last executing test programs: 6m46.855595802s ago: executing program 3 (id=621): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x15, 0x3, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x7, 0x20000000df, 0x19, 0x40000000000a5, 0x5) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x400100000001, 0x1ff) readv$auto(0x3, 0x0, 0x4) kexec_load$auto(0x401, 0xf, &(0x7f0000000480)={@buf=&(0x7f0000000400)="88c3d219f8c354c74416a0fe6cf682572527911fa6ada020bfc070f9d4fb1ebee23c99359f515d0f5b58511a7e90ed08819f45d8ab8b17ee3fe194ffab35a913baa2b1a68f7b0c980b995e9c", 0x8000000000000001, 0x8, 0x6}, 0x2) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap$auto(0xf22, 0x6, 0xfd5, 0x1e, r2, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x40000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b74, 0x2, 0x8004) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) 6m44.008586826s ago: executing program 3 (id=627): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/nlmon0/keep_addr_on_down\x00', 0xe4501, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x60102, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x560f, r2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f00000005c0), 0x101080, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) pwrite64$auto(r4, &(0x7f0000000100)='\x00', 0x4, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22641, 0x0) lseek$auto(0x3, 0x2, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r5 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x1, 0x0) write$auto_event_trigger_fops_trace(r5, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sg1\x00', 0x0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) 6m43.269303497s ago: executing program 3 (id=628): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xf53, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/cmdline\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0xc, 0x800400008, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x83, 0x7fffffffffffffff, 0xa) iopl$auto(0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) 6m39.41209462s ago: executing program 3 (id=638): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/module/cx231xx/parameters/card\x00', 0x8100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2e00, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, r2) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x406, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) setsockopt$auto(r3, 0x10f, 0x8a, 0x0, 0x15) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) mknod$auto(0x0, 0x1001, 0x4) open(&(0x7f0000000300)='./file0\x00', 0x961343, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) 6m37.982922853s ago: executing program 3 (id=642): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x10, 0x3, 0x6) getdents$auto(r0, &(0x7f0000000340)={0x4, 0x3ff, 0x5, "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"}, 0xd) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r0) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="000228bd7000fedbdf251e000000000001000800000000000c0004000000001000000000000000000b00400000fdfffffffffffeff0008001e000800000082b5b4800f3a19fbe8519cdee4feb51ba87f0285682657497086320d2b690f02996d24fa439c09ea55d74caeeb670845f6b9e9be57f56b51cb5865dc3d148cb3ebe942aee1eb49f7066f68d52b09cc21486ac29bf1e1a9da19b13dffea5c3c63863c061327aa2d8f63539b098be866"], 0xfe31}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) (async) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) (async) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd703900dbdf25598c00000800030020"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010006bd7000fbdbdf250b0000008c99c9976060d9299c8c4f851a11ef5d79a39bd61dc43119896a97a438b4f4d9f52190c5c75a1932e2a74b9c66fdb89e9e77e6a825d4db12f07fcaa61dffe9b635f07b488c022c5c5d35666449b1107a3c50"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x400c880) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/shmem_enabled\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/44, 0x2c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000100)=0x100) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) (async) unshare$auto(0x40000080) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 6m37.483729108s ago: executing program 3 (id=644): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x27) (async) mmap$auto(0x800000000000000, 0x1000007ff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) membarrier$auto(0x2, 0x0, 0x9) (async) mmap$auto(0x0, 0x7, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045405, 0x3) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x3ff) (async) socket(0x22, 0x3, 0x1) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') (async) getxattrat$auto(r2, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000380)={0x10, 0x5, 0x10001}, 0xffffffff) r3 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) write$auto_proc_loginuid_operations_base(r3, 0x0, 0x0) (async) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(r2, 0xf7ffff01, &(0x7f0000000180)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000580)="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", 0xfffffffffffffffe) (async) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 6m22.348028839s ago: executing program 32 (id=644): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) setsockopt$auto(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x27) (async) mmap$auto(0x800000000000000, 0x1000007ff, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) membarrier$auto(0x2, 0x0, 0x9) (async) mmap$auto(0x0, 0x7, 0x4000000000e2, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045405, 0x3) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x3ff) (async) socket(0x22, 0x3, 0x1) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) (async) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') (async) getxattrat$auto(r2, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000380)={0x10, 0x5, 0x10001}, 0xffffffff) r3 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) write$auto_proc_loginuid_operations_base(r3, 0x0, 0x0) (async) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(r2, 0xf7ffff01, &(0x7f0000000180)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000580)="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", 0xfffffffffffffffe) (async) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 10.231159646s ago: executing program 4 (id=1785): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r1, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x10001, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, r4, 0x1000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r5) 8.396034984s ago: executing program 4 (id=1795): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readlink$auto(&(0x7f0000000100)='./file0\x00', 0x0, 0x7) r0 = pipe$auto(0x0) setsockopt$auto(0x3, 0x7f, 0x3, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@qipcrtr={0x2a, 0xfffffffffffffffb, 0x8000}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) mmap$auto(0x4, 0x2020009, 0x3, 0x11, r0, 0x8000) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) mmap$auto(0x0, 0x4, 0xfffffffffffffc01, 0x40eb2, 0x4, 0x300000000002) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) r2 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x549c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x7f, 0x1, 0x40eb3, r2, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) 6.695124429s ago: executing program 4 (id=1800): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r2, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_RNDADDTOENTCNT2(0xffffffffffffffff, 0x40045201, &(0x7f0000000280)=0x3) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000280), r1) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000000e00)="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", 0x5fc) 6.612489108s ago: executing program 0 (id=1802): write$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto(0x5, 0x0, 0xa) 6.380159771s ago: executing program 0 (id=1803): open_tree$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0\x00', 0xcee6) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0x0, 0x2, 0x0) ioctl$auto(0x3, 0x5411, 0x38) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(0x0, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) ioctl$auto_TIOCMBIS(r1, 0x5416, &(0x7f0000000440)="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") r3 = socket(0x89c322b17cb5a5a6, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r3, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(r3, r2, 0xdf) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x809, 0x2, 0x9, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x1000000001, 0x400008, 0x1000, 0x9b72, 0x2, 0x8000) 5.813916358s ago: executing program 2 (id=1804): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x240, 0x0) r0 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48041) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, '/dev/tty17\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000000) sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c1) socket(0xa, 0x1, 0x100) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r4 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r4, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) socket(0x1e, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x7, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xff]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x9]}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) 5.504771694s ago: executing program 1 (id=1805): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000001) r0 = epoll_create$auto(0x5) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={@raw=0x200, 0x5, 0x3, @btrfs_ioctl_vol_args_v2_3_0={0x10000, &(0x7f0000000380)={0x2, 0x7, 0x1, 0x61, {0xd, 0x31, 0x3, 0x1, 0x4}, [0x8, 0x6, 0xa, 0x5, 0x3c8f, 0x7, 0x7]}}, @devid=0x8}) read$auto(0x3, 0x0, 0x80) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af04, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x141003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x5411, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rt6_stats\x00', 0x10081, 0x0) 5.398054625s ago: executing program 4 (id=1806): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r1, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x10001, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, r4, 0x1000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r5) 4.595236482s ago: executing program 0 (id=1807): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r1, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x10001, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, r4, 0x1000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r5) 4.556636054s ago: executing program 2 (id=1808): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000440)="0db1eb") pread64$auto(r0, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000340)) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.232909867s ago: executing program 4 (id=1809): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readlink$auto(&(0x7f0000000100)='./file0\x00', 0x0, 0x7) r0 = pipe$auto(0x0) setsockopt$auto(0x3, 0x7f, 0x3, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@qipcrtr={0x2a, 0xfffffffffffffffb, 0x8000}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) mmap$auto(0x4, 0x2020009, 0x3, 0x11, r0, 0x8000) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) mmap$auto(0x0, 0x4, 0xfffffffffffffc01, 0x40eb2, 0x4, 0x300000000002) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) r2 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci4\x00', 0x549c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x7f, 0x1, 0x40eb3, r2, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kallsyms\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) unshare$auto(0x40000080) 4.18548261s ago: executing program 1 (id=1810): msgctl$auto_IPC_INFO(0xa6, 0x3, &(0x7f0000000100)={{0x7, 0x0, 0x0, 0x0, 0x3f7a8df9, 0x9, 0x8}, 0x0, &(0x7f0000000040)=0xa, 0x3e, 0x7f, 0x7, 0x100000000, 0xffffffffffffffff, 0x2cc, 0x2, 0x0, @raw=0x80, @raw=0x80000001}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) socket(0x1b, 0x3, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x15, &(0x7f0000000100)={{0x0, 0x6, &(0x7f00000000c0)={&(0x7f00000008c0), 0x9}, 0x7f, 0x0, 0x8000, 0x2}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) 3.459151426s ago: executing program 1 (id=1811): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x20000000000000, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r0, 0x80044dfb, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) shmat$auto(0xfffffff7, &(0x7f00000000c0)='/dev/audio\x00', 0x4) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) r1 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) read$auto_proc_sessionid_operations_base(r1, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) 3.449122663s ago: executing program 0 (id=1812): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000000001) r0 = epoll_create$auto(0x5) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000400)={@raw=0x200, 0x5, 0x3, @btrfs_ioctl_vol_args_v2_3_0={0x10000, &(0x7f0000000380)={0x2, 0x7, 0x1, 0x61, {0xd, 0x31, 0x3, 0x1, 0x4}, [0x8, 0x6, 0xa, 0x5, 0x3c8f, 0x7, 0x7]}}, @devid=0x8}) read$auto(0x3, 0x0, 0x80) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto(r1, 0x4008af04, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) write$auto_buffer_percent_fops_trace(0xffffffffffffffff, &(0x7f0000000300)="6d1d621ff5a556b606000000000000001d3c7ff3d1be02723c0fa860f0a9bb5379bcf547ba130b51d2175f25eeab8bcde079ef2edad0fe6341e26112141e03c07279455ff8", 0x45) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x5411, 0x38) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rt6_stats\x00', 0x10081, 0x0) 3.2637481s ago: executing program 2 (id=1813): read$auto(0x3, 0x0, 0xf34) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x7b4c86d31e56d295, 0x2, 0x56) pipe2$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) read$auto(r0, 0x0, 0x3) ioctl$auto(0x3, 0x402c542c, 0x38) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x168, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x14c, 0x3, 0x0, 0x1, [@nested={0x148, 0x1, 0x0, 0x1, [@nested={0x141, 0x12d, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xb5, 0x0, 0x0, @pid}, @generic="b04e844ea904ebea1961b006b1", @generic="f4786414515be8eb668dae1537305b2b85146fa0a185fbc8dc178799ba2fa6240a8d748b1a446d7a475487d45d152708908224ab", @nested={0xe9, 0x8a, 0x0, 0x1, [@generic="7897c7ca660c", @generic="5e22dfb544bb1e556e2c79d947066b0502973dec091fef0790b61f07b31c3dd2ee5f0529fc8077e62f87badfe0ab4b46e9623926cd375613c4bde5cdc817bcaad729bd4888bc4133", @generic="073dc8e8e4805d30b44c3466894fd34be815563254488b27ebb9b6e710fddc", @typed={0x76, 0xf1, 0x0, 0x0, @binary="67ab35ede9f24221fdc80dd31a37d3c1256b43654c3a3b85edbcac47d71a14432c0662ea40898e214313ed0218f47a1f36a442d15fb111fe40341b601829dc1642c2eb2a94efbed2538400819d9b1abc52df9fb7de60d64a2bc46918afa2fde42a5dbbca34c81f55e0b0dc3837c5acde968e"}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000844) r4 = openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) read$auto(r4, 0x0, 0x1f42) 2.838969139s ago: executing program 2 (id=1814): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x240, 0x0) r0 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48041) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, 0x0, 0x4000000) sendmsg$auto_KSMBD_EVENT_STARTING_UP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000c1) socket(0xa, 0x1, 0x100) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r3, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) socket(0x1e, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x7, 0x7, 0x3, 0x8fd6, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7f, 0x32, 0x7440, 0xd0, 0xa, 0x9, 0xff]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x100000001f9, 0x8, 0x2, 0x20000000000001, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x10008000009, 0x2, 0x9]}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0) 2.340694293s ago: executing program 0 (id=1815): socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c378cf6425762ea79b301a6db57cb5ef3a0392c34dd645277ef7199cdac255e8daf7be8a03eca2e82abad870123f1187331598ca1cd9d375d24dfcac162dc073ba50c4e37c90144536919e57f0010f3c308ddc398c6acbf510e69d2bb0f40f36093da09288350830000274aadaa47cf39641f3242a828d217cd3166f273aebc3d42c6dca5a87eb66a1c8e5947daf4d841fd") statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) unshare$auto(0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r3, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x450041, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 2.291939723s ago: executing program 4 (id=1816): socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f00000002c0)="7d4d6bac0100120f61d46fa8bde75da51a623287db278095f41e2b4d632ace21614c750afbd0191b8c164503877b7cd66c378cf6425762ea79b301a6db57cb5ef3a0392c34dd645277ef7199cdac255e8daf7be8a03eca2e82abad870123f1187331598ca1cd9d375d24dfcac162dc073ba50c4e37c90144536919e57f0010f3c308ddc398c6acbf510e69d2bb0f40f36093da09288350830000274aadaa47cf39641f3242a828d217cd3166f273aebc3d42c6dca5a87eb66a1c8e5947daf4d841fd") statmount$auto(0x0, 0x0, 0x1fe, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) unshare$auto(0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) madvise$auto(0x8000000400, 0x200004007ffffffd, 0x4010006) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(r3, &(0x7f0000000380)=',{5,\x00', 0x4000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80008000) madvise$auto(0x3, 0xffffffffffff0005, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x450041, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 2.22964645s ago: executing program 1 (id=1817): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x20001, 0x0) ppoll$auto(&(0x7f00000000c0)={r2, 0x0, 0x8}, 0xf7, &(0x7f0000000100)={0x80000000008000, 0x1}, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x44, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r5) sendmsg$auto_TIPC_NL_MEDIA_SET(r5, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000280), r1) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r3, 