last executing test programs: 9.245096515s ago: executing program 2 (id=3317): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r1, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) pread64$auto(r3, 0x0, 0x1ff, 0x5) socket(0x15, 0x5, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r1, 0xe, &(0x7f0000000200)='((\xc9.]\xad$\x00', &(0x7f0000000240)="cd1f7af77f18b1e346a49040b3b6343364fb499f7202c7208912a2e4dcef851b297d32365de296168bd8a7bb3827b461999f937d0b96b028cc1c5f1bfd5cbf8cf36a7766b3af6d0ebdd8ba1977bc1cb113334b759d8f8a4f3caf4e08bbfa50656af881fe7eb8c5176eb16ac691d587dfcf10df9c02ce9f5652135a7b27ea7eea89c57a81daa36653127eb750a3fc8463b1153e2b748bee52ed0217e59d0683f61237757c20c1cc83", 0x4) 7.322300604s ago: executing program 1 (id=3320): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mlock$auto(0x7, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x800, 0x8000003b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000080) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 7.321785811s ago: executing program 2 (id=3321): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x23, 0x2, 0x0) pipe2$auto(0x0, 0x7) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x8, 0x5, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) 7.295523026s ago: executing program 3 (id=3322): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0xe, 0x100000000007) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0xc040810) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000080), r2) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, 0x0) socket(0x10, 0x2, 0xc) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x31) r5 = fanotify_init$auto(0x6a1, 0x2000000000002) r6 = gettid() read$auto_media_devnode_fops_mc_devnode(r5, 0x0, 0x0) kill$auto(r6, 0x11) rt_sigqueueinfo$auto(0x0, 0x6, 0x0) syz_clone(0x843a6a00, 0x0, 0xffffffffffffff14, 0x0, 0x0, 0x0) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r4, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) 6.80439529s ago: executing program 2 (id=3325): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r3, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0x8) 6.143782364s ago: executing program 2 (id=3327): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2202, 0x0) write$auto(r0, 0x0, 0x8) socket(0x6, 0xa, 0x4) read$auto(0x3, 0x0, 0x81) init_module$auto(0x0, 0xfffff, 0x0) mkdir$auto(0x0, 0x8001) r1 = setfsuid$auto(0xee01) setresuid$auto(r1, r1, r1) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/99, 0x63) getpriority$auto_PRIO_USER(0x2, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) unshare$auto(0x80000001) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) r3 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8953, 0x0) 6.106389531s ago: executing program 3 (id=3328): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) 5.371475622s ago: executing program 2 (id=3329): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2c, 0x3, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x3, 0x34, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0xffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) 5.370700946s ago: executing program 1 (id=3337): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x40) readahead$auto(r0, 0x4, 0x4) socket(0x10, 0x6, 0xfffffffd) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_GOV_NAME={0x2f, 0xd, '/proc/sys/net/ipv6/conf/default/forwarding\x00'}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x9}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x4}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4004050) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) 4.9747661s ago: executing program 3 (id=3331): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 3.970715158s ago: executing program 0 (id=3332): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x7) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0xa, 0x5, 0x3) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbec23df256500"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x48050) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10044010) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2700, 0x0) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r1, 0x40246f4c, 0x38) 2.938386643s ago: executing program 1 (id=3333): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r0 = socket(0x22, 0x1, 0x100) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r2 = ioctl$auto_SW_SYNC_GET_DEADLINE(r1, 0xc0105702, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket(0x2, 0x801, 0x100) getsockopt$auto_SO_PEERNAME(r4, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0x5be) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r5 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="6d4e1120", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20040901) getsockopt$auto_SO_LOCK_FILTER(r5, 0x0, 0x2c, 0x0, &(0x7f0000000100)=0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b41, 0x7) 2.917443385s ago: executing program 0 (id=3334): mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x9, 0x5, 0x2, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x8, 0x0, 0x4, @inferred, @integer64={0x100000008f1, 0x5, 0x4}, "a4699d30a05edbe0d28473c399a7dc1d7de94b4123f970bedd3460c667373fcc66b584d81592f6ab606c276807000000000000006e76803400"}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, &(0x7f0000000040)={0x1, @uvalue=0x2, 0x8}) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0x135e, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x2, 0xd3e, 0x1, 0x948a, 0x80003, 0x4000000000000468, 0x9, 0x6, 0x1, 0x430, 0xc, 0x6d3f, 0x6e47, 0x1d8ff853, 0x2]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x900064b7, 0xffffffffffffffff) shmctl$auto_SHM_STAT_ANY(0x7, 0xf, &(0x7f0000000300)={{0x3fe, 0xee00, 0xffffffffffffffff, 0x9, 0xc53a, 0x29, 0xe}, 0x4, 0xffffffffffffffff, 0xff, 0x81, @raw=0x1, @raw=0x3, 0x0, 0x0, 0x0, 0x0}) r4 = setfsgid$auto(r3) fchown$auto(0xffffffffffffffff, 0xee00, r4) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) ioctl$auto_RTC_RD_TIME(r0, 0x80247009, 0x0) close_range$auto(0x2, 0x8000, 0x0) 1.998390606s ago: executing program 3 (id=3335): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88002, 0x0) mmap$auto(0x0, 0x0, 0xfffffffffffffe01, 0x17, 0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x40009, 0x4000000003, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto(r3, 0x0, 0xff) ioctl$auto(0x3, 0x4040ae79, 0x38) unshare$auto(0x40000080) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000000)=0x8) pkey_free$auto(0x17) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80e42, 0x0) read$auto(r0, 0x0, 0xfffffffffffffff8) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) symlink$auto(0x0, 0x0) pread64$auto(r5, 0x0, 0x2a37, 0x5) 1.848294352s ago: executing program 1 (id=3336): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2d, 0x2, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) r0 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.751789141s ago: executing program 2 (id=3338): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20001, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = getsid$auto(0x0) r2 = waitid$auto_P_PID(0x1, r1, &(0x7f0000000080)={@siginfo_0_0={0x100, 0x1, 0x6, @_sigpoll={0x5, r0}}}, 0x8, &(0x7f0000000100)={{0x5a3c, 0xfffffffffffffffa}, {0x8, 0x6dbb}, 0x0, 0x76b7bc4, 0xf5, 0x8202, 0x100000000, 0x0, 0xfffffffffffff4b3, 0x10000, 0x3, 0x1, 0xd, 0xc2b4, 0x4, 0xfffffffffffffffc}) move_pages$auto(r2, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) listen$auto(r3, 0x80000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_create$auto(0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) 1.730367089s ago: executing program 0 (id=3339): pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000001000)=0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x40) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) sysfs$auto(0x2, 0x1f, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.520768283s ago: executing program 1 (id=3340): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r1, 0x0, r1, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x4, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.386760679s ago: executing program 0 (id=3341): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r0, 0x40045701, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r1, 0x4a, 0x400000000000006, 0x5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0) r3 = open(0x0, 0x62240, 0x0) ioctl$auto_NS_GET_PARENT(r3, 0xb702, 0x0) execveat$auto(r3, 0x0, 0x0, 0x0, 0x11000) ioctl$auto_SNDCTL_DSP_GETIPTR(r3, 0x800c5011, 0x0) mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = io_uring_setup$auto(0x8, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty21\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x121b42, 0x0) socket(0x1e, 0x2, 0xe387) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES64=r7, @ANYRES16=r2], 0x14}, 0x1, 0x0, 0x0, 0x40000421}, 0x4044011) acct$auto(&(0x7f0000000040)) 1.318139372s ago: executing program 3 (id=3342): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) getsockopt$auto_SO_GET_FILTER(r0, 0xf, 0x1a, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0x3ff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x7fffffdff000) 492.527042ms ago: executing program 0 (id=3343): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) socket(0x1d, 0x2, 0x7) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x101c00, 0x0) socket(0x2, 0xa, 0x693) socket(0xa, 0x801, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cmdline\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyc7\x00', 0x189000, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time\x00') socket(0x1d, 0x2, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 354.666906ms ago: executing program 1 (id=3344): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) write$auto(0x3, 0x0, 0xfdef) r2 = io_uring_setup$auto(0xa, 0x0) r3 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000040), r2) sendmsg$auto_SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf2502000000090001004029402d000000000d000100235e2d242a5b275d000000000500040081000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x8c1) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) write$auto(0xffffffffffffffff, &(0x7f0000000500)='%[.