx_genl_rcv_msg+0x10/0x10 [ 404.572806][ T9957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.572847][ T9957] ? netlink_deliver_tap+0x1ae/0xd30 [ 404.572890][ T9957] genl_rcv+0x28/0x40 [ 404.572917][ T9957] netlink_unicast+0x53d/0x7f0 [ 404.572947][ T9957] ? __pfx_netlink_unicast+0x10/0x10 [ 404.572983][ T9957] netlink_sendmsg+0x8d1/0xdd0 [ 404.573015][ T9957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.573053][ T9957] ____sys_sendmsg+0xa95/0xc70 [ 404.573083][ T9957] ? copy_msghdr_from_user+0x10a/0x160 [ 404.573122][ T9957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.573158][ T9957] ? __pfx_futex_wake_mark+0x10/0x10 [ 404.573197][ T9957] ___sys_sendmsg+0x134/0x1d0 [ 404.573233][ T9957] ? find_held_lock+0x2b/0x80 [ 404.573256][ T9957] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.573293][ T9957] ? __lock_acquire+0x622/0x1c90 [ 404.573359][ T9957] __sys_sendmsg+0x16d/0x220 [ 404.573381][ T9957] ? __pfx___sys_sendmsg+0x10/0x10 [ 404.573402][ T9957] ? __x64_sys_futex+0x1e0/0x4c0 [ 404.573448][ T9957] do_syscall_64+0xcd/0x490 [ 404.573471][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.573495][ T9957] RIP: 0033:0x7f943118e929 [ 404.573514][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.573537][ T9957] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.573564][ T9957] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 404.573579][ T9957] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 404.573593][ T9957] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 404.573607][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.573621][ T9957] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 404.573651][ T9957] [ 404.948096][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.942050][ T9969] busy [ 406.297528][ T9967] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input266 [ 406.532785][ T9976] usb usb36: usbfs: process 9976 (syz.2.832) did not claim interface 0 before use [ 406.874753][ T9983] busy [ 406.953993][ T9972] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input267 [ 407.697957][ T9989] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input268 [ 408.030657][ T9993] Invalid ELF header magic: != ELF [ 408.152633][ T9990] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input269 [ 408.169706][ T9995] FAULT_INJECTION: forcing a failure. [ 408.169706][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 408.186146][ T9995] CPU: 1 UID: 0 PID: 9995 Comm: syz.1.836 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 408.186185][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.186201][ T9995] Call Trace: [ 408.186211][ T9995] [ 408.186221][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 408.186270][ T9995] should_fail_ex+0x512/0x640 [ 408.186311][ T9995] ? __kvmalloc_node_noprof+0x124/0x620 [ 408.186355][ T9995] should_failslab+0xc2/0x120 [ 408.186382][ T9995] __kvmalloc_node_noprof+0x137/0x620 [ 408.186424][ T9995] ? seq_read_iter+0x826/0x12c0 [ 408.186486][ T9995] ? seq_read_iter+0x826/0x12c0 [ 408.186535][ T9995] seq_read_iter+0x826/0x12c0 [ 408.186589][ T9995] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 408.186652][ T9995] kernfs_fop_read_iter+0x40f/0x5a0 [ 408.186693][ T9995] copy_splice_read+0x615/0xba0 [ 408.186741][ T9995] ? __pfx_copy_splice_read+0x10/0x10 [ 408.186785][ T9995] ? look_up_lock_class+0x6b/0x150 [ 408.186838][ T9995] ? lockdep_init_map_type+0x5c/0x280 [ 408.186882][ T9995] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 408.186928][ T9995] ? __pfx_copy_splice_read+0x10/0x10 [ 408.186965][ T9995] do_splice_read+0x285/0x370 [ 408.187052][ T9995] splice_direct_to_actor+0x2a1/0xa30 [ 408.187097][ T9995] ? __pfx_direct_splice_actor+0x10/0x10 [ 408.187148][ T9995] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 408.187190][ T9995] ? get_pid_task+0xfc/0x250 [ 408.187245][ T9995] do_splice_direct+0x174/0x240 [ 408.187288][ T9995] ? __pfx_do_splice_direct+0x10/0x10 [ 408.187332][ T9995] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 408.187381][ T9995] ? rw_verify_area+0xcf/0x680 [ 408.187427][ T9995] do_sendfile+0xb06/0xe50 [ 408.187478][ T9995] ? __pfx_do_sendfile+0x10/0x10 [ 408.187521][ T9995] ? __fget_files+0x20e/0x3c0 [ 408.187576][ T9995] __x64_sys_sendfile64+0x1d8/0x220 [ 408.187606][ T9995] ? ksys_write+0x1ac/0x250 [ 408.187651][ T9995] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 408.187696][ T9995] do_syscall_64+0xcd/0x490 [ 408.187731][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.187763][ T9995] RIP: 0033:0x7f943118e929 [ 408.187788][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.187819][ T9995] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 408.187846][ T9995] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 408.187866][ T9995] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 408.187883][ T9995] RBP: 00007f9431f31090 R08: 0000000000000000 R09: 0000000000000000 [ 408.187900][ T9995] R10: 000000004f64a1d2 R11: 0000000000000246 R12: 0000000000000001 [ 408.187917][ T9995] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 408.187958][ T9995] [ 409.642904][T10008] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input270 [ 410.430587][T10009] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input271 [ 411.937537][T10033] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input272 [ 412.352902][T10035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input273 [ 412.621083][T10044] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input274 [ 413.311573][T10045] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input275 [ 413.412079][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 413.544837][T10049] FAULT_INJECTION: forcing a failure. [ 413.544837][T10049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.586788][T10049] CPU: 1 UID: 0 PID: 10049 Comm: syz.2.846 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 413.586841][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.586856][T10049] Call Trace: [ 413.586864][T10049] [ 413.586873][T10049] dump_stack_lvl+0x16c/0x1f0 [ 413.586917][T10049] should_fail_ex+0x512/0x640 [ 413.586956][T10049] _copy_from_user+0x2e/0xd0 [ 413.586995][T10049] br_dev_read_uargs+0xcf/0x340 [ 413.587022][T10049] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 413.587045][T10049] ? trace_contention_end+0xdd/0x130 [ 413.587078][T10049] ? __mutex_lock+0x1ca/0xb90 [ 413.587104][T10049] old_deviceless+0xbd/0x700 [ 413.587126][T10049] ? __pfx___mutex_lock+0x10/0x10 [ 413.587148][T10049] ? __pfx_old_deviceless+0x10/0x10 [ 413.587176][T10049] ? __pfx___might_resched+0x10/0x10 [ 413.587201][T10049] ? rcu_is_watching+0x12/0xc0 [ 413.587231][T10049] br_ioctl_stub+0x3e8/0x4c0 [ 413.587253][T10049] ? br_ioctl_call+0x34/0xa0 [ 413.587282][T10049] ? __pfx_br_ioctl_stub+0x10/0x10 [ 413.587305][T10049] ? __pfx___mutex_lock+0x10/0x10 [ 413.587343][T10049] ? __pfx_br_ioctl_stub+0x10/0x10 [ 413.587366][T10049] br_ioctl_call+0x50/0xa0 [ 413.587397][T10049] sock_ioctl+0x365/0x6b0 [ 413.587427][T10049] ? __pfx_sock_ioctl+0x10/0x10 [ 413.587454][T10049] ? hook_file_ioctl_common+0x145/0x410 [ 413.587488][T10049] ? __fget_files+0x20e/0x3c0 [ 413.587526][T10049] ? __pfx_sock_ioctl+0x10/0x10 [ 413.587559][T10049] __x64_sys_ioctl+0x18e/0x210 [ 413.587591][T10049] do_syscall_64+0xcd/0x490 [ 413.587616][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.587640][T10049] RIP: 0033:0x7f619598e929 [ 413.587658][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.587682][T10049] RSP: 002b:00007f6196864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.587717][T10049] RAX: ffffffffffffffda RBX: 00007f6195bb5fa0 RCX: 00007f619598e929 [ 413.587736][T10049] RDX: 0000000000000004 RSI: 0000000000008941 RDI: 0000000000000006 [ 413.587754][T10049] RBP: 00007f6196864090 R08: 0000000000000000 R09: 0000000000000000 [ 413.587772][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.587789][T10049] R13: 0000000000000000 R14: 00007f6195bb5fa0 R15: 00007ffc709eb5f8 [ 413.587830][T10049] [ 414.440554][T10060] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input276 [ 414.952594][T10061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input277 [ 416.351934][T10095] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input278 [ 416.753989][T10099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input279 [ 417.528954][T10105] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input280 [ 418.038840][T10111] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input281 [ 418.695707][T10121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.862'. [ 418.775474][T10121] netlink: 651 bytes leftover after parsing attributes in process `syz.3.862'. [ 418.940322][T10125] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input282 [ 419.570650][T10127] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input283 [ 420.441094][ T30] audit: type=1800 