0x0, 0x0) read$auto(r4, &(0x7f0000000000)='/sys/kernel/debug/sync/sw_sync\x00', 0x2) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, 0x0) select$auto(0x6, &(0x7f0000000200)={[0x9, 0x2, 0x5, 0x1, 0x3, 0x6, 0x6, 0x3, 0xc770, 0xfffffffffffffffd, 0xfffffffffffff882, 0x3, 0x5, 0x5, 0x401, 0xd]}, &(0x7f00000002c0)={[0x4, 0x5, 0x4, 0x6, 0x9, 0x401, 0x3, 0x57, 0x1, 0x3299786, 0x22, 0x4, 0x0, 0x7, 0x6, 0x2]}, &(0x7f0000000340)={[0xfffffffffffffff8, 0x2, 0x6, 0x7, 0xf64, 0x7ff, 0x6, 0x9, 0x7, 0x0, 0x47, 0x8, 0x8, 0x9, 0x3, 0x3]}, &(0x7f0000000180)={0xfffffffffffffffa, 0x10000}) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000e00)="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", 0x5fc) 1.446453237s ago: executing program 1 (id=1818): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x8, 0x1ff, 0xf8, r1, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x10001, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp7\x00', 0x102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) mmap$auto(0x0, 0x7c0, 0x7, 0x8011, r4, 0x1000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r2, 0xc1205531, r5) 1.44406865s ago: executing program 2 (id=1819): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x420008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4020008, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) sendto$auto(0x3, 0x0, 0x8, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x1c) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af04, 0x0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x800, 0x0) ioctl$auto_FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000340)) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xe, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffa]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto(0x3, 0x5411, 0x38) io_uring_setup$auto(0x23, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0xe) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10081, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.011724354s ago: executing program 0 (id=1820): mmap$auto(0x0, 0x2008c, 0xdf, 0x111, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0xffffffffffffffff, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x40}, 0xa0d0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0xfffffffffffffffa, 0xe3, 0x6) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\xea+r\xd5\x83\xb9\'\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa80) mmap$auto(0x3, 0x0, 0x5, 0x10, 0xffffffffffffffff, 0x97d) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x3, 0x20009, 0xe2, 0xeb1, r1, 0x8000) 775.529913ms ago: executing program 1 (id=1821): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)="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", 0xa) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x183042, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)="4f72b0", 0x3) sendfile$auto(r0, r3, 0x0, 0x1) 0s ago: executing program 2 (id=1822): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_RNDADDTOENTCNT2(0xffffffffffffffff, 0x40045201, &(0x7f0000000280)=0x3) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f000000a4c0)={0x0, 0x0, &(0x7f000000a480)={&(0x7f0000009800)={0x18, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x20000048) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000280), r1) sendmsg$auto_NET_DM_CMD_CONFIG_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0x5fc) kernel console output (not intermixed with test programs): 35][ T9562] RIP: 0033:0x7f7187d8eec9 [ 374.439058][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.439084][ T9562] RSP: 002b:00007f7188c05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 374.439112][ T9562] RAX: ffffffffffffffda RBX: 00007f7187fe6180 RCX: 00007f7187d8eec9 [ 374.439131][ T9562] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 374.439147][ T9562] RBP: 00007f7188c05090 R08: 0000000000000000 R09: 0000000000000000 [ 374.439164][ T9562] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000001 [ 374.439180][ T9562] R13: 00007f7187fe6218 R14: 00007f7187fe6180 R15: 00007ffca1922018 [ 374.439220][ T9562] [ 374.877952][ T30] audit: type=1804 audit(6055531360.007:4): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.616" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 379.072052][ T9627] netlink: 268 bytes leftover after parsing attributes in process `syz.2.625'. [ 380.107915][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 380.922057][ T9652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 381.665166][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'. [ 383.416005][ T9685] FAULT_INJECTION: forcing a failure. [ 383.416005][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.429554][ T9685] CPU: 0 UID: 0 PID: 9685 Comm: syz.2.637 Not tainted syzkaller #0 PREEMPT(full) [ 383.429591][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.429607][ T9685] Call Trace: [ 383.429617][ T9685] [ 383.429628][ T9685] dump_stack_lvl+0x16c/0x1f0 [ 383.429677][ T9685] should_fail_ex+0x512/0x640 [ 383.429729][ T9685] _copy_from_user+0x2e/0xd0 [ 383.429760][ T9685] core_sys_select+0x35b/0xc20 [ 383.429808][ T9685] ? __pfx_core_sys_select+0x10/0x10 [ 383.429853][ T9685] ? proc_fail_nth_write+0x9f/0x220 [ 383.429927][ T9685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 383.429983][ T9685] kern_select+0x15d/0x1e0 [ 383.430019][ T9685] ? __pfx_kern_select+0x10/0x10 [ 383.430061][ T9685] ? xfd_validate_state+0x61/0x180 [ 383.430091][ T9685] ? __pfx_ksys_write+0x10/0x10 [ 383.430138][ T9685] __x64_sys_select+0xbd/0x160 [ 383.430173][ T9685] ? do_syscall_64+0x91/0xfa0 [ 383.430213][ T9685] ? lockdep_hardirqs_on+0x7c/0x110 [ 383.430268][ T9685] do_syscall_64+0xcd/0xfa0 [ 383.430313][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.430341][ T9685] RIP: 0033:0x7f27c158eec9 [ 383.430365][ T9685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.430391][ T9685] RSP: 002b:00007f27c2364038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 383.430418][ T9685] RAX: ffffffffffffffda RBX: 00007f27c17e6180 RCX: 00007f27c158eec9 [ 383.430436][ T9685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 383.430452][ T9685] RBP: 00007f27c2364090 R08: 0000000000000000 R09: 0000000000000000 [ 383.430469][ T9685] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 383.430485][ T9685] R13: 00007f27c17e6218 R14: 00007f27c17e6180 R15: 00007fffdf0af598 [ 383.430525][ T9685] [ 383.616848][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.961223][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.969121][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.768793][ T9792] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 397.834986][ T9826] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 399.089199][ T9836] zswap: compressor not available [ 400.001284][ T9851] netlink: 186 bytes leftover after parsing attributes in process `syz.2.668'. [ 402.411307][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.423398][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.442001][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.459295][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.468169][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.466118][ T9890] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 403.534443][ T9880] chnl_net:caif_netlink_parms(): no params data found [ 403.582352][ T5842] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 403.582394][ T5842] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 403.597643][ T5842] Bluetooth: hci0: Dropping invalid advertising data [ 403.605729][ T5842] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 403.605761][ T5842] Bluetooth: hci0: Dropping invalid advertising data [ 403.626001][ T5842] Bluetooth: hci0: unknown advertising packet type: 0x20 [ 403.630124][ T5842] Bluetooth: hci0: Malformed LE Event: 0x02 [ 404.580902][ T5842] Bluetooth: hci4: command tx timeout [ 404.731711][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.741507][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.751501][ T9880] bridge_slave_0: entered allmulticast mode [ 404.760053][ T9880] bridge_slave_0: entered promiscuous mode [ 404.803412][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.817441][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.825955][ T9880] bridge_slave_1: entered allmulticast mode [ 404.837044][ T9880] bridge_slave_1: entered promiscuous mode [ 405.270003][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.306924][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.625763][ T9880] team0: Port device team_slave_0 added [ 405.668236][ T9880] team0: Port device team_slave_1 added [ 405.901868][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.983241][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.010151][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.034065][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.041413][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.067479][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.272335][ T9880] hsr_slave_0: entered promiscuous mode [ 406.279305][ T9880] hsr_slave_1: entered promiscuous mode [ 406.311824][ T9880] debugfs: 'hsr0' already exists in 'hsr' [ 406.317735][ T9880] Cannot create hsr debugfs directory [ 406.670871][ T5842] Bluetooth: hci4: command tx timeout [ 407.400174][ T9880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 407.432276][ T9880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 407.464738][ T9880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 407.582730][ T9880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.039788][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.061756][ T9880] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.113370][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.120540][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.194814][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.202222][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.662565][ T5842] Bluetooth: hci1: Malformed LE Event: 0x1b [ 408.741007][ T5842] Bluetooth: hci4: command tx timeout [ 409.567192][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.829125][ T5842] Bluetooth: hci4: command tx timeout [ 411.851244][ T9880] veth0_vlan: entered promiscuous mode [ 411.928899][ T9880] veth1_vlan: entered promiscuous mode [ 411.938389][ T9985] FAULT_INJECTION: forcing a failure. [ 411.938389][ T9985] name failslab, interval 1, probability 0, space 0, times 0 [ 412.021394][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.1.692 Not tainted syzkaller #0 PREEMPT(full) [ 412.021440][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.021457][ T9985] Call Trace: [ 412.021466][ T9985] [ 412.021476][ T9985] dump_stack_lvl+0x16c/0x1f0 [ 412.021529][ T9985] should_fail_ex+0x512/0x640 [ 412.021572][ T9985] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 412.021620][ T9985] should_failslab+0xc2/0x120 [ 412.021649][ T9985] __kmalloc_node_noprof+0xe0/0x8a0 [ 412.021692][ T9985] ? lockdep_init_map_type+0x5c/0x280 [ 412.021725][ T9985] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 412.021771][ T9985] ? blk_mq_alloc_tag_set+0x46f/0x12e0 [ 412.021813][ T9985] blk_mq_alloc_tag_set+0x46f/0x12e0 [ 412.021855][ T9985] ? __pfx_idr_alloc+0x10/0x10 [ 412.021904][ T9985] loop_add+0x3b2/0xb70 [ 412.021939][ T9985] ? __pfx_loop_add+0x10/0x10 [ 412.022011][ T9985] ? find_held_lock+0x2b/0x80 [ 412.022060][ T9985] loop_control_ioctl+0x13e/0x630 [ 412.022096][ T9985] ? __pfx_loop_control_ioctl+0x10/0x10 [ 412.022135][ T9985] ? __pfx_loop_control_ioctl+0x10/0x10 [ 412.022172][ T9985] __x64_sys_ioctl+0x18e/0x210 [ 412.022211][ T9985] do_syscall_64+0xcd/0xfa0 [ 412.022257][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.022286][ T9985] RIP: 0033:0x7f446358eec9 [ 412.022310][ T9985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.022337][ T9985] RSP: 002b:00007f4464455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.022366][ T9985] RAX: ffffffffffffffda RBX: 00007f44637e5fa0 RCX: 00007f446358eec9 [ 412.022386][ T9985] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000003 [ 412.022401][ T9985] RBP: 00007f4463611f91 R08: 0000000000000000 R09: 0000000000000000 [ 412.022419][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.022436][ T9985] R13: 00007f44637e6038 R14: 00007f44637e5fa0 R15: 00007fffa05e93e8 [ 412.022473][ T9985] [ 412.293122][ T9880] veth0_macvtap: entered promiscuous mode [ 412.305299][ T9880] veth1_macvtap: entered promiscuous mode [ 412.325507][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.336904][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.502903][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.523863][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.561035][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.631109][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.684660][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.749383][ T4486] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.774581][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.798368][ T4486] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.152636][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 416.016737][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 417.125530][T10042] netlink: 268 bytes leftover after parsing attributes in process `syz.0.703'. [ 417.352753][T10042] vhci_hcd: invalid port number 16 [ 417.358016][T10042] vhci_hcd: invalid port number 16 [ 417.412015][T10042] random: crng reseeded on system resumption [ 417.481471][T10042] FAULT_INJECTION: forcing a failure. [ 417.481471][T10042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.542669][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.0.703 Not tainted syzkaller #0 PREEMPT(full) [ 417.542712][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.542742][T10042] Call Trace: [ 417.542752][T10042] [ 417.542763][T10042] dump_stack_lvl+0x16c/0x1f0 [ 417.542814][T10042] should_fail_ex+0x512/0x640 [ 417.542868][T10042] should_fail_alloc_page+0xe7/0x130 [ 417.542901][T10042] prepare_alloc_pages+0x3c2/0x610 [ 417.542930][T10042] ? rcu_is_watching+0x12/0xc0 [ 417.542971][T10042] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 417.543021][T10042] ? stack_trace_save+0x8e/0xc0 [ 417.543065][T10042] ? __pfx_stack_trace_save+0x10/0x10 [ 417.543107][T10042] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.543148][T10042] ? kasan_save_stack+0x42/0x60 [ 417.543187][T10042] ? kasan_save_stack+0x33/0x60 [ 417.543233][T10042] ? do_dentry_open+0x982/0x1530 [ 417.543274][T10042] ? vfs_open+0x82/0x3f0 [ 417.543301][T10042] ? path_openat+0x1de4/0x2cb0 [ 417.543340][T10042] ? do_filp_open+0x20b/0x470 [ 417.543378][T10042] ? do_sys_openat2+0x11b/0x1d0 [ 417.543408][T10042] ? __x64_sys_openat+0x174/0x210 [ 417.543439][T10042] ? do_syscall_64+0xcd/0xfa0 [ 417.543476][T10042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.543507][T10042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.543542][T10042] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.543581][T10042] ? policy_nodemask+0xea/0x4e0 [ 417.543612][T10042] alloc_pages_mpol+0x1fb/0x550 [ 417.543644][T10042] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.543683][T10042] alloc_pages_noprof+0x131/0x390 [ 417.543710][T10042] get_zeroed_page_noprof+0x18/0xb0 [ 417.543759][T10042] get_image_page+0x18/0x190 [ 417.543799][T10042] alloc_rtree_node+0x3c/0xb0 [ 417.543842][T10042] memory_bm_create+0x519/0x810 [ 417.543896][T10042] create_basic_memory_bitmaps+0xbd/0x320 [ 417.544041][T10042] snapshot_open+0x235/0x2b0 [ 417.544069][T10042] ? __pfx_snapshot_open+0x10/0x10 [ 417.544096][T10042] misc_open+0x26d/0x450 [ 417.544142][T10042] ? __pfx_misc_open+0x10/0x10 [ 417.544184][T10042] chrdev_open+0x234/0x6a0 [ 417.544230][T10042] ? __pfx_apparmor_file_open+0x10/0x10 [ 417.544261][T10042] ? __pfx_chrdev_open+0x10/0x10 [ 417.544304][T10042] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 417.544355][T10042] do_dentry_open+0x982/0x1530 [ 417.544403][T10042] ? __pfx_chrdev_open+0x10/0x10 [ 417.544456][T10042] vfs_open+0x82/0x3f0 [ 417.544493][T10042] path_openat+0x1de4/0x2cb0 [ 417.544550][T10042] ? __pfx_path_openat+0x10/0x10 [ 417.544594][T10042] ? __lock_acquire+0xb8a/0x1c90 [ 417.544630][T10042] do_filp_open+0x20b/0x470 [ 417.544697][T10042] ? __pfx_do_filp_open+0x10/0x10 [ 417.544773][T10042] ? alloc_fd+0x471/0x7d0 [ 417.544825][T10042] do_sys_openat2+0x11b/0x1d0 [ 417.544859][T10042] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.544909][T10042] __x64_sys_openat+0x174/0x210 [ 417.544944][T10042] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.544996][T10042] do_syscall_64+0xcd/0xfa0 [ 417.545045][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.545075][T10042] RIP: 0033:0x7f812fd8eec9 [ 417.545100][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.545128][T10042] RSP: 002b:00007f8130b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.545156][T10042] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd8eec9 [ 417.545175][T10042] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 417.545194][T10042] RBP: 00007f812fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 417.545212][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.545229][T10042] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 417.545272][T10042] [ 419.782957][T10050] hub 8-0:1.0: USB hub found [ 419.811384][T10050] hub 8-0:1.0: 1 port detected [ 421.492260][T10078] 0x000200000001-0xa29656a63616329 : "" [ 421.498109][T10078] mtd: partition "" is out of reach -- disabled [ 421.570292][T10078] ftl_cs: FTL header not found. [ 424.221066][ T30] audit: type=1804 audit(6055531409.357:5): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.717" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 425.038563][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'. [ 425.285979][T10125] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 425.877614][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 426.483173][T10141] netlink: 186 bytes leftover after parsing attributes in process `syz.4.723'. [ 