[\x00T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa3\xa7\xf2M\xd1(h\xa51T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f)\x7f\x83\xcc\xb4\xa4:R\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x6) 109.08718ms ago: executing program 3 (id=3345): socket(0x23, 0x80805, 0x0) epoll_pwait2$auto(0x3, 0x0, 0x4, 0x0, 0x0, 0x7ff6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/lockd/nlm_end_grace\x00', 0x2800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r2, 0x0, 0x40) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) unshare$auto(0x40000080) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 0s ago: executing program 0 (id=3346): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x201, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2000, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x86) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/hash-ptr\x00', 0x10b000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r0, 0x0, 0xc3) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               [ 944.470217][T17243] FAULT_INJECTION: forcing a failure. [ 944.470217][T17243] name failslab, interval 1, probability 0, space 0, times 0 [ 944.594587][T17243] CPU: 0 UID: 0 PID: 17243 Comm: syz.3.2773 Not tainted syzkaller #0 PREEMPT(full) [ 944.594619][T17243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 944.594634][T17243] Call Trace: [ 944.594642][T17243] [ 944.594651][T17243] dump_stack_lvl+0x16c/0x1f0 [ 944.594693][T17243] should_fail_ex+0x512/0x640 [ 944.594731][T17243] ? fs_reclaim_acquire+0xae/0x150 [ 944.594771][T17243] should_failslab+0xc2/0x120 [ 944.594804][T17243] __kmalloc_cache_noprof+0x6a/0x3e0 [ 944.594829][T17243] ? mark_held_locks+0x49/0x80 [ 944.594861][T17243] ? kobject_create_and_add+0x4a/0xf0 [ 944.594890][T17243] kobject_create_and_add+0x4a/0xf0 [ 944.594917][T17243] __add_disk+0x676/0xf00 [ 944.594960][T17243] add_disk_fwnode+0x13f/0x5d0 [ 944.595008][T17243] loop_add+0x903/0xb70 [ 944.595040][T17243] ? __pfx_loop_add+0x10/0x10 [ 944.595090][T17243] ? find_held_lock+0x2b/0x80 [ 944.595118][T17243] loop_control_ioctl+0x13e/0x630 [ 944.595150][T17243] ? __pfx_loop_control_ioctl+0x10/0x10 [ 944.595185][T17243] ? __pfx_loop_control_ioctl+0x10/0x10 [ 944.595217][T17243] __x64_sys_ioctl+0x18b/0x210 [ 944.595259][T17243] do_syscall_64+0xcd/0x4c0 [ 944.595299][T17243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.595324][T17243] RIP: 0033:0x7ff782b8eec9 [ 944.595343][T17243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.595367][T17243] RSP: 002b:00007ff783a74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.595391][T17243] RAX: ffffffffffffffda RBX: 00007ff782de6090 RCX: 00007ff782b8eec9 [ 944.595407][T17243] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 944.595423][T17243] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 944.595437][T17243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.595452][T17243] R13: 00007ff782de6128 R14: 00007ff782de6090 R15: 00007ffce8b1bb78 [ 944.595482][T17243] [ 949.767434][T17297] Invalid ELF header magic: != ELF [ 952.350692][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2798'. [ 957.914384][T17384] netlink: 266 bytes leftover after parsing attributes in process `syz.3.2802'. [ 957.948504][T17384] IPv6: NLM_F_CREATE should be specified when creating new route [ 958.215078][T17389] random: crng reseeded on system resumption [ 958.586909][T17392] Unrecognized hibernate image header format! [ 958.600992][T17372] FAULT_INJECTION: forcing a failure. [ 958.600992][T17372] name failslab, interval 1, probability 0, space 0, times 0 [ 958.626718][T17392] PM: hibernation: Image mismatch: architecture specific data [ 958.676643][T17372] CPU: 0 UID: 0 PID: 17372 Comm: syz.1.2800 Not tainted syzkaller #0 PREEMPT(full) [ 958.676677][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 958.676692][T17372] Call Trace: [ 958.676701][T17372] [ 958.676710][T17372] dump_stack_lvl+0x16c/0x1f0 [ 958.676756][T17372] should_fail_ex+0x512/0x640 [ 958.676795][T17372] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 958.676829][T17372] should_failslab+0xc2/0x120 [ 958.676862][T17372] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 958.676892][T17372] ? ptlock_alloc+0x1f/0x70 [ 958.676921][T17372] ptlock_alloc+0x1f/0x70 [ 958.676945][T17372] pte_alloc_one+0x82/0x3a0 [ 958.676972][T17372] __pte_alloc+0x6d/0x3c0 [ 958.677005][T17372] ? __pfx___pte_alloc+0x10/0x10 [ 958.677040][T17372] ? _raw_spin_unlock+0x28/0x50 [ 958.677071][T17372] ? __pmd_alloc+0x3fb/0x930 [ 958.677111][T17372] copy_page_range+0x3b83/0x5c80 [ 958.677168][T17372] ? mas_destroy+0x5de/0xa20 [ 958.677192][T17372] ? __pfx_copy_page_range+0x10/0x10 [ 958.677220][T17372] ? mas_store+0x7a9/0x1160 [ 958.677245][T17372] ? find_held_lock+0x2b/0x80 [ 958.677271][T17372] ? __pfx_mas_store+0x10/0x10 [ 958.677293][T17372] ? __vma_enter_locked+0x163/0x3f0 [ 958.677334][T17372] dup_mmap+0xe88/0x21d0 [ 958.677382][T17372] ? __pfx_dup_mmap+0x10/0x10 [ 958.677440][T17372] copy_process+0x4081/0x7690 [ 958.677473][T17372] ? __pfx___futex_wait+0x10/0x10 [ 958.677521][T17372] ? __pfx_copy_process+0x10/0x10 [ 958.677552][T17372] ? futex_private_hash_put+0x176/0x300 [ 958.677586][T17372] ? futex_private_hash_put+0x18a/0x300 [ 958.677620][T17372] kernel_clone+0xfc/0x930 [ 958.677660][T17372] ? __pfx_kernel_clone+0x10/0x10 [ 958.677709][T17372] __do_sys_clone+0xce/0x120 [ 958.677741][T17372] ? __pfx___do_sys_clone+0x10/0x10 [ 958.677772][T17372] ? ksys_unshare+0x687/0xa40 [ 958.677830][T17372] ? xfd_validate_state+0x61/0x180 [ 958.677875][T17372] do_syscall_64+0xcd/0x4c0 [ 958.677914][T17372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.677938][T17372] RIP: 0033:0x7ff67058eec9 [ 958.677958][T17372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.677981][T17372] RSP: 002b:00007ff671410fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 958.678004][T17372] RAX: ffffffffffffffda RBX: 00007ff6707e5fa0 RCX: 00007ff67058eec9 [ 958.678020][T17372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 958.678034][T17372] RBP: 00007ff670611f91 R08: 0000000000000000 R09: 0000000000000000 [ 958.678049][T17372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.678063][T17372] R13: 00007ff6707e6038 R14: 00007ff6707e5fa0 R15: 00007ffe5d2d8308 [ 958.678094][T17372] [ 960.494751][T17392] Process accounting paused [ 960.827401][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2806'. [ 961.647488][T17418] FAULT_INJECTION: forcing a failure. [ 961.647488][T17418] name failslab, interval 1, probability 0, space 0, times 0 [ 961.848529][T17418] CPU: 0 UID: 0 PID: 17418 Comm: syz.0.2809 Not tainted syzkaller #0 PREEMPT(full) [ 961.848562][T17418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 961.848578][T17418] Call Trace: [ 961.848586][T17418] [ 961.848595][T17418] dump_stack_lvl+0x16c/0x1f0 [ 961.848637][T17418] should_fail_ex+0x512/0x640 [ 961.848675][T17418] ? __kmalloc_noprof+0xbf/0x510 [ 961.848707][T17418] ? sk_prot_alloc+0x1a8/0x2a0 [ 961.848731][T17418] should_failslab+0xc2/0x120 [ 961.848764][T17418] __kmalloc_noprof+0xd2/0x510 [ 961.848798][T17418] sk_prot_alloc+0x1a8/0x2a0 [ 961.848826][T17418] sk_alloc+0x36/0xc20 [ 961.848861][T17418] __netlink_create+0x5e/0x2c0 [ 961.848891][T17418] ? __wake_up+0x3f/0x60 [ 961.848920][T17418] netlink_create+0x39e/0x620 [ 961.848956][T17418] ? __pfx_genl_bind+0x10/0x10 [ 961.848978][T17418] ? __pfx_genl_unbind+0x10/0x10 [ 961.848999][T17418] ? __pfx_genl_release+0x10/0x10 [ 961.849027][T17418] __sock_create+0x335/0x8d0 [ 961.849061][T17418] __sys_socket+0x14d/0x260 [ 961.849090][T17418] ? __pfx___sys_socket+0x10/0x10 [ 961.849119][T17418] ? xfd_validate_state+0x61/0x180 [ 961.849154][T17418] ? __pfx___x64_sys_mount+0x10/0x10 [ 961.849192][T17418] __x64_sys_socket+0x72/0xb0 [ 961.849220][T17418] ? lockdep_hardirqs_on+0x7c/0x110 [ 961.849256][T17418] do_syscall_64+0xcd/0x4c0 [ 961.849296][T17418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.849321][T17418] RIP: 0033:0x7f22b638eec9 [ 961.849339][T17418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.849363][T17418] RSP: 002b:00007f22b720c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 961.849394][T17418] RAX: ffffffffffffffda RBX: 00007f22b65e5fa0 RCX: 00007f22b638eec9 [ 961.849411][T17418] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 961.849426][T17418] RBP: 00007f22b6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 961.849441][T17418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.849455][T17418] R13: 00007f22b65e6038 R14: 00007f22b65e5fa0 R15: 00007ffc02960bc8 [ 961.849485][T17418] [ 963.446269][T17438] netlink: 'syz.2.2816': attribute type 11 has an invalid length. [ 963.486187][T17436] FAULT_INJECTION: forcing a failure. [ 963.486187][T17436] name failslab, interval 1, probability 0, space 0, times 0 [ 963.520140][T17436] CPU: 0 UID: 0 PID: 17436 Comm: syz.3.2814 Not tainted syzkaller #0 PREEMPT(full) [ 963.520174][T17436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 963.520189][T17436] Call Trace: [ 963.520197][T17436] [ 963.520206][T17436] dump_stack_lvl+0x16c/0x1f0 [ 963.520255][T17436] should_fail_ex+0x512/0x640 [ 963.520294][T17436] ? __kmalloc_noprof+0xbf/0x510 [ 963.520325][T17436] ? asymmetric_key_generate_id+0x36/0x160 [ 963.520348][T17436] should_failslab+0xc2/0x120 [ 963.520381][T17436] __kmalloc_noprof+0xd2/0x510 [ 963.520408][T17436] ? x509_note_OID+0xc6/0x1b0 [ 963.520436][T17436] ? __pfx_x509_note_OID+0x10/0x10 [ 963.520469][T17436] asymmetric_key_generate_id+0x36/0x160 [ 963.520494][T17436] ? __kasan_kmalloc+0xaa/0xb0 [ 963.520524][T17436] x509_note_issuer+0x11c/0x210 [ 963.520557][T17436] asn1_ber_decoder+0xfb7/0x1df0 [ 963.520596][T17436] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 963.520643][T17436] x509_cert_parse+0x1c9/0x900 [ 963.520670][T17436] ? kasan_save_stack+0x42/0x60 [ 963.520696][T17436] ? kasan_save_stack+0x33/0x60 [ 963.520723][T17436] ? kasan_save_track+0x14/0x30 [ 963.520753][T17436] pkcs7_extract_cert+0xa4/0x320 [ 963.520791][T17436] asn1_ber_decoder+0xc5f/0x1df0 [ 963.520828][T17436] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 963.520875][T17436] pkcs7_parse_message+0x288/0x720 [ 963.520912][T17436] verify_pkcs7_signature+0x30/0xa0 [ 963.520951][T17436] valid_regdb+0x211/0x590 [ 963.520988][T17436] ? __pfx___mutex_lock+0x10/0x10 [ 963.521028][T17436] ? __pfx_valid_regdb+0x10/0x10 [ 963.521070][T17436] reg_reload_regdb+0x11a/0x460 [ 963.521094][T17436] ? __pfx_reg_reload_regdb+0x10/0x10 [ 963.521119][T17436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 963.521149][T17436] ? nl80211_pre_doit+0x1b0/0xb10 [ 963.521183][T17436] genl_family_rcv_msg_doit+0x206/0x2f0 [ 963.521216][T17436] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 963.521242][T17436] ? rcu_is_watching+0x12/0xc0 [ 963.521282][T17436] ? bpf_lsm_capable+0x9/0x10 [ 963.521304][T17436] ? security_capable+0x7e/0x260 [ 963.521336][T17436] genl_rcv_msg+0x55c/0x800 [ 963.521365][T17436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.521391][T17436] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 963.521421][T17436] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 963.521458][T17436] ? __pfx_nl80211_post_doit+0x10/0x10 [ 963.521491][T17436] netlink_rcv_skb+0x158/0x420 [ 963.521530][T17436] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.521558][T17436] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.521608][T17436] ? netlink_deliver_tap+0x1ae/0xd30 [ 963.521649][T17436] genl_rcv+0x28/0x40 [ 963.521670][T17436] netlink_unicast+0x5a7/0x870 [ 963.521713][T17436] ? __pfx_netlink_unicast+0x10/0x10 [ 963.521751][T17436] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 963.521787][T17436] ? __lock_acquire+0xb97/0x1ce0 [ 963.521827][T17436] netlink_sendmsg+0x8d1/0xdd0 [ 963.521870][T17436] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.521912][T17436] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 963.521943][T17436] ____sys_sendmsg+0xa98/0xc70 [ 963.521973][T17436] ? copy_msghdr_from_user+0x10a/0x160 [ 963.522009][T17436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.522044][T17436] ? __pfx_futex_wake_mark+0x10/0x10 [ 963.522085][T17436] ___sys_sendmsg+0x134/0x1d0 [ 963.522124][T17436] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.522197][T17436] __sys_sendmsg+0x16d/0x220 [ 963.522235][T17436] ? __pfx___sys_sendmsg+0x10/0x10 [ 963.522277][T17436] ? __x64_sys_futex+0x1e0/0x4c0 [ 963.522326][T17436] do_syscall_64+0xcd/0x4c0 [ 963.522367][T17436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.522392][T17436] RIP: 0033:0x7ff782b8eec9 [ 963.522412][T17436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.522437][T17436] RSP: 