audit(6044592111.938:3): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.868" name="dummy_udc" dev="gadgetfs" ino=5764 res=0 errno=0 [ 420.461346][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.536802][T10153] random: crng reseeded on system resumption [ 420.561149][T10153] FAULT_INJECTION: forcing a failure. [ 420.561149][T10153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.601679][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.2.869 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 420.601720][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.601737][T10153] Call Trace: [ 420.601747][T10153] [ 420.601758][T10153] dump_stack_lvl+0x16c/0x1f0 [ 420.601811][T10153] should_fail_ex+0x512/0x640 [ 420.601863][T10153] should_fail_alloc_page+0xe7/0x130 [ 420.601895][T10153] prepare_alloc_pages+0x3c2/0x610 [ 420.601950][T10153] ? __kernel_text_address+0xd/0x40 [ 420.602003][T10153] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 420.602066][T10153] ? stack_trace_save+0x8e/0xc0 [ 420.602100][T10153] ? __pfx_stack_trace_save+0x10/0x10 [ 420.602135][T10153] ? stack_depot_save_flags+0x28/0xa40 [ 420.602184][T10153] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.602242][T10153] ? kasan_save_stack+0x42/0x60 [ 420.602283][T10153] ? kasan_save_stack+0x33/0x60 [ 420.602339][T10153] ? misc_open+0x35d/0x420 [ 420.602376][T10153] ? chrdev_open+0x231/0x6a0 [ 420.602421][T10153] ? do_dentry_open+0x744/0x1c10 [ 420.602465][T10153] ? vfs_open+0x82/0x3f0 [ 420.602496][T10153] ? path_openat+0x1de4/0x2cb0 [ 420.602548][T10153] ? do_filp_open+0x20b/0x470 [ 420.602589][T10153] ? do_sys_openat2+0x11b/0x1d0 [ 420.602639][T10153] ? __x64_sys_openat+0x174/0x210 [ 420.602673][T10153] ? do_syscall_64+0xcd/0x490 [ 420.602719][T10153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.602754][T10153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.602807][T10153] ? policy_nodemask+0xea/0x4e0 [ 420.602841][T10153] alloc_pages_mpol+0x1fb/0x550 [ 420.602886][T10153] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 420.602930][T10153] alloc_pages_noprof+0x131/0x390 [ 420.602961][T10153] get_zeroed_page_noprof+0x18/0xb0 [ 420.602996][T10153] get_image_page+0x18/0x190 [ 420.603027][T10153] chain_alloc+0x8c/0xd0 [ 420.603059][T10153] memory_bm_create+0x30f/0x810 [ 420.603106][T10153] create_basic_memory_bitmaps+0xbd/0x320 [ 420.603146][T10153] snapshot_open+0x235/0x2b0 [ 420.603181][T10153] ? __pfx_snapshot_open+0x10/0x10 [ 420.603219][T10153] misc_open+0x35d/0x420 [ 420.603257][T10153] ? __pfx_misc_open+0x10/0x10 [ 420.603301][T10153] chrdev_open+0x231/0x6a0 [ 420.603347][T10153] ? __pfx_apparmor_file_open+0x10/0x10 [ 420.603387][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 420.603440][T10153] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 420.603489][T10153] do_dentry_open+0x744/0x1c10 [ 420.603534][T10153] ? __pfx_chrdev_open+0x10/0x10 [ 420.603591][T10153] vfs_open+0x82/0x3f0 [ 420.603628][T10153] path_openat+0x1de4/0x2cb0 [ 420.603687][T10153] ? __pfx_path_openat+0x10/0x10 [ 420.603734][T10153] ? __lock_acquire+0xb8a/0x1c90 [ 420.603777][T10153] do_filp_open+0x20b/0x470 [ 420.603822][T10153] ? __pfx_do_filp_open+0x10/0x10 [ 420.603898][T10153] ? alloc_fd+0x471/0x7d0 [ 420.603954][T10153] do_sys_openat2+0x11b/0x1d0 [ 420.603989][T10153] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.604028][T10153] ? __fget_files+0x20e/0x3c0 [ 420.604079][T10153] __x64_sys_openat+0x174/0x210 [ 420.604114][T10153] ? __pfx___x64_sys_openat+0x10/0x10 [ 420.604146][T10153] ? ksys_write+0x1ac/0x250 [ 420.604205][T10153] do_syscall_64+0xcd/0x490 [ 420.604237][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.604268][T10153] RIP: 0033:0x7f619598e929 [ 420.604292][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.604327][T10153] RSP: 002b:00007f6196822038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 420.604354][T10153] RAX: ffffffffffffffda RBX: 00007f6195bb6160 RCX: 00007f619598e929 [ 420.604373][T10153] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 420.604392][T10153] RBP: 00007f6196822090 R08: 0000000000000000 R09: 0000000000000000 [ 420.604409][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.604426][T10153] R13: 0000000000000000 R14: 00007f6195bb6160 R15: 00007ffc709eb5f8 [ 420.604466][T10153] [ 420.995315][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.566057][T10165] busy [ 421.717955][ T7491] Bluetooth: hci1: command 0x0406 tx timeout [ 421.949132][T10167] netlink: 342 bytes leftover after parsing attributes in process `syz.2.873'. [ 422.402091][T10177] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input284 [ 422.662328][T10176] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input285 [ 422.853852][T10184] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input286 [ 423.312026][T10185] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input287 [ 423.766643][T10191] ptrace attach of "./syz-executor exec"[5847] was attempted by ""[10191] [ 424.725061][T10210] FAULT_INJECTION: forcing a failure. [ 424.725061][T10210] name failslab, interval 1, probability 0, space 0, times 0 [ 424.739869][T10210] CPU: 0 UID: 0 PID: 10210 Comm: syz.3.882 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 424.739910][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.739942][T10210] Call Trace: [ 424.739952][T10210] [ 424.739963][T10210] dump_stack_lvl+0x16c/0x1f0 [ 424.740037][T10210] should_fail_ex+0x512/0x640 [ 424.740082][T10210] ? fs_reclaim_acquire+0xae/0x150 [ 424.740124][T10210] should_failslab+0xc2/0x120 [ 424.740154][T10210] __kmalloc_cache_noprof+0x6a/0x3e0 [ 424.740198][T10210] ? nbd_add_socket+0x2f9/0xbe0 [ 424.740255][T10210] nbd_add_socket+0x2f9/0xbe0 [ 424.740310][T10210] ? __pfx_nbd_add_socket+0x10/0x10 [ 424.740361][T10210] ? __nla_parse+0x40/0x60 [ 424.740414][T10210] nbd_genl_connect+0x1193/0x1c20 [ 424.740451][T10210] ? __pfx_nbd_genl_connect+0x10/0x10 [ 424.740490][T10210] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 424.740536][T10210] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 424.740608][T10210] genl_family_rcv_msg_doit+0x206/0x2f0 [ 424.740654][T10210] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 424.740697][T10210] ? genl_get_cmd+0x194/0x580 [ 424.740758][T10210] ? __radix_tree_lookup+0x21f/0x2c0 [ 424.740812][T10210] genl_rcv_msg+0x55c/0x800 [ 424.740860][T10210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.740902][T10210] ? __pfx_nbd_genl_connect+0x10/0x10 [ 424.740948][T10210] netlink_rcv_skb+0x155/0x420 [ 424.740987][T10210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.741033][T10210] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.741091][T10210] ? netlink_deliver_tap+0x1ae/0xd30 [ 424.741133][T10210] genl_rcv+0x28/0x40 [ 424.741165][T10210] netlink_unicast+0x53d/0x7f0 [ 424.741205][T10210] ? __pfx_netlink_unicast+0x10/0x10 [ 424.741256][T10210] netlink_sendmsg+0x8d1/0xdd0 [ 424.741299][T10210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.741363][T10210] ____sys_sendmsg+0xa95/0xc70 [ 424.741402][T10210] ? copy_msghdr_from_user+0x10a/0x160 [ 424.741447][T10210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.741505][T10210] ___sys_sendmsg+0x134/0x1d0 [ 424.741554][T10210] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.741640][T10210] ? __pfx_vfs_write+0x10/0x10 [ 424.741684][T10210] ? do_sys_openat2+0x157/0x1d0 [ 424.741755][T10210] __sys_sendmsg+0x16d/0x220 [ 424.741802][T10210] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.741860][T10210] do_syscall_64+0xcd/0x490 [ 424.741892][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.741923][T10210] RIP: 0033:0x7f267918e929 [ 424.741948][T10210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.741978][T10210] RSP: 002b:00007f2679f89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.742006][T10210] RAX: ffffffffffffffda RBX: 00007f26793b6080 RCX: 00007f267918e929 [ 424.742028][T10210] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000001 [ 424.742045][T10210] RBP: 00007f2679f89090 R08: 0000000000000000 R09: 0000000000000000 [ 424.742065][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.742084][T10210] R13: 0000000000000000 R14: 00007f26793b6080 R15: 00007ffcb9711e08 [ 424.742126][T10210] [ 425.055743][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.371915][T10215] block nbd6: Unsupported socket: shutdown callout must be supported. [ 426.089362][T10228] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input288 [ 426.644483][T10242] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input289 [ 427.056397][T10249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input290 [ 427.504961][T10250] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input291 [ 427.994004][T10259] FAULT_INJECTION: forcing a failure. [ 427.994004][T10259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.061123][T10259] CPU: 1 UID: 0 PID: 10259 Comm: syz.0.893 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 