426.639994][T10138] can: request_module (can-proto-5) failed. [ 428.977973][T10168] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 434.706883][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.743'. [ 434.944996][T10237] team0: Port device team_slave_0 removed [ 436.278659][T10258] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 443.852841][T10334] delete_channel: no stack [ 445.384239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.390631][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.897649][T10370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.256880][T10366] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 446.381664][T10366] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 446.526949][T10366] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 448.492258][T10398] ovs_: entered promiscuous mode [ 448.708503][T10393] HfR: entered promiscuous mode [ 448.860654][T10396] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888079001dc0 pfn:0x79001 [ 448.962651][T10396] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 448.969867][T10396] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 449.031169][T10396] raw: ffff888079001dc0 0000000000000000 00000001ffffffff 0000000000000000 [ 449.042316][T10396] page dumped because: unmovable page [ 449.047942][T10396] page_owner tracks the page as allocated [ 449.054987][T10396] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 9008, tgid 9004 (syz.2.510), ts 336237540024, free_ts 336231340733 [ 449.081097][T10396] post_alloc_hook+0x1c0/0x230 [ 449.087056][T10396] get_page_from_freelist+0x10a3/0x3a30 [ 449.093233][T10396] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 449.099437][T10396] alloc_pages_bulk_noprof+0x71c/0x1410 [ 449.146471][T10396] kasan_populate_vmalloc+0x112/0x2d0 [ 449.190905][T10396] alloc_vmap_area+0x960/0x29e0 [ 449.234822][T10396] __get_vm_area_node+0x1ca/0x330 [ 449.241908][T10396] __vmalloc_node_range_noprof+0x271/0x1480 [ 449.248044][T10396] __vmalloc_node_noprof+0xad/0xf0 [ 449.253759][T10396] copy_process+0x2c77/0x76a0 [ 449.258773][T10396] kernel_clone+0xfc/0x930 [ 449.263605][T10396] __do_sys_clone+0xce/0x120 [ 449.268262][T10396] do_syscall_64+0xcd/0xfa0 [ 449.272997][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.280846][T10396] page last free pid 8992 tgid 8992 stack trace: [ 449.287425][T10396] __free_frozen_pages+0x7df/0x1160 [ 449.329710][T10396] tlb_remove_table_rcu+0x121/0x320 [ 449.383587][T10396] rcu_core+0x79c/0x1530 [ 449.471367][T10396] handle_softirqs+0x219/0x8e0 [ 449.500568][T10396] __irq_exit_rcu+0x109/0x170 [ 449.555867][T10396] irq_exit_rcu+0x9/0x30 [ 449.560267][T10396] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 449.707688][T10396] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.638383][ T1847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.006081][T10572] [U] /Eev/audio1 [ 463.010106][T10572] [U] F츱Z|ÿGP—)Ïû\n‰C:„Du´šbΧtUw´U‹¤U•3.O«"4Š»Y8@Z5`¤mÿb»ê4*¤ô´À¿Ôm¿Ç¾˜×lD—)}úKß>f¸&•9- [ 463.081935][T10572] [U] ÌWwâœK EÊÓ6èË?(úIâ®,•k8ƒÏÅDÌ [ 463.101349][T10572] [U] [ 463.104141][T10572] [U] [ 463.106904][T10572] [U] [ 463.132617][T10572] [U] [ 463.135420][T10572] [U] [ 463.138171][T10572] [U] [ 463.140897][T10572] [U] [ 463.175121][T10572] [U] [ 463.177855][T10572] [U] [ 463.180597][T10572] [U] [ 463.183306][T10572] [U] [ 463.257905][T10572] [U] [ 463.260680][T10572] [U] [ 463.263400][T10572] [U] [ 463.266128][T10572] [U] [ 463.282854][T10572] [U] [ 463.285700][T10572] [U] [ 463.288514][T10572] [U] [ 463.291487][T10572] [U] [ 463.296122][T10572] [U] [ 463.298930][T10572] [U] [ 463.301653][T10572] [U] [ 463.304392][T10572] [U] [ 463.330661][T10572] [U] [ 463.333520][T10572] [U] [ 463.336228][T10572] [U] [ 463.338930][T10572] [U] [ 463.451004][T10572] [U] [ 463.917103][ T30] audit: type=1804 audit(6055531449.057:6): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.815" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 471.524015][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 471.567469][T10651] FAULT_INJECTION: forcing a failure. [ 471.567469][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 471.580493][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.4.829 Not tainted syzkaller #0 PREEMPT(full) [ 471.580527][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.580543][T10651] Call Trace: [ 471.580552][T10651] [ 471.580562][T10651] dump_stack_lvl+0x16c/0x1f0 [ 471.580606][T10651] should_fail_ex+0x512/0x640 [ 471.580645][T10651] ? fs_reclaim_acquire+0xae/0x150 [ 471.580677][T10651] should_failslab+0xc2/0x120 [ 471.580708][T10651] __kmalloc_noprof+0xdd/0x880 [ 471.580741][T10651] ? tomoyo_encode2+0x100/0x3e0 [ 471.580784][T10651] ? tomoyo_encode2+0x100/0x3e0 [ 471.580815][T10651] tomoyo_encode2+0x100/0x3e0 [ 471.580853][T10651] tomoyo_encode+0x29/0x50 [ 471.580890][T10651] tomoyo_realpath_from_path+0x18f/0x6e0 [ 471.580942][T10651] tomoyo_path_number_perm+0x245/0x580 [ 471.580972][T10651] ? tomoyo_path_number_perm+0x237/0x580 [ 471.581008][T10651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.581042][T10651] ? find_held_lock+0x2b/0x80 [ 471.581121][T10651] ? find_held_lock+0x2b/0x80 [ 471.581158][T10651] ? hook_file_ioctl_common+0x145/0x410 [ 471.581204][T10651] ? __fget_files+0x20e/0x3c0 [ 471.581243][T10651] security_file_ioctl+0x9b/0x240 [ 471.581272][T10651] __x64_sys_ioctl+0xb7/0x210 [ 471.581302][T10651] do_syscall_64+0xcd/0xfa0 [ 471.581340][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.581368][T10651] RIP: 0033:0x7fdf0738eec9 [ 471.581391][T10651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.581415][T10651] RSP: 002b:00007fdf08220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.581442][T10651] RAX: ffffffffffffffda RBX: 00007fdf075e5fa0 RCX: 00007fdf0738eec9 [ 471.581501][T10651] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 471.581518][T10651] RBP: 00007fdf08220090 R08: 0000000000000000 R09: 0000000000000000 [ 471.581534][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.581548][T10651] R13: 00007fdf075e6038 R14: 00007fdf075e5fa0 R15: 00007ffe3ea36a78 [ 471.581585][T10651] [ 471.885156][T10651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 472.111604][T10659] netlink: 268 bytes leftover after parsing attributes in process `syz.1.831'. [ 472.731985][T10671] netlink: 342 bytes leftover after parsing attributes in process `syz.4.833'. [ 473.558829][T10683] FAULT_INJECTION: forcing a failure. [ 473.558829][T10683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.661084][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.4.836 Not tainted syzkaller #0 PREEMPT(full) [ 473.661109][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.661119][T10683] Call Trace: [ 473.661125][T10683] [ 473.661132][T10683] dump_stack_lvl+0x16c/0x1f0 [ 473.661164][T10683] should_fail_ex+0x512/0x640 [ 473.661202][T10683] _copy_from_iter+0x29f/0x1720 [ 473.661234][T10683] ? __alloc_skb+0x200/0x380 [ 473.661261][T10683] ? __pfx__copy_from_iter+0x10/0x10 [ 473.661289][T10683] ? netlink_autobind.isra.0+0x158/0x370 [ 473.661325][T10683] netlink_sendmsg+0x820/0xdd0 [ 473.661357][T10683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.661387][T10683] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 473.661409][T10683] ____sys_sendmsg+0xa98/0xc70 [ 473.661429][T10683] ? copy_msghdr_from_user+0x10a/0x160 [ 473.661458][T10683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.661488][T10683] ___sys_sendmsg+0x134/0x1d0 [ 473.661515][T10683] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.661539][T10683] ? __lock_acquire+0x622/0x1c90 [ 473.661582][T10683] __sys_sendmsg+0x16d/0x220 [ 473.661609][T10683] ? __pfx___sys_sendmsg+0x10/0x10 [ 473.661648][T10683] do_syscall_64+0xcd/0xfa0 [ 473.661676][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.661693][T10683] RIP: 0033:0x7fdf0738eec9 [ 473.661708][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.661725][T10683] RSP: 002b:00007fdf08220038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.661742][T10683] RAX: ffffffffffffffda RBX: 00007fdf075e5fa0 RCX: 00007fdf0738eec9 [ 473.661753][T10683] RDX: 0000000020004814 RSI: 0000200000000100 RDI: 0000000000000003 [ 473.661763][T10683] RBP: 00007fdf08220090 R08: 0000000000000000 R09: 0000000000000000 [ 473.661773][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.661782][T10683] R13: 00007fdf075e6038 R14: 00007fdf075e5fa0 R15: 00007ffe3ea36a78 [ 473.661804][T10683] [ 474.142969][T10682] FAULT_INJECTION: forcing a failure. [ 474.142969][T10682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.201212][T10682] CPU: 0 UID: 0 PID: 10682 Comm: syz.0.835 Not tainted syzkaller #0 PREEMPT(full) [ 474.201251][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 474.201267][T10682] Call Trace: [ 474.201276][T10682] [ 474.201286][T10682] dump_stack_lvl+0x16c/0x1f0 [ 474.201331][T10682] should_fail_ex+0x512/0x640 [ 474.201363][T10682] core_sys_select+0x4c5/0xc20 [ 474.201391][T10682] ? __pfx_core_sys_select+0x10/0x10 [ 474.201418][T10682] ? proc_fail_nth_write+0x9f/0x220 [ 474.201459][T10682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.201492][T10682] kern_select+0x15d/0x1e0 [ 474.201514][T10682] ? __pfx_kern_select+0x10/0x10 [ 474.201539][T10682] ? __pfx_ksys_write+0x10/0x10 [ 474.201567][T10682] __x64_sys_select+0xbd/0x160 [ 474.201588][T10682] ? do_syscall_64+0x91/0xfa0 [ 474.201613][T10682] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.201638][T10682] do_syscall_64+0xcd/0xfa0 [ 474.201665][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.201683][T10682] RIP: 0033:0x7f812fd8eec9 [ 474.201698][T10682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.201714][T10682] RSP: 002b:00007f812dff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 474.201731][T10682] RAX: ffffffffffffffda RBX: 00007f812ffe6090 RCX: 00007f812fd8eec9 [ 474.201742][T10682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 474.201752][T10682] RBP: 00007f812dff6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.201761][T10682] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 474.201771][T10682] R13: 00007f812ffe6128 R14: 00007f812ffe6090 R15: 00007ffc7e8aa828 [ 474.201792][T10682] [ 476.480384][T10710] netlink: 186 bytes leftover after parsing attributes in process `syz.2.841'. [ 481.471478][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 487.341597][T10840] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 487.537665][T10840] netlink: 25 bytes leftover after parsing attributes in process `syz.4.867'. [ 487.988596][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 488.039138][T10842] netlink: 13 bytes leftover after parsing attributes in process `syz.0.868'. [ 488.063729][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 488.827146][T10851] [U] /Eev/audio1 [ 488.850859][T10851] [U] F츱Z|ÿGP—)Ïû\n‰C:„Du´šbΧtUw´U‹¤U•3.O«"4Š»Y8@Z5`¤mÿb»ê4*¤ô´À¿Ôm¿Ç¾˜×lD—)}úKß>f¸&•9- [ 488.923898][T10851] [U] ÌWwâœK EÊÓ6èË?(úIâ®,•k8ƒÏÅDÌ [ 488.945405][T10851] [U] [ 488.948195][T10851] [U] [ 488.950943][T10851] [U] [ 488.979493][T10851] [U] [ 488.982549][T10851] [U] [ 488.985298][T10851] [U] [ 488.988027][T10851] [U] [ 489.024210][T10851] [U] [ 489.026998][T10851] [U] [ 489.029832][T10851] [U] [ 489.032574][T10851] [U] [ 489.080972][T10851] [U] [ 489.083913][T10851] [U] [ 489.086781][T10851] [U] [ 489.089520][T10851] [U] [ 489.131994][T10851] [U] [ 489.134784][T10851] [U] [ 489.137517][T10851] [U] [ 489.140253][T10851] [U] [ 489.160961][T10851] [U] [ 489.163711][T10851] [U] [ 489.166418][T10851] [U] [ 489.169161][T10851] [U] [ 489.181029][T10851] [U] [ 489.183823][T10851] [U] [ 489.186568][T10851] [U] [ 489.189434][T10851] [U] [ 489.261884][T10851] [U] [ 489.264944][T10851] [U] [ 489.267693][T10851] [U] [ 489.270536][T10851] [U] [ 489.356444][T10851] [U] [ 489.359238][T10851] [U] [ 489.362084][T10851] [U] [ 489.364815][T10851] [U] [ 489.433434][T10851] [U] [ 489.436298][T10851] [U] [ 489.439019][T10851] [U] [ 489.441755][T10851] [U] [ 489.491168][T10851] [U] [ 489.494012][T10851] [U] [ 489.496750][T10851] [U] [ 489.499916][T10851] [U] [ 489.671080][T10851] [U] [ 489.674130][T10851] [U] [ 489.676876][T10851] [U] [ 489.679615][T10851] [U] [ 489.731209][T10851] [U] [ 489.733965][T10851] [U] [ 489.736776][T10851] [U] [ 489.739470][T10851] [U] [ 489.797022][T10851] [U] [ 490.166151][T10861] netlink: 338 bytes leftover after parsing attributes in process `syz.4.875'. [ 491.762284][T10885] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 491.921061][T10890] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 492.169421][T10894] __vm_enough_memory: pid: 10894, comm: syz.4.883, bytes: 4398046511104 not enough memory for the allocation [ 492.456769][T10903] FAULT_INJECTION: forcing a failure. [ 492.456769][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 492.490606][T10903] CPU: 0 UID: 0 PID: 10903 Comm: syz.2.885 Not tainted syzkaller #0 PREEMPT(full) [ 492.490650][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 492.490668][T10903] Call Trace: [ 492.490679][T10903] [ 492.490695][T10903] dump_stack_lvl+0x16c/0x1f0 [ 492.490744][T10903] should_fail_ex+0x512/0x640 [ 492.490787][T10903] ? __kmalloc_cache_noprof+0x5f/0x780 [ 492.490828][T10903] should_failslab+0xc2/0x120 [ 492.490858][T10903] __kmalloc_cache_noprof+0x72/0x780 [ 492.490895][T10903] ? snd_midi_event_new+0x6f/0x210 [ 492.490932][T10903] ? snd_midi_event_new+0x6f/0x210 [ 492.490961][T10903] snd_midi_event_new+0x6f/0x210 [ 492.490994][T10903] snd_virmidi_input_open+0x107/0x4d0 [ 492.491093][T10903] open_substream+0x480/0x990 [ 492.491142][T10903] rawmidi_open_priv+0x513/0x6e0 [ 492.491192][T10903] snd_rawmidi_open+0x4cb/0xbf0 [ 492.491244][T10903] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 492.491288][T10903] ? __pfx_default_wake_function+0x10/0x10 [ 492.491336][T10903] ? kobject_get_unless_zero+0x156/0x1e0 [ 492.491390][T10903] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 492.491432][T10903] snd_open+0x22d/0x4c0 [ 492.491468][T10903] ? __pfx_snd_open+0x10/0x10 [ 492.491498][T10903] chrdev_open+0x234/0x6a0 [ 492.491542][T10903] ? __pfx_apparmor_file_open+0x10/0x10 [ 492.491575][T10903] ? __pfx_chrdev_open+0x10/0x10 [ 492.491625][T10903] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 492.491678][T10903] do_dentry_open+0x982/0x1530 [ 492.491724][T10903] ? __pfx_chrdev_open+0x10/0x10 [ 492.491778][T10903] vfs_open+0x82/0x3f0 [ 492.491817][T10903] path_openat+0x1de4/0x2cb0 [ 492.491878][T10903] ? __pfx_path_openat+0x10/0x10 [ 492.491925][T10903] ? __lock_acquire+0xb8a/0x1c90 [ 492.491962][T10903] do_filp_open+0x20b/0x470 [ 492.492006][T10903] ? __pfx_do_filp_open+0x10/0x10 [ 492.492082][T10903] ? alloc_fd+0x471/0x7d0 [ 492.492130][T10903] do_sys_openat2+0x11b/0x1d0 [ 492.492162][T10903] ? __pfx_do_sys_openat2+0x10/0x10 [ 492.492195][T10903] ? __sys_sendmsg+0x18c/0x220 [ 492.492249][T10903] __x64_sys_openat+0x174/0x210 [ 492.492280][T10903] ? __pfx___x64_sys_openat+0x10/0x10 [ 492.492330][T10903] do_syscall_64+0xcd/0xfa0 [ 492.492373][T10903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.492402][T10903] RIP: 0033:0x7f27c158eec9 [ 492.492427][T10903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.492454][T10903] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 492.492483][T10903] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 492.492502][T10903] RDX: 0000000000080002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 492.492519][T10903] RBP: 00007f27c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.492536][T10903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.492553][T10903] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 492.492596][T10903] [ 495.389018][T10960] netlink: 'syz.2.893': attribute type 2 has an invalid length. [ 496.599627][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.894'. [ 498.252884][T11005] 0x000200000001-0xa29656a63616329 : "" [ 498.308110][T11005] mtd: partition "" is out of reach -- disabled [ 498.366755][T11005] ftl_cs: FTL header not found. [ 498.869544][T11017] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 504.596006][T11086] vhci_hcd: invalid port number 16 [ 504.601333][T11086] vhci_hcd: invalid port number 16 [ 504.621160][T11086] random: crng reseeded on system resumption [ 504.669743][T11086] FAULT_INJECTION: forcing a failure. [ 504.669743][T11086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.784795][T11086] CPU: 1 UID: 0 PID: 11086 Comm: syz.2.914 Not tainted syzkaller #0 PREEMPT(full) [ 504.784838][T11086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.784856][T11086] Call Trace: [ 504.784865][T11086] [ 504.784877][T11086] dump_stack_lvl+0x16c/0x1f0 [ 504.784929][T11086] should_fail_ex+0x512/0x640 [ 504.784981][T11086] should_fail_alloc_page+0xe7/0x130 [ 504.785013][T11086] prepare_alloc_pages+0x3c2/0x610 [ 504.785041][T11086] ? rcu_is_watching+0x12/0xc0 [ 504.785081][T11086] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 504.785129][T11086] ? stack_trace_save+0x8e/0xc0 [ 504.785167][T11086] ? __pfx_stack_trace_save+0x10/0x10 [ 504.785208][T11086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 504.785257][T11086] ? kasan_save_stack+0x42/0x60 [ 504.785293][T11086] ? kasan_save_stack+0x33/0x60 [ 504.785336][T11086] ? do_dentry_open+0x982/0x1530 [ 504.785372][T11086] ? vfs_open+0x82/0x3f0 [ 504.785394][T11086] ? path_openat+0x1de4/0x2cb0 [ 504.785430][T11086] ? do_filp_open+0x20b/0x470 [ 504.785466][T11086] ? do_sys_openat2+0x11b/0x1d0 [ 504.785491][T11086] ? __x64_sys_openat+0x174/0x210 [ 504.785517][T11086] ? do_syscall_64+0xcd/0xfa0 [ 504.785553][T11086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.785581][T11086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 504.785612][T11086] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 504.785646][T11086] ? policy_nodemask+0xea/0x4e0 [ 504.785674][T11086] alloc_pages_mpol+0x1fb/0x550 [ 504.785702][T11086] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 504.785747][T11086] alloc_pages_noprof+0x131/0x390 [ 504.785777][T11086] get_zeroed_page_noprof+0x18/0xb0 [ 504.785823][T11086] get_image_page+0x18/0x190 [ 504.785862][T11086] alloc_rtree_node+0x3c/0xb0 [ 504.785900][T11086] memory_bm_create+0x519/0x810 [ 