002b:00007ff783a95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.522460][T17436] RAX: ffffffffffffffda RBX: 00007ff782de5fa0 RCX: 00007ff782b8eec9 [ 963.522477][T17436] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000002 [ 963.522492][T17436] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 963.522507][T17436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.522522][T17436] R13: 00007ff782de6038 R14: 00007ff782de5fa0 R15: 00007ffce8b1bb78 [ 963.522553][T17436] [ 963.942967][ C0] vkms_vblank_simulate: vblank timer overrun [ 964.589389][T17451] random: crng reseeded on system resumption [ 964.902025][T17456] Unrecognized hibernate image header format! [ 964.920034][T17456] PM: hibernation: Image mismatch: architecture specific data [ 965.739831][T17463] FAULT_INJECTION: forcing a failure. [ 965.739831][T17463] name failslab, interval 1, probability 0, space 0, times 0 [ 965.809210][T17463] CPU: 0 UID: 0 PID: 17463 Comm: syz.2.2822 Not tainted syzkaller #0 PREEMPT(full) [ 965.809242][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 965.809257][T17463] Call Trace: [ 965.809266][T17463] [ 965.809276][T17463] dump_stack_lvl+0x16c/0x1f0 [ 965.809317][T17463] should_fail_ex+0x512/0x640 [ 965.809355][T17463] ? __build_skb_around+0x278/0x3b0 [ 965.809387][T17463] should_failslab+0xc2/0x120 [ 965.809419][T17463] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 965.809449][T17463] ? sctp_chunkify+0x51/0x2d0 [ 965.809481][T17463] sctp_chunkify+0x51/0x2d0 [ 965.809510][T17463] _sctp_make_chunk+0x148/0x270 [ 965.809540][T17463] sctp_make_abort+0x41/0x410 [ 965.809570][T17463] sctp_make_abort_user+0x7c/0x4b0 [ 965.809602][T17463] ? lockdep_hardirqs_on+0x7c/0x110 [ 965.809636][T17463] ? __pfx_sctp_make_abort_user+0x10/0x10 [ 965.809669][T17463] ? skb_dequeue+0x126/0x180 [ 965.809701][T17463] sctp_close+0x220/0x940 [ 965.809744][T17463] ? __pfx_sctp_close+0x10/0x10 [ 965.809776][T17463] ? __pfx___might_resched+0x10/0x10 [ 965.809807][T17463] ? down_write+0x14d/0x200 [ 965.809828][T17463] ? ip_mc_drop_socket+0x1f/0x280 [ 965.809849][T17463] ? __pfx_down_write+0x10/0x10 [ 965.809874][T17463] inet_release+0xea/0x200 [ 965.809903][T17463] __sock_release+0xb3/0x270 [ 965.809927][T17463] ? __pfx_sock_close+0x10/0x10 [ 965.809946][T17463] sock_close+0x1c/0x30 [ 965.809965][T17463] __fput+0x3ff/0xb70 [ 965.810005][T17463] task_work_run+0x14d/0x240 [ 965.810051][T17463] ? __pfx_task_work_run+0x10/0x10 [ 965.810089][T17463] ? __pfx___do_sys_close_range+0x10/0x10 [ 965.810125][T17463] exit_to_user_mode_loop+0xeb/0x110 [ 965.810163][T17463] do_syscall_64+0x41c/0x4c0 [ 965.810202][T17463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.810226][T17463] RIP: 0033:0x7fe9ce38eec9 [ 965.810248][T17463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.810270][T17463] RSP: 002b:00007fe9cc5ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 965.810292][T17463] RAX: 0000000000000000 RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 965.810308][T17463] RDX: 0000000000000000 RSI: fffffffffffff000 RDI: 0000000000000000 [ 965.810322][T17463] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 965.810337][T17463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.810351][T17463] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 965.810391][T17463] [ 966.065444][ C0] vkms_vblank_simulate: vblank timer overrun [ 966.825490][T17480] FAULT_INJECTION: forcing a failure. [ 966.825490][T17480] name failslab, interval 1, probability 0, space 0, times 0 [ 966.878385][T17480] CPU: 0 UID: 0 PID: 17480 Comm: syz.1.2824 Not tainted syzkaller #0 PREEMPT(full) [ 966.878418][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 966.878434][T17480] Call Trace: [ 966.878443][T17480] [ 966.878453][T17480] dump_stack_lvl+0x16c/0x1f0 [ 966.878496][T17480] should_fail_ex+0x512/0x640 [ 966.878538][T17480] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 966.878571][T17480] should_failslab+0xc2/0x120 [ 966.878603][T17480] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 966.878634][T17480] ? mpol_new+0x11b/0x2d0 [ 966.878666][T17480] mpol_new+0x11b/0x2d0 [ 966.878696][T17480] do_set_mempolicy+0x83/0x480 [ 966.878728][T17480] ? __pfx_do_set_mempolicy+0x10/0x10 [ 966.878762][T17480] ? __x64_sys_futex+0x1e0/0x4c0 [ 966.878798][T17480] kernel_set_mempolicy+0x1c4/0x1e0 [ 966.878831][T17480] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 966.878873][T17480] do_syscall_64+0xcd/0x4c0 [ 966.878913][T17480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.878937][T17480] RIP: 0033:0x7ff67058eec9 [ 966.878956][T17480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.878986][T17480] RSP: 002b:00007ff671411038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 966.879009][T17480] RAX: ffffffffffffffda RBX: 00007ff6707e5fa0 RCX: 00007ff67058eec9 [ 966.879025][T17480] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 966.879040][T17480] RBP: 00007ff670611f91 R08: 0000000000000000 R09: 0000000000000000 [ 966.879055][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.879070][T17480] R13: 00007ff6707e6038 R14: 00007ff6707e5fa0 R15: 00007ffe5d2d8308 [ 966.879100][T17480] [ 967.049774][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.643323][T17486] netlink: 306 bytes leftover after parsing attributes in process `syz.2.2833'. [ 967.815260][T17488] FAULT_INJECTION: forcing a failure. [ 967.815260][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 967.846250][T17491] can0: slcan on ptm0. [ 967.869666][T17488] CPU: 0 UID: 0 PID: 17488 Comm: syz.1.2825 Not tainted syzkaller #0 PREEMPT(full) [ 967.869698][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 967.869713][T17488] Call Trace: [ 967.869721][T17488] [ 967.869730][T17488] dump_stack_lvl+0x16c/0x1f0 [ 967.869771][T17488] should_fail_ex+0x512/0x640 [ 967.869809][T17488] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 967.869854][T17488] should_failslab+0xc2/0x120 [ 967.869887][T17488] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 967.869921][T17488] ? x509_cert_parse+0x3bd/0x900 [ 967.869953][T17488] kmemdup_noprof+0x29/0x60 [ 967.869988][T17488] x509_cert_parse+0x3bd/0x900 [ 967.870015][T17488] ? kasan_save_stack+0x42/0x60 [ 967.870042][T17488] ? kasan_save_stack+0x33/0x60 [ 967.870068][T17488] ? kasan_save_track+0x14/0x30 [ 967.870098][T17488] pkcs7_extract_cert+0xa4/0x320 [ 967.870137][T17488] asn1_ber_decoder+0xc5f/0x1df0 [ 967.870175][T17488] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 967.870221][T17488] pkcs7_parse_message+0x288/0x720 [ 967.870259][T17488] verify_pkcs7_signature+0x30/0xa0 [ 967.870298][T17488] valid_regdb+0x211/0x590 [ 967.870335][T17488] ? __pfx___mutex_lock+0x10/0x10 [ 967.870375][T17488] ? __pfx_valid_regdb+0x10/0x10 [ 967.870417][T17488] reg_reload_regdb+0x11a/0x460 [ 967.870441][T17488] ? __pfx_reg_reload_regdb+0x10/0x10 [ 967.870466][T17488] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 967.870496][T17488] ? nl80211_pre_doit+0x1b0/0xb10 [ 967.870530][T17488] genl_family_rcv_msg_doit+0x206/0x2f0 [ 967.870560][T17488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 967.870587][T17488] ? rcu_is_watching+0x12/0xc0 [ 967.870623][T17488] ? bpf_lsm_capable+0x9/0x10 [ 967.870645][T17488] ? security_capable+0x7e/0x260 [ 967.870677][T17488] genl_rcv_msg+0x55c/0x800 [ 967.870706][T17488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.870731][T17488] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 967.870761][T17488] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 967.870803][T17488] ? __pfx_nl80211_post_doit+0x10/0x10 [ 967.870842][T17488] netlink_rcv_skb+0x158/0x420 [ 967.870880][T17488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 967.870908][T17488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 967.870960][T17488] ? netlink_deliver_tap+0x1ae/0xd30 [ 967.871001][T17488] genl_rcv+0x28/0x40 [ 967.871023][T17488] netlink_unicast+0x5a7/0x870 [ 967.871066][T17488] ? __pfx_netlink_unicast+0x10/0x10 [ 967.871104][T17488] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 967.871141][T17488] ? __lock_acquire+0xb97/0x1ce0 [ 967.871181][T17488] netlink_sendmsg+0x8d1/0xdd0 [ 967.871224][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.871266][T17488] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 967.871297][T17488] ____sys_sendmsg+0xa98/0xc70 [ 967.871326][T17488] ? copy_msghdr_from_user+0x10a/0x160 [ 967.871363][T17488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.871397][T17488] ? __pfx_futex_wake_mark+0x10/0x10 [ 967.871439][T17488] ___sys_sendmsg+0x134/0x1d0 [ 967.871478][T17488] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.871551][T17488] __sys_sendmsg+0x16d/0x220 [ 967.871589][T17488] ? __pfx___sys_sendmsg+0x10/0x10 [ 967.871626][T17488] ? __x64_sys_futex+0x1e0/0x4c0 [ 967.871674][T17488] do_syscall_64+0xcd/0x4c0 [ 967.871715][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.871740][T17488] RIP: 0033:0x7ff67058eec9 [ 967.871759][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.871785][T17488] RSP: 002b:00007ff671411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.871808][T17488] RAX: ffffffffffffffda RBX: 00007ff6707e5fa0 RCX: 00007ff67058eec9 [ 967.871831][T17488] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000002 [ 967.871846][T17488] RBP: 00007ff670611f91 R08: 0000000000000000 R09: 0000000000000000 [ 967.871861][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 967.871876][T17488] R13: 00007ff6707e6038 R14: 00007ff6707e5fa0 R15: 00007ffe5d2d8308 [ 967.871907][T17488] [ 968.703981][T17490] can0 (unregistered): slcan off ptm0. [ 969.496945][T17507] FAULT_INJECTION: forcing a failure. [ 969.496945][T17507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.551568][T17507] CPU: 0 UID: 0 PID: 17507 Comm: syz.2.2829 Not tainted syzkaller #0 PREEMPT(full) [ 969.551601][T17507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 969.551617][T17507] Call Trace: [ 969.551625][T17507] [ 969.551635][T17507] dump_stack_lvl+0x16c/0x1f0 [ 969.551685][T17507] should_fail_ex+0x512/0x640 [ 969.551729][T17507] _copy_from_user+0x2e/0xd0 [ 969.551756][T17507] move_addr_to_kernel+0x65/0x170 [ 969.551789][T17507] __sys_bind+0x11b/0x260 [ 969.551820][T17507] ? __pfx___sys_bind+0x10/0x10 [ 969.551860][T17507] ? xfd_validate_state+0x61/0x180 [ 969.551896][T17507] ? __pfx_do_writev+0x10/0x10 [ 969.551928][T17507] __x64_sys_bind+0x72/0xb0 [ 969.551957][T17507] ? lockdep_hardirqs_on+0x7c/0x110 [ 969.551993][T17507] do_syscall_64+0xcd/0x4c0 [ 969.552033][T17507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.552058][T17507] RIP: 0033:0x7fe9ce38eec9 [ 969.552078][T17507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.552102][T17507] RSP: 002b:00007fe9cc5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 969.552125][T17507] RAX: ffffffffffffffda RBX: 00007fe9ce5e6090 RCX: 00007fe9ce38eec9 [ 969.552141][T17507] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000006 [ 969.552156][T17507] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 969.552171][T17507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.552185][T17507] R13: 00007fe9ce5e6128 R14: 00007fe9ce5e6090 R15: 00007ffe08609728 [ 969.552215][T17507] [ 971.615146][T17541] FAULT_INJECTION: forcing a failure. [ 971.615146][T17541] name failslab, interval 1, probability 0, space 0, times 0 [ 971.715816][T17541] CPU: 0 UID: 0 PID: 17541 Comm: syz.0.2836 Not tainted syzkaller #0 PREEMPT(full) [ 971.715849][T17541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.715865][T17541] Call Trace: [ 971.715873][T17541] [ 