428.061164][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.061181][T10259] Call Trace: [ 428.061191][T10259] [ 428.061201][T10259] dump_stack_lvl+0x16c/0x1f0 [ 428.061251][T10259] should_fail_ex+0x512/0x640 [ 428.061319][T10259] should_fail_alloc_page+0xe7/0x130 [ 428.061352][T10259] prepare_alloc_pages+0x3c2/0x610 [ 428.061395][T10259] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 428.061442][T10259] ? copy_splice_read+0x1a8/0xba0 [ 428.061479][T10259] ? stack_trace_save+0x8e/0xc0 [ 428.061513][T10259] ? __pfx_stack_trace_save+0x10/0x10 [ 428.061545][T10259] ? stack_depot_save_flags+0x28/0xa40 [ 428.061602][T10259] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.061648][T10259] ? kasan_save_stack+0x33/0x60 [ 428.061691][T10259] ? __kasan_kmalloc+0xaa/0xb0 [ 428.061740][T10259] ? copy_splice_read+0x1a8/0xba0 [ 428.061776][T10259] ? do_splice_read+0x285/0x370 [ 428.061812][T10259] ? splice_direct_to_actor+0x2a1/0xa30 [ 428.061850][T10259] ? do_splice_direct+0x174/0x240 [ 428.061886][T10259] ? do_sendfile+0xb06/0xe50 [ 428.061937][T10259] ? __x64_sys_sendfile64+0x1d8/0x220 [ 428.061964][T10259] ? do_syscall_64+0xcd/0x490 [ 428.062016][T10259] alloc_pages_bulk_noprof+0x71c/0x1410 [ 428.062074][T10259] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 428.062133][T10259] ? trace_kmalloc+0x2b/0xd0 [ 428.062160][T10259] ? __kmalloc_noprof+0x242/0x510 [ 428.062210][T10259] copy_splice_read+0x1e1/0xba0 [ 428.062255][T10259] ? __pfx_copy_splice_read+0x10/0x10 [ 428.062306][T10259] ? find_held_lock+0x2b/0x80 [ 428.062340][T10259] ? __pfx_copy_splice_read+0x10/0x10 [ 428.062376][T10259] do_splice_read+0x285/0x370 [ 428.062417][T10259] splice_direct_to_actor+0x2a1/0xa30 [ 428.062457][T10259] ? __pfx_direct_splice_actor+0x10/0x10 [ 428.062503][T10259] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 428.062539][T10259] ? get_pid_task+0xfc/0x250 [ 428.062585][T10259] do_splice_direct+0x174/0x240 [ 428.062622][T10259] ? __pfx_do_splice_direct+0x10/0x10 [ 428.062660][T10259] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 428.062709][T10259] ? rw_verify_area+0xcf/0x680 [ 428.062749][T10259] do_sendfile+0xb06/0xe50 [ 428.062805][T10259] ? __pfx_do_sendfile+0x10/0x10 [ 428.062862][T10259] ? __fget_files+0x20e/0x3c0 [ 428.062911][T10259] __x64_sys_sendfile64+0x1d8/0x220 [ 428.062937][T10259] ? ksys_write+0x1ac/0x250 [ 428.062976][T10259] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 428.063016][T10259] do_syscall_64+0xcd/0x490 [ 428.063046][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.063076][T10259] RIP: 0033:0x7f1044b8e929 [ 428.063117][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.063148][T10259] RSP: 002b:00007f10459ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.063177][T10259] RAX: ffffffffffffffda RBX: 00007f1044db5fa0 RCX: 00007f1044b8e929 [ 428.063196][T10259] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 428.063232][T10259] RBP: 00007f10459ee090 R08: 0000000000000000 R09: 0000000000000000 [ 428.063251][T10259] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 428.063270][T10259] R13: 0000000000000000 R14: 00007f1044db5fa0 R15: 00007ffde1a1c748 [ 428.063309][T10259] [ 429.701851][T10269] Invalid ELF header magic: != ELF [ 431.042268][T10286] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input292 [ 431.080247][T10278] FAULT_INJECTION: forcing a failure. [ 431.080247][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.101724][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.2.896 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 431.101762][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 431.101778][T10278] Call Trace: [ 431.101787][T10278] [ 431.101797][T10278] dump_stack_lvl+0x16c/0x1f0 [ 431.101851][T10278] should_fail_ex+0x512/0x640 [ 431.101899][T10278] _copy_from_user+0x2e/0xd0 [ 431.101945][T10278] old_deviceless+0x193/0x700 [ 431.101974][T10278] ? __pfx___mutex_lock+0x10/0x10 [ 431.102001][T10278] ? __pfx_old_deviceless+0x10/0x10 [ 431.102038][T10278] ? __pfx___might_resched+0x10/0x10 [ 431.102082][T10278] br_ioctl_stub+0x3e8/0x4c0 [ 431.102108][T10278] ? br_ioctl_call+0x34/0xa0 [ 431.102145][T10278] ? __pfx_br_ioctl_stub+0x10/0x10 [ 431.102182][T10278] ? __pfx___mutex_lock+0x10/0x10 [ 431.102231][T10278] ? __pfx_br_ioctl_stub+0x10/0x10 [ 431.102261][T10278] br_ioctl_call+0x50/0xa0 [ 431.102297][T10278] sock_ioctl+0x365/0x6b0 [ 431.102333][T10278] ? __pfx_sock_ioctl+0x10/0x10 [ 431.102367][T10278] ? hook_file_ioctl_common+0x145/0x410 [ 431.102417][T10278] ? __pfx_sock_ioctl+0x10/0x10 [ 431.102456][T10278] __x64_sys_ioctl+0x18e/0x210 [ 431.102493][T10278] do_syscall_64+0xcd/0x490 [ 431.102523][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.102551][T10278] RIP: 0033:0x7f619598e929 [ 431.102574][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.102601][T10278] RSP: 002b:00007f6196864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.102629][T10278] RAX: ffffffffffffffda RBX: 00007f6195bb5fa0 RCX: 00007f619598e929 [ 431.102647][T10278] RDX: 0000000000000004 RSI: 0000000000008941 RDI: 0000000000000000 [ 431.102663][T10278] RBP: 00007f6196864090 R08: 0000000000000000 R09: 0000000000000000 [ 431.102679][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.102695][T10278] R13: 0000000000000000 R14: 00007f6195bb5fa0 R15: 00007ffc709eb5f8 [ 431.102733][T10278] [ 431.986558][T10302] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input293 [ 432.435271][T10309] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input294 [ 432.925425][T10306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.901'. [ 432.934639][T10306] nbd: must specify at least one socket [ 433.307458][T10312] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input295 [ 434.162815][T10318] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input296 [ 434.838873][T10319] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input297 [ 435.939424][T10357] FAULT_INJECTION: forcing a failure. [ 435.939424][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 436.027581][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.1.913 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 436.027625][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.027643][T10357] Call Trace: [ 436.027653][T10357] [ 436.027664][T10357] dump_stack_lvl+0x16c/0x1f0 [ 436.027733][T10357] should_fail_ex+0x512/0x640 [ 436.027787][T10357] should_failslab+0xc2/0x120 [ 436.027818][T10357] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 436.027866][T10357] ? skb_clone+0x190/0x3f0 [ 436.027900][T10357] skb_clone+0x190/0x3f0 [ 436.027932][T10357] netlink_deliver_tap+0xabd/0xd30 [ 436.027975][T10357] netlink_unicast+0x5df/0x7f0 [ 436.028016][T10357] ? __pfx_netlink_unicast+0x10/0x10 [ 436.028063][T10357] netlink_sendmsg+0x8d1/0xdd0 [ 436.028106][T10357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.028159][T10357] ____sys_sendmsg+0xa95/0xc70 [ 436.028199][T10357] ? copy_msghdr_from_user+0x10a/0x160 [ 436.028249][T10357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.028296][T10357] ? kfree+0x24f/0x4d0 [ 436.028331][T10357] ? __pfx__kstrtoull+0x10/0x10 [ 436.028379][T10357] ___sys_sendmsg+0x134/0x1d0 [ 436.028435][T10357] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.028528][T10357] ? __pfx___might_resched+0x10/0x10 [ 436.028571][T10357] __sys_sendmmsg+0x200/0x420 [ 436.028608][T10357] ? __pfx___sys_sendmmsg+0x10/0x10 [ 436.028654][T10357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 436.028704][T10357] ? fput+0x70/0xf0 [ 436.028771][T10357] ? ksys_write+0x1ac/0x250 [ 436.028807][T10357] ? __pfx_ksys_write+0x10/0x10 [ 436.028872][T10357] __x64_sys_sendmmsg+0x9c/0x100 [ 436.028899][T10357] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.028942][T10357] do_syscall_64+0xcd/0x490 [ 436.028971][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.029001][T10357] RIP: 0033:0x7f943118e929 [ 436.029025][T10357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.029053][T10357] RSP: 002b:00007f9431f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.029080][T10357] RAX: ffffffffffffffda RBX: 00007f94313b6080 RCX: 00007f943118e929 [ 436.029100][T10357] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004 [ 436.029117][T10357] RBP: 00007f9431f10090 R08: 0000000000000000 R09: 0000000000000000 [ 436.029135][T10357] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.029152][T10357] R13: 0000000000000000 R14: 00007f94313b6080 R15: 00007ffebdfaba38 [ 436.029190][T10357] [ 437.319512][T10378] nbd6: detected capacity change from 0 to 1125899906842624 [ 437.383724][ T5944] block nbd6: Send control failed (result -22) [ 437.441456][ T5944] block nbd6: Request send failed, requeueing [ 437.506893][ T51] block nbd6: Receive control failed (result -32) [ 437.508915][ T55] block nbd6: Dead connection, failed to find a fallback [ 437.522985][ T55] block nbd6: shutting down sockets [ 437.528950][ T55] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.538980][ T55] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.547339][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.557715][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.565783][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.575045][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.583317][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.592534][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.600835][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.610087][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.620276][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.644981][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.656569][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.667901][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.676228][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.686093][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 437.697909][T10381] FAULT_INJECTION: forcing a failure. [ 437.697909][T10381] name failslab, interval 1, probability 0, space 0, times 0 [ 437.711558][T10381] CPU: 0 UID: 0 PID: 10381 Comm: syz.3.918 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 437.711600][T10381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.711619][T10381] Call Trace: [ 437.711630][T10381] [ 437.711652][T10381] dump_stack_lvl+0x16c/0x1f0 [ 437.711709][T10381] should_fail_ex+0x512/0x640 [ 437.711755][T10381] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 437.711809][T10381] should_failslab+0xc2/0x120 [ 437.711839][T10381] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 437.711888][T10381] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 437.711941][T10381] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 437.712006][T10381] idr_get_free+0x528/0xa30 [ 437.712084][T10381] idr_alloc_u32+0x190/0x2f0 [ 437.712135][T10381] ? __pfx_idr_alloc_u32+0x10/0x10 [ 437.712189][T10381] ? __pfx___mutex_lock+0x10/0x10 [ 437.712227][T10381] idr_alloc+0xc0/0x130 [ 437.712272][T10381] ? __pfx_idr_alloc+0x10/0x10 [ 437.712320][T10381] ? __radix_tree_lookup+0x21f/0x2c0 [ 437.712375][T10381] ppp_dev_configure+0x905/0xc80 [ 437.712425][T10381] ppp_ioctl+0x17e0/0x2660 [ 437.712468][T10381] ? find_held_lock+0x2b/0x80 [ 437.712499][T10381] ? __pfx_ppp_ioctl+0x10/0x10 [ 437.712546][T10381] ? __fget_files+0x20e/0x3c0 [ 437.712607][T10381] ? __pfx_ppp_ioctl+0x10/0x10 [ 437.712654][T10381] __x64_sys_ioctl+0x18e/0x210 [ 437.712693][T10381] do_syscall_64+0xcd/0x490 [ 437.712725][T10381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.712755][T10381] RIP: 0033:0x7f267918e929 [ 437.712779][T10381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.712808][T10381] RSP: 002b:00007f2679faa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.712835][T10381] RAX: ffffffffffffffda RBX: 00007f26793b5fa0 RCX: 00007f267918e929 [ 437.712854][T10381] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 437.712871][T10381] RBP: 00007f2679210b39 R08: 0000000000000000 R09: 0000000000000000 [ 437.712888][T10381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.712904][T10381] R13: 0000000000000000 R14: 00007f26793b5fa0 R15: 00007ffcb9711e08 [ 437.712943][T10381] [ 437.714848][ T5944] ldm_validate_partition_table(): Disk read failed. [ 437.992931][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.002900][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 438.013190][ T5944] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.027832][ T5944] Buffer I/O error on dev nbd6, logical block 0, async page read [ 438.042338][ T5944] Dev nbd6: unable to read RDB block 0 [ 438.099305][ T5944] nbd6: unable to read partition table [ 438.144407][ T5944] ldm_validate_partition_table(): Disk read failed. [ 438.167140][ T5944] Dev nbd6: unable to read RDB block 0 [ 438.182388][ T5944] nbd6: unable to read partition table [ 439.302248][T10417] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input298 [ 439.576309][T10424] FAULT_INJECTION: forcing a failure. [ 439.576309][T10424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.610932][T10424] CPU: 0 UID: 0 PID: 10424 Comm: syz.0.926 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 439.610985][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.611002][T10424] Call Trace: [ 439.611011][T10424] [ 439.611021][T10424] dump_stack_lvl+0x16c/0x1f0 [ 439.611072][T10424] should_fail_ex+0x512/0x640 [ 439.611142][T10424] _copy_to_user+0x32/0xd0 [ 439.611173][T10424] simple_read_from_buffer+0xcb/0x170 [ 439.611215][T10424] proc_fail_nth_read+0x197/0x270 [ 439.611253][T10424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.611293][T10424] ? rw_verify_area+0xcf/0x680 [ 439.611331][T10424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 439.611368][T10424] vfs_read+0x1e4/0xc60 [ 439.611417][T10424] ? __pfx___mutex_lock+0x10/0x10 [ 439.611447][T10424] ? __pfx_vfs_read+0x10/0x10 [ 439.611501][T10424] ? __fget_files+0x20e/0x3c0 [ 439.611555][T10424] ksys_read+0x12a/0x250 [ 439.611598][T10424] ? __pfx_ksys_read+0x10/0x10 [ 439.611654][T10424] do_syscall_64+0xcd/0x490 [ 439.611694][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.611725][T10424] RIP: 0033:0x7f1044b8d33c [ 439.611750][T10424] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 439.611780][T10424] RSP: 002b:00007f10459ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.611807][T10424] RAX: ffffffffffffffda RBX: 00007f1044db5fa0 RCX: 00007f1044b8d33c [ 439.611826][T10424] RDX: 000000000000000f RSI: 00007f10459ee0a0 RDI: 0000000000000004 [ 439.611843][T10424] RBP: 00007f10459ee090 R08: 0000000000000000 R09: 0000000000000000 [ 439.611860][T10424] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000002 [ 439.611877][T10424] R13: 0000000000000000 R14: 00007f1044db5fa0 R15: 00007ffde1a1c748 [ 439.611928][T10424] [ 439.799078][ C0] vkms_vblank_simulate: vblank timer overrun [ 440.471703][T10422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input299 [ 441.430943][T10461] Invalid ELF header magic: != ELF [ 442.737540][T10484] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input300 [ 444.115945][T10485] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input301 [ 445.242164][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.250839][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.548995][T10534] random: crng reseeded on system resumption [ 446.575828][T10534] FAULT_INJECTION: forcing a failure. [ 446.575828][T10534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.575878][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.0.953 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 446.575915][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.575934][T10534] Call Trace: [ 446.575943][T10534] [ 446.575956][T10534] dump_stack_lvl+0x16c/0x1f0 [ 446.576008][T10534] should_fail_ex+0x512/0x640 [ 446.576058][T10534] should_fail_alloc_page+0xe7/0x130 [ 446.576089][T10534] prepare_alloc_pages+0x3c2/0x610 [ 446.576139][T10534] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 446.576198][T10534] ? stack_trace_save+0x8e/0xc0 [ 446.576233][T10534] ? __pfx_stack_trace_save+0x10/0x10 [ 446.576265][T10534] ? stack_depot_save_flags+0x28/0xa40 [ 446.576313][T10534] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.576365][T10534] ? kasan_save_stack+0x42/0x60 [ 446.576406][T10534] ? kasan_save_stack+0x33/0x60 [ 446.576455][T10534] ? do_dentry_open+0x744/0x1c10 [ 446.576496][T10534] ? vfs_open+0x82/0x3f0 [ 446.576522][T10534] ? path_openat+0x1de4/0x2cb0 [ 446.576562][T10534] ? do_filp_open+0x20b/0x470 [ 446.576600][T10534] ? do_sys_openat2+0x11b/0x1d0 [ 446.576631][T10534] ? __x64_sys_openat+0x174/0x210 [ 446.576662][T10534] ? do_syscall_64+0xcd/0x490 [ 446.576687][T10534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.576719][T10534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.576762][T10534] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.576809][T10534] ? policy_nodemask+0xea/0x4e0 [ 446.576841][T10534] alloc_pages_mpol+0x1fb/0x550 [ 446.576872][T10534] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.576913][T10534] alloc_pages_noprof+0x131/0x390 [ 446.576942][T10534] get_zeroed_page_noprof+0x18/0xb0 [ 446.576975][T10534] get_image_page+0x18/0x190 [ 446.577004][T10534] alloc_rtree_node+0x3c/0xb0 [ 446.577033][T10534] memory_bm_create+0x519/0x810 [ 446.577078][T10534] create_basic_memory_bitmaps+0x10b/0x320 [ 446.577121][T10534] snapshot_open+0x235/0x2b0 [ 446.577157][T10534] ? __pfx_snapshot_open+0x10/0x10 [ 446.577196][T10534] misc_open+0x35d/0x420 [ 446.577235][T10534] ? __pfx_misc_open+0x10/0x10 [ 446.577271][T10534] chrdev_open+0x231/0x6a0 [ 446.577316][T10534] ? __pfx_apparmor_file_open+0x10/0x10 [ 446.577354][T10534] ? __pfx_chrdev_open+0x10/0x10 [ 446.577402][T10534] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 446.577458][T10534] do_dentry_open+0x744/0x1c10 [ 446.577500][T10534] ? __pfx_chrdev_open+0x10/0x10 [ 446.577590][T10534] vfs_open+0x82/0x3f0 [ 446.577631][T10534] path_openat+0x1de4/0x2cb0 [ 446.577693][T10534] ? __pfx_path_openat+0x10/0x10 [ 446.577746][T10534] ? __lock_acquire+0xb8a/0x1c90 [ 446.577791][T10534] do_filp_open+0x20b/0x470 [ 446.577839][T10534] ? __pfx_do_filp_open+0x10/0x10 [ 446.577920][T10534] ? alloc_fd+0x471/0x7d0 [ 446.577976][T10534] do_sys_openat2+0x11b/0x1d0 [ 446.578012][T10534] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.578065][T10534] __x64_sys_openat+0x174/0x210 [ 446.578103][T10534] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.578165][T10534] do_syscall_64+0xcd/0x490 [ 446.578199][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.578232][T10534] RIP: 0033:0x7f1044b8e929 [ 446.578259][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.578291][T10534] RSP: 002b:00007f10459ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.578322][T10534] RAX: ffffffffffffffda RBX: 00007f1044db6160 RCX: 00007f1044b8e929 [ 446.578343][T10534] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 446.578363][T10534] RBP: 00007f1044c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 446.578382][T10534] R10: 000000000000fffe R11: 0000000000000246 R12: 0000000000000000 [ 446.578402][T10534] R13: 0000000000000000 R14: 00007f1044db6160 R15: 00007ffde1a1c748 [ 446.578441][T10534] [ 447.905014][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.065918][T10557] FAULT_INJECTION: forcing a failure. [ 449.065918][T10557] name failslab, interval 1, probability 0, space 0, times 0 [ 449.079414][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.1.957 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 449.079454][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.079472][T10557] Call Trace: [ 449.079482][T10557] [ 449.079494][T10557] dump_stack_lvl+0x16c/0x1f0 [ 449.079556][T10557] should_fail_ex+0x512/0x640 [ 449.079599][T10557] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 449.079647][T10557] should_failslab+0xc2/0x120 [ 449.079676][T10557] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.079725][T10557] ? __kernfs_new_node+0xd2/0x8e0 [ 449.079773][T10557] __kernfs_new_node+0xd2/0x8e0 [ 449.079821][T10557] ? __pfx___kernfs_new_node+0x10/0x10 [ 449.079900][T10557] ? find_held_lock+0x2b/0x80 [ 449.079934][T10557] ? kernfs_root+0xee/0x2a0 [ 449.079987][T10557] kernfs_new_node+0x13c/0x1e0 [ 449.080042][T10557] __kernfs_create_file+0x53/0x350 [ 449.080083][T10557] sysfs_add_file_mode_ns+0x207/0x3c0 [ 449.080135][T10557] internal_create_group+0x578/0xf30 [ 449.080191][T10557] ? __pfx_internal_create_group+0x10/0x10 [ 449.080245][T10557] ? kernfs_create_link+0x1bd/0x240 [ 449.080287][T10557] internal_create_groups+0x9d/0x150 [ 449.080338][T10557] device_add+0xf30/0x1a70 [ 449.080377][T10557] ? __pfx_device_add+0x10/0x10 [ 449.080415][T10557] ? lockdep_init_map_type+0x5c/0x280 [ 449.080460][T10557] ? __init_waitqueue_head+0xca/0x150 [ 449.080521][T10557] netdev_register_kobject+0x182/0x3a0 [ 449.080564][T10557] register_netdevice+0x13dc/0x2270 [ 449.080606][T10557] ? __pfx_register_netdevice+0x10/0x10 [ 449.080649][T10557] ? __pfx_loopback_net_init+0x10/0x10 [ 449.080690][T10557] register_netdev+0x34/0x50 [ 449.080721][T10557] loopback_net_init+0x7a/0x170 [ 449.080761][T10557] ? __pfx_loopback_net_init+0x10/0x10 [ 449.080797][T10557] ops_init+0x1df/0x5f0 [ 449.080845][T10557] setup_net+0x1ff/0x510 [ 449.080874][T10557] ? lockdep_init_map_type+0x5c/0x280 [ 449.080920][T10557] ? __pfx_setup_net+0x10/0x10 [ 449.080954][T10557] ? debug_mutex_init+0x37/0x70 [ 449.080988][T10557] copy_net_ns+0x2a6/0x5f0 [ 449.081027][T10557] create_new_namespaces+0x3ea/0xa90 [ 449.081072][T10557] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 449.081109][T10557] ksys_unshare+0x45b/0xa40 [ 449.081151][T10557] ? __pfx_ksys_unshare+0x10/0x10 [ 449.081191][T10557] ? xfd_validate_state+0x61/0x180 [ 449.081242][T10557] __x64_sys_unshare+0x31/0x40 [ 449.081282][T10557] do_syscall_64+0xcd/0x490 [ 449.081314][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.081343][T10557] RIP: 0033:0x7f943118e929 [ 449.081367][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.081397][T10557] RSP: 002b:00007f9431f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 449.081424][T10557] RAX: ffffffffffffffda RBX: 00007f94313b6080 RCX: 00007f943118e929 [ 449.081444][T10557] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 449.081462][T10557] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 449.081479][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.081496][T10557] R13: 0000000000000000 R14: 00007f94313b6080 R15: 00007ffebdfaba38 [ 449.081533][T10557] [ 450.751448][T10594] random: crng reseeded on system resumption [ 450.766102][T10594] FAULT_INJECTION: forcing a failure. [ 450.766102][T10594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.852469][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.1.962 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 450.852546][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.852567][T10594] Call Trace: [ 450.852577][T10594] [ 450.852590][T10594] dump_stack_lvl+0x16c/0x1f0 [ 450.852648][T10594] should_fail_ex+0x512/0x640 [ 450.852706][T10594] should_fail_alloc_page+0xe7/0x130 [ 450.852741][T10594] prepare_alloc_pages+0x3c2/0x610 [ 450.852787][T10594] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 450.852853][T10594] ? stack_trace_save+0x8e/0xc0 [ 450.852889][T10594] ? __pfx_stack_trace_save+0x10/0x10 [ 450.852924][T10594] ? stack_depot_save_flags+0x28/0xa40 [ 450.852976][T10594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 450.853032][T10594] ? kasan_save_stack+0x42/0x60 [ 450.853077][T10594] ? kasan_save_stack+0x33/0x60 [ 450.853130][T10594] ? do_dentry_open+0x744/0x1c10 [ 450.853177][T10594] ? vfs_open+0x82/0x3f0 [ 450.853207][T10594] ? path_openat+0x1de4/0x2cb0 [ 450.853251][T10594] ? do_filp_open+0x20b/0x470 [ 450.853295][T10594] ? do_sys_openat2+0x11b/0x1d0 [ 450.853329][T10594] ? __x64_sys_openat+0x174/0x210 [ 450.853363][T10594] ? do_syscall_64+0xcd/0x490 [ 450.853392][T10594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.853428][T10594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.853474][T10594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 450.853536][T10594] ? policy_nodemask+0xea/0x4e0 [ 450.853571][T10594] alloc_pages_mpol+0x1fb/0x550 [ 450.853605][T10594] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 450.853650][T10594] alloc_pages_noprof+0x131/0x390 [ 450.853683][T10594] get_zeroed_page_noprof+0x18/0xb0 [ 450.853732][T10594] get_image_page+0x18/0x190 [ 450.853765][T10594] alloc_rtree_node+0x3c/0xb0 [ 450.853800][T10594] memory_bm_create+0x519/0x810 [ 450.853848][T10594] create_basic_memory_bitmaps+0x10b/0x320 [ 450.853891][T10594] snapshot_open+0x235/0x2b0 [ 450.853928][T10594] ? __pfx_snapshot_open+0x10/0x10 [ 450.853969][T10594] misc_open+0x35d/0x420 [ 450.854010][T10594] ? __pfx_misc_open+0x10/0x10 [ 450.854050][T10594] chrdev_open+0x231/0x6a0 [ 450.854098][T10594] ? __pfx_apparmor_file_open+0x10/0x10 [ 450.854141][T10594] ? __pfx_chrdev_open+0x10/0x10 [ 450.854192][T10594] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 450.854242][T10594] do_dentry_open+0x744/0x1c10 [ 450.854291][T10594] ? __pfx_chrdev_open+0x10/0x10 [ 450.854347][T10594] vfs_open+0x82/0x3f0 [ 450.854386][T10594] path_openat+0x1de4/0x2cb0 [ 450.854446][T10594] ? __pfx_path_openat+0x10/0x10 [ 450.854502][T10594] ? __lock_acquire+0xb8a/0x1c90 [ 450.854549][T10594] do_filp_open+0x20b/0x470 [ 450.854597][T10594] ? __pfx_do_filp_open+0x10/0x10 [ 450.854676][T10594] ? alloc_fd+0x471/0x7d0 [ 450.854733][T10594] do_sys_openat2+0x11b/0x1d0 [ 450.854789][T10594] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.854828][T10594] ? __pfx___schedule+0x10/0x10 [ 450.854888][T10594] __x64_sys_openat+0x174/0x210 [ 450.854926][T10594] ? __pfx___x64_sys_openat+0x10/0x10 [ 450.854984][T10594] do_syscall_64+0xcd/0x490 [ 450.855019][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.855051][T10594] RIP: 0033:0x7f943118e929 [ 450.855078][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.855110][T10594] RSP: 002b:00007f942eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 450.855142][T10594] RAX: ffffffffffffffda RBX: 00007f94313b6160 RCX: 00007f943118e929 [ 450.855163][T10594] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 450.855184][T10594] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 450.855204][T10594] R10: 000000000000feff R11: 0000000000000246 R12: 0000000000000000 [ 450.855223][T10594] R13: 0000000000000000 R14: 00007f94313b6160 R15: 00007ffebdfaba38 [ 450.855265][T10594] [ 451.234336][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.501384][T10641] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input302 [ 453.636021][T10644] netlink: 326 bytes leftover after parsing attributes in process `syz.3.978'. [ 