504.785958][T11086] create_basic_memory_bitmaps+0xbd/0x320 [ 504.786007][T11086] snapshot_open+0x235/0x2b0 [ 504.786032][T11086] ? __pfx_snapshot_open+0x10/0x10 [ 504.786062][T11086] misc_open+0x26d/0x450 [ 504.786108][T11086] ? __pfx_misc_open+0x10/0x10 [ 504.786152][T11086] chrdev_open+0x234/0x6a0 [ 504.786194][T11086] ? __pfx_apparmor_file_open+0x10/0x10 [ 504.786234][T11086] ? __pfx_chrdev_open+0x10/0x10 [ 504.786277][T11086] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 504.786324][T11086] do_dentry_open+0x982/0x1530 [ 504.786367][T11086] ? __pfx_chrdev_open+0x10/0x10 [ 504.786422][T11086] vfs_open+0x82/0x3f0 [ 504.786460][T11086] path_openat+0x1de4/0x2cb0 [ 504.786517][T11086] ? __pfx_path_openat+0x10/0x10 [ 504.786563][T11086] ? __lock_acquire+0xb8a/0x1c90 [ 504.786600][T11086] do_filp_open+0x20b/0x470 [ 504.786640][T11086] ? __pfx_do_filp_open+0x10/0x10 [ 504.786711][T11086] ? alloc_fd+0x471/0x7d0 [ 504.786763][T11086] do_sys_openat2+0x11b/0x1d0 [ 504.786795][T11086] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.786844][T11086] __x64_sys_openat+0x174/0x210 [ 504.786878][T11086] ? __pfx___x64_sys_openat+0x10/0x10 [ 504.786929][T11086] do_syscall_64+0xcd/0xfa0 [ 504.786984][T11086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.787013][T11086] RIP: 0033:0x7f27c158eec9 [ 504.787040][T11086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.787069][T11086] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.787098][T11086] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 504.787118][T11086] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 504.787137][T11086] RBP: 00007f27c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 504.787155][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.787172][T11086] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 504.787208][T11086] [ 506.824503][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.830929][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.758399][ T30] audit: type=1804 audit(4294967341.140:7): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.924" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 514.414407][T11220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.936'. [ 514.752285][T11230] random: crng reseeded on system resumption [ 514.936292][T10942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.355460][T10942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.852276][T10942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.251226][T10942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.974694][T10942] bridge_slave_1: left allmulticast mode [ 516.991330][T10942] bridge_slave_1: left promiscuous mode [ 516.998708][T10942] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.069637][T10942] bridge_slave_0: left allmulticast mode [ 517.099374][T10942] bridge_slave_0: left promiscuous mode [ 517.114957][T10942] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.011540][T10942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.108172][T10942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.128438][T10942] bond0 (unregistering): Released all slaves [ 521.625336][T10942] hsr_slave_0: left promiscuous mode [ 521.651707][T10942] hsr_slave_1: left promiscuous mode [ 521.683139][T10942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.711444][T10942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.725263][T10942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.737956][T10942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.757118][T11325] 0x000200000001-0xa29656a63616329 : "" [ 521.799653][T10942] veth1_macvtap: left promiscuous mode [ 521.815286][T10942] veth0_macvtap: left promiscuous mode [ 521.821527][T10942] veth1_vlan: left promiscuous mode [ 521.834189][T10942] veth0_vlan: left promiscuous mode [ 521.843228][T11325] mtd: partition "" is out of reach -- disabled [ 521.851744][T11325] ftl_cs: FTL header not found. [ 522.990169][T11345] vivid-003: ================= START STATUS ================= [ 523.028727][T11345] vivid-003: Radio HW Seek Mode: Bounded [ 523.063727][T11345] vivid-003: Radio Programmable HW Seek: false [ 523.092494][T11345] vivid-003: RDS Rx I/O Mode: Block I/O [ 523.098764][T11345] vivid-003: Generate RBDS Instead of RDS: false [ 523.105499][T11345] vivid-003: RDS Reception: true [ 523.110756][T11345] vivid-003: RDS Program Type: 0 inactive [ 523.118077][T11345] vivid-003: RDS PS Name: inactive [ 523.124176][T11345] vivid-003: RDS Radio Text: inactive [ 523.129869][T11345] vivid-003: RDS Traffic Announcement: false inactive [ 523.163677][T11345] vivid-003: RDS Traffic Program: false inactive [ 523.198959][T11345] vivid-003: RDS Music: false inactive [ 523.209190][T11345] vivid-003: ================== END STATUS ================== [ 523.636474][T10942] team0 (unregistering): Port device team_slave_1 removed [ 523.685958][T10942] team0 (unregistering): Port device team_slave_0 removed [ 524.885329][T11363] FAULT_INJECTION: forcing a failure. [ 524.885329][T11363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.981641][T11363] CPU: 1 UID: 0 PID: 11363 Comm: syz.0.958 Not tainted syzkaller #0 PREEMPT(full) [ 524.981683][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 524.981700][T11363] Call Trace: [ 524.981709][T11363] [ 524.981720][T11363] dump_stack_lvl+0x16c/0x1f0 [ 524.981778][T11363] should_fail_ex+0x512/0x640 [ 524.981828][T11363] _copy_to_user+0x32/0xd0 [ 524.981860][T11363] simple_read_from_buffer+0xcb/0x170 [ 524.981899][T11363] proc_fail_nth_read+0x197/0x240 [ 524.981942][T11363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.981986][T11363] ? rw_verify_area+0xcf/0x6c0 [ 524.982020][T11363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 524.982059][T11363] vfs_read+0x1e4/0xcf0 [ 524.982105][T11363] ? __pfx___mutex_lock+0x10/0x10 [ 524.982150][T11363] ? __pfx_vfs_read+0x10/0x10 [ 524.982201][T11363] ? __fget_files+0x20e/0x3c0 [ 524.982251][T11363] ksys_read+0x12a/0x250 [ 524.982291][T11363] ? __pfx_ksys_read+0x10/0x10 [ 524.982343][T11363] do_syscall_64+0xcd/0xfa0 [ 524.982389][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.982417][T11363] RIP: 0033:0x7f812fd8d8dc [ 524.982441][T11363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 524.982468][T11363] RSP: 002b:00007f8130b5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 524.982495][T11363] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd8d8dc [ 524.982513][T11363] RDX: 000000000000000f RSI: 00007f8130b5b0a0 RDI: 0000000000000004 [ 524.982530][T11363] RBP: 00007f8130b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 524.982546][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.982561][T11363] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 524.982603][T11363] [ 528.147267][T11410] can: request_module (can-proto-0) failed. [ 529.198560][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 529.387514][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 529.879252][T11457] [U] /Eev/audio1 [ 529.883414][T11457] [U] F츱Z|ÿGP—)Ïû\n‰C:„Du´šbΧtUw´U‹¤U•3.O«"4Š»Y8@Z5`¤mÿb»ê4*¤ô´À¿Ôm¿Ç¾˜×lD—)}úKß>f¸&•9- [ 529.908274][T11457] [U] ÌWwâœK EÊÓ6èË?(úIâ®,•k8ƒÏÅDÌ [ 529.941240][T11457] [U] [ 529.944030][T11457] [U] [ 529.946759][T11457] [U] [ 529.960700][T11457] [U] [ 529.963475][T11457] [U] [ 529.966219][T11457] [U] [ 529.969013][T11457] [U] [ 529.974027][T11457] [U] [ 529.976881][T11457] [U] [ 529.979623][T11457] [U] [ 529.982450][T11457] [U] [ 529.993541][T11457] [U] [ 531.921871][T11493] vhci_hcd: invalid port number 16 [ 531.944196][T11493] vhci_hcd: invalid port number 16 [ 533.160902][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 537.668676][T11600] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 540.765305][T11646] openvswitch: ovs_: Dropping previously announced user features [ 542.960838][T11689] program syz.1.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.636300][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 552.271106][T11855] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 552.629331][T11860] FAULT_INJECTION: forcing a failure. [ 552.629331][T11860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.690993][T11860] CPU: 0 UID: 0 PID: 11860 Comm: syz.1.1047 Not tainted syzkaller #0 PREEMPT(full) [ 552.691031][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.691046][T11860] Call Trace: [ 552.691055][T11860] [ 552.691065][T11860] dump_stack_lvl+0x16c/0x1f0 [ 552.691110][T11860] should_fail_ex+0x512/0x640 [ 552.691155][T11860] should_fail_alloc_page+0xe7/0x130 [ 552.691184][T11860] prepare_alloc_pages+0x3c2/0x610 [ 552.691219][T11860] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 552.691258][T11860] ? stack_trace_save+0x8e/0xc0 [ 552.691298][T11860] ? __pfx_stack_trace_save+0x10/0x10 [ 552.691332][T11860] ? __x64_sys_sendfile64+0x1d8/0x220 [ 552.691357][T11860] ? stack_depot_save_flags+0x29/0x9c0 [ 552.691407][T11860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.691442][T11860] ? __kasan_kmalloc+0xaa/0xb0 [ 552.691478][T11860] ? copy_splice_read+0x1a8/0xc20 [ 552.691512][T11860] ? splice_direct_to_actor+0x2a1/0xa30 [ 552.691541][T11860] ? do_splice_direct+0x174/0x240 [ 552.691641][T11860] ? do_sendfile+0xb06/0xe50 [ 552.691674][T11860] ? __x64_sys_sendfile64+0x1d8/0x220 [ 552.691697][T11860] ? do_syscall_64+0xcd/0xfa0 [ 552.691731][T11860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.691787][T11860] alloc_pages_bulk_noprof+0x71c/0x1410 [ 552.691835][T11860] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 552.691881][T11860] ? copy_splice_read+0x1a8/0xc20 [ 552.691924][T11860] copy_splice_read+0x1e1/0xc20 [ 552.691966][T11860] ? __pfx_copy_splice_read+0x10/0x10 [ 552.692014][T11860] ? find_held_lock+0x2b/0x80 [ 552.692059][T11860] ? __pfx_copy_splice_read+0x10/0x10 [ 552.692090][T11860] do_splice_read+0x285/0x370 [ 552.692127][T11860] splice_direct_to_actor+0x2a1/0xa30 [ 552.692163][T11860] ? __pfx_direct_splice_actor+0x10/0x10 [ 552.692205][T11860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 552.692238][T11860] ? get_pid_task+0xfc/0x250 [ 552.692277][T11860] do_splice_direct+0x174/0x240 [ 552.692311][T11860] ? __pfx_do_splice_direct+0x10/0x10 [ 552.692345][T11860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 552.692384][T11860] ? rw_verify_area+0xcf/0x6c0 [ 552.692421][T11860] do_sendfile+0xb06/0xe50 [ 552.692466][T11860] ? __pfx_do_sendfile+0x10/0x10 [ 552.692502][T11860] ? __fget_files+0x20e/0x3c0 [ 552.692561][T11860] __x64_sys_sendfile64+0x1d8/0x220 [ 552.692587][T11860] ? ksys_write+0x1ac/0x250 [ 552.692625][T11860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 552.692664][T11860] do_syscall_64+0xcd/0xfa0 [ 552.692708][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.692734][T11860] RIP: 0033:0x7f446358eec9 [ 552.692757][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.692782][T11860] RSP: 002b:00007f4464413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 552.692808][T11860] RAX: ffffffffffffffda RBX: 00007f44637e6180 RCX: 00007f446358eec9 [ 552.692826][T11860] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 552.692841][T11860] RBP: 00007f4464413090 R08: 0000000000000000 R09: 0000000000000000 [ 552.692857][T11860] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000002 [ 552.692872][T11860] R13: 00007f44637e6218 R14: 00007f44637e6180 R15: 00007fffa05e93e8 [ 552.692909][T11860] [ 552.698488][T11860] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1047'. [ 553.109898][T11865] FAULT_INJECTION: forcing a failure. [ 553.109898][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 553.161336][T11865] CPU: 1 UID: 0 PID: 11865 Comm: syz.4.1048 Not tainted syzkaller #0 PREEMPT(full) [ 553.161364][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 553.161374][T11865] Call Trace: [ 553.161381][T11865] [ 553.161388][T11865] dump_stack_lvl+0x16c/0x1f0 [ 553.161419][T11865] should_fail_ex+0x512/0x640 [ 553.161456][T11865] ? __kmalloc_cache_noprof+0x5f/0x780 [ 553.161481][T11865] should_failslab+0xc2/0x120 [ 553.161499][T11865] __kmalloc_cache_noprof+0x72/0x780 [ 553.161522][T11865] ? watch_queue_init+0x45/0x170 [ 553.161552][T11865] ? watch_queue_init+0x45/0x170 [ 553.161577][T11865] watch_queue_init+0x45/0x170 [ 553.161602][T11865] create_pipe_files+0x676/0x9a0 [ 553.161632][T11865] do_pipe2+0xaf/0x1c0 [ 553.161658][T11865] ? __pfx_do_pipe2+0x10/0x10 [ 553.161685][T11865] ? xfd_validate_state+0x61/0x180 [ 553.161710][T11865] __x64_sys_pipe2+0x54/0x80 [ 553.161737][T11865] do_syscall_64+0xcd/0xfa0 [ 553.161765][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.161783][T11865] RIP: 0033:0x7fdf0738eec9 [ 553.161797][T11865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.161814][T11865] RSP: 002b:00007fdf08220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 553.161831][T11865] RAX: ffffffffffffffda RBX: 00007fdf075e5fa0 RCX: 00007fdf0738eec9 [ 553.161842][T11865] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000000 [ 553.161852][T11865] RBP: 00007fdf07411f91 R08: 0000000000000000 R09: 0000000000000000 [ 553.161862][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.161871][T11865] R13: 00007fdf075e6038 R14: 00007fdf075e5fa0 R15: 00007ffe3ea36a78 [ 553.161893][T11865] [ 553.573779][T11866] binder: 11862:11866 unknown command 80 [ 553.641281][T11866] binder: 11862:11866 ioctl c0306201 0 returned -22 [ 553.893018][T11878] random: crng reseeded on system resumption [ 554.127145][T11881] hub 1-0:1.0: USB hub found [ 554.179236][T11887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1051'. [ 554.180370][T11881] hub 1-0:1.0: 1 port detected [ 554.475318][T11887] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 554.796339][T11881] netlink: 302 bytes leftover after parsing attributes in process `syz.0.1050'. [ 556.102099][T11910] Console: switching to colour VGA+ 80x25 [ 556.220034][T11917] size and base must be multiples of 4 kiB [ 556.226161][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.4.1054 Not tainted syzkaller #0 PREEMPT(full) [ 556.226201][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.226218][T11917] Call Trace: [ 556.226228][T11917] [ 556.226239][T11917] dump_stack_lvl+0x16c/0x1f0 [ 556.226291][T11917] mtrr_del+0xd1/0x110 [ 556.226323][T11917] mtrr_ioctl+0x922/0xcf0 [ 556.226357][T11917] ? __pfx_mtrr_ioctl+0x10/0x10 [ 556.226398][T11917] ? find_held_lock+0x2b/0x80 [ 556.226450][T11917] ? __fget_files+0x20e/0x3c0 [ 556.226493][T11917] ? __pfx_mtrr_ioctl+0x10/0x10 [ 556.226531][T11917] proc_reg_unlocked_ioctl+0x229/0x320 [ 556.226563][T11917] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 556.226599][T11917] __x64_sys_ioctl+0x18e/0x210 [ 556.226638][T11917] do_syscall_64+0xcd/0xfa0 [ 556.226687][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.226727][T11917] RIP: 0033:0x7fdf0738eec9 [ 556.226752][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.226781][T11917] RSP: 002b:00007fdf081ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.226810][T11917] RAX: ffffffffffffffda RBX: 00007fdf075e6090 RCX: 00007fdf0738eec9 [ 556.226829][T11917] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 556.226847][T11917] RBP: 00007fdf07411f91 R08: 0000000000000000 R09: 0000000000000000 [ 556.226865][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.226882][T11917] R13: 00007fdf075e6128 R14: 00007fdf075e6090 R15: 00007ffe3ea36a78 [ 556.226924][T11917] [ 556.978978][T11932] FAULT_INJECTION: forcing a failure. [ 556.978978][T11932] name failslab, interval 1, probability 0, space 0, times 0 [ 557.019369][T11932] CPU: 1 UID: 0 PID: 11932 Comm: syz.4.1055 Not tainted syzkaller #0 PREEMPT(full) [ 557.019408][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 557.019423][T11932] Call Trace: [ 557.019433][T11932] [ 557.019444][T11932] dump_stack_lvl+0x16c/0x1f0 [ 557.019636][T11932] should_fail_ex+0x512/0x640 [ 557.019670][T11932] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 557.019698][T11932] should_failslab+0xc2/0x120 [ 557.019715][T11932] kmem_cache_alloc_node_noprof+0x78/0x770 [ 557.019739][T11932] ? __alloc_skb+0x2b2/0x380 [ 557.019769][T11932] ? __alloc_skb+0x2b2/0x380 [ 557.019799][T11932] __alloc_skb+0x2b2/0x380 [ 557.019823][T11932] ? __pfx___alloc_skb+0x10/0x10 [ 557.019848][T11932] ? genl_rcv_msg+0x4bb/0x800 [ 557.019873][T11932] netlink_ack+0x15d/0xb80 [ 557.019936][T11932] netlink_rcv_skb+0x332/0x420 [ 557.019964][T11932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.019995][T11932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.020037][T11932] ? netlink_deliver_tap+0x1ae/0xd30 [ 557.020084][T11932] genl_rcv+0x28/0x40 [ 557.020101][T11932] netlink_unicast+0x5aa/0x870 [ 557.020132][T11932] ? __pfx_netlink_unicast+0x10/0x10 [ 557.020169][T11932] netlink_sendmsg+0x8c8/0xdd0 [ 557.020201][T11932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.020232][T11932] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 557.020256][T11932] ____sys_sendmsg+0xa98/0xc70 [ 557.020276][T11932] ? copy_msghdr_from_user+0x10a/0x160 [ 557.020302][T11932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.020328][T11932] ? __pfx_futex_wake_mark+0x10/0x10 [ 557.020353][T11932] ___sys_sendmsg+0x134/0x1d0 [ 557.020378][T11932] ? futex_private_hash_put+0x176/0x300 [ 557.020406][T11932] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.020440][T11932] ? __lock_acquire+0x622/0x1c90 [ 557.020486][T11932] __sys_sendmsg+0x16d/0x220 [ 557.020514][T11932] ? __pfx___sys_sendmsg+0x10/0x10 [ 557.020541][T11932] ? __x64_sys_futex+0x1e0/0x4c0 [ 557.020566][T11932] ? fput+0x9b/0xd0 [ 557.020588][T11932] do_syscall_64+0xcd/0xfa0 [ 557.020616][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.020633][T11932] RIP: 0033:0x7fdf0738eec9 [ 557.020649][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.020675][T11932] RSP: 002b:00007fdf081ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.020702][T11932] RAX: ffffffffffffffda RBX: 00007fdf075e6090 RCX: 00007fdf0738eec9 [ 557.020720][T11932] RDX: 0000000000048080 RSI: 0000200000000140 RDI: 0000000000000006 [ 557.020736][T11932] RBP: 00007fdf07411f91 R08: 0000000000000000 R09: 0000000000000000 [ 557.020753][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.020769][T11932] R13: 00007fdf075e6128 R14: 00007fdf075e6090 R15: 00007ffe3ea36a78 [ 557.020810][T11932] [ 