971.715882][T17541] dump_stack_lvl+0x16c/0x1f0 [ 971.715937][T17541] should_fail_ex+0x512/0x640 [ 971.715974][T17541] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 971.716006][T17541] should_failslab+0xc2/0x120 [ 971.716038][T17541] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 971.716067][T17541] ? mpol_new+0x11b/0x2d0 [ 971.716099][T17541] mpol_new+0x11b/0x2d0 [ 971.716127][T17541] do_set_mempolicy+0x83/0x480 [ 971.716158][T17541] ? __pfx_do_set_mempolicy+0x10/0x10 [ 971.716191][T17541] ? __x64_sys_futex+0x1e0/0x4c0 [ 971.716225][T17541] kernel_set_mempolicy+0x1c4/0x1e0 [ 971.716257][T17541] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 971.716297][T17541] do_syscall_64+0xcd/0x4c0 [ 971.716335][T17541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.716359][T17541] RIP: 0033:0x7f22b638eec9 [ 971.716377][T17541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.716401][T17541] RSP: 002b:00007f22b720c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 971.716424][T17541] RAX: ffffffffffffffda RBX: 00007f22b65e5fa0 RCX: 00007f22b638eec9 [ 971.716440][T17541] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000004 [ 971.716455][T17541] RBP: 00007f22b6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.716469][T17541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.716483][T17541] R13: 00007f22b65e6038 R14: 00007f22b65e5fa0 R15: 00007ffc02960bc8 [ 971.716512][T17541] [ 972.974926][T17558] usb usb15: usbfs: process 17558 (syz.1.2840) did not claim interface 0 before use [ 973.390299][T17561] bcache: register_bcache() error : failed to open device [ 974.419872][T17578] netlink: 'syz.0.2845': attribute type 11 has an invalid length. [ 975.006199][T17582] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 975.291340][T17588] random: crng reseeded on system resumption [ 976.411927][T17609] can0: slcan on ptm0. [ 976.530774][T17608] can0 (unregistered): slcan off ptm0. [ 979.026790][T17649] netlink: 'syz.1.2858': attribute type 11 has an invalid length. [ 982.000540][T17673] kexec: Could not allocate control_code_buffer [ 985.177264][T17714] FAULT_INJECTION: forcing a failure. [ 985.177264][T17714] name failslab, interval 1, probability 0, space 0, times 0 [ 985.237232][T17714] CPU: 0 UID: 0 PID: 17714 Comm: syz.3.2870 Not tainted syzkaller #0 PREEMPT(full) [ 985.237272][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 985.237288][T17714] Call Trace: [ 985.237296][T17714] [ 985.237305][T17714] dump_stack_lvl+0x16c/0x1f0 [ 985.237347][T17714] should_fail_ex+0x512/0x640 [ 985.237385][T17714] ? __kmalloc_noprof+0xbf/0x510 [ 985.237416][T17714] ? lsm_blob_alloc+0x68/0x90 [ 985.237437][T17714] should_failslab+0xc2/0x120 [ 985.237470][T17714] __kmalloc_noprof+0xd2/0x510 [ 985.237505][T17714] lsm_blob_alloc+0x68/0x90 [ 985.237527][T17714] security_sk_alloc+0x30/0x270 [ 985.237556][T17714] sk_prot_alloc+0x1c7/0x2a0 [ 985.237584][T17714] sk_alloc+0x36/0xc20 [ 985.237619][T17714] __netlink_create+0x5e/0x2c0 [ 985.237650][T17714] ? __wake_up+0x3f/0x60 [ 985.237678][T17714] netlink_create+0x39e/0x620 [ 985.237712][T17714] ? __pfx_genl_bind+0x10/0x10 [ 985.237733][T17714] ? __pfx_genl_unbind+0x10/0x10 [ 985.237754][T17714] ? __pfx_genl_release+0x10/0x10 [ 985.237781][T17714] __sock_create+0x335/0x8d0 [ 985.237815][T17714] __sys_socket+0x14d/0x260 [ 985.237844][T17714] ? __pfx___sys_socket+0x10/0x10 [ 985.237873][T17714] ? xfd_validate_state+0x61/0x180 [ 985.237908][T17714] ? __pfx___x64_sys_mount+0x10/0x10 [ 985.237947][T17714] __x64_sys_socket+0x72/0xb0 [ 985.237974][T17714] ? lockdep_hardirqs_on+0x7c/0x110 [ 985.238011][T17714] do_syscall_64+0xcd/0x4c0 [ 985.238051][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.238076][T17714] RIP: 0033:0x7ff782b8eec9 [ 985.238095][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.238118][T17714] RSP: 002b:00007ff783a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 985.238141][T17714] RAX: ffffffffffffffda RBX: 00007ff782de5fa0 RCX: 00007ff782b8eec9 [ 985.238157][T17714] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 985.238172][T17714] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 985.238186][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.238201][T17714] R13: 00007ff782de6038 R14: 00007ff782de5fa0 R15: 00007ffce8b1bb78 [ 985.238231][T17714] [ 985.459322][ C0] vkms_vblank_simulate: vblank timer overrun [ 986.207254][T17725] can0: slcan on ptm0. [ 986.292174][T17716] FAULT_INJECTION: forcing a failure. [ 986.292174][T17716] name failslab, interval 1, probability 0, space 0, times 0 [ 986.429162][T17716] CPU: 0 UID: 0 PID: 17716 Comm: syz.2.2872 Not tainted syzkaller #0 PREEMPT(full) [ 986.429201][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 986.429216][T17716] Call Trace: [ 986.429225][T17716] [ 986.429234][T17716] dump_stack_lvl+0x16c/0x1f0 [ 986.429276][T17716] should_fail_ex+0x512/0x640 [ 986.429314][T17716] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 986.429347][T17716] should_failslab+0xc2/0x120 [ 986.429380][T17716] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 986.429409][T17716] ? lockdep_init_map_type+0x5c/0x280 [ 986.429442][T17716] ? fcntl_setlease+0x389/0x5a0 [ 986.429470][T17716] fcntl_setlease+0x389/0x5a0 [ 986.429493][T17716] ? __pfx_fcntl_setlease+0x10/0x10 [ 986.429522][T17716] ? do_futex+0x122/0x350 [ 986.429553][T17716] ? __pfx_do_futex+0x10/0x10 [ 986.429587][T17716] do_fcntl+0x751/0x15a0 [ 986.429623][T17716] ? __pfx_do_fcntl+0x10/0x10 [ 986.429660][T17716] ? __x64_sys_futex+0x1e0/0x4c0 [ 986.429691][T17716] ? __x64_sys_futex+0x1e9/0x4c0 [ 986.429727][T17716] ? tomoyo_file_fcntl+0x6c/0xc0 [ 986.429754][T17716] __x64_sys_fcntl+0x163/0x200 [ 986.429793][T17716] do_syscall_64+0xcd/0x4c0 [ 986.429833][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.429858][T17716] RIP: 0033:0x7fe9ce38eec9 [ 986.429877][T17716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 986.429901][T17716] RSP: 002b:00007fe9cc5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 986.429924][T17716] RAX: ffffffffffffffda RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 986.429940][T17716] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000001 [ 986.429957][T17716] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 986.429972][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 986.429986][T17716] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 986.430016][T17716] [ 986.658768][T17716] Invalid ELF header magic: != ELF [ 986.904486][T17722] can0 (unregistered): slcan off ptm0. [ 987.472776][T17731] FAULT_INJECTION: forcing a failure. [ 987.472776][T17731] name failslab, interval 1, probability 0, space 0, times 0 [ 987.485525][T17731] CPU: 0 UID: 0 PID: 17731 Comm: syz.1.2874 Not tainted syzkaller #0 PREEMPT(full) [ 987.485556][T17731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 987.485571][T17731] Call Trace: [ 987.485579][T17731] [ 987.485588][T17731] dump_stack_lvl+0x16c/0x1f0 [ 987.485628][T17731] should_fail_ex+0x512/0x640 [ 987.485669][T17731] should_failslab+0xc2/0x120 [ 987.485701][T17731] __kmalloc_cache_noprof+0x6a/0x3e0 [ 987.485727][T17731] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 987.485769][T17731] tipc_nametbl_insert_publ+0x700/0x1720 [ 987.485828][T17731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 987.485866][T17731] ? net_generic+0xea/0x2a0 [ 987.485907][T17731] tipc_nametbl_publish+0x137/0x280 [ 987.485951][T17731] tipc_sk_publish+0x1d8/0x430 [ 987.485974][T17731] ? __pfx_tipc_sk_publish+0x10/0x10 [ 987.486000][T17731] ? __local_bh_enable_ip+0xa4/0x120 [ 987.486033][T17731] tipc_sk_bind+0x16f/0x380 [ 987.486058][T17731] tipc_bind+0x190/0x2a0 [ 987.486083][T17731] __sys_bind+0x1a7/0x260 [ 987.486114][T17731] ? __pfx___sys_bind+0x10/0x10 [ 987.486160][T17731] ? xfd_validate_state+0x61/0x180 [ 987.486195][T17731] ? __pfx_do_writev+0x10/0x10 [ 987.486228][T17731] __x64_sys_bind+0x72/0xb0 [ 987.486257][T17731] ? lockdep_hardirqs_on+0x7c/0x110 [ 987.486294][T17731] do_syscall_64+0xcd/0x4c0 [ 987.486335][T17731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.486360][T17731] RIP: 0033:0x7ff67058eec9 [ 987.486379][T17731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.486404][T17731] RSP: 002b:00007ff6713f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 987.486428][T17731] RAX: ffffffffffffffda RBX: 00007ff6707e6090 RCX: 00007ff67058eec9 [ 987.486444][T17731] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000006 [ 987.486460][T17731] RBP: 00007ff670611f91 R08: 0000000000000000 R09: 0000000000000000 [ 987.486475][T17731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.486489][T17731] R13: 00007ff6707e6128 R14: 00007ff6707e6090 R15: 00007ffe5d2d8308 [ 987.486520][T17731] [ 987.486530][T17731] tipc: Failed to bind to 65,0,0 [ 989.532084][T17781] __vm_enough_memory: pid: 17781, comm: syz.0.2883, bytes: 4398046511104 not enough memory for the allocation [ 991.982868][T17800] Process accounting resumed [ 992.273883][T17817] FAULT_INJECTION: forcing a failure. [ 992.273883][T17817] name failslab, interval 1, probability 0, space 0, times 0 [ 992.379667][T17817] CPU: 0 UID: 0 PID: 17817 Comm: syz.3.2887 Not tainted syzkaller #0 PREEMPT(full) [ 992.379706][T17817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 992.379721][T17817] Call Trace: [ 992.379729][T17817] [ 992.379739][T17817] dump_stack_lvl+0x16c/0x1f0 [ 992.379781][T17817] should_fail_ex+0x512/0x640 [ 992.379819][T17817] ? fs_reclaim_acquire+0xae/0x150 [ 992.379860][T17817] should_failslab+0xc2/0x120 [ 992.379892][T17817] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 992.379926][T17817] ? security_inode_alloc+0x3b/0x2b0 [ 992.379959][T17817] security_inode_alloc+0x3b/0x2b0 [ 992.379988][T17817] inode_init_always_gfp+0xce4/0x1030 [ 992.380022][T17817] alloc_inode+0x86/0x240 [ 992.380059][T17817] sock_alloc+0x40/0x280 [ 992.380083][T17817] __sock_create+0xc1/0x8d0 [ 992.380117][T17817] __sys_socketpair+0x25c/0x5a0 [ 992.380149][T17817] ? __pfx___sys_socketpair+0x10/0x10 [ 992.380184][T17817] ? xfd_validate_state+0x61/0x180 [ 992.380228][T17817] __x64_sys_socketpair+0x96/0x100 [ 992.380259][T17817] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.380296][T17817] do_syscall_64+0xcd/0x4c0 [ 992.380336][T17817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.380362][T17817] RIP: 0033:0x7ff782b8eec9 [ 992.380381][T17817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.380405][T17817] RSP: 002b:00007ff783a74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 992.380428][T17817] RAX: ffffffffffffffda RBX: 00007ff782de6090 RCX: 00007ff782b8eec9 [ 992.380444][T17817] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 992.380459][T17817] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 992.380474][T17817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.380504][T17817] R13: 00007ff782de6128 R14: 00007ff782de6090 R15: 00007ffce8b1bb78 [ 992.380534][T17817] [ 992.380587][T17817] socket: no more sockets [ 993.395928][T17828] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 993.769280][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 996.754397][T17889] FAULT_INJECTION: forcing a failure. [ 996.754397][T17889] name failslab, interval 1, probability 0, space 0, times 0 [ 996.754434][T17889] CPU: 0 UID: 0 PID: 17889 Comm: syz.2.2901 Not tainted syzkaller #0 PREEMPT(full) [ 996.754462][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 996.754478][T17889] Call Trace: [ 996.754485][T17889] [ 996.754495][T17889] dump_stack_lvl+0x16c/0x1f0 [ 996.754536][T17889] should_fail_ex+0x512/0x640 [ 996.754574][T17889] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 996.754609][T17889] should_failslab+0xc2/0x120 [ 996.754641][T17889] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 996.754672][T17889] ? sock_alloc_inode+0x25/0x1c0 [ 996.754701][T17889] ? __pfx_sock_alloc_inode+0x10/0x10 [ 996.754725][T17889] sock_alloc_inode+0x25/0x1c0 [ 996.754749][T17889] alloc_inode+0x61/0x240 [ 996.754784][T17889] sock_alloc+0x40/0x280 [ 996.754807][T17889] __sock_create+0xc1/0x8d0 [ 996.754840][T17889] __sys_socketpair+0x25c/0x5a0 [ 996.754872][T17889] ? __pfx___sys_socketpair+0x10/0x10 [ 996.754906][T17889] ? xfd_validate_state+0x61/0x180 [ 996.754948][T17889] __x64_sys_socketpair+0x96/0x100 [ 996.754978][T17889] ? lockdep_hardirqs_on+0x7c/0x110 [ 996.755015][T17889] do_syscall_64+0xcd/0x4c0 [ 996.755054][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.755080][T17889] RIP: 0033:0x7fe9ce38eec9 [ 996.755098][T17889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.755122][T17889] RSP: 002b:00007fe9cc5cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 996.755144][T17889] RAX: ffffffffffffffda RBX: 00007fe9ce5e6090 RCX: 00007fe9ce38eec9 [ 996.755160][T17889] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 996.755175][T17889] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 996.755190][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.755204][T17889] R13: 00007fe9ce5e6128 R14: 00007fe9ce5e6090 R15: 00007ffe08609728 [ 996.755234][T17889] [ 996.755244][T17889] socket: no more sockets [ 997.642362][T17905] [ 998.175952][T17893] kexec: Could not allocate control_code_buffer [ 1003.311854][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.318204][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.917349][T17985] Console: switching to colour VGA+ 80x25 [ 1005.056751][T17987] Console: switching to colour frame buffer device 2x2 [ 1005.404889][T17996] __vm_enough_memory: pid: 17996, comm: syz.1.2925, bytes: 4398046511104 not enough memory for the allocation [ 1008.567274][T18015] kexec: Could not allocate control_code_buffer [ 1008.759233][T18024] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1008.768597][T18024] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1008.855217][T18024] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1008.898753][T18024] page_type: f5(slab) [ 1008.914627][T18024] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 1008.965209][T18024] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 1009.024929][T18024] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 1009.085652][T18024] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 1009.142151][T18024] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1009.205154][T18024] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1009.254701][T18024] page dumped because: unmovable page [ 1009.313020][T18024] page_owner tracks the page as allocated [ 1009.355825][T18024] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5248, tgid 5248 (udevadm), ts 43965167765, free_ts 36494418934 [ 1009.513228][T18024] post_alloc_hook+0x1c0/0x230 [ 1009.545690][T18024] get_page_from_freelist+0x132b/0x38e0 [ 1009.590770][T18024] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1009.655182][T18024] alloc_pages_mpol+0x1fb/0x550 [ 1009.685388][T18024] new_slab+0x247/0x330 [ 1009.702791][T18024] ___slab_alloc+0xcf2/0x1750 [ 1009.723949][T18024] __slab_alloc.constprop.0+0x56/0xb0 [ 1009.741889][T18024] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 1009.767499][T18024] alloc_inode+0xc3/0x240 [ 1009.779646][T18024] iget_locked+0x2e4/0x830 [ 1009.806528][T18024] kernfs_get_inode+0x48/0x460 [ 1009.823526][T18024] kernfs_iop_lookup+0x1a7/0x2d0 [ 1009.843068][T18024] __lookup_slow+0x251/0x460 [ 1009.847818][T18024] walk_component+0x353/0x5b0 [ 1009.875143][T18024] path_lookupat+0x142/0x6d0 [ 1009.895606][T18024] filename_lookup+0x224/0x5f0 [ 1009.912693][T18024] page last free pid 1 tgid 1 stack trace: [ 1009.932911][T18024] __free_frozen_pages+0x7d5/0x10f0 [ 1009.938170][T18024] free_contig_range+0x183/0x4b0 [ 1009.969127][T18024] destroy_args+0x794/0xc10 [ 1009.982505][T18024] debug_vm_pgtable+0x1a32/0x3640 [ 1009.998782][T18024] do_one_initcall+0x120/0x6e0 [ 1010.021886][T18024] kernel_init_freeable+0x5c2/0x910 [ 1010.048396][T18024] kernel_init+0x1c/0x2b0 [ 1010.057318][T18024] ret_from_fork+0x56d/0x730 [ 1010.074921][T18024] ret_from_fork_asm+0x1a/0x30 [ 1012.090129][T18069] usb usb15: usbfs: process 18069 (syz.2.2940) did not claim interface 0 before use [ 1013.806714][T18096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2955'. [ 1013.951072][T18099] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2955'. [ 1014.638300][T18082] kexec: Could not allocate control_code_buffer [ 1016.062893][T18119] HfR: entered promiscuous mode [ 1021.667077][T18192] random: crng reseeded on system resumption [ 1021.808426][T18197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1021.860223][T18199] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1022.826862][T18199] Process accounting paused [ 1028.391311][ T51] Bluetooth: hci0: hcon ffff88802f5dc000 sent 1 < count 256 [ 1029.623989][T18288] netlink: 'syz.0.2986': attribute type 4 has an invalid length. [ 1029.681754][T18288] netlink: 'syz.0.2986': attribute type 5 has an invalid length. [ 1029.736087][T18288] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2986'. [ 1030.096434][T18301] nbd: must specify a size in bytes for the device [ 1031.855199][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1036.317327][T18373] zswap: compressor not available [ 1037.763257][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3010'. [ 1039.157351][T18419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3014'. [ 1041.739476][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 1042.041510][T18459] netlink: 'syz.3.3023': attribute type 11 has an invalid length. [ 1044.846098][T18486] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3028'. [ 1044.923199][T18486] : renamed from bond0 (while UP) [ 1045.334490][T18489] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1045.390518][T18489] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1045.435277][T18489] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1045.467503][T18489] page_type: f5(slab) [ 1045.523050][T18489] raw: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 1045.610390][T18489] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 1045.729549][T18489] head: 00fff00000000040 ffff88801ce9a8c0 dead000000000122 0000000000000000 [ 1045.738314][T18489] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 1045.912959][T18489] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 1045.978683][T18489] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1046.140474][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1046.182284][T18489] page dumped because: unmovable page [ 1046.187706][T18489] page_owner tracks the page as allocated [ 1046.343579][T18489] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5248, tgid 5248 (udevadm), ts 43965167765, free_ts 36494418934 [ 1046.579773][T18489] post_alloc_hook+0x1c0/0x230 [ 1046.607819][T18489] get_page_from_freelist+0x132b/0x38e0 [ 1046.673759][T18489] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1046.710748][T18489] alloc_pages_mpol+0x1fb/0x550 [ 1046.739775][T18489] new_slab+0x247/0x330 [ 1046.744000][T18489] ___slab_alloc+0xcf2/0x1750 [ 1046.773878][T18489] __slab_alloc.constprop.0+0x56/0xb0 [ 1046.795152][T18489] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 1046.817039][T18489] alloc_inode+0xc3/0x240 [ 1046.828117][T18489] iget_locked+0x2e4/0x830 [ 1046.846306][T18489] kernfs_get_inode+0x48/0x460 [ 1046.862063][T18489] kernfs_iop_lookup+0x1a7/0x2d0 [ 1046.881789][T18489] __lookup_slow+0x251/0x460 [ 1046.925611][T18489] walk_component+0x353/0x5b0 [ 1046.951093][T18489] path_lookupat+0x142/0x6d0 [ 1046.974231][T18489] filename_lookup+0x224/0x5f0 [ 1046.994444][T18489] page last free pid 1 tgid 1 stack trace: [ 1047.012495][T18489] __free_frozen_pages+0x7d5/0x10f0 [ 1047.031165][T18489] free_contig_range+0x183/0x4b0 [ 1047.036165][T18489] destroy_args+0x794/0xc10 [ 1047.062423][T18489] debug_vm_pgtable+0x1a32/0x3640 [ 1047.077926][T18489] do_one_initcall+0x120/0x6e0 [ 1047.096608][T18489] kernel_init_freeable+0x5c2/0x910 [ 1047.114812][T18489] kernel_init+0x1c/0x2b0 [ 1047.126290][T18489] ret_from_fork+0x56d/0x730 [ 1047.139202][T18489] ret_from_fork_asm+0x1a/0x30 [ 1047.614772][T18525] netlink: 'syz.2.3037': attribute type 4 has an invalid length. [ 1047.663651][T18525] netlink: 'syz.2.3037': attribute type 5 has an invalid length. [ 1047.696829][T18525] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1048.804140][T18544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1048.910078][T18544] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1050.699601][ T30] audit: type=1800 audit(4294967359.700:42): pid=18583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3049" name="features" dev="configfs" ino=72864 res=0 errno=0 [ 1053.466738][T18588] Process accounting resumed [ 1056.121615][T18636] FAULT_INJECTION: forcing a failure. [ 1056.121615][T18636] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1056.194369][T18636] CPU: 0 UID: 0 PID: 18636 Comm: syz.2.3059 Not tainted syzkaller #0 PREEMPT(full) [ 1056.194402][T18636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1056.194418][T18636] Call Trace: [ 1056.194426][T18636] [ 1056.194436][T18636] dump_stack_lvl+0x16c/0x1f0 [ 1056.194478][T18636] should_fail_ex+0x512/0x640 [ 1056.194520][T18636] get_futex_key+0x1d0/0x1560 [ 1056.194554][T18636] ? __pfx_get_futex_key+0x10/0x10 [ 1056.194593][T18636] futex_wait_setup+0x9d/0x550 [ 1056.194638][T18636] __futex_wait+0x194/0x2f0 [ 1056.194676][T18636] ? __pfx___futex_wait+0x10/0x10 [ 1056.194718][T18636] ? __pfx_futex_wake_mark+0x10/0x10 [ 1056.194759][T18636] ? futex_private_hash_put+0x176/0x300 [ 1056.194807][T18636] ? futex_private_hash_put+0x18a/0x300 [ 1056.194839][T18636] futex_wait+0xe8/0x380 [ 1056.194876][T18636] ? __pfx_futex_wait+0x10/0x10 [ 1056.194920][T18636] ? __fget_files+0x204/0x3c0 [ 1056.194959][T18636] do_futex+0x229/0x350 [ 1056.194991][T18636] ? __pfx_do_futex+0x10/0x10 [ 1056.195023][T18636] ? fdget+0x187/0x210 [ 1056.195048][T18636] ? __sys_sendmsg+0x18c/0x220 [ 1056.195088][T18636] __x64_sys_futex+0x1e0/0x4c0 [ 1056.195123][T18636] ? __pfx___x64_sys_futex+0x10/0x10 [ 1056.195166][T18636] do_syscall_64+0xcd/0x4c0 [ 1056.195207][T18636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.195233][T18636] RIP: 0033:0x7fe9ce38eec9 [ 1056.195252][T18636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.195276][T18636] RSP: 002b:00007fe9cc5ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1056.195299][T18636] RAX: ffffffffffffffda RBX: 00007fe9ce5e5fa8 RCX: 00007fe9ce38eec9 [ 1056.195315][T18636] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe9ce5e5fa8 [ 1056.195331][T18636] RBP: 00007fe9ce5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.195346][T18636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.195361][T18636] R13: 00007fe9ce5e6038 R14: 00007ffe08609640 R15: 00007ffe08609728 [ 1056.195391][T18636] [ 1056.401375][ C0] vkms_vblank_simulate: vblank timer overrun [ 1057.410506][T18644] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1057.753667][ T30] audit: type=1800 audit(4294967366.760:43): pid=18659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3065" name="features" dev="configfs" ino=73181 