454.026894][T10645] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input303 [ 454.739114][T10658] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input304 [ 455.424818][T10659] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input305 [ 456.329933][T10686] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input306 [ 456.428223][T10687] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input307 [ 458.011058][T10714] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input308 [ 458.318981][T10722] Invalid ELF header magic: != ELF [ 458.710275][T10720] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input309 [ 459.910344][T10735] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input310 [ 460.385050][T10736] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input311 [ 460.872355][T10746] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input312 [ 461.306531][T10752] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input313 [ 462.413072][T10768] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input314 [ 462.896451][T10769] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input315 [ 464.528825][T10800] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 465.882818][T10825] Invalid ELF header magic: != ELF [ 466.996304][T10831] Invalid ELF header magic: != ELF [ 467.927264][T10840] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1020'. [ 469.248260][T10863] Invalid ELF header magic: != ELF [ 470.302084][T10881] busy [ 471.089411][T10888] busy [ 471.300460][T10890] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input316 [ 471.469118][T10891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input317 [ 471.741484][T10895] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input318 [ 472.144512][T10896] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input319 [ 472.363260][T10907] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input320 [ 473.232958][T10909] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input321 [ 474.556638][T10943] Invalid ELF header magic: != ELF syzkaller syzkaller login: [ 475.915585][T10974] Invalid ELF header magic: != ELF [ 477.421819][T10988] busy [ 477.876853][T10990] usb usb36: usbfs: process 10990 (syz.1.1053) did not claim interface 0 before use [ 477.994117][T10994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input322 [ 478.231442][T10998] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 478.342527][T11000] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 478.606013][T10995] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input323 [ 480.129291][T11022] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input324 [ 480.676105][T11031] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 482.137220][T11053] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input325 [ 482.424157][T11056] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input326 [ 483.239867][T11058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input327 [ 483.448500][T11079] busy [ 484.203593][T11084] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input328 [ 485.013906][T11087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input329 [ 486.109124][T11106] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input330 [ 486.316052][T11111] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input331 [ 486.424525][T11112] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input332 [ 486.642329][T11115] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input333 [ 486.831025][T11122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input334 [ 487.878216][T11125] busy [ 487.973028][T11124] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input335 [ 488.659199][T11148] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input336 [ 489.725257][T11150] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input337 [ 490.709394][T11177] busy [ 491.363174][T11185] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input338 [ 491.438223][T11181] Invalid ELF header magic: != ELF [ 492.323797][T11187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input339 [ 492.739479][T11202] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 492.907301][T11205] Invalid ELF header magic: != ELF [ 493.245175][T11207] Invalid ELF header magic: != ELF [ 494.637218][T11219] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input340 [ 495.446499][T11232] busy [ 496.069575][T11239] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input341 [ 496.713426][T11245] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input342 [ 496.923842][T11248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input343 [ 497.540531][T11252] Invalid ELF header magic: != ELF [ 498.126392][T11261] FAULT_INJECTION: forcing a failure. [ 498.126392][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 498.161531][T11261] CPU: 0 UID: 0 PID: 11261 Comm: syz.2.1115 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 498.161562][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.161576][T11261] Call Trace: [ 498.161583][T11261] [ 498.161591][T11261] dump_stack_lvl+0x16c/0x1f0 [ 498.161642][T11261] should_fail_ex+0x512/0x640 [ 498.161675][T11261] ? __kvmalloc_node_noprof+0x124/0x620 [ 498.161709][T11261] should_failslab+0xc2/0x120 [ 498.161729][T11261] __kvmalloc_node_noprof+0x137/0x620 [ 498.161760][T11261] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 498.161804][T11261] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 498.161841][T11261] file_tty_write.constprop.0+0x6ef/0x9b0 [ 498.161888][T11261] redirected_tty_write+0xd4/0x150 [ 498.161922][T11261] vfs_write+0x6c4/0x1150 [ 498.161954][T11261] ? __pfx_redirected_tty_write+0x10/0x10 [ 498.162003][T11261] ? __pfx_vfs_write+0x10/0x10 [ 498.162030][T11261] ? find_held_lock+0x2b/0x80 [ 498.162069][T11261] ksys_write+0x12a/0x250 [ 498.162106][T11261] ? __pfx_ksys_write+0x10/0x10 [ 498.162151][T11261] do_syscall_64+0xcd/0x490 [ 498.162181][T11261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.162204][T11261] RIP: 0033:0x7f619598e929 [ 498.162223][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.162246][T11261] RSP: 002b:00007f6196864038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.162268][T11261] RAX: ffffffffffffffda RBX: 00007f6195bb5fa0 RCX: 00007f619598e929 [ 498.162282][T11261] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000003 [ 498.162297][T11261] RBP: 00007f6196864090 R08: 0000000000000000 R09: 0000000000000000 [ 498.162311][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.162324][T11261] R13: 0000000000000000 R14: 00007f6195bb5fa0 R15: 00007ffc709eb5f8 [ 498.162356][T11261] [ 498.864933][T11275] busy [ 499.223496][T11279] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input344 [ 499.614838][T11284] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input345 [ 499.919437][T11285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input346 [ 500.534086][T11287] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input347 [ 500.598520][ T30] audit: type=1800 audit(6044592192.098:4): pid=11309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1124" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 501.524545][T11324] syz.1.1127 (11324): /proc/11321/oom_adj is deprecated, please use /proc/11321/oom_score_adj instead. [ 501.924971][T11327] Invalid ELF header magic: != ELF [ 503.223479][T11339] busy [ 504.212157][T11349] FAULT_INJECTION: forcing a failure. [ 504.212157][T11349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.270340][T11349] CPU: 1 UID: 0 PID: 11349 Comm: syz.0.1132 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 504.270390][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.270408][T11349] Call Trace: [ 504.270418][T11349] [ 504.270428][T11349] dump_stack_lvl+0x16c/0x1f0 [ 504.270478][T11349] should_fail_ex+0x512/0x640 [ 504.270525][T11349] _copy_from_user+0x2e/0xd0 [ 504.270572][T11349] futex_parse_waitv+0x101/0x520 [ 504.270611][T11349] ? __pfx_futex_wake_mark+0x10/0x10 [ 504.270653][T11349] ? __pfx_futex_parse_waitv+0x10/0x10 [ 504.270692][T11349] ? trace_kmalloc+0x2b/0xd0 [ 504.270719][T11349] ? __kmalloc_noprof+0x242/0x510 [ 504.270759][T11349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 504.270794][T11349] __do_sys_futex_waitv+0x245/0x2c0 [ 504.270830][T11349] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 504.270888][T11349] do_syscall_64+0xcd/0x490 [ 504.270917][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.270946][T11349] RIP: 0033:0x7f1044b8e929 [ 504.270968][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.270996][T11349] RSP: 002b:00007f10459ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 504.271041][T11349] RAX: ffffffffffffffda RBX: 00007f1044db5fa0 RCX: 00007f1044b8e929 [ 504.271061][T11349] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000300 [ 504.271080][T11349] RBP: 00007f10459ee090 R08: 0000000000000000 R09: 0000000000000000 [ 