558.130880][T11941] sctp: Changing rto_alpha or rto_beta may lead to suboptimal rtt/srtt estimations! [ 558.170190][T11929] kexec: Could not allocate control_code_buffer [ 561.565765][T11995] FAULT_INJECTION: forcing a failure. [ 561.565765][T11995] name failslab, interval 1, probability 0, space 0, times 0 [ 561.591130][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.4.1069 Not tainted syzkaller #0 PREEMPT(full) [ 561.591167][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 561.591182][T11995] Call Trace: [ 561.591191][T11995] [ 561.591202][T11995] dump_stack_lvl+0x16c/0x1f0 [ 561.591249][T11995] should_fail_ex+0x512/0x640 [ 561.591279][T11995] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 561.591304][T11995] should_failslab+0xc2/0x120 [ 561.591322][T11995] kmem_cache_alloc_noprof+0x75/0x6e0 [ 561.591345][T11995] ? alloc_vfsmnt+0x23/0x6b0 [ 561.591365][T11995] ? alloc_vfsmnt+0x23/0x6b0 [ 561.591379][T11995] alloc_vfsmnt+0x23/0x6b0 [ 561.591394][T11995] ? __pfx___might_resched+0x10/0x10 [ 561.591420][T11995] clone_mnt+0x4b/0x930 [ 561.591449][T11995] copy_tree+0xee/0xbd0 [ 561.591471][T11995] ? __pfx_down_write+0x10/0x10 [ 561.591494][T11995] copy_mnt_ns+0x1a9/0xac0 [ 561.591518][T11995] ? rcu_is_watching+0x12/0xc0 [ 561.591549][T11995] create_new_namespaces+0xd3/0xa90 [ 561.591574][T11995] ? bpf_lsm_capable+0x9/0x10 [ 561.591590][T11995] ? security_capable+0x7e/0x260 [ 561.591610][T11995] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 561.591638][T11995] ksys_unshare+0x45b/0xa40 [ 561.591656][T11995] ? __pfx_ksys_unshare+0x10/0x10 [ 561.591672][T11995] ? ksys_write+0x1ac/0x250 [ 561.591706][T11995] __x64_sys_unshare+0x31/0x40 [ 561.591722][T11995] do_syscall_64+0xcd/0xfa0 [ 561.591750][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.591767][T11995] RIP: 0033:0x7fdf0738eec9 [ 561.591782][T11995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.591800][T11995] RSP: 002b:00007fdf081ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 561.591817][T11995] RAX: ffffffffffffffda RBX: 00007fdf075e6090 RCX: 00007fdf0738eec9 [ 561.591828][T11995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 561.591838][T11995] RBP: 00007fdf081ff090 R08: 0000000000000000 R09: 0000000000000000 [ 561.591848][T11995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.591858][T11995] R13: 00007fdf075e6128 R14: 00007fdf075e6090 R15: 00007ffe3ea36a78 [ 561.591881][T11995] [ 565.107404][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 568.086485][T12100] FAULT_INJECTION: forcing a failure. [ 568.086485][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 568.135110][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(full) [ 568.135151][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 568.135168][T12100] Call Trace: [ 568.135179][T12100] [ 568.135191][T12100] dump_stack_lvl+0x16c/0x1f0 [ 568.135243][T12100] should_fail_ex+0x512/0x640 [ 568.135291][T12100] ? __kmalloc_cache_noprof+0x5f/0x780 [ 568.135335][T12100] should_failslab+0xc2/0x120 [ 568.135366][T12100] __kmalloc_cache_noprof+0x72/0x780 [ 568.135416][T12100] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 568.135464][T12100] ? shrinker_alloc+0xf5/0xbf0 [ 568.135515][T12100] ? shrinker_alloc+0xf5/0xbf0 [ 568.135555][T12100] shrinker_alloc+0xf5/0xbf0 [ 568.135602][T12100] ? mark_held_locks+0x49/0x80 [ 568.135634][T12100] ? pcpu_memcg_post_alloc_hook+0x1e/0x690 [ 568.135685][T12100] ? __pfx_shrinker_alloc+0x10/0x10 [ 568.135738][T12100] ? lockdep_init_map_type+0x5c/0x280 [ 568.135773][T12100] ? __raw_spin_lock_init+0x3a/0x110 [ 568.135809][T12100] ? __init_rwsem+0x12d/0x1b0 [ 568.135851][T12100] alloc_super+0x776/0xb60 [ 568.135903][T12100] sget_fc+0x116/0xc20 [ 568.135945][T12100] ? __pfx_set_anon_super_fc+0x10/0x10 [ 568.135982][T12100] ? __pfx_mqueue_fill_super+0x10/0x10 [ 568.136036][T12100] get_tree_nodev+0x28/0x190 [ 568.136080][T12100] mqueue_get_tree+0xf1/0x130 [ 568.136129][T12100] vfs_get_tree+0x8e/0x340 [ 568.136166][T12100] fc_mount_longterm+0x1a/0x270 [ 568.136205][T12100] mq_init_ns+0x426/0x620 [ 568.136244][T12100] copy_ipcs+0x2d6/0x550 [ 568.136283][T12100] create_new_namespaces+0x20a/0xa90 [ 568.136349][T12100] ? security_capable+0x7e/0x260 [ 568.136385][T12100] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 568.136443][T12100] ksys_unshare+0x45b/0xa40 [ 568.136474][T12100] ? __pfx_ksys_unshare+0x10/0x10 [ 568.136505][T12100] ? xfd_validate_state+0x61/0x180 [ 568.136554][T12100] __x64_sys_unshare+0x31/0x40 [ 568.136581][T12100] do_syscall_64+0xcd/0xfa0 [ 568.136625][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.136652][T12100] RIP: 0033:0x7f812fd8eec9 [ 568.136675][T12100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.136702][T12100] RSP: 002b:00007f812dfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 568.136729][T12100] RAX: ffffffffffffffda RBX: 00007f812ffe6180 RCX: 00007f812fd8eec9 [ 568.136749][T12100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 568.136765][T12100] RBP: 00007f812fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 568.136783][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.136800][T12100] R13: 00007f812ffe6218 R14: 00007f812ffe6180 R15: 00007ffc7e8aa828 [ 568.136840][T12100] [ 568.418454][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.425311][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.738325][T12118] can: request_module (can-proto-0) failed. [ 570.650788][T12139] FAULT_INJECTION: forcing a failure. [ 570.650788][T12139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.790764][T12139] CPU: 0 UID: 0 PID: 12139 Comm: syz.4.1099 Not tainted syzkaller #0 PREEMPT(full) [ 570.790802][T12139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 570.790818][T12139] Call Trace: [ 570.790827][T12139] [ 570.790838][T12139] dump_stack_lvl+0x16c/0x1f0 [ 570.790886][T12139] should_fail_ex+0x512/0x640 [ 570.790930][T12139] ? page_copy_sane+0xcd/0x2d0 [ 570.790976][T12139] copy_folio_from_iter_atomic+0x4d3/0x1ac0 [ 570.791027][T12139] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 570.791057][T12139] ? shmem_write_begin+0x176/0x300 [ 570.791100][T12139] ? __pfx_shmem_write_begin+0x10/0x10 [ 570.791141][T12139] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 570.791199][T12139] generic_perform_write+0x221/0x900 [ 570.791248][T12139] ? __pfx_generic_perform_write+0x10/0x10 [ 570.791288][T12139] ? generic_update_time+0xcf/0xf0 [ 570.791332][T12139] ? mnt_put_write_access_file+0x45/0xf0 [ 570.791375][T12139] shmem_file_write_iter+0x10e/0x140 [ 570.791422][T12139] do_iter_readv_writev+0x662/0x9e0 [ 570.791466][T12139] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 570.791523][T12139] vfs_writev+0x35f/0xde0 [ 570.791573][T12139] ? __pfx_vfs_writev+0x10/0x10 [ 570.791616][T12139] ? __mutex_lock+0x1c5/0x1060 [ 570.791672][T12139] ? __pfx___mutex_lock+0x10/0x10 [ 570.791731][T12139] ? __fget_files+0x20e/0x3c0 [ 570.791765][T12139] ? __fget_files+0x180/0x3c0 [ 570.791812][T12139] ? do_writev+0x132/0x340 [ 570.791846][T12139] do_writev+0x132/0x340 [ 570.791883][T12139] ? __pfx_do_writev+0x10/0x10 [ 570.791934][T12139] do_syscall_64+0xcd/0xfa0 [ 570.791979][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.792007][T12139] RIP: 0033:0x7fdf0738eec9 [ 570.792031][T12139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.792058][T12139] RSP: 002b:00007fdf081bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 570.792087][T12139] RAX: ffffffffffffffda RBX: 00007fdf075e6270 RCX: 00007fdf0738eec9 [ 570.792105][T12139] RDX: 00000000000003ff RSI: 0000200000004100 RDI: 0000000000000003 [ 570.792123][T12139] RBP: 00007fdf081bd090 R08: 0000000000000000 R09: 0000000000000000 [ 570.792139][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.792155][T12139] R13: 00007fdf075e6308 R14: 00007fdf075e6270 R15: 00007ffe3ea36a78 [ 570.792198][T12139] [ 575.227076][T12197] binder: BINDER_SET_CONTEXT_MGR already set [ 575.234492][T12197] binder: 12196:12197 ioctl 4018620d 9 returned -16 [ 575.304385][T12197] FAULT_INJECTION: forcing a failure. [ 575.304385][T12197] name failslab, interval 1, probability 0, space 0, times 0 [ 575.351771][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.2.1111 Not tainted syzkaller #0 PREEMPT(full) [ 575.351818][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.351829][T12197] Call Trace: [ 575.351836][T12197] [ 575.351844][T12197] dump_stack_lvl+0x16c/0x1f0 [ 575.351877][T12197] should_fail_ex+0x512/0x640 [ 575.351905][T12197] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 575.351932][T12197] should_failslab+0xc2/0x120 [ 575.351950][T12197] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 575.351975][T12197] ? shmem_alloc_inode+0x25/0x50 [ 575.352007][T12197] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 575.352034][T12197] ? shmem_alloc_inode+0x25/0x50 [ 575.352060][T12197] shmem_alloc_inode+0x25/0x50 [ 575.352087][T12197] alloc_inode+0x64/0x240 [ 575.352105][T12197] new_inode+0x22/0x1c0 [ 575.352124][T12197] shmem_get_inode+0x19a/0xfb0 [ 575.352147][T12197] shmem_mknod+0x1a8/0x450 [ 575.352168][T12197] ? __pfx_shmem_create+0x10/0x10 [ 575.352185][T12197] lookup_open.isra.0+0x11d3/0x1580 [ 575.352212][T12197] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 575.352247][T12197] ? find_held_lock+0x2b/0x80 [ 575.352280][T12197] ? __pfx_down_write+0x10/0x10 [ 575.352303][T12197] path_openat+0x893/0x2cb0 [ 575.352336][T12197] ? __pfx_path_openat+0x10/0x10 [ 575.352367][T12197] do_filp_open+0x20b/0x470 [ 575.352394][T12197] ? __pfx_do_filp_open+0x10/0x10 [ 575.352436][T12197] ? _raw_spin_unlock+0x28/0x50 [ 575.352459][T12197] ? alloc_fd+0x471/0x7d0 [ 575.352493][T12197] do_sys_openat2+0x11b/0x1d0 [ 575.352513][T12197] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.352531][T12197] ? __pfx_task_mm_cid_work+0x10/0x10 [ 575.352554][T12197] ? __pfx___might_resched+0x10/0x10 [ 575.352584][T12197] __x64_sys_open+0x153/0x1e0 [ 575.352604][T12197] ? __pfx___x64_sys_open+0x10/0x10 [ 575.352628][T12197] ? rcu_is_watching+0x12/0xc0 [ 575.352654][T12197] do_syscall_64+0xcd/0xfa0 [ 575.352682][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.352700][T12197] RIP: 0033:0x7f27c158eec9 [ 575.352715][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.352732][T12197] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 575.352749][T12197] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 575.352760][T12197] RDX: 0000000000000055 RSI: 0000000000022240 RDI: 0000000000000000 [ 575.352770][T12197] RBP: 00007f27c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.352780][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.352790][T12197] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 575.352813][T12197] [ 577.672425][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'. [ 578.791217][T12270] can: request_module (can-proto-0) failed. [ 580.491939][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 581.567635][T12324] netlink: zone id is out of range [ 581.573016][T12324] netlink: zone id is out of range [ 581.578228][T12324] netlink: zone id is out of range [ 581.583397][T12324] netlink: zone id is out of range [ 581.592256][T12324] netlink: zone id is out of range [ 581.597588][T12324] netlink: zone id is out of range [ 581.671483][T12324] netlink: zone id is out of range [ 581.676673][T12324] netlink: zone id is out of range [ 581.743282][T12328] program syz.4.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.760413][T12324] netlink: zone id is out of range [ 581.766310][T12324] netlink: zone id is out of range [ 581.775258][T12324] usb usb37: usbfs: process 12324 (syz.0.1134) did not claim interface 0 before use [ 582.437476][ T30] audit: type=1804 audit(4294967414.840:8): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1139" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 583.889199][T12359] program syz.1.1143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.215299][T12420] program syz.2.1161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.351554][T12466] can: request_module (can-proto-0) failed. [ 592.720080][T12489] program syz.4.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 594.762291][T12531] random: crng reseeded on system resumption [ 597.972775][T12596] net_ratelimit: 30 callbacks suppressed [ 597.972791][T12596] openvswitch: netlink: Missing valid actions attribute. [ 599.154848][T12629] random: crng reseeded on system resumption [ 601.681720][ T30] audit: type=1800 audit(4294967434.080:9): pid=12666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1215" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 603.611368][T12692] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 604.709276][T12709] can: request_module (can-proto-0) failed. [ 608.053772][T12768] ptrace attach of "./syz-executor exec"[12769] was attempted by "./syz-executor exec"[12768] [ 608.243117][T12775] FAULT_INJECTION: forcing a failure. [ 608.243117][T12775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.265474][T12775] CPU: 0 UID: 0 PID: 12775 Comm: syz.4.1236 Not tainted syzkaller #0 PREEMPT(full) [ 608.265517][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.265533][T12775] Call Trace: [ 608.265540][T12775] [ 608.265547][T12775] dump_stack_lvl+0x16c/0x1f0 [ 608.265579][T12775] should_fail_ex+0x512/0x640 [ 608.265611][T12775] strncpy_from_user+0x3b/0x2e0 [ 608.265639][T12775] getname_flags.part.0+0x8f/0x550 [ 608.265662][T12775] getname_flags+0x93/0xf0 [ 608.265685][T12775] do_sys_openat2+0xb8/0x1d0 [ 608.265705][T12775] ? __pfx_do_sys_openat2+0x10/0x10 [ 608.265733][T12775] __x64_sys_open+0x153/0x1e0 [ 608.265752][T12775] ? __pfx___x64_sys_open+0x10/0x10 [ 608.265776][T12775] ? rcu_is_watching+0x12/0xc0 [ 608.265803][T12775] do_syscall_64+0xcd/0xfa0 [ 608.265831][T12775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.265848][T12775] RIP: 0033:0x7fdf0738eec9 [ 608.265863][T12775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.265880][T12775] RSP: 002b:00007fdf081ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 608.265898][T12775] RAX: ffffffffffffffda RBX: 00007fdf075e6090 RCX: 00007fdf0738eec9 [ 608.265909][T12775] RDX: 0000000000000000 RSI: 0000000000280000 RDI: 0000200000000180 [ 608.265920][T12775] RBP: 00007fdf07411f91 R08: 0000000000000000 R09: 0000000000000000 [ 608.265930][T12775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.265940][T12775] R13: 00007fdf075e6128 R14: 00007fdf075e6090 R15: 00007ffe3ea36a78 [ 608.265963][T12775] [ 611.793123][T12820] program syz.0.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.935551][T12824] program syz.2.1251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.126040][T12852] program syz.4.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.390878][T12920] FAULT_INJECTION: forcing a failure. [ 619.390878][T12920] name fail_futex, interval 1, probability 0, space 0, times 0 [ 619.415865][T12920] CPU: 0 UID: 0 PID: 12920 Comm: syz.4.1272 Not tainted syzkaller #0 PREEMPT(full) [ 619.415899][T12920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 619.415909][T12920] Call Trace: [ 619.415916][T12920] [ 619.415922][T12920] dump_stack_lvl+0x16c/0x1f0 [ 619.415954][T12920] should_fail_ex+0x512/0x640 [ 619.415985][T12920] get_futex_key+0x1d0/0x1560 [ 619.416017][T12920] ? __pfx_get_futex_key+0x10/0x10 [ 619.416047][T12920] ? __destroy_inode+0x2e4/0x730 [ 619.416062][T12920] ? __pfx_sock_free_inode+0x10/0x10 [ 619.416085][T12920] futex_wake+0xea/0x530 [ 619.416106][T12920] ? __pfx_evict+0x10/0x10 [ 619.416121][T12920] ? __pfx_futex_wake+0x10/0x10 [ 619.416155][T12920] do_futex+0x1e3/0x350 [ 619.416173][T12920] ? __pfx_do_futex+0x10/0x10 [ 619.416189][T12920] ? iput+0x35/0x40 [ 619.416202][T12920] ? __sock_release+0x20b/0x270 [ 619.416234][T12920] __x64_sys_futex+0x1e0/0x4c0 [ 619.416253][T12920] ? __sys_socket+0xac/0x260 [ 619.416273][T12920] ? __pfx___x64_sys_futex+0x10/0x10 [ 619.416292][T12920] ? xfd_validate_state+0x61/0x180 [ 619.416317][T12920] do_syscall_64+0xcd/0xfa0 [ 619.416345][T12920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.416362][T12920] RIP: 0033:0x7fdf0738eec9 [ 619.416377][T12920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.416393][T12920] RSP: 002b:00007fdf082200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.416411][T12920] RAX: ffffffffffffffda RBX: 00007fdf075e5fa8 RCX: 00007fdf0738eec9 [ 619.416422][T12920] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdf075e5fac [ 619.416432][T12920] RBP: 00007fdf075e5fa0 R08: 00007fdf08221000 R09: 0000000000000000 [ 619.416443][T12920] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 619.416453][T12920] R13: 00007fdf075e6038 R14: 00007ffe3ea36990 R15: 00007ffe3ea36a78 [ 619.416475][T12920] [ 621.877886][T12949] program syz.1.1279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.700863][T12974] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd13 [ 623.759504][T12974] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1285'. [ 626.105203][T13001] program syz.2.1291 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.472187][T13005] program syz.0.