res=0 errno=0 [ 1057.774042][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.811470][T18726] can0: slcan on ttyS2. [ 1063.970027][T18730] can0 (unregistered): slcan off ttyS2. [ 1064.494020][T18740] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3082'. [ 1064.661862][T18740] : renamed from bond0 (while UP) [ 1064.753341][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.759789][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.849965][T18732] zswap: compressor not available [ 1066.008701][T18759] zswap: compressor @ not available [ 1066.500867][T18762] zswap: compressor not available [ 1071.131484][T18863] ubi0: attaching mtd0 [ 1071.189968][T18863] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 1071.464112][T18867] __vm_enough_memory: pid: 18867, comm: syz.1.3100, bytes: 4398046511104 not enough memory for the allocation [ 1072.931837][T18880] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 1073.134690][T18880] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1073.134690][T18880] [ 1073.511662][T18883] nvme_fabrics: missing parameter 'transport=%s' [ 1073.565872][T18883] nvme_fabrics: missing parameter 'nqn=%s' [ 1076.462813][T18922] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1077.541348][T18934] FAULT_INJECTION: forcing a failure. [ 1077.541348][T18934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1077.621703][T18934] CPU: 0 UID: 0 PID: 18934 Comm: syz.2.3113 Not tainted syzkaller #0 PREEMPT(full) [ 1077.621735][T18934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1077.621751][T18934] Call Trace: [ 1077.621763][T18934] [ 1077.621772][T18934] dump_stack_lvl+0x16c/0x1f0 [ 1077.621826][T18934] should_fail_ex+0x512/0x640 [ 1077.621868][T18934] _copy_from_user+0x2e/0xd0 [ 1077.621894][T18934] ____sys_sendmsg+0x607/0xc70 [ 1077.621924][T18934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1077.621953][T18934] ? find_held_lock+0x2b/0x80 [ 1077.621978][T18934] ? futex_unqueue+0x133/0x2c0 [ 1077.622011][T18934] ___sys_sendmsg+0x134/0x1d0 [ 1077.622049][T18934] ? __pfx____sys_sendmsg+0x10/0x10 [ 1077.622098][T18934] ? find_held_lock+0x2b/0x80 [ 1077.622138][T18934] __sys_sendmmsg+0x200/0x420 [ 1077.622177][T18934] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1077.622221][T18934] ? __pfx_do_futex+0x10/0x10 [ 1077.622250][T18934] ? rcu_is_watching+0x12/0xc0 [ 1077.622295][T18934] ? xfd_validate_state+0x61/0x180 [ 1077.622329][T18934] ? __sys_setsockopt+0x140/0x1a0 [ 1077.622367][T18934] __x64_sys_sendmmsg+0x9c/0x100 [ 1077.622404][T18934] ? lockdep_hardirqs_on+0x7c/0x110 [ 1077.622438][T18934] do_syscall_64+0xcd/0x4c0 [ 1077.622477][T18934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.622501][T18934] RIP: 0033:0x7fe9ce38eec9 [ 1077.622519][T18934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1077.622542][T18934] RSP: 002b:00007fe9cc5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1077.622564][T18934] RAX: ffffffffffffffda RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 1077.622581][T18934] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 1077.622596][T18934] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1077.622610][T18934] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1077.622624][T18934] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 1077.622654][T18934] [ 1077.827573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1078.485425][T18932] binder: 18931:18932 ioctl c018620c 0 returned -22 [ 1078.893072][T18958] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 2 with max blocks 2 with error 117 [ 1079.189547][T18958] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1079.189547][T18958] [ 1081.476990][T18987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3122'. [ 1084.194884][T18992] Process accounting paused [ 1085.175282][T19015] GUP no longer grows the stack in syz.2.3127 (19015): 1000-401000 (0) [ 1085.262582][T19015] CPU: 0 UID: 0 PID: 19015 Comm: syz.2.3127 Not tainted syzkaller #0 PREEMPT(full) [ 1085.262613][T19015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1085.262628][T19015] Call Trace: [ 1085.262636][T19015] [ 1085.262644][T19015] dump_stack_lvl+0x16c/0x1f0 [ 1085.262685][T19015] gup_vma_lookup+0x1d2/0x220 [ 1085.262721][T19015] fixup_user_fault+0x26f/0x540 [ 1085.262756][T19015] ? futex_wake_op+0x974/0xe40 [ 1085.262794][T19015] fault_in_user_writeable+0x70/0xe0 [ 1085.262823][T19015] futex_wake_op+0x9a0/0xe40 [ 1085.262866][T19015] ? __pfx_futex_wake_op+0x10/0x10 [ 1085.262901][T19015] ? __pfx_futex_wait+0x10/0x10 [ 1085.262945][T19015] ? up_write+0x1b2/0x520 [ 1085.262984][T19015] do_futex+0x2e9/0x350 [ 1085.263014][T19015] ? __pfx_do_futex+0x10/0x10 [ 1085.263052][T19015] __x64_sys_futex+0x1e0/0x4c0 [ 1085.263084][T19015] ? fput+0x9b/0xd0 [ 1085.263116][T19015] ? __pfx___x64_sys_futex+0x10/0x10 [ 1085.263147][T19015] ? xfd_validate_state+0x61/0x180 [ 1085.263191][T19015] do_syscall_64+0xcd/0x4c0 [ 1085.263230][T19015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.263254][T19015] RIP: 0033:0x7fe9ce38eec9 [ 1085.263273][T19015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.263297][T19015] RSP: 002b:00007fe9cc5ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1085.263319][T19015] RAX: ffffffffffffffda RBX: 00007fe9ce5e6180 RCX: 00007fe9ce38eec9 [ 1085.263342][T19015] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 1085.263357][T19015] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000001 [ 1085.263371][T19015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1085.263385][T19015] R13: 00007fe9ce5e6218 R14: 00007fe9ce5e6180 R15: 00007ffe08609728 [ 1085.263415][T19015] [ 1086.274349][T19031] zswap: compressor û not available [ 1088.737976][T19070] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1090.360298][T19091] FAULT_INJECTION: forcing a failure. [ 1090.360298][T19091] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.462852][T19091] CPU: 0 UID: 0 PID: 19091 Comm: syz.3.3143 Not tainted syzkaller #0 PREEMPT(full) [ 1090.462907][T19091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1090.462923][T19091] Call Trace: [ 1090.462931][T19091] [ 1090.462941][T19091] dump_stack_lvl+0x16c/0x1f0 [ 1090.462983][T19091] should_fail_ex+0x512/0x640 [ 1090.463021][T19091] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1090.463050][T19091] should_failslab+0xc2/0x120 [ 1090.463083][T19091] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1090.463108][T19091] ? lockdep_init_map_type+0x5c/0x280 [ 1090.463142][T19091] ? snd_seq_prioq_new+0x3f/0x110 [ 1090.463181][T19091] snd_seq_prioq_new+0x3f/0x110 [ 1090.463214][T19091] snd_seq_queue_alloc+0x153/0x5a0 [ 1090.463250][T19091] snd_seq_ioctl_create_queue+0xa9/0x380 [ 1090.463292][T19091] snd_seq_kernel_client_ctl+0x10a/0x1c0 [ 1090.463322][T19091] alloc_seq_queue+0xda/0x180 [ 1090.463346][T19091] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1090.463389][T19091] ? mark_held_locks+0x49/0x80 [ 1090.463420][T19091] ? _raw_spin_unlock_irq+0x23/0x50 [ 1090.463456][T19091] snd_seq_oss_open+0x38c/0xa20 [ 1090.463487][T19091] odev_open+0x6f/0x90 [ 1090.463508][T19091] ? __pfx_odev_open+0x10/0x10 [ 1090.463530][T19091] soundcore_open+0x40c/0x580 [ 1090.463572][T19091] ? __pfx_soundcore_open+0x10/0x10 [ 1090.463611][T19091] chrdev_open+0x231/0x6a0 [ 1090.463642][T19091] ? __pfx_apparmor_file_open+0x10/0x10 [ 1090.463670][T19091] ? __pfx_chrdev_open+0x10/0x10 [ 1090.463704][T19091] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1090.463738][T19091] do_dentry_open+0x97f/0x1530 [ 1090.463769][T19091] ? __pfx_chrdev_open+0x10/0x10 [ 1090.463807][T19091] vfs_open+0x82/0x3f0 [ 1090.463847][T19091] path_openat+0x1de4/0x2cb0 [ 1090.463895][T19091] ? __pfx_path_openat+0x10/0x10 [ 1090.463932][T19091] do_filp_open+0x20b/0x470 [ 1090.463963][T19091] ? __pfx_do_filp_open+0x10/0x10 [ 1090.464015][T19091] ? alloc_fd+0x471/0x7d0 [ 1090.464050][T19091] do_sys_openat2+0x11b/0x1d0 [ 1090.464088][T19091] ? __pfx_do_sys_openat2+0x10/0x10 [ 1090.464137][T19091] __x64_sys_openat+0x174/0x210 [ 1090.464160][T19091] ? __pfx___x64_sys_openat+0x10/0x10 [ 1090.464194][T19091] do_syscall_64+0xcd/0x4c0 [ 1090.464235][T19091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.464260][T19091] RIP: 0033:0x7ff782b8eec9 [ 1090.464279][T19091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.464304][T19091] RSP: 002b:00007ff783a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1090.464327][T19091] RAX: ffffffffffffffda RBX: 00007ff782de5fa0 RCX: 00007ff782b8eec9 [ 1090.464344][T19091] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1090.464359][T19091] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1090.464374][T19091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.464389][T19091] R13: 00007ff782de6038 R14: 00007ff782de5fa0 R15: 00007ffce8b1bb78 [ 1090.464419][T19091] [ 1090.815772][T19095] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3144'. [ 1091.254235][T19099] netlink: zone id is out of range [ 1091.267952][T19099] netlink: zone id is out of range [ 1091.286646][T19099] netlink: zone id is out of range [ 1091.310566][T19099] netlink: zone id is out of range [ 1091.406080][T19099] netlink: zone id is out of range [ 1091.488941][T19099] netlink: zone id is out of range [ 1091.569991][T19099] netlink: zone id is out of range [ 1091.675329][T19099] netlink: zone id is out of range [ 1091.722188][T19104] Invalid ELF header magic: != ELF [ 1091.737732][T19099] netlink: zone id is out of range [ 1091.763458][T19099] netlink: zone id is out of range [ 1096.265422][T19185] net_ratelimit: 62 callbacks suppressed [ 1096.265438][T19185] netlink: zone id is out of range [ 1096.372022][T19186] openvswitch: HfR: Dropping previously announced user features [ 1096.405089][T19185] netlink: del zone limit has 4 unknown bytes [ 1096.506657][T19182] netlink: set zone limit has 8 unknown bytes [ 1097.027211][T19198] FAULT_INJECTION: forcing a failure. [ 1097.027211][T19198] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.128749][T19202] netlink: zone id is out of range [ 1097.149041][T19198] CPU: 0 UID: 0 PID: 19198 Comm: syz.2.3171 Not tainted syzkaller #0 PREEMPT(full) [ 1097.149075][T19198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1097.149090][T19198] Call Trace: [ 1097.149100][T19198] [ 1097.149110][T19198] dump_stack_lvl+0x16c/0x1f0 [ 1097.149152][T19198] should_fail_ex+0x512/0x640 [ 1097.149190][T19198] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1097.149223][T19198] should_failslab+0xc2/0x120 [ 1097.149256][T19198] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1097.149286][T19198] ? acpi_ut_create_thread_state+0x63/0x170 [ 1097.149330][T19198] acpi_ut_create_thread_state+0x63/0x170 [ 1097.149364][T19198] acpi_ps_parse_aml+0x79/0xcb0 [ 1097.149405][T19198] acpi_ps_execute_method+0x55a/0xb30 [ 1097.149445][T19198] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1097.149474][T19198] acpi_ns_evaluate+0x76c/0xca0 [ 1097.149515][T19198] ? kasan_save_track+0x14/0x30 [ 1097.149546][T19198] acpi_evaluate_object+0x1fa/0xa90 [ 1097.149577][T19198] ? htb_enqueue+0x1e1/0x1290 [ 1097.149609][T19198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.149637][T19198] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1097.149671][T19198] ? __mutex_trylock_common+0xe9/0x250 [ 1097.149713][T19198] acpi_evaluate_integer+0xdd/0x200 [ 1097.149742][T19198] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1097.149783][T19198] ? __pfx_status_show+0x10/0x10 [ 1097.149816][T19198] status_show+0xa0/0x120 [ 1097.149849][T19198] ? __pfx_status_show+0x10/0x10 [ 1097.149890][T19198] dev_attr_show+0x53/0xe0 [ 1097.149916][T19198] ? __pfx_dev_attr_show+0x10/0x10 [ 1097.149938][T19198] sysfs_kf_seq_show+0x213/0x3e0 [ 1097.149972][T19198] seq_read_iter+0x506/0x12c0 [ 1097.150009][T19198] kernfs_fop_read_iter+0x46c/0x610 [ 1097.150034][T19198] ? rw_verify_area+0xcf/0x6c0 [ 1097.150061][T19198] vfs_read+0x8bf/0xcf0 [ 1097.150093][T19198] ? __pfx___mutex_lock+0x10/0x10 [ 1097.150131][T19198] ? __pfx_vfs_read+0x10/0x10 [ 1097.150179][T19198] ksys_read+0x12a/0x250 [ 1097.150206][T19198] ? __pfx_ksys_read+0x10/0x10 [ 1097.150243][T19198] do_syscall_64+0xcd/0x4c0 [ 1097.150283][T19198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.150315][T19198] RIP: 0033:0x7fe9ce38eec9 [ 1097.150334][T19198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.150358][T19198] RSP: 002b:00007fe9cc5ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1097.150381][T19198] RAX: ffffffffffffffda RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 1097.150397][T19198] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 1097.150412][T19198] RBP: 00007fe9ce411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1097.150427][T19198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.150442][T19198] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 1097.150473][T19198] [ 1097.150551][T19198] ACPI Error: [ 1098.228800][T19212] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 1098.319649][T19202] netlink: zone id is out of range [ 1098.334322][T19214] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1098.348415][T19202] netlink: zone id is out of range [ 1098.379557][T19202] netlink: zone id is out of range [ 1098.398762][T19202] netlink: zone id is out of range [ 1098.420031][T19202] netlink: zone id is out of range [ 1098.450186][T19202] netlink: zone id is out of range [ 1098.507442][T19198] ffff88805af6d000 walk still has a scope list (20250404/dswstate-694) [ 1100.497817][T19251] Invalid ELF header magic: != ELF [ 1103.104828][T19294] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(173544298.2314043776.706666779), cmd(6) [ 1106.898060][T19331] zswap: compressor not available [ 1108.118375][T19355] Invalid ELF header magic: != ELF [ 1110.021564][T19380] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1110.586311][T19398] net_ratelimit: 4 callbacks suppressed [ 1110.586330][T19398] netlink: zone id is out of range [ 1110.674346][T19391] netlink: set zone limit has 8 unknown bytes [ 1110.739986][T19398] netlink: del zone limit has 4 unknown bytes [ 1110.911548][T19402] openvswitch: HfR: Dropping previously announced user features [ 1112.469491][T19419] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3221'. [ 1114.312814][T19449] Process accounting resumed [ 1114.673990][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1118.701977][T19513] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1119.066086][T19514] Process accounting resumed [ 1120.980482][T19555] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3249'. [ 1121.027311][T19555] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 1123.090424][T19577] ima: policy update failed [ 1123.099190][ T30] audit: type=1802 audit(4294967432.100:44): pid=19577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3256" res=0 errno=0 [ 1123.163902][T19577] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1124.596942][T19597] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 938 with max blocks 14 with error 117 [ 1124.702823][T19597] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1124.702823][T19597] [ 1125.409166][T19578] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1126.165323][T19607] zswap: compressor not available [ 1126.192026][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.198419][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.620127][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 1127.600491][T19640] FAULT_INJECTION: forcing a failure. [ 1127.600491][T19640] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1127.694369][T19640] CPU: 0 UID: 0 PID: 19640 Comm: syz.2.3270 Not tainted syzkaller #0 PREEMPT(full) [ 1127.694402][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1127.694417][T19640] Call Trace: [ 1127.694425][T19640] [ 1127.694434][T19640] dump_stack_lvl+0x16c/0x1f0 [ 1127.694477][T19640] should_fail_ex+0x512/0x640 [ 1127.694519][T19640] get_futex_key+0x1d0/0x1560 [ 1127.694554][T19640] ? __pfx_get_futex_key+0x10/0x10 [ 1127.694587][T19640] ? __lock_acquire+0x62e/0x1ce0 [ 1127.694624][T19640] futex_wake+0xea/0x530 [ 1127.694663][T19640] ? __pfx_futex_wake+0x10/0x10 [ 1127.694704][T19640] ? mntput_no_expire+0x14f/0xd30 [ 1127.694735][T19640] do_futex+0x1e3/0x350 [ 1127.694766][T19640] ? __pfx_do_futex+0x10/0x10 [ 1127.694795][T19640] ? __pfx_mntput_no_expire+0x10/0x10 [ 1127.694821][T19640] ? dput.part.0+0xce/0x9b0 [ 1127.694860][T19640] __x64_sys_futex+0x1e0/0x4c0 [ 1127.694903][T19640] ? mntput+0x6b/0x90 [ 1127.694925][T19640] ? __pfx___x64_sys_futex+0x10/0x10 [ 1127.694958][T19640] ? __pfx___x64_sys_truncate+0x10/0x10 [ 1127.695000][T19640] do_syscall_64+0xcd/0x4c0 [ 1127.695042][T19640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.695067][T19640] RIP: 0033:0x7fe9ce38eec9 [ 1127.695086][T19640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.695111][T19640] RSP: 002b:00007fe9cc5ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1127.695134][T19640] RAX: ffffffffffffffda RBX: 00007fe9ce5e5fa8 RCX: 00007fe9ce38eec9 [ 1127.695150][T19640] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe9ce5e5fac [ 1127.695165][T19640] RBP: 00007fe9ce5e5fa0 R08: 00007fe9ce1f8000 R09: 0000000000000000 [ 1127.695181][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.695195][T19640] R13: 00007fe9ce5e6038 R14: 00007ffe08609640 R15: 00007ffe08609728 [ 1127.695225][T19640] [ 1128.585507][T19657] vivid-007: ================= START STATUS ================= [ 1128.649619][T19657] vivid-007: Enable Output Cropping: true [ 1128.695274][T19657] vivid-007: Enable Output Composing: true [ 1128.786097][T19657] vivid-007: Enable Output Scaler: true [ 1128.823729][T19657] vivid-007: Tx RGB Quantization Range: Automatic [ 1128.897814][T19657] vivid-007: Transmit Mode: HDMI [ 1128.991515][T19657] vivid-007: Hotplug Present: 0x00000000 [ 1128.997213][T19657] vivid-007: RxSense Present: 0x00000000 [ 1129.108312][T19657] vivid-007: EDID Present: 0x00000000 [ 1129.166665][T19657] vivid-007: ================== END STATUS ================== [ 1130.157724][T19696] ima: policy update failed [ 1130.211228][ T30] audit: type=1802 audit(4294967439.220:45): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3282" res=0 errno=0 [ 1130.251631][T19696] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1130.273736][T19678] zswap: compressor not available [ 1131.057077][T19703] FAULT_INJECTION: forcing a failure. [ 1131.057077][T19703] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1131.125779][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.1.3285 Not tainted syzkaller #0 PREEMPT(full) [ 1131.125813][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1131.125846][T19703] Call Trace: [ 1131.125854][T19703] [ 1131.125863][T19703] dump_stack_lvl+0x16c/0x1f0 [ 1131.125905][T19703] should_fail_ex+0x512/0x640 [ 1131.125947][T19703] get_futex_key+0x1d0/0x1560 [ 1131.125981][T19703] ? __pfx_get_futex_key+0x10/0x10 [ 1131.126014][T19703] ? __lock_acquire+0x62e/0x1ce0 [ 1131.126051][T19703] futex_wake+0xea/0x530 [ 1131.126091][T19703] ? __pfx_futex_wake+0x10/0x10 [ 1131.126132][T19703] ? mntput_no_expire+0x14f/0xd30 [ 1131.126163][T19703] do_futex+0x1e3/0x350 [ 1131.126194][T19703] ? __pfx_do_futex+0x10/0x10 [ 1131.126231][T19703] ? __pfx_mntput_no_expire+0x10/0x10 [ 1131.126258][T19703] ? dput.part.0+0xce/0x9b0 [ 1131.126297][T19703] __x64_sys_futex+0x1e0/0x4c0 [ 1131.126330][T19703] ? mntput+0x6b/0x90 [ 1131.126353][T19703] ? __pfx___x64_sys_futex+0x10/0x10 [ 1131.126385][T19703] ? __pfx___x64_sys_truncate+0x10/0x10 [ 1131.126426][T19703] do_syscall_64+0xcd/0x4c0 [ 1131.126466][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.126491][T19703] RIP: 0033:0x7ff67058eec9 [ 1131.126509][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.126534][T19703] RSP: 002b:00007ff6714110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1131.126557][T19703] RAX: ffffffffffffffda RBX: 00007ff6707e5fa8 RCX: 00007ff67058eec9 [ 1131.126573][T19703] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff6707e5fac [ 1131.126589][T19703] RBP: 00007ff6707e5fa0 R08: 00007ff671412000 R09: 0000000000000000 [ 1131.126604][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.126631][T19703] R13: 00007ff6707e6038 R14: 00007ffe5d2d8220 R15: 00007ffe5d2d8308 [ 1131.126664][T19703] [ 1132.124198][T19720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3290'. [ 1132.418503][T19723] bridge0: port 3(dummy0) entered blocking state [ 1132.452550][T19723] bridge0: port 3(dummy0) entered disabled state [ 1132.481368][T19723] dummy0: entered allmulticast mode [ 1132.507413][T19723] dummy0: entered promiscuous mode [ 1132.526395][T19723] bridge0: port 3(dummy0) entered blocking state [ 1132.532878][T19723] bridge0: port 3(dummy0) entered forwarding state [ 1132.824397][T19733] ima: policy update failed [ 1132.847733][ T30] audit: type=1802 audit(4294967441.850:46): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3293" res=0 errno=0 [ 1132.873954][T19733] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1133.522540][T19752] ima: policy update failed [ 1133.559457][ T30] audit: type=1802 audit(4294967442.560:47): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3298" res=0 errno=0 [ 1133.577226][T19752] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1134.531991][T19764] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1140.990252][T19865] FAULT_INJECTION: forcing a failure. [ 1140.990252][T19865] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.051292][T19865] CPU: 0 UID: 0 PID: 19865 Comm: syz.3.3322 Not tainted syzkaller #0 PREEMPT(full) [ 1141.051327][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1141.051343][T19865] Call Trace: [ 1141.051351][T19865] [ 1141.051366][T19865] dump_stack_lvl+0x16c/0x1f0 [ 1141.051408][T19865] should_fail_ex+0x512/0x640 [ 1141.051446][T19865] ? fs_reclaim_acquire+0xae/0x150 [ 1141.051486][T19865] should_failslab+0xc2/0x120 [ 1141.051519][T19865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1141.051550][T19865] ? ima_inode_get+0x120/0x580 [ 1141.051579][T19865] ima_inode_get+0x120/0x580 [ 1141.051607][T19865] process_measurement+0x585/0x23e0 [ 1141.051640][T19865] ? __lock_acquire+0x62e/0x1ce0 [ 1141.051673][T19865] ? __pfx_process_measurement+0x10/0x10 [ 1141.051711][T19865] ? find_held_lock+0x2b/0x80 [ 1141.051761][T19865] ? futex_private_hash_put+0x18a/0x300 [ 1141.051797][T19865] ima_file_mmap+0x1b1/0x1d0 [ 1141.051823][T19865] ? __pfx_ima_file_mmap+0x10/0x10 [ 1141.051856][T19865] security_mmap_file+0x88c/0x990 [ 1141.051891][T19865] vm_mmap_pgoff+0xec/0x470 [ 1141.051940][T19865] ? find_held_lock+0x2b/0x80 [ 1141.051963][T19865] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1141.052003][T19865] ? __fget_files+0x20e/0x3c0 [ 1141.052041][T19865] ksys_mmap_pgoff+0x32c/0x5c0 [ 1141.052080][T19865] __x64_sys_mmap+0x125/0x190 [ 1141.052122][T19865] do_syscall_64+0xcd/0x4c0 [ 1141.052161][T19865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.052186][T19865] RIP: 