504.271099][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.271116][T11349] R13: 0000000000000001 R14: 00007f1044db5fa0 R15: 00007ffde1a1c748 [ 504.271154][T11349] [ 504.665784][T11354] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input348 [ 505.538028][T11358] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input349 [ 506.032140][T11357] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input350 [ 506.139248][T11359] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input351 [ 506.691828][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.713429][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.385538][T11389] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input352 [ 509.019442][T11390] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input353 [ 510.160002][T11401] busy [ 512.234012][T11422] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input354 [ 512.433845][T11424] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input355 [ 512.495490][T11427] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 514.077390][T11451] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input356 [ 514.829695][T11457] busy [ 515.424956][T11454] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input357 [ 515.577660][ C1] hrtimer: interrupt took 103914 ns [ 515.973598][T11467] netlink: zone id is out of range [ 515.985066][T11467] netlink: zone id is out of range [ 516.000869][T11467] netlink: zone id is out of range [ 516.054198][T11467] netlink: zone id is out of range [ 516.097856][T11467] netlink: zone id is out of range [ 516.120736][T11467] netlink: zone id is out of range [ 516.137912][T11467] netlink: zone id is out of range [ 516.156204][T11467] netlink: zone id is out of range [ 516.204741][T11467] netlink: zone id is out of range [ 516.232564][T11467] netlink: zone id is out of range [ 518.492097][T11508] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input358 [ 518.828657][T11509] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input359 [ 519.655289][T11517] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input360 [ 520.362105][T11518] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input361 [ 520.979845][T11527] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input362 [ 521.492778][T11531] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input363 [ 521.759944][T11534] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input364 [ 522.341038][T11535] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input365 [ 522.621092][T11545] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input366 [ 523.672937][T11546] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input367 [ 525.469852][T11595] busy [ 526.684871][T11596] ubi0: attaching mtd0 [ 526.710515][T11596] ubi0: scanning is finished [ 526.715239][T11596] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 526.989904][T11596] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 527.421173][T11593] Invalid ELF header magic: != ELF [ 527.801819][T11619] Invalid ELF header magic: != ELF [ 531.575430][T11652] busy [ 532.208661][T11637] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1190'. [ 533.295627][T11673] Invalid ELF header magic: != ELF [ 534.026601][T11682] random: crng reseeded on system resumption [ 534.053383][T11682] FAULT_INJECTION: forcing a failure. [ 534.053383][T11682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.121072][T11687] syz.1.1201 uses obsolete (PF_INET,SOCK_PACKET) [ 534.170425][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.1.1201 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 534.170457][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.170471][T11682] Call Trace: [ 534.170479][T11682] [ 534.170487][T11682] dump_stack_lvl+0x16c/0x1f0 [ 534.170528][T11682] should_fail_ex+0x512/0x640 [ 534.170570][T11682] should_fail_alloc_page+0xe7/0x130 [ 534.170600][T11682] prepare_alloc_pages+0x3c2/0x610 [ 534.170642][T11682] ? rcu_is_watching+0x12/0xc0 [ 534.170677][T11682] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 534.170730][T11682] ? stack_trace_save+0x8e/0xc0 [ 534.170758][T11682] ? __pfx_stack_trace_save+0x10/0x10 [ 534.170785][T11682] ? stack_depot_save_flags+0x28/0xa40 [ 534.170825][T11682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.170867][T11682] ? kasan_save_stack+0x42/0x60 [ 534.170904][T11682] ? kasan_save_stack+0x33/0x60 [ 534.170948][T11682] ? do_dentry_open+0x744/0x1c10 [ 534.170983][T11682] ? vfs_open+0x82/0x3f0 [ 534.171006][T11682] ? path_openat+0x1de4/0x2cb0 [ 534.171041][T11682] ? do_filp_open+0x20b/0x470 [ 534.171073][T11682] ? do_sys_openat2+0x11b/0x1d0 [ 534.171098][T11682] ? __x64_sys_openat+0x174/0x210 [ 534.171124][T11682] ? do_syscall_64+0xcd/0x490 [ 534.171145][T11682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.171173][T11682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.171209][T11682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.171248][T11682] ? policy_nodemask+0xea/0x4e0 [ 534.171274][T11682] alloc_pages_mpol+0x1fb/0x550 [ 534.171299][T11682] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 534.171332][T11682] alloc_pages_noprof+0x131/0x390 [ 534.171356][T11682] get_zeroed_page_noprof+0x18/0xb0 [ 534.171384][T11682] get_image_page+0x18/0x190 [ 534.171408][T11682] alloc_rtree_node+0x3c/0xb0 [ 534.171432][T11682] memory_bm_create+0x419/0x810 [ 534.171469][T11682] create_basic_memory_bitmaps+0x10b/0x320 [ 534.171501][T11682] snapshot_open+0x235/0x2b0 [ 534.171530][T11682] ? __pfx_snapshot_open+0x10/0x10 [ 534.171560][T11682] misc_open+0x35d/0x420 [ 534.171592][T11682] ? __pfx_misc_open+0x10/0x10 [ 534.171624][T11682] chrdev_open+0x231/0x6a0 [ 534.171679][T11682] ? __pfx_apparmor_file_open+0x10/0x10 [ 534.171712][T11682] ? __pfx_chrdev_open+0x10/0x10 [ 534.171754][T11682] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 534.171794][T11682] do_dentry_open+0x744/0x1c10 [ 534.171832][T11682] ? __pfx_chrdev_open+0x10/0x10 [ 534.171877][T11682] vfs_open+0x82/0x3f0 [ 534.171909][T11682] path_openat+0x1de4/0x2cb0 [ 534.171955][T11682] ? __pfx_path_openat+0x10/0x10 [ 534.171994][T11682] ? __lock_acquire+0xb8a/0x1c90 [ 534.172031][T11682] do_filp_open+0x20b/0x470 [ 534.172069][T11682] ? __pfx_do_filp_open+0x10/0x10 [ 534.172131][T11682] ? alloc_fd+0x471/0x7d0 [ 534.172174][T11682] do_sys_openat2+0x11b/0x1d0 [ 534.172201][T11682] ? __pfx_do_sys_openat2+0x10/0x10 [ 534.172243][T11682] __x64_sys_openat+0x174/0x210 [ 534.172284][T11682] ? __pfx___x64_sys_openat+0x10/0x10 [ 534.172362][T11682] do_syscall_64+0xcd/0x490 [ 534.172387][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.172412][T11682] RIP: 0033:0x7f943118e929 [ 534.172433][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.172458][T11682] RSP: 002b:00007f9431f31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 534.172481][T11682] RAX: ffffffffffffffda RBX: 00007f94313b5fa0 RCX: 00007f943118e929 [ 534.172498][T11682] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 534.172514][T11682] RBP: 00007f9431210b39 R08: 0000000000000000 R09: 0000000000000000 [ 534.172529][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.172543][T11682] R13: 0000000000000000 R14: 00007f94313b5fa0 R15: 00007ffebdfaba38 [ 534.172574][T11682] [ 535.327079][T11696] Invalid ELF header magic: != ELF [ 535.981163][T11684] binder: 11683:11684 ioctl 4030582b 6 returned -22 [ 536.486580][T11684] binder: 11683:11684 ioctl c0306201 2000000000c0 returned -11 [ 536.775013][T11707] Invalid ELF header magic: != ELF [ 538.384850][T11732] busy [ 539.472166][T11742] Invalid ELF header magic: != ELF [ 540.133920][T11750] Invalid ELF header magic: != ELF [ 540.552374][T11755] netlink: 'syz.3.1214': attribute type 1 has an invalid length. syzkaller syzkaller login: [ 541.601883][T11775] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input368 [ 542.001369][T11777] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input369 [ 542.837089][T11797] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input370 [ 543.192420][T11806] Invalid ELF header magic: != ELF [ 543.460933][T11802] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input371 [ 544.680472][T11821] usb usb36: usbfs: process 11821 (syz.0.1230) did not claim interface 0 before use [ 544.766297][T11821] bridge0: port 3(gretap0) entered blocking state [ 544.773211][T11821] bridge0: port 3(gretap0) entered disabled state [ 544.784591][T11821] gretap0: entered allmulticast mode [ 544.796183][T11821] gretap0: entered promiscuous mode [ 544.802515][T11821] bridge0: port 3(gretap0) entered blocking state [ 544.809618][T11821] bridge0: port 3(gretap0) entered forwarding state [ 544.983083][T11823] block nbd8: shutting down sockets [ 545.016676][ T7491] ================================================================== [ 545.024827][ T7491] BUG: KASAN: slab-use-after-free in recv_work+0x694/0xa80 [ 545.032102][ T7491] Write of size 4 at addr ffff888025c88a78 by task kworker/u9:9/7491 [ 545.040208][ T7491] [ 545.042554][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: kworker/u9:9 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 545.042586][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.042602][ T7491] Workqueue: nbd8-recv recv_work [ 545.042642][ T7491] Call Trace: [ 545.042650][ T7491] [ 545.042659][ T7491] dump_stack_lvl+0x116/0x1f0 [ 545.042699][ T7491] print_report+0xcd/0x680 [ 545.042720][ T7491] ? __virt_addr_valid+0x81/0x610 [ 545.042746][ T7491] ? __phys_addr+0xe8/0x180 [ 545.042770][ T7491] ? recv_work+0x694/0xa80 [ 545.042804][ T7491] kasan_report+0xe0/0x110 [ 545.042826][ T7491] ? recv_work+0x694/0xa80 [ 545.042865][ T7491] kasan_check_range+0x100/0x1b0 [ 545.042892][ T7491] recv_work+0x694/0xa80 [ 545.042932][ T7491] ? __pfx_recv_work+0x10/0x10 [ 545.042968][ T7491] ? debug_object_deactivate+0x1ec/0x3a0 [ 545.043002][ T7491] ? finish_task_switch.isra.0+0x221/0xc10 [ 545.043034][ T7491] ? rcu_is_watching+0x12/0xc0 [ 545.043060][ T7491] process_one_work+0x9cf/0x1b70 [ 545.043102][ T7491] ? __pfx_process_one_work+0x10/0x10 [ 545.043142][ T7491] ? assign_work+0x1a0/0x250 [ 545.043176][ T7491] worker_thread+0x6c8/0xf10 [ 545.043216][ T7491] ? __kthread_parkme+0x19e/0x250 [ 545.043244][ T7491] ? __pfx_worker_thread+0x10/0x10 [ 545.043280][ T7491] kthread+0x3c2/0x780 [ 545.043313][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.043346][ T7491] ? rcu_is_watching+0x12/0xc0 [ 545.043368][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.043401][ T7491] ret_from_fork+0x5d4/0x6f0 [ 545.043433][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.043465][ T7491] ret_from_fork_asm+0x1a/0x30 [ 545.043498][ T7491] [ 545.043506][ T7491] [ 545.205668][ T7491] Allocated by task 11643: [ 545.210097][ T7491] kasan_save_stack+0x33/0x60 [ 545.214810][ T7491] kasan_save_track+0x14/0x30 [ 545.219526][ T7491] __kasan_kmalloc+0xaa/0xb0 [ 545.224154][ T7491] nbd_alloc_and_init_config+0x97/0x2a0 [ 545.229737][ T7491] nbd_genl_connect+0x490/0x1c20 [ 545.234685][ T7491] genl_family_rcv_msg_doit+0x206/0x2f0 [ 545.240256][ T7491] genl_rcv_msg+0x55c/0x800 [ 545.244783][ T7491] netlink_rcv_skb+0x155/0x420 [ 545.249570][ T7491] genl_rcv+0x28/0x40 [ 545.253571][ T7491] netlink_unicast+0x53d/0x7f0 [ 545.258361][ T7491] netlink_sendmsg+0x8d1/0xdd0 [ 545.263148][ T7491] ____sys_sendmsg+0xa95/0xc70 [ 545.267939][ T7491] ___sys_sendmsg+0x134/0x1d0 [ 545.272658][ T7491] __sys_sendmsg+0x16d/0x220 [ 545.277259][ T7491] do_syscall_64+0xcd/0x490 [ 545.281778][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.287727][ T7491] [ 545.290074][ T7491] Freed by task 7491: [ 545.294061][ T7491] kasan_save_stack+0x33/0x60 [ 545.298779][ T7491] kasan_save_track+0x14/0x30 [ 545.303479][ T7491] kasan_save_free_info+0x3b/0x60 [ 545.308540][ T7491] __kasan_slab_free+0x51/0x70 [ 545.313356][ T7491] kfree+0x2b4/0x4d0 [ 545.317274][ T7491] nbd_config_put+0x3c1/0x750 [ 545.321986][ T7491] recv_work+0x681/0xa80 [ 545.326270][ T7491] process_one_work+0x9cf/0x1b70 [ 545.331242][ T7491] worker_thread+0x6c8/0xf10 [ 545.335884][ T7491] kthread+0x3c2/0x780 [ 545.339985][ T7491] ret_from_fork+0x5d4/0x6f0 [ 545.344602][ T7491] ret_from_fork_asm+0x1a/0x30 [ 545.349393][ T7491] [ 545.351725][ T7491] The buggy address belongs to the object at ffff888025c88a00 [ 545.351725][ T7491] which belongs to the cache kmalloc-256 of size 256 [ 545.365796][ T7491] The buggy address is located 120 bytes inside of [ 545.365796][ T7491] freed 256-byte region [ffff888025c88a00, ffff888025c88b00) [ 545.379619][ T7491] [ 545.381949][ T7491] The buggy address belongs to the physical page: [ 545.388381][ T7491] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025c88000 pfn:0x25c88 [ 545.398555][ T7491] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 545.407070][ T7491] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 545.415588][ T7491] page_type: f5(slab) [ 545.419593][ T7491] raw: 00fff00000000240 ffff88801b441b40 ffffea0001830a90 ffffea0000958590 [ 545.428195][ T7491] raw: ffff888025c88000 000000000010000a 00000000f5000000 0000000000000000 [ 545.436810][ T7491] head: 00fff00000000240 ffff88801b441b40 ffffea0001830a90 ffffea0000958590 [ 545.445502][ T7491] head: ffff888025c88000 000000000010000a 00000000f5000000 0000000000000000 [ 545.454191][ T7491] head: 00fff00000000001 ffffea0000972201 00000000ffffffff 00000000ffffffff [ 545.462880][ T7491] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 545.471561][ T7491] page dumped because: kasan: bad access detected [ 545.477992][ T7491] page_owner tracks the page as allocated [ 545.483723][ T7491] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10694, tgid 10693 (syz.2.988), ts 456815421465, free_ts 456520755913 [ 545.505210][ T7491] post_alloc_hook+0x1c0/0x230 [ 545.510009][ T7491] get_page_from_freelist+0x1321/0x3890 [ 545.515603][ T7491] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 545.521542][ T7491] alloc_pages_mpol+0x1fb/0x550 [ 545.526412][ T7491] new_slab+0x23b/0x330 [ 545.530602][ T7491] ___slab_alloc+0xd9c/0x1940 [ 545.535301][ T7491] __slab_alloc.constprop.0+0x56/0xb0 [ 545.540702][ T7491] __kmalloc_cache_noprof+0xfb/0x3e0 [ 545.546027][ T7491] connmark_init_net+0x56/0x270 [ 545.550918][ T7491] ops_init+0x1df/0x5f0 [ 545.555096][ T7491] setup_net+0x1ff/0x510 [ 545.559365][ T7491] copy_net_ns+0x2a6/0x5f0 [ 545.563823][ T7491] create_new_namespaces+0x3ea/0xa90 [ 545.569137][ T7491] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 545.574795][ T7491] ksys_unshare+0x45b/0xa40 [ 545.579338][ T7491] __x64_sys_unshare+0x31/0x40 [ 545.584157][ T7491] page last free pid 67 tgid 67 stack trace: [ 545.590149][ T7491] __free_frozen_pages+0x7fe/0x1180 [ 545.595369][ T7491] rcu_core+0x79c/0x14e0 [ 545.599644][ T7491] handle_softirqs+0x219/0x8e0 [ 545.604467][ T7491] do_softirq+0xb2/0xf0 [ 545.608650][ T7491] __local_bh_enable_ip+0x100/0x120 [ 545.613875][ T7491] nsim_dev_trap_report_work+0x8b5/0xcf0 [ 545.619534][ T7491] process_one_work+0x9cf/0x1b70 [ 545.624497][ T7491] worker_thread+0x6c8/0xf10 [ 545.629119][ T7491] kthread+0x3c2/0x780 [ 545.633224][ T7491] ret_from_fork+0x5d4/0x6f0 [ 545.637846][ T7491] ret_from_fork_asm+0x1a/0x30 [ 545.642648][ T7491] [ 545.644981][ T7491] Memory state around the buggy address: [ 545.650626][ T7491] ffff888025c88900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.658706][ T7491] ffff888025c88980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.666790][ T7491] >ffff888025c88a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 545.674857][ T7491] ^ [ 545.682839][ T7491] ffff888025c88a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 545.690907][ T7491] ffff888025c88b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 545.698994][ T7491] ================================================================== [ 545.709989][ T7491] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 545.717236][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: kworker/u9:9 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 545.729437][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.739545][ T7491] Workqueue: nbd8-recv recv_work [ 545.744533][ T7491] Call Trace: [ 545.747826][ T7491] [ 545.750779][ T7491] dump_stack_lvl+0x3d/0x1f0 [ 545.755400][ T7491] panic+0x71c/0x800 [ 545.759320][ T7491] ? __pfx_panic+0x10/0x10 [ 545.763762][ T7491] ? mark_held_locks+0x49/0x80 [ 545.768558][ T7491] ? preempt_schedule_thunk+0x16/0x30 [ 545.773961][ T7491] ? recv_work+0x694/0xa80 [ 545.778409][ T7491] ? preempt_schedule_common+0x44/0xc0 [ 545.783991][ T7491] ? check_panic_on_warn+0x1f/0xb0 [ 545.789130][ T7491] ? recv_work+0x694/0xa80 [ 545.793573][ T7491] check_panic_on_warn+0xab/0xb0 [ 545.798547][ T7491] end_report+0x107/0x170 [ 545.802920][ T7491] kasan_report+0xee/0x110 [ 545.807361][ T7491] ? recv_work+0x694/0xa80 [ 545.811822][ T7491] kasan_check_range+0x100/0x1b0 [ 545.816809][ T7491] recv_work+0x694/0xa80 [ 545.821110][ T7491] ? __pfx_recv_work+0x10/0x10 [ 545.825905][ T7491] ? debug_object_deactivate+0x1ec/0x3a0 [ 545.831566][ T7491] ? finish_task_switch.isra.0+0x221/0xc10 [ 545.837392][ T7491] ? rcu_is_watching+0x12/0xc0 [ 545.842172][ T7491] process_one_work+0x9cf/0x1b70 [ 545.847144][ T7491] ? __pfx_process_one_work+0x10/0x10 [ 545.852548][ T7491] ? assign_work+0x1a0/0x250 [ 545.857167][ T7491] worker_thread+0x6c8/0xf10 [ 545.861793][ T7491] ? __kthread_parkme+0x19e/0x250 [ 545.866844][ T7491] ? __pfx_worker_thread+0x10/0x10 [ 545.871987][ T7491] kthread+0x3c2/0x780 [ 545.876086][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.880714][ T7491] ? rcu_is_watching+0x12/0xc0 [ 545.885497][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.890116][ T7491] ret_from_fork+0x5d4/0x6f0 [ 545.894732][ T7491] ? __pfx_kthread+0x10/0x10 [ 545.899349][ T7491] ret_from_fork_asm+0x1a/0x30 [ 545.904173][ T7491] [ 545.907609][ T7491] Kernel Offset: disabled [ 545.911960][ T7491] Rebooting in 86400 seconds..