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.707332][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.734260][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.168375][T13058] FAULT_INJECTION: forcing a failure. [ 631.168375][T13058] name failslab, interval 1, probability 0, space 0, times 0 [ 631.210197][T13058] CPU: 1 UID: 0 PID: 13058 Comm: syz.2.1304 Not tainted syzkaller #0 PREEMPT(full) [ 631.210234][T13058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 631.210250][T13058] Call Trace: [ 631.210259][T13058] [ 631.210270][T13058] dump_stack_lvl+0x16c/0x1f0 [ 631.210316][T13058] should_fail_ex+0x512/0x640 [ 631.210349][T13058] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 631.210375][T13058] should_failslab+0xc2/0x120 [ 631.210392][T13058] kmem_cache_alloc_noprof+0x75/0x6e0 [ 631.210415][T13058] ? taskstats_exit+0x654/0xbe0 [ 631.210441][T13058] ? taskstats_exit+0x654/0xbe0 [ 631.210461][T13058] ? acct_update_integrals+0x2ce/0x4a0 [ 631.210490][T13058] taskstats_exit+0x654/0xbe0 [ 631.210518][T13058] ? __pfx_taskstats_exit+0x10/0x10 [ 631.210543][T13058] ? exit_signals+0x38e/0xb40 [ 631.210571][T13058] do_exit+0x5dc/0x2bf0 [ 631.210599][T13058] ? __pfx_do_exit+0x10/0x10 [ 631.210617][T13058] ? do_raw_spin_lock+0x12c/0x2b0 [ 631.210655][T13058] ? find_held_lock+0x2b/0x80 [ 631.210696][T13058] do_group_exit+0xd3/0x2a0 [ 631.210727][T13058] get_signal+0x2671/0x26d0 [ 631.210773][T13058] ? __pfx_sock_write_iter+0x10/0x10 [ 631.210807][T13058] ? __pfx_get_signal+0x10/0x10 [ 631.210851][T13058] ? do_futex+0x122/0x350 [ 631.210896][T13058] ? __pfx_do_futex+0x10/0x10 [ 631.210930][T13058] arch_do_signal_or_restart+0x8f/0x790 [ 631.210977][T13058] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 631.211040][T13058] ? xfd_validate_state+0x61/0x180 [ 631.211070][T13058] ? __pfx_ksys_write+0x10/0x10 [ 631.211119][T13058] exit_to_user_mode_loop+0x85/0x130 [ 631.211156][T13058] do_syscall_64+0x426/0xfa0 [ 631.211201][T13058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.211230][T13058] RIP: 0033:0x7f27c158eec9 [ 631.211255][T13058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.211289][T13058] RSP: 002b:00007f27c23a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 631.211318][T13058] RAX: fffffffffffffe00 RBX: 00007f27c17e5fa8 RCX: 00007f27c158eec9 [ 631.211337][T13058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f27c17e5fa8 [ 631.211353][T13058] RBP: 00007f27c17e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 631.211370][T13058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.211386][T13058] R13: 00007f27c17e6038 R14: 00007fffdf0af4b0 R15: 00007fffdf0af598 [ 631.211425][T13058] [ 632.030771][T13066] can: request_module (can-proto-0) failed. [ 634.561289][T13110] FAULT_INJECTION: forcing a failure. [ 634.561289][T13110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.590747][T13110] CPU: 0 UID: 0 PID: 13110 Comm: syz.0.1311 Not tainted syzkaller #0 PREEMPT(full) [ 634.590796][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.590813][T13110] Call Trace: [ 634.590824][T13110] [ 634.590834][T13110] dump_stack_lvl+0x16c/0x1f0 [ 634.590884][T13110] should_fail_ex+0x512/0x640 [ 634.590933][T13110] _copy_to_user+0x32/0xd0 [ 634.590962][T13110] simple_read_from_buffer+0xcb/0x170 [ 634.591000][T13110] proc_fail_nth_read+0x197/0x240 [ 634.591038][T13110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.591078][T13110] ? rw_verify_area+0xcf/0x6c0 [ 634.591110][T13110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.591146][T13110] vfs_read+0x1e4/0xcf0 [ 634.591190][T13110] ? __pfx___mutex_lock+0x10/0x10 [ 634.591233][T13110] ? __pfx_vfs_read+0x10/0x10 [ 634.591285][T13110] ? __fget_files+0x20e/0x3c0 [ 634.591336][T13110] ksys_read+0x12a/0x250 [ 634.591375][T13110] ? __pfx_ksys_read+0x10/0x10 [ 634.591428][T13110] do_syscall_64+0xcd/0xfa0 [ 634.591476][T13110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.591503][T13110] RIP: 0033:0x7f812fd8d8dc [ 634.591525][T13110] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 634.591551][T13110] RSP: 002b:00007f812dfd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 634.591577][T13110] RAX: ffffffffffffffda RBX: 00007f812ffe6180 RCX: 00007f812fd8d8dc [ 634.591596][T13110] RDX: 000000000000000f RSI: 00007f812dfd50a0 RDI: 0000000000000009 [ 634.591613][T13110] RBP: 00007f812dfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 634.591629][T13110] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 634.591646][T13110] R13: 00007f812ffe6218 R14: 00007f812ffe6180 R15: 00007ffc7e8aa828 [ 634.591684][T13110] [ 636.109259][T13135] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 636.195923][T13142] openvswitch: ovs_: Dropping previously announced user features [ 637.074907][T13152] can: request_module (can-proto-0) failed. [ 639.186207][T13201] can: request_module (can-proto-0) failed. [ 639.554017][ T30] audit: type=1804 audit(4294967471.920:10): pid=13218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1334" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 648.421455][ T30] audit: type=1800 audit(4294967480.820:11): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1360" name="lu_gp_id" dev="configfs" ino=44730 res=0 errno=0 [ 650.959234][T13366] FAULT_INJECTION: forcing a failure. [ 650.959234][T13366] name failslab, interval 1, probability 0, space 0, times 0 [ 650.974818][T13366] CPU: 0 UID: 0 PID: 13366 Comm: syz.2.1366 Not tainted syzkaller #0 PREEMPT(full) [ 650.974845][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.974856][T13366] Call Trace: [ 650.974862][T13366] [ 650.974870][T13366] dump_stack_lvl+0x16c/0x1f0 [ 650.974910][T13366] should_fail_ex+0x512/0x640 [ 650.974938][T13366] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 650.974965][T13366] should_failslab+0xc2/0x120 [ 650.974982][T13366] kmem_cache_alloc_noprof+0x75/0x6e0 [ 650.975005][T13366] ? key_alloc+0x3e0/0x1330 [ 650.975032][T13366] ? key_alloc+0x3e0/0x1330 [ 650.975052][T13366] key_alloc+0x3e0/0x1330 [ 650.975083][T13366] ? __pfx_key_alloc+0x10/0x10 [ 650.975105][T13366] ? __pfx_key_default_cmp+0x10/0x10 [ 650.975131][T13366] ? __pfx_keyring_search_iterator+0x10/0x10 [ 650.975160][T13366] keyring_alloc+0x44/0xc0 [ 650.975187][T13366] look_up_user_keyrings+0x510/0x760 [ 650.975210][T13366] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 650.975239][T13366] lookup_user_key+0x1a3/0x1300 [ 650.975262][T13366] ? __pfx_lookup_user_key+0x10/0x10 [ 650.975281][T13366] ? do_futex+0x122/0x350 [ 650.975305][T13366] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 650.975330][T13366] ? fput+0x9b/0xd0 [ 650.975351][T13366] keyctl_keyring_clear+0x24/0x1a0 [ 650.975369][T13366] __do_sys_keyctl+0x355/0x590 [ 650.975390][T13366] do_syscall_64+0xcd/0xfa0 [ 650.975418][T13366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.975436][T13366] RIP: 0033:0x7f27c158eec9 [ 650.975451][T13366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.975468][T13366] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 650.975486][T13366] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 650.975497][T13366] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 650.975508][T13366] RBP: 00007f27c1611f91 R08: 0000000000000008 R09: 0000000000000000 [ 650.975518][T13366] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 650.975528][T13366] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 650.975551][T13366] [ 652.818778][T13393] program syz.4.1369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.223567][T13419] can: request_module (can-proto-0) failed. [ 656.605365][T13441] FAULT_INJECTION: forcing a failure. [ 656.605365][T13441] name failslab, interval 1, probability 0, space 0, times 0 [ 656.632906][T13441] CPU: 1 UID: 0 PID: 13441 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT(full) [ 656.632942][T13441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 656.632952][T13441] Call Trace: [ 656.632959][T13441] [ 656.632966][T13441] dump_stack_lvl+0x16c/0x1f0 [ 656.632999][T13441] should_fail_ex+0x512/0x640 [ 656.633028][T13441] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 656.633055][T13441] should_failslab+0xc2/0x120 [ 656.633074][T13441] kmem_cache_alloc_noprof+0x75/0x6e0 [ 656.633097][T13441] ? vm_area_dup+0x27/0x8d0 [ 656.633123][T13441] ? vm_area_dup+0x27/0x8d0 [ 656.633144][T13441] vm_area_dup+0x27/0x8d0 [ 656.633167][T13441] __split_vma+0x18e/0x1070 [ 656.633191][T13441] ? __pfx___split_vma+0x10/0x10 [ 656.633218][T13441] ? flush_tlb_mm_range+0x36a/0x17a0 [ 656.633240][T13441] ? __page_table_check_ptes_set+0x1ae/0x420 [ 656.633269][T13441] vms_gather_munmap_vmas+0x1cb/0x1340 [ 656.633291][T13441] ? move_page_tables+0x140d/0x4230 [ 656.633316][T13441] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 656.633338][T13441] ? move_page_tables+0xf9e/0x4230 [ 656.633372][T13441] do_vmi_align_munmap+0x286/0x7e0 [ 656.633398][T13441] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 656.633451][T13441] do_vmi_munmap+0x204/0x3e0 [ 656.633477][T13441] move_vma+0xb5f/0x1770 [ 656.633503][T13441] ? __pfx_move_vma+0x10/0x10 [ 656.633546][T13441] ? vrm_set_new_addr+0x208/0x290 [ 656.633572][T13441] mremap_to+0x1b7/0x450 [ 656.633596][T13441] do_mremap+0x13a8/0x2020 [ 656.633621][T13441] ? futex_private_hash_put+0xf0/0x300 [ 656.633655][T13441] ? __pfx_do_mremap+0x10/0x10 [ 656.633683][T13441] ? do_writev+0x218/0x340 [ 656.633712][T13441] __do_sys_mremap+0x119/0x170 [ 656.633736][T13441] ? __pfx___do_sys_mremap+0x10/0x10 [ 656.633766][T13441] ? __x64_sys_futex+0x1e0/0x4c0 [ 656.633798][T13441] do_syscall_64+0xcd/0xfa0 [ 656.633826][T13441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.633844][T13441] RIP: 0033:0x7f446358eec9 [ 656.633859][T13441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.633876][T13441] RSP: 002b:00007f4464455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 656.633893][T13441] RAX: ffffffffffffffda RBX: 00007f44637e5fa0 RCX: 00007f446358eec9 [ 656.633904][T13441] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000004000 [ 656.633915][T13441] RBP: 00007f4463611f91 R08: 0000000100000000 R09: 0000000000000000 [ 656.633925][T13441] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 656.633935][T13441] R13: 00007f44637e6038 R14: 00007f44637e5fa0 R15: 00007fffa05e93e8 [ 656.633958][T13441] [ 657.224100][T13450] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 660.443830][T13522] FAULT_INJECTION: forcing a failure. [ 660.443830][T13522] name failslab, interval 1, probability 0, space 0, times 0 [ 660.501468][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.1.1394 Not tainted syzkaller #0 PREEMPT(full) [ 660.501508][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.501526][T13522] Call Trace: [ 660.501536][T13522] [ 660.501548][T13522] dump_stack_lvl+0x16c/0x1f0 [ 660.501598][T13522] should_fail_ex+0x512/0x640 [ 660.501642][T13522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 660.501676][T13522] should_failslab+0xc2/0x120 [ 660.501707][T13522] kmem_cache_alloc_noprof+0x75/0x6e0 [ 660.501747][T13522] ? skb_clone+0x190/0x3f0 [ 660.501810][T13522] ? skb_clone+0x190/0x3f0 [ 660.501852][T13522] skb_clone+0x190/0x3f0 [ 660.501897][T13522] netlink_deliver_tap+0xabd/0xd30 [ 660.501952][T13522] netlink_unicast+0x64c/0x870 [ 660.502010][T13522] ? __pfx_netlink_unicast+0x10/0x10 [ 660.502054][T13522] ? __asan_memset+0x23/0x50 [ 660.502093][T13522] ? __build_skb_around+0x278/0x3b0 [ 660.502131][T13522] ? is_vmalloc_addr+0x86/0xa0 [ 660.502174][T13522] netlink_sendmsg+0x8c8/0xdd0 [ 660.502228][T13522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.502279][T13522] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 660.502318][T13522] ____sys_sendmsg+0xa98/0xc70 [ 660.502356][T13522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.502397][T13522] ? __pfx__kstrtoull+0x10/0x10 [ 660.502443][T13522] ___sys_sendmsg+0x134/0x1d0 [ 660.502489][T13522] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.502553][T13522] ? find_held_lock+0x2b/0x80 [ 660.502619][T13522] __sys_sendmmsg+0x200/0x420 [ 660.502669][T13522] ? __pfx___sys_sendmmsg+0x10/0x10 [ 660.502728][T13522] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 660.502791][T13522] ? fput+0x9b/0xd0 [ 660.502832][T13522] ? ksys_write+0x1ac/0x250 [ 660.502872][T13522] ? __pfx_ksys_write+0x10/0x10 [ 660.502921][T13522] __x64_sys_sendmmsg+0x9c/0x100 [ 660.502964][T13522] ? lockdep_hardirqs_on+0x7c/0x110 [ 660.503006][T13522] do_syscall_64+0xcd/0xfa0 [ 660.503052][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.503081][T13522] RIP: 0033:0x7f446358eec9 [ 660.503105][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.503133][T13522] RSP: 002b:00007f4464455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 660.503161][T13522] RAX: ffffffffffffffda RBX: 00007f44637e5fa0 RCX: 00007f446358eec9 [ 660.503181][T13522] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 660.503198][T13522] RBP: 00007f4464455090 R08: 0000000000000000 R09: 0000000000000000 [ 660.503216][T13522] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 660.503232][T13522] R13: 00007f44637e6038 R14: 00007f44637e5fa0 R15: 00007fffa05e93e8 [ 660.503275][T13522] [ 661.203934][T13529] program syz.4.1396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.466256][T13544] FAULT_INJECTION: forcing a failure. [ 661.466256][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 661.489333][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) [ 661.489370][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.489386][T13544] Call Trace: [ 661.489396][T13544] [ 661.489406][T13544] dump_stack_lvl+0x16c/0x1f0 [ 661.489452][T13544] should_fail_ex+0x512/0x640 [ 661.489500][T13544] ? __kmalloc_cache_noprof+0x5f/0x780 [ 661.489544][T13544] should_failslab+0xc2/0x120 [ 661.489567][T13544] __kmalloc_cache_noprof+0x72/0x780 [ 661.489589][T13544] ? snprintf+0xc7/0x100 [ 661.489611][T13544] ? init_srcu_struct_fields+0x97a/0xde0 [ 661.489637][T13544] ? init_srcu_struct_fields+0x97a/0xde0 [ 661.489657][T13544] init_srcu_struct_fields+0x97a/0xde0 [ 661.489679][T13544] ? lockdep_init_map_type+0x5c/0x280 [ 661.489701][T13544] kvm_dev_ioctl+0x57f/0x1a80 [ 661.489732][T13544] ? find_held_lock+0x2b/0x80 [ 661.489756][T13544] ? hook_file_ioctl_common+0x145/0x410 [ 661.489782][T13544] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 661.489811][T13544] ? __fget_files+0x20e/0x3c0 [ 661.489838][T13544] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 661.489865][T13544] __x64_sys_ioctl+0x18e/0x210 [ 661.489887][T13544] do_syscall_64+0xcd/0xfa0 [ 661.489915][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.489933][T13544] RIP: 0033:0x7f446358eec9 [ 661.489948][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.489965][T13544] RSP: 002b:00007f4464413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.489983][T13544] RAX: ffffffffffffffda RBX: 00007f44637e6180 RCX: 00007f446358eec9 [ 661.489994][T13544] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 661.490004][T13544] RBP: 00007f4464413090 R08: 0000000000000000 R09: 0000000000000000 [ 661.490014][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.490024][T13544] R13: 00007f44637e6218 R14: 00007f44637e6180 R15: 00007fffa05e93e8 [ 661.490048][T13544] [ 662.428390][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1398'. [ 663.180426][T13562] can: request_module (can-proto-0) failed. [ 664.031795][T13581] openvswitch: HfR: Dropping previously announced user features [ 664.162636][T13581] netlink: 'syz.0.1402': attribute type 1 has an invalid length. [ 666.621779][T13633] FAULT_INJECTION: forcing a failure. [ 666.621779][T13633] name failslab, interval 1, probability 0, space 0, times 0 [ 666.624751][T13631] input: f¬ as /devices/virtual/input/input8 [ 666.669202][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.2.1408 Not tainted syzkaller #0 PREEMPT(full) [ 666.669245][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 666.669264][T13633] Call Trace: [ 666.669274][T13633] [ 666.669286][T13633] dump_stack_lvl+0x16c/0x1f0 [ 666.669336][T13633] should_fail_ex+0x512/0x640 [ 666.669383][T13633] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 666.669424][T13633] should_failslab+0xc2/0x120 [ 666.669450][T13633] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 666.669486][T13633] ? __lock_acquire+0xb8a/0x1c90 [ 666.669513][T13633] ? __d_alloc+0x32/0xae0 [ 666.669560][T13633] ? __d_alloc+0x32/0xae0 [ 666.669613][T13633] __d_alloc+0x32/0xae0 [ 666.669663][T13633] d_alloc_pseudo+0x1c/0xc0 [ 666.669691][T13633] alloc_file_pseudo+0xcf/0x230 [ 666.669722][T13633] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 666.669766][T13633] ? _raw_spin_unlock+0x28/0x50 [ 666.669806][T13633] ? alloc_fd+0x471/0x7d0 [ 666.669849][T13633] __anon_inode_getfile+0xe8/0x280 [ 666.669902][T13633] anon_inode_getfd+0x52/0xb0 [ 666.669952][T13633] map_create+0x1605/0x27e0 [ 666.670006][T13633] ? __pfx_map_create+0x10/0x10 [ 666.670041][T13633] ? __might_fault+0xe3/0x190 [ 666.670081][T13633] ? __might_fault+0xe3/0x190 [ 666.670118][T13633] ? __might_fault+0x13b/0x190 [ 666.670173][T13633] __sys_bpf+0x3d9d/0x4980 [ 666.670213][T13633] ? futex_private_hash_put+0x18a/0x300 [ 666.670267][T13633] ? __pfx___sys_bpf+0x10/0x10 [ 666.670312][T13633] ? __pfx_futex_wake+0x10/0x10 [ 666.670368][T13633] ? do_futex+0x122/0x350 [ 666.670419][T13633] ? fput+0x9b/0xd0 [ 666.670451][T13633] ? xfd_validate_state+0x61/0x180 [ 666.670483][T13633] ? __pfx_ksys_write+0x10/0x10 [ 666.670531][T13633] __x64_sys_bpf+0x78/0xc0 [ 666.670572][T13633] ? lockdep_hardirqs_on+0x7c/0x110 [ 666.670622][T13633] do_syscall_64+0xcd/0xfa0 [ 666.670662][T13633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.670689][T13633] RIP: 0033:0x7f27c158eec9 [ 666.670714][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.670740][T13633] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 666.670780][T13633] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 666.670801][T13633] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 666.670819][T13633] RBP: 00007f27c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 666.670839][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.670856][T13633] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 666.670900][T13633] [ 669.680949][T13686] ptrace attach of "./syz-executor exec"[9880] was attempted by ""[13686] [ 672.069750][ T30] audit: type=1804 audit(4294967504.470:12): pid=13737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1422" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 673.121956][T13756] can: request_module (can-proto-0) failed. [ 675.147613][T13794] program syz.2.1433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 676.032828][T13809] binder: BINDER_SET_CONTEXT_MGR already set [ 676.039150][T13809] binder: 13808:13809 ioctl 4018620d 9 returned -16 [ 676.039180][T13812] binder: BINDER_SET_CONTEXT_MGR already set [ 676.077031][T13812] binder: 13808:13812 ioctl 4018620d 9 returned -16 [ 676.394290][T13821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 676.396386][T13812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1436'. [ 677.143477][ T30] audit: type=1804 audit(4294967509.540:13): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1439" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 679.144063][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'. [ 