0033:0x7ff782b8eec9 [ 1141.052205][T19865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.052229][T19865] RSP: 002b:00007ff783a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1141.052252][T19865] RAX: ffffffffffffffda RBX: 00007ff782de5fa0 RCX: 00007ff782b8eec9 [ 1141.052268][T19865] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 1141.052283][T19865] RBP: 00007ff782c11f91 R08: 0000000000000009 R09: 0000000000000000 [ 1141.052298][T19865] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 1141.052312][T19865] R13: 00007ff782de6038 R14: 00007ff782de5fa0 R15: 00007ffce8b1bb78 [ 1141.052342][T19865] [ 1144.993452][T19932] ubi0: attaching mtd0 [ 1145.078105][T19932] ubi0: scanning is finished [ 1145.147726][T19932] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1145.457395][T19932] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1145.686579][T19908] Process accounting paused [ 1146.034218][T19940] ima: policy update failed [ 1146.050449][ T30] audit: type=1802 audit(4294967455.060:48): pid=19940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3336" res=0 errno=0 [ 1146.078082][T19940] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3336'. [ 1146.328695][T19950] vivid-003: ================= START STATUS ================= [ 1146.370567][T19950] vivid-003: Radio HW Seek Mode: Bounded [ 1146.398514][T19950] vivid-003: Radio Programmable HW Seek: false [ 1146.416088][T19950] vivid-003: RDS Rx I/O Mode: Block I/O [ 1146.457409][T19952] vivid-007: ================= START STATUS ================= [ 1146.507514][T19950] vivid-003: Generate RBDS Instead of RDS: false [ 1146.557103][T19952] vivid-007: Generate PTS: true [ 1146.578956][T19950] vivid-003: RDS Reception: true [ 1146.688448][T19952] vivid-007: Generate SCR: true [ 1146.713783][T19950] vivid-003: RDS Program Type: 0 inactive [ 1146.776001][T19952] tpg source WxH: 320x240 (Y'CbCr) [ 1146.801793][T19950] vivid-003: RDS PS Name: inactive [ 1146.839540][T19952] tpg field: 1 [ 1146.853771][T19950] vivid-003: RDS Radio Text: inactive [ 1146.879783][T19952] tpg crop: (0,0)/320x240 [ 1146.918977][T19950] vivid-003: RDS Traffic Announcement: false inactive [ 1146.946187][T19952] tpg compose: (0,0)/320x240 [ 1146.967008][T19952] tpg colorspace: 8 [ 1146.999663][T19950] vivid-003: RDS Traffic Program: false inactive [ 1147.029724][T19952] tpg transfer function: 0/0 [ 1147.048236][T19950] vivid-003: RDS Music: false inactive [ 1147.093781][T19952] tpg Y'CbCr encoding: 0/0 [ 1147.114629][T19952] tpg quantization: 0/0 [ 1147.150738][T19950] vivid-003: ================== END STATUS ================== [ 1147.192006][T19952] tpg RGB range: 0/2 [ 1147.210879][T19952] vivid-007: ================== END STATUS ================== [ 1147.842513][T19977] FAULT_INJECTION: forcing a failure. [ 1147.842513][T19977] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.916668][T19977] CPU: 0 UID: 0 PID: 19977 Comm: syz.3.3345 Not tainted syzkaller #0 PREEMPT(full) [ 1147.916700][T19977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1147.916725][T19977] Call Trace: [ 1147.916734][T19977] [ 1147.916743][T19977] dump_stack_lvl+0x16c/0x1f0 [ 1147.916785][T19977] should_fail_ex+0x512/0x640 [ 1147.916823][T19977] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1147.916853][T19977] should_failslab+0xc2/0x120 [ 1147.916886][T19977] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1147.916910][T19977] ? ip6addrlbl_add+0x69c/0xc40 [ 1147.916945][T19977] ? ip6addrlbl_add+0xbb/0xc40 [ 1147.916984][T19977] ip6addrlbl_add+0xbb/0xc40 [ 1147.917027][T19977] ip6addrlbl_net_init+0x10a/0x380 [ 1147.917065][T19977] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 1147.917102][T19977] ops_init+0x1e2/0x5f0 [ 1147.917144][T19977] setup_net+0x10f/0x380 [ 1147.917163][T19977] ? lockdep_init_map_type+0x5c/0x280 [ 1147.917198][T19977] ? __pfx_setup_net+0x10/0x10 [ 1147.917221][T19977] ? debug_mutex_init+0x37/0x70 [ 1147.917248][T19977] copy_net_ns+0x2a6/0x5f0 [ 1147.917276][T19977] create_new_namespaces+0x3ea/0xa90 [ 1147.917311][T19977] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1147.917342][T19977] ksys_unshare+0x45b/0xa40 [ 1147.917376][T19977] ? __pfx_ksys_unshare+0x10/0x10 [ 1147.917411][T19977] ? xfd_validate_state+0x61/0x180 [ 1147.917456][T19977] __x64_sys_unshare+0x31/0x40 [ 1147.917489][T19977] do_syscall_64+0xcd/0x4c0 [ 1147.917529][T19977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.917554][T19977] RIP: 0033:0x7ff782b8eec9 [ 1147.917573][T19977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.917597][T19977] RSP: 002b:00007ff783a95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1147.917619][T19977] RAX: ffffffffffffffda RBX: 00007ff782de5fa0 RCX: 00007ff782b8eec9 [ 1147.917635][T19977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1147.917650][T19977] RBP: 00007ff782c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1147.917665][T19977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.917684][T19977] R13: 00007ff782de6038 R14: 00007ff782de5fa0 R15: 00007ffce8b1bb78 [ 1147.917720][T19977] [ 1148.198469][T19874] ------------[ cut here ]------------ [ 1148.204033][T19874] WARNING: CPU: 0 PID: 19874 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 1148.214549][T19874] Modules linked in: [ 1148.219023][T19874] CPU: 0 UID: 0 PID: 19874 Comm: syz.2.3325 Not tainted syzkaller #0 PREEMPT(full) [ 1148.228410][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1148.238529][T19874] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1148.245012][T19874] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 1148.264694][T19874] RSP: 0018:ffffc9000ba079c0 EFLAGS: 00010293 [ 1148.271212][T19874] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 1148.279241][T19874] RDX: ffff888025ce8000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 1148.287221][T19874] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 1148.295223][T19874] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88803906ae08 [ 1148.303227][T19874] R13: dffffc0000000000 R14: ffffc9000ba07a58 R15: 0000000000000000 [ 1148.311222][T19874] FS: 0000000000000000(0000) GS:ffff8881246ba000(0000) knlGS:0000000000000000 [ 1148.320336][T19874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.326988][T19874] CR2: 00007ff782bc1720 CR3: 000000007dc78000 CR4: 00000000003526f0 [ 1148.335006][T19874] Call Trace: [ 1148.338291][T19874] [ 1148.341266][T19874] remove_vma+0x88/0x160 [ 1148.345526][T19874] exit_mmap+0x511/0xb90 [ 1148.349820][T19874] ? __pfx_exit_mmap+0x10/0x10 [ 1148.354645][T19874] ? __lock_acquire+0xb97/0x1ce0 [ 1148.359654][T19874] __mmput+0x12a/0x410 [ 1148.363746][T19874] mmput+0x62/0x70 [ 1148.367494][T19874] do_exit+0x7c7/0x2bf0 [ 1148.372002][T19874] ? proc_coredump_connector+0x2d1/0x4f0 [ 1148.377680][T19874] ? __pfx_do_exit+0x10/0x10 [ 1148.382398][T19874] do_group_exit+0xd3/0x2a0 [ 1148.386929][T19874] get_signal+0x2673/0x26d0 [ 1148.391489][T19874] ? force_sig_fault+0xc4/0x100 [ 1148.396359][T19874] ? __pfx_get_signal+0x10/0x10 [ 1148.401288][T19874] arch_do_signal_or_restart+0x8f/0x790 [ 1148.406869][T19874] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1148.413009][T19874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1148.419242][T19874] irqentry_exit_to_user_mode+0x13e/0x290 [ 1148.424988][T19874] asm_exc_page_fault+0x26/0x30 [ 1148.429961][T19874] RIP: 0033:0x40fff [ 1148.433780][T19874] Code: Unable to access opcode bytes at 0x40fd5. [ 1148.440245][T19874] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 1148.446320][T19874] RAX: 0000000000000000 RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 1148.454341][T19874] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1148.462360][T19874] RBP: 00007fe9ce411f91 R08: 0000000000000002 R09: 0000000000000000 [ 1148.470365][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.478595][T19874] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 1148.486646][T19874] [ 1148.489699][T19874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1148.496984][T19874] CPU: 0 UID: 0 PID: 19874 Comm: syz.2.3325 Not tainted syzkaller #0 PREEMPT(full) [ 1148.506444][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1148.516498][T19874] Call Trace: [ 1148.519778][T19874] [ 1148.522722][T19874] dump_stack_lvl+0x3d/0x1f0 [ 1148.527341][T19874] vpanic+0x6e8/0x7a0 [ 1148.531347][T19874] ? __pfx_vpanic+0x10/0x10 [ 1148.535881][T19874] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1148.541699][T19874] panic+0xca/0xd0 [ 1148.545439][T19874] ? __pfx_panic+0x10/0x10 [ 1148.549882][T19874] ? check_panic_on_warn+0x1f/0xb0 [ 1148.555016][T19874] check_panic_on_warn+0xab/0xb0 [ 1148.559973][T19874] __warn+0xf6/0x3c0 [ 1148.563890][T19874] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1148.569708][T19874] report_bug+0x3c3/0x580 [ 1148.574055][T19874] ? tracing_buffers_mmap_close+0xdd/0x130 [ 1148.579872][T19874] handle_bug+0x184/0x210 [ 1148.584212][T19874] exc_invalid_op+0x17/0x50 [ 1148.588719][T19874] asm_exc_invalid_op+0x1a/0x20 [ 1148.593582][T19874] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 1148.600008][T19874] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 1148.619627][T19874] RSP: 0018:ffffc9000ba079c0 EFLAGS: 00010293 [ 1148.625727][T19874] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 1148.633702][T19874] RDX: ffff888025ce8000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 1148.641678][T19874] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 1148.649657][T19874] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88803906ae08 [ 1148.657634][T19874] R13: dffffc0000000000 R14: ffffc9000ba07a58 R15: 0000000000000000 [ 1148.665619][T19874] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 1148.671885][T19874] ? tracing_buffers_mmap_close+0xc9/0x130 [ 1148.677705][T19874] ? tracing_buffers_mmap_close+0xdc/0x130 [ 1148.683532][T19874] remove_vma+0x88/0x160 [ 1148.687787][T19874] exit_mmap+0x511/0xb90 [ 1148.692057][T19874] ? __pfx_exit_mmap+0x10/0x10 [ 1148.696852][T19874] ? __lock_acquire+0xb97/0x1ce0 [ 1148.701830][T19874] __mmput+0x12a/0x410 [ 1148.706005][T19874] mmput+0x62/0x70 [ 1148.709735][T19874] do_exit+0x7c7/0x2bf0 [ 1148.713912][T19874] ? proc_coredump_connector+0x2d1/0x4f0 [ 1148.719760][T19874] ? __pfx_do_exit+0x10/0x10 [ 1148.724382][T19874] do_group_exit+0xd3/0x2a0 [ 1148.728907][T19874] get_signal+0x2673/0x26d0 [ 1148.733434][T19874] ? force_sig_fault+0xc4/0x100 [ 1148.738301][T19874] ? __pfx_get_signal+0x10/0x10 [ 1148.743179][T19874] arch_do_signal_or_restart+0x8f/0x790 [ 1148.748761][T19874] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 1148.754854][T19874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1148.761047][T19874] irqentry_exit_to_user_mode+0x13e/0x290 [ 1148.766794][T19874] asm_exc_page_fault+0x26/0x30 [ 1148.771660][T19874] RIP: 0033:0x40fff [ 1148.775557][T19874] Code: Unable to access opcode bytes at 0x40fd5. [ 1148.781966][T19874] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 1148.788039][T19874] RAX: 0000000000000000 RBX: 00007fe9ce5e5fa0 RCX: 00007fe9ce38eec9 [ 1148.796012][T19874] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1148.803988][T19874] RBP: 00007fe9ce411f91 R08: 0000000000000002 R09: 0000000000000000 [ 1148.811967][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1148.819944][T19874] R13: 00007fe9ce5e6038 R14: 00007fe9ce5e5fa0 R15: 00007ffe08609728 [ 1148.827934][T19874] [ 1148.831023][T19874] Kernel Offset: disabled [ 1148.835353][T19874] Rebooting in 86400 seconds..