681.833218][T13890] sd 0:0:1:0: PR command failed: 1026 [ 681.838949][T13890] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 681.848217][T13890] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 682.996537][T13903] program syz.2.1456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 684.187184][T13920] FAULT_INJECTION: forcing a failure. [ 684.187184][T13920] name failslab, interval 1, probability 0, space 0, times 0 [ 684.269625][T13920] CPU: 1 UID: 0 PID: 13920 Comm: syz.4.1459 Not tainted syzkaller #0 PREEMPT(full) [ 684.269660][T13920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 684.269671][T13920] Call Trace: [ 684.269678][T13920] [ 684.269685][T13920] dump_stack_lvl+0x16c/0x1f0 [ 684.269718][T13920] should_fail_ex+0x512/0x640 [ 684.269746][T13920] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 684.269773][T13920] should_failslab+0xc2/0x120 [ 684.269791][T13920] kmem_cache_alloc_noprof+0x75/0x6e0 [ 684.269814][T13920] ? do_timer_create+0x18a/0x1510 [ 684.269839][T13920] ? do_timer_create+0x18a/0x1510 [ 684.269858][T13920] do_timer_create+0x18a/0x1510 [ 684.269880][T13920] ? do_futex+0x122/0x350 [ 684.269898][T13920] ? __pfx_do_timer_create+0x10/0x10 [ 684.269918][T13920] ? __pfx_do_futex+0x10/0x10 [ 684.269941][T13920] __x64_sys_timer_create+0x199/0x1d0 [ 684.269963][T13920] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 684.269986][T13920] ? xfd_validate_state+0x61/0x180 [ 684.270004][T13920] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 684.270034][T13920] do_syscall_64+0xcd/0xfa0 [ 684.270063][T13920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.270081][T13920] RIP: 0033:0x7fdf0738eec9 [ 684.270096][T13920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.270113][T13920] RSP: 002b:00007fdf081de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 684.270131][T13920] RAX: ffffffffffffffda RBX: 00007fdf075e6180 RCX: 00007fdf0738eec9 [ 684.270142][T13920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 684.270152][T13920] RBP: 00007fdf07411f91 R08: 0000000000000000 R09: 0000000000000000 [ 684.270163][T13920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.270173][T13920] R13: 00007fdf075e6218 R14: 00007fdf075e6180 R15: 00007ffe3ea36a78 [ 684.270195][T13920] [ 685.153681][T13927] program syz.4.1461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.389538][T13947] can: request_module (can-proto-0) failed. [ 688.129079][ T5842] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 690.085998][T13994] can: request_module (can-proto-0) failed. [ 691.146526][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.153257][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.052903][ T30] audit: type=1804 audit(4294967526.460:14): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1486" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 694.312108][T14060] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1487'. [ 696.371275][T14092] program syz.1.1493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 701.343191][T14159] synth uevent: /bus/mei: unknown uevent action string [ 702.304854][T14179] program syz.2.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.262822][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 704.273230][T14211] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1516'. [ 704.282945][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 705.524317][T14242] can: request_module (can-proto-0) failed. [ 707.820808][ T30] audit: type=1804 audit(4294967540.220:15): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1531" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 708.130419][T14285] can: request_module (can-proto-0) failed. [ 708.736477][T14293] can: request_module (can-proto-0) failed. [ 709.166879][ T30] audit: type=1800 audit(4294967541.570:16): pid=14303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1537" name="dbroot" dev="configfs" ino=48125 res=0 errno=0 [ 709.170029][T14303] db_root: not a directory: /dev/audio1 [ 710.026092][T14314] program syz.1.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.347224][T14337] program syz.0.1543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 711.796309][ T30] audit: type=1804 audit(4294967544.190:17): pid=14347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1545" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 712.693367][T14353] can: request_module (can-proto-0) failed. [ 715.853377][T14407] can: request_module (can-proto-0) failed. [ 716.517566][T14420] FAULT_INJECTION: forcing a failure. [ 716.517566][T14420] name failslab, interval 1, probability 0, space 0, times 0 [ 716.572150][T14420] CPU: 1 UID: 0 PID: 14420 Comm: syz.2.1560 Not tainted syzkaller #0 PREEMPT(full) [ 716.572192][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 716.572211][T14420] Call Trace: [ 716.572222][T14420] [ 716.572233][T14420] dump_stack_lvl+0x16c/0x1f0 [ 716.572285][T14420] should_fail_ex+0x512/0x640 [ 716.572329][T14420] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 716.572376][T14420] should_failslab+0xc2/0x120 [ 716.572409][T14420] kmem_cache_alloc_noprof+0x75/0x6e0 [ 716.572452][T14420] ? __proc_create+0x2ce/0x8e0 [ 716.572493][T14420] ? __proc_create+0x2ce/0x8e0 [ 716.572523][T14420] __proc_create+0x2ce/0x8e0 [ 716.572558][T14420] ? __pfx___proc_create+0x10/0x10 [ 716.572610][T14420] ? _raw_write_unlock+0x28/0x50 [ 716.572654][T14420] ? proc_register+0x559/0x8b0 [ 716.572696][T14420] proc_create_reg+0x7d/0x180 [ 716.572735][T14420] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 716.572793][T14420] proc_create_net_single+0x86/0x180 [ 716.572830][T14420] ? __pfx_proc_create_net_single+0x10/0x10 [ 716.572880][T14420] can_init_proc+0x178/0x4d0 [ 716.572930][T14420] can_pernet_init+0x1e4/0x370 [ 716.572977][T14420] ? __pfx_can_pernet_init+0x10/0x10 [ 716.573021][T14420] ops_init+0x1e2/0x5f0 [ 716.573086][T14420] setup_net+0x100/0x390 [ 716.573134][T14420] ? __pfx_setup_net+0x10/0x10 [ 716.573184][T14420] ? debug_mutex_init+0x37/0x70 [ 716.573231][T14420] copy_net_ns+0x2f8/0x690 [ 716.573265][T14420] create_new_namespaces+0x3ea/0xa90 [ 716.573317][T14420] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 716.573362][T14420] ksys_unshare+0x45b/0xa40 [ 716.573393][T14420] ? __pfx_ksys_unshare+0x10/0x10 [ 716.573425][T14420] ? xfd_validate_state+0x61/0x180 [ 716.573458][T14420] __x64_sys_unshare+0x31/0x40 [ 716.573475][T14420] do_syscall_64+0xcd/0xfa0 [ 716.573502][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.573520][T14420] RIP: 0033:0x7f27c158eec9 [ 716.573536][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.573553][T14420] RSP: 002b:00007f27c23a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 716.573571][T14420] RAX: ffffffffffffffda RBX: 00007f27c17e5fa0 RCX: 00007f27c158eec9 [ 716.573582][T14420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 716.573593][T14420] RBP: 00007f27c1611f91 R08: 0000000000000000 R09: 0000000000000000 [ 716.573603][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.573613][T14420] R13: 00007f27c17e6038 R14: 00007f27c17e5fa0 R15: 00007fffdf0af598 [ 716.573636][T14420] [ 718.585105][T14438] program syz.0.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 719.204054][T14451] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 720.234155][T14468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1571'. [ 720.714636][T14475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.060389][T14450] kexec: Could not allocate control_code_buffer [ 721.558409][T14480] random: crng reseeded on system resumption [ 725.695105][T14549] FAULT_INJECTION: forcing a failure. [ 725.695105][T14549] name failslab, interval 1, probability 0, space 0, times 0 [ 725.750489][T14549] CPU: 1 UID: 0 PID: 14549 Comm: syz.0.1584 Not tainted syzkaller #0 PREEMPT(full) [ 725.750534][T14549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.750553][T14549] Call Trace: [ 725.750563][T14549] [ 725.750581][T14549] dump_stack_lvl+0x16c/0x1f0 [ 725.750627][T14549] should_fail_ex+0x512/0x640 [ 725.750669][T14549] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 725.750714][T14549] should_failslab+0xc2/0x120 [ 725.750745][T14549] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 725.750790][T14549] ? __d_alloc+0x32/0xae0 [ 725.750843][T14549] ? __d_alloc+0x32/0xae0 [ 725.750886][T14549] __d_alloc+0x32/0xae0 [ 725.750936][T14549] d_alloc_pseudo+0x1c/0xc0 [ 725.750968][T14549] alloc_file_pseudo+0xcf/0x230 [ 725.751016][T14549] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 725.751050][T14549] ? alloc_fd+0x471/0x7d0 [ 725.751097][T14549] sock_alloc_file+0x50/0x210 [ 725.751130][T14549] __sys_socket+0x1c0/0x260 [ 725.751168][T14549] ? __pfx___sys_socket+0x10/0x10 [ 725.751208][T14549] ? do_user_addr_fault+0x843/0x1370 [ 725.751253][T14549] __x64_sys_socket+0x72/0xb0 [ 725.751284][T14549] ? lockdep_hardirqs_on+0x7c/0x110 [ 725.751323][T14549] do_syscall_64+0xcd/0xfa0 [ 725.751353][T14549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.751371][T14549] RIP: 0033:0x7f812fd90de7 [ 725.751387][T14549] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.751404][T14549] RSP: 002b:00007f8130b59fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 725.751422][T14549] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd90de7 [ 725.751434][T14549] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 725.751444][T14549] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 725.751454][T14549] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 725.751464][T14549] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 725.751487][T14549] [ 727.105308][T14576] FAULT_INJECTION: forcing a failure. [ 727.105308][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 727.222407][T14576] CPU: 1 UID: 0 PID: 14576 Comm: syz.0.1588 Not tainted syzkaller #0 PREEMPT(full) [ 727.222449][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 727.222468][T14576] Call Trace: [ 727.222479][T14576] [ 727.222492][T14576] dump_stack_lvl+0x16c/0x1f0 [ 727.222545][T14576] should_fail_ex+0x512/0x640 [ 727.222587][T14576] ? fs_reclaim_acquire+0xae/0x150 [ 727.222619][T14576] should_failslab+0xc2/0x120 [ 727.222650][T14576] __kmalloc_noprof+0xdd/0x880 [ 727.222690][T14576] ? security_inode_init_security+0x13f/0x390 [ 727.222748][T14576] ? security_inode_init_security+0x13f/0x390 [ 727.222800][T14576] security_inode_init_security+0x13f/0x390 [ 727.222850][T14576] ? __pfx_shmem_initxattrs+0x10/0x10 [ 727.222881][T14576] ? __pfx_security_inode_init_security+0x10/0x10 [ 727.222942][T14576] shmem_mknod+0x22e/0x450 [ 727.222981][T14576] shmem_mkdir+0x31/0x80 [ 727.223014][T14576] vfs_mkdir+0x593/0x8c0 [ 727.223057][T14576] do_mkdirat+0x304/0x3e0 [ 727.223106][T14576] ? __pfx_do_mkdirat+0x10/0x10 [ 727.223154][T14576] ? getname_flags.part.0+0x1c5/0x550 [ 727.223202][T14576] __x64_sys_mkdir+0xef/0x140 [ 727.223248][T14576] do_syscall_64+0xcd/0xfa0 [ 727.223297][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.223328][T14576] RIP: 0033:0x7f812fd8eec9 [ 727.223353][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.223382][T14576] RSP: 002b:00007f8130b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 727.223412][T14576] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd8eec9 [ 727.223431][T14576] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 727.223448][T14576] RBP: 00007f812fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 727.223466][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.223482][T14576] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 727.223527][T14576] [ 728.034789][ T30] audit: type=1804 audit(4294967560.440:18): pid=14600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1595" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 731.229834][ T30] audit: type=1804 audit(4294967563.630:19): pid=14677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1608" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 731.733325][T14688] program syz.1.1610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.016947][ T30] audit: type=1804 audit(4294967567.400:20): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1624" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 739.576754][ T30] audit: type=1804 audit(4294967571.980:21): pid=14830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1642" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 741.461943][T14854] FAULT_INJECTION: forcing a failure. [ 741.461943][T14854] name failslab, interval 1, probability 0, space 0, times 0 [ 741.461977][T14854] CPU: 1 UID: 0 PID: 14854 Comm: syz.0.1648 Not tainted syzkaller #0 PREEMPT(full) [ 741.462000][T14854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 741.462010][T14854] Call Trace: [ 741.462017][T14854] [ 741.462024][T14854] dump_stack_lvl+0x16c/0x1f0 [ 741.462056][T14854] should_fail_ex+0x512/0x640 [ 741.462087][T14854] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 741.462114][T14854] should_failslab+0xc2/0x120 [ 741.462132][T14854] kmem_cache_alloc_noprof+0x75/0x6e0 [ 741.462155][T14854] ? security_file_alloc+0x34/0x2b0 [ 741.462186][T14854] ? security_file_alloc+0x34/0x2b0 [ 741.462209][T14854] security_file_alloc+0x34/0x2b0 [ 741.462233][T14854] init_file+0x93/0x4c0 [ 741.462251][T14854] alloc_empty_file+0x73/0x1e0 [ 741.462270][T14854] alloc_file_pseudo+0x13a/0x230 [ 741.462295][T14854] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 741.462314][T14854] ? alloc_fd+0x471/0x7d0 [ 741.462340][T14854] sock_alloc_file+0x50/0x210 [ 741.462359][T14854] __sys_socket+0x1c0/0x260 [ 741.462380][T14854] ? __pfx___sys_socket+0x10/0x10 [ 741.462403][T14854] ? do_user_addr_fault+0x843/0x1370 [ 741.462430][T14854] __x64_sys_socket+0x72/0xb0 [ 741.462450][T14854] ? lockdep_hardirqs_on+0x7c/0x110 [ 741.462475][T14854] do_syscall_64+0xcd/0xfa0 [ 741.462506][T14854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.462523][T14854] RIP: 0033:0x7f812fd90de7 [ 741.462538][T14854] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.462555][T14854] RSP: 002b:00007f8130b59fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 741.462573][T14854] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd90de7 [ 741.462584][T14854] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 741.462594][T14854] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 741.462604][T14854] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 741.462614][T14854] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 741.462637][T14854] [ 742.450108][T14880] program syz.0.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 745.728958][T14937] FAULT_INJECTION: forcing a failure. [ 745.728958][T14937] name failslab, interval 1, probability 0, space 0, times 0 [ 745.803584][T14937] CPU: 0 UID: 0 PID: 14937 Comm: syz.1.1670 Not tainted syzkaller #0 PREEMPT(full) [ 745.803624][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.803641][T14937] Call Trace: [ 745.803651][T14937] [ 745.803663][T14937] dump_stack_lvl+0x16c/0x1f0 [ 745.803712][T14937] should_fail_ex+0x512/0x640 [ 745.803756][T14937] ? __kmalloc_cache_noprof+0x5f/0x780 [ 745.803806][T14937] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 745.803836][T14937] should_failslab+0xc2/0x120 [ 745.803861][T14937] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 745.803890][T14937] __kmalloc_cache_noprof+0x72/0x780 [ 745.803922][T14937] ? net_generic+0xea/0x2a0 [ 745.803946][T14937] ? ila_xlat_nl_dump_start+0xee/0x1c0 [ 745.803979][T14937] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 745.804011][T14937] ? ila_xlat_nl_dump_start+0xee/0x1c0 [ 745.804038][T14937] ila_xlat_nl_dump_start+0xee/0x1c0 [ 745.804070][T14937] genl_start+0x5ff/0x980 [ 745.804109][T14937] __netlink_dump_start+0x60e/0x990 [ 745.804161][T14937] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 745.804198][T14937] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 745.804243][T14937] ? __pfx_genl_get_cmd+0x10/0x10 [ 745.804268][T14937] ? __pfx_genl_start+0x10/0x10 [ 745.804295][T14937] ? __pfx_genl_dumpit+0x10/0x10 [ 745.804322][T14937] ? __pfx_genl_done+0x10/0x10 [ 745.804355][T14937] ? __radix_tree_lookup+0x21f/0x2c0 [ 745.804400][T14937] genl_rcv_msg+0x46e/0x800 [ 745.804434][T14937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.804462][T14937] ? __pfx_ila_xlat_nl_dump_start+0x10/0x10 [ 745.804490][T14937] ? __pfx_ila_xlat_nl_dump+0x10/0x10 [ 745.804517][T14937] ? __pfx_ila_xlat_nl_dump_done+0x10/0x10 [ 745.804564][T14937] netlink_rcv_skb+0x158/0x420 [ 745.804591][T14937] ? __pfx_genl_rcv_msg+0x10/0x10 [ 745.804625][T14937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 745.804670][T14937] ? netlink_deliver_tap+0x1ae/0xd30 [ 745.804720][T14937] genl_rcv+0x28/0x40 [ 745.804748][T14937] netlink_unicast+0x5aa/0x870 [ 745.804814][T14937] ? __pfx_netlink_unicast+0x10/0x10 [ 745.804877][T14937] netlink_sendmsg+0x8c8/0xdd0 [ 745.804930][T14937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.804982][T14937] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 745.805020][T14937] ____sys_sendmsg+0xa98/0xc70 [ 745.805055][T14937] ? copy_msghdr_from_user+0x10a/0x160 [ 745.805099][T14937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.805152][T14937] ___sys_sendmsg+0x134/0x1d0 [ 745.805200][T14937] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.805239][T14937] ? __lock_acquire+0x622/0x1c90 [ 745.805322][T14937] __sys_sendmsg+0x16d/0x220 [ 745.805367][T14937] ? __pfx___sys_sendmsg+0x10/0x10 [ 745.805438][T14937] do_syscall_64+0xcd/0xfa0 [ 745.805486][T14937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.805516][T14937] RIP: 0033:0x7f446358eec9 [ 745.805541][T14937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.805569][T14937] RSP: 002b:00007f4464455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.805597][T14937] RAX: ffffffffffffffda RBX: 00007f44637e5fa0 RCX: 00007f446358eec9 [ 745.805616][T14937] RDX: 0000000020004814 RSI: 0000200000000100 RDI: 0000000000000003 [ 745.805634][T14937] RBP: 00007f4464455090 R08: 0000000000000000 R09: 0000000000000000 [ 745.805651][T14937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.805668][T14937] R13: 00007f44637e6038 R14: 00007f44637e5fa0 R15: 00007fffa05e93e8 [ 745.805716][T14937] [ 747.477330][T14966] can: request_module (can-proto-0) failed. [ 748.949706][ T30] audit: type=1804 audit(4294967581.350:22): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1682" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 749.768584][T15012] netlink: zone id is out of range [ 749.774269][T15012] netlink: zone id is out of range [ 749.779531][T15012] netlink: zone id is out of range [ 749.806242][T15012] netlink: zone id is out of range [ 749.816355][T15012] netlink: zone id is out of range [ 749.822006][T15012] netlink: zone id is out of range [ 749.827186][T15012] netlink: zone id is out of range [ 749.840814][T15012] netlink: zone id is out of range [ 749.849404][T15012] netlink: zone id is out of range [ 749.863857][T15012] netlink: zone id is out of range [ 749.898355][T15014] capability: warning: `syz.0.1684' uses 32-bit capabilities (legacy support in use) [ 749.957851][T15011] can: request_module (can-proto-0) failed. [ 750.167022][T15017] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 750.221008][T15017] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 750.538079][ T30] audit: type=1804 audit(4294967582.940:23): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1690" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 750.975644][ T938] Process accounting resumed [ 751.034359][T15037] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1691'. [ 751.431936][T15029] Process accounting resumed [ 751.561266][T15050] random: crng reseeded on system resumption [ 752.586175][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.600781][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.704790][T15075] program syz.1.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.355867][ T5842] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 754.411705][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1707'. [ 756.828279][T15124] net_ratelimit: 35 callbacks suppressed [ 756.828297][T15124] openvswitch: netlink: Key type 29 is not supported [ 757.613050][ T30] audit: type=1804 audit(4294967590.010:24): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1718" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 758.083650][T15160] can: request_module (can-proto-0) failed. [ 758.781808][T15172] can: request_module (can-proto-0) failed. [ 760.198559][ T30] audit: type=1804 audit(4294967592.600:25): pid=15210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1732" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 760.437929][T15197] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 760.848840][ T30] audit: type=1804 audit(4294967593.250:26): pid=15218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1733" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 765.413687][T15323] FAULT_INJECTION: forcing a failure. [ 765.413687][T15323] name failslab, interval 1, probability 0, space 0, times 0 [ 765.426752][T15323] CPU: 1 UID: 0 PID: 15323 Comm: syz.0.1756 Not tainted syzkaller #0 PREEMPT(full) [ 765.426779][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.426790][T15323] Call Trace: [ 765.426796][T15323] [ 765.426803][T15323] dump_stack_lvl+0x16c/0x1f0 [ 765.426843][T15323] should_fail_ex+0x512/0x640 [ 765.426872][T15323] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 765.426898][T15323] should_failslab+0xc2/0x120 [ 765.426916][T15323] kmem_cache_alloc_noprof+0x75/0x6e0 [ 765.426940][T15323] ? sk_prot_alloc+0x60/0x2a0 [ 765.426964][T15323] ? sk_prot_alloc+0x60/0x2a0 [ 765.426980][T15323] sk_prot_alloc+0x60/0x2a0 [ 765.427001][T15323] sk_alloc+0x36/0xc20 [ 765.427026][T15323] __vsock_create.constprop.0+0x3c/0xbb0 [ 765.427049][T15323] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 765.427074][T15323] vsock_create+0x139/0x500 [ 765.427100][T15323] __sock_create+0x338/0x8d0 [ 765.427124][T15323] __sys_socket+0x14d/0x260 [ 765.427144][T15323] ? __pfx___sys_socket+0x10/0x10 [ 765.427165][T15323] ? xfd_validate_state+0x61/0x180 [ 765.427184][T15323] ? __task_pid_nr_ns+0x1f5/0x500 [ 765.427207][T15323] __x64_sys_socket+0x72/0xb0 [ 765.427227][T15323] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.427252][T15323] do_syscall_64+0xcd/0xfa0 [ 765.427280][T15323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.427298][T15323] RIP: 0033:0x7f812fd8eec9 [ 765.427313][T15323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.427330][T15323] RSP: 002b:00007f8130b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 765.427347][T15323] RAX: ffffffffffffffda RBX: 00007f812ffe5fa0 RCX: 00007f812fd8eec9 [ 765.427359][T15323] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 765.427368][T15323] RBP: 00007f812fe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.427379][T15323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.427389][T15323] R13: 00007f812ffe6038 R14: 00007f812ffe5fa0 R15: 00007ffc7e8aa828 [ 765.427411][T15323] [ 765.523258][T15326] ovs_: entered promiscuous mode [ 765.646267][T15329] can: request_module (can-proto-0) failed. [ 765.680374][T15333] netlink: 'syz.4.1757': attribute type 11 has an invalid length. [ 766.156902][T15346] program syz.0.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.570325][T15355] FAULT_INJECTION: forcing a failure. [ 766.570325][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 767.000937][T15355] CPU: 1 UID: 0 PID: 15355 Comm: syz.4.1764 Not tainted syzkaller #0 PREEMPT(full) [ 767.000965][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 767.000975][T15355] Call Trace: [ 767.000981][T15355] [ 767.000988][T15355] dump_stack_lvl+0x16c/0x1f0 [ 767.001020][T15355] should_fail_ex+0x512/0x640 [ 767.001048][T15355] ? fs_reclaim_acquire+0xae/0x150 [ 767.001067][T15355] should_failslab+0xc2/0x120 [ 767.001085][T15355] __kmalloc_noprof+0xdd/0x880 [ 767.001107][T15355] ? tomoyo_encode2+0x100/0x3e0 [ 767.001136][T15355] ? tomoyo_encode2+0x100/0x3e0 [ 767.001158][T15355] tomoyo_encode2+0x100/0x3e0 [ 767.001185][T15355] tomoyo_encode+0x29/0x50 [ 767.001208][T15355] tomoyo_realpath_from_path+0x18f/0x6e0 [ 767.001239][T15355] tomoyo_path_number_perm+0x245/0x580 [ 767.001259][T15355] ? tomoyo_path_number_perm+0x237/0x580 [ 767.001283][T15355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 767.001307][T15355] ? find_held_lock+0x2b/0x80 [ 767.001350][T15355] ? find_held_lock+0x2b/0x80 [ 767.001373][T15355] ? hook_file_ioctl_common+0x145/0x410 [ 767.001400][T15355] ? __fget_files+0x20e/0x3c0 [ 767.001427][T15355] security_file_ioctl+0x9b/0x240 [ 767.001451][T15355] __x64_sys_ioctl+0xb7/0x210 [ 767.001473][T15355] do_syscall_64+0xcd/0xfa0 [ 767.001500][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.001518][T15355] RIP: 0033:0x7fdf0738eec9 [ 767.001532][T15355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.001550][T15355] RSP: 002b:00007fdf08220038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.001568][T15355] RAX: ffffffffffffffda RBX: 00007fdf075e5fa0 RCX: 00007fdf0738eec9 [ 767.001579][T15355] RDX: 0000000000000007 RSI: 0000000000004b65 RDI: 0000000000000003 [ 767.001599][T15355] RBP: 00007fdf08220090 R08: 0000000000000000 R09: 0000000000000000 [ 767.001610][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.001620][T15355] R13: 00007fdf075e6038 R14: 00007fdf075e5fa0 R15: 00007ffe3ea36a78 [ 767.001642][T15355] [ 767.001661][T15355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 767.705648][T15361] can: request_module (can-proto-0) failed. [ 770.433517][T15424] program syz.1.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 771.044958][T15439] program syz.2.1780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 776.337723][T15510] HfR: entered promiscuous mode [ 777.464179][ T30] audit: type=1804 audit(4294967609.870:27): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1800" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1305 res=1 errno=0 [ 779.582678][T15575] bond0: option all_slaves_active: invalid value () [ 781.406084][T15613] program syz.0.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 781.504217][T15617] program syz.4.1816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.699356][T15649] ================================================================== [ 783.699382][T15649] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 783.699438][T15649] Read of size 28 at addr ffff888030f50cd0 by task syz.1.1821/15649 [ 783.699555][T15649] [ 783.699567][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(full) [ 783.699589][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 783.699600][T15649] Call Trace: [ 783.699608][T15649] [ 783.699615][T15649] dump_stack_lvl+0x116/0x1f0 [ 783.699646][T15649] print_report+0xcd/0x630 [ 783.699682][T15649] ? __virt_addr_valid+0x81/0x610 [ 783.699708][T15649] ? __phys_addr+0xe8/0x180 [ 783.699737][T15649] ? fbcon_prepare_logo+0xa03/0xc70 [ 783.699776][T15649] kasan_report+0xe0/0x110 [ 783.699802][T15649] ? fbcon_prepare_logo+0xa03/0xc70 [ 783.699846][T15649] kasan_check_range+0x100/0x1b0 [ 783.699869][T15649] __asan_memcpy+0x23/0x60 [ 783.699892][T15649] fbcon_prepare_logo+0xa03/0xc70 [ 783.699923][T15649] fbcon_init+0xd77/0x1900 [ 783.699949][T15649] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 783.699978][T15649] visual_init+0x320/0x620 [ 783.700006][T15649] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 783.700027][T15649] store_bind+0x61d/0x760 [ 783.700046][T15649] ? sysfs_file_kobj+0xe4/0x290 [ 783.700073][T15649] ? __pfx_store_bind+0x10/0x10 [ 783.700090][T15649] dev_attr_store+0x58/0x80 [ 783.700116][T15649] ? __pfx_dev_attr_store+0x10/0x10 [ 783.700142][T15649] sysfs_kf_write+0xf2/0x150 [ 783.700167][T15649] kernfs_fop_write_iter+0x3af/0x570 [ 783.700189][T15649] ? __pfx_sysfs_kf_write+0x10/0x10 [ 783.700215][T15649] iter_file_splice_write+0xa24/0x12e0 [ 783.700244][T15649] ? __pfx_iter_file_splice_write+0x10/0x10 [ 783.700270][T15649] ? __pfx_copy_splice_read+0x10/0x10 [ 783.700297][T15649] ? __pfx_iter_file_splice_write+0x10/0x10 [ 783.700321][T15649] direct_splice_actor+0x192/0x6c0 [ 783.700351][T15649] splice_direct_to_actor+0x345/0xa30 [ 783.700374][T15649] ? __pfx_direct_splice_actor+0x10/0x10 [ 783.700399][T15649] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 783.700483][T15649] do_splice_direct+0x174/0x240 [ 783.700507][T15649] ? __pfx_do_splice_direct+0x10/0x10 [ 783.700531][T15649] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 783.700556][T15649] ? rw_verify_area+0xcf/0x6c0 [ 783.700585][T15649] do_sendfile+0xb06/0xe50 [ 783.700623][T15649] ? __pfx_do_sendfile+0x10/0x10 [ 783.700659][T15649] ? __x64_sys_futex+0x1e0/0x4c0 [ 783.700687][T15649] ? __x64_sys_futex+0x1e9/0x4c0 [ 783.700715][T15649] __x64_sys_sendfile64+0x1d8/0x220 [ 783.700739][T15649] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 783.700758][T15649] do_syscall_64+0xcd/0xfa0 [ 783.700785][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.700804][T15649] RIP: 0033:0x7f446358eec9 [ 783.700820][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.700839][T15649] RSP: 002b:00007f44643f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.700857][T15649] RAX: ffffffffffffffda RBX: 00007f44637e6270 RCX: 00007f446358eec9 [ 783.700876][T15649] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 783.700893][T15649] RBP: 00007f4463611f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.700909][T15649] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 783.700926][T15649] R13: 00007f44637e6308 R14: 00007f44637e6270 R15: 00007fffa05e93e8 [ 783.700952][T15649] [ 783.700962][T15649] [ 783.700970][T15649] Allocated by task 1: [ 783.700984][T15649] kasan_save_stack+0x33/0x60 [ 783.701016][T15649] kasan_save_track+0x14/0x30 [ 783.701040][T15649] __kasan_kmalloc+0xaa/0xb0 [ 783.701064][T15649] kset_create_and_add+0x4d/0x190 [ 783.701080][T15649] netdev_register_kobject+0x1ef/0x3d0 [ 783.701098][T15649] register_netdevice+0x13dc/0x2270 [ 783.701114][T15649] register_netdev+0x34/0x50 [ 783.701128][T15649] rose_proto_init+0x253/0x850 [ 783.701153][T15649] do_one_initcall+0x123/0x6e0 [ 783.701170][T15649] kernel_init_freeable+0x5c8/0x920 [ 783.701192][T15649] kernel_init+0x1c/0x2b0 [ 783.701209][T15649] ret_from_fork+0x675/0x7d0 [ 783.701227][T15649] ret_from_fork_asm+0x1a/0x30 [ 783.701244][T15649] [ 783.701248][T15649] The buggy address belongs to the object at ffff888030f50c00 [ 783.701248][T15649] which belongs to the cache kmalloc-192 of size 192 [ 783.701263][T15649] The buggy address is located 56 bytes to the right of [ 783.701263][T15649] allocated 152-byte region [ffff888030f50c00, ffff888030f50c98) [ 783.701281][T15649] [ 783.701287][T15649] The buggy address belongs to the physical page: [ 783.701294][T15649] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30f50 [ 783.701311][T15649] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 783.701325][T15649] page_type: f5(slab) [ 783.701350][T15649] raw: 00fff00000000000 ffff88813ffa63c0 ffffea0000abda40 dead000000000006 [ 783.701366][T15649] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 783.701377][T15649] page dumped because: kasan: bad access detected [ 783.701385][T15649] page_owner tracks the page as allocated [ 783.701391][T15649] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 28196659387, free_ts 0 [ 783.701429][T15649] post_alloc_hook+0x1c0/0x230 [ 783.701449][T15649] get_page_from_freelist+0x10a3/0x3a30 [ 783.701471][T15649] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 783.701494][T15649] alloc_pages_mpol+0x1fb/0x550 [ 783.701510][T15649] new_slab+0x24a/0x360 [ 783.701529][T15649] ___slab_alloc+0xdc4/0x1ae0 [ 783.701549][T15649] __slab_alloc.constprop.0+0x63/0x110 [ 783.701571][T15649] __kmalloc_cache_noprof+0x477/0x780 [ 783.701592][T15649] call_usermodehelper_setup+0xaf/0x360 [ 783.701615][T15649] kobject_uevent_env+0x1690/0x1870 [ 783.701632][T15649] netdev_queue_update_kobjects+0x1a7/0x720 [ 783.701650][T15649] netdev_register_kobject+0x2b3/0x3d0 [ 783.701670][T15649] register_netdevice+0x13dc/0x2270 [ 783.701685][T15649] register_netdev+0x34/0x50 [ 783.701698][T15649] rose_proto_init+0x253/0x850 [ 783.701723][T15649] do_one_initcall+0x123/0x6e0 [ 783.701739][T15649] page_owner free stack trace missing [ 783.701745][T15649] [ 783.701749][T15649] Memory state around the buggy address: [ 783.701758][T15649] ffff888030f50b80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 783.701770][T15649] ffff888030f50c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.701783][T15649] >ffff888030f50c80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 783.701792][T15649] ^ [ 783.701802][T15649] ffff888030f50d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.701814][T15649] ffff888030f50d80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 783.701831][T15649] ================================================================== [ 783.731149][T15649] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 783.731171][T15649] CPU: 1 UID: 0 PID: 15649 Comm: syz.1.1821 Not tainted syzkaller #0 PREEMPT(full) [ 783.731195][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 783.731207][T15649] Call Trace: [ 783.731213][T15649] [ 783.731221][T15649] dump_stack_lvl+0x3d/0x1f0 [ 783.731253][T15649] vpanic+0x640/0x6f0 [ 783.731274][T15649] panic+0xca/0xd0 [ 783.731293][T15649] ? __pfx_panic+0x10/0x10 [ 783.731312][T15649] ? fbcon_prepare_logo+0xa03/0xc70 [ 783.731340][T15649] ? preempt_schedule_common+0x44/0xc0 [ 783.731366][T15649] ? preempt_schedule_thunk+0x16/0x30 [ 783.731390][T15649] check_panic_on_warn+0xab/0xb0 [ 783.731412][T15649] end_report+0x107/0x170 [ 783.731435][T15649] kasan_report+0xee/0x110 [ 783.731460][T15649] ? fbcon_prepare_logo+0xa03/0xc70 [ 783.731499][T15649] kasan_check_range+0x100/0x1b0 [ 783.731527][T15649] __asan_memcpy+0x23/0x60 [ 783.731553][T15649] fbcon_prepare_logo+0xa03/0xc70 [ 783.731583][T15649] fbcon_init+0xd77/0x1900 [ 783.731609][T15649] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 783.731638][T15649] visual_init+0x320/0x620 [ 783.731675][T15649] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 783.731698][T15649] store_bind+0x61d/0x760 [ 783.731717][T15649] ? sysfs_file_kobj+0xe4/0x290 [ 783.731743][T15649] ? __pfx_store_bind+0x10/0x10 [ 783.731760][T15649] dev_attr_store+0x58/0x80 [ 783.731787][T15649] ? __pfx_dev_attr_store+0x10/0x10 [ 783.731813][T15649] sysfs_kf_write+0xf2/0x150 [ 783.731839][T15649] kernfs_fop_write_iter+0x3af/0x570 [ 783.731861][T15649] ? __pfx_sysfs_kf_write+0x10/0x10 [ 783.731887][T15649] iter_file_splice_write+0xa24/0x12e0 [ 783.731917][T15649] ? __pfx_iter_file_splice_write+0x10/0x10 [ 783.731943][T15649] ? __pfx_copy_splice_read+0x10/0x10 [ 783.731970][T15649] ? __pfx_iter_file_splice_write+0x10/0x10 [ 783.731995][T15649] direct_splice_actor+0x192/0x6c0 [ 783.732020][T15649] splice_direct_to_actor+0x345/0xa30 [ 783.732046][T15649] ? __pfx_direct_splice_actor+0x10/0x10 [ 783.732071][T15649] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 783.732096][T15649] do_splice_direct+0x174/0x240 [ 783.732119][T15649] ? __pfx_do_splice_direct+0x10/0x10 [ 783.732149][T15649] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 783.732173][T15649] ? rw_verify_area+0xcf/0x6c0 [ 783.732196][T15649] do_sendfile+0xb06/0xe50 [ 783.732221][T15649] ? __pfx_do_sendfile+0x10/0x10 [ 783.732245][T15649] ? __x64_sys_futex+0x1e0/0x4c0 [ 783.732263][T15649] ? __x64_sys_futex+0x1e9/0x4c0 [ 783.732282][T15649] __x64_sys_sendfile64+0x1d8/0x220 [ 783.732299][T15649] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 783.732319][T15649] do_syscall_64+0xcd/0xfa0 [ 783.732346][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.732364][T15649] RIP: 0033:0x7f446358eec9 [ 783.732380][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.732398][T15649] RSP: 002b:00007f44643f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.732419][T15649] RAX: ffffffffffffffda RBX: 00007f44637e6270 RCX: 00007f446358eec9 [ 783.732431][T15649] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 783.732442][T15649] RBP: 00007f4463611f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.732454][T15649] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 783.732464][T15649] R13: 00007f44637e6308 R14: 00007f44637e6270 R15: 00007fffa05e93e8 [ 783.732481][T15649] [ 783.732658][T15649] Kernel Offset: disabled