last executing test programs: 3m4.445721364s ago: executing program 0 (id=466): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r1, 0x2, &(0x7f0000000080)='&\x00', &(0x7f00000000c0)="963d7e9eb85adebfc2b5f2c943dbd41c4e3dd205140f511b042779e17028a809f1f53bcfb6ddbc8cd358be8e3696525699c88c7cd23ac34c6a163995", 0x2) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x2ff, 0x400, 0x6}]}) 3m4.238762791s ago: executing program 0 (id=471): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0xfffffffffffffffe, 0xe981, 0x8001, 0xeb3, 0x401, 0x410000008002) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x10000, 0x7fffffff, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0x2000000000000e8, 0x1000000000, 0x4, 0x0, 0x8}) r1 = socket(0xa, 0x801, 0x84) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) clock_settime$auto(0x2, &(0x7f0000000040)={0x9, 0x9}) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x6b) socketpair$auto(0x3, 0x1, 0x7f, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @remote}, 0x55) write$auto(0x3, 0x0, 0x800) ioctl$auto_TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=0x4da) 3m3.843770005s ago: executing program 0 (id=475): mmap$auto(0xfffffffffffffffc, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x10b000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0xcb5, 0x7fffffff}, 0x8}, 0x7, 0x20020001) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x44080, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x40000000000000d, 0x2009, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x100000000008000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000440)='/dev/audio1\x00\xb3\xb6V\x12\xbd\xb2\x97d\x8e\xdaB\xbb\xea\xee\xe1\xaa1\x8bL\x01\xa3\xc4 \\fj\xc0\xa9\xfb\x12p\xa6\x00\xc8\x89\x87\x05u`zr\t)_*4\xf5\rl\x8c\x0f\x95Ed0\xc8Y\x149Er6\xbes\xdb\xff\x9d\xe62\x11B\xec6l\xc4\x9b\xb5\x14|\xfeD\xb13\x8e\xe7\x1c{Z\x8b\xf1E\xc8\xe7\xe3\xb0\x81\x99\xeaA\x0f \x8f3l1bIep\xcb5\x9f\'\x9e\x93}\xed\x9a\v\xe4\x9b\xf92\xc5\x8aJ\x81O\x9a,d#^\\\x1f\x8cf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x80000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) (rerun: 32) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd11/events_async\x00', 0x182b02, 0x0) (async, rerun: 64) statmount$auto(&(0x7f0000000340)={0x7, @inferred, 0x100, 0xfffffffffffffffd, 0x6c19}, &(0x7f0000001400)={0xfef, 0x2, 0x2, 0x1, 0x7, 0x5, 0x9, 0x6498, 0xa1, 0xc7, 0x7ff, 0x9, 0x5, 0x4, 0x1, 0xfffffffffffff5dd, 0x3, 0x8000, 0x7, 0x6, 0x81, 0xffffffff, 0x1a44, 0x3, 0x800, 0x1913, 0xc0, 0x6, 0x4, 0x4, 0x1, [0x1a, 0x1ff, 0x4, 0x9, 0x3, 0x8, 0x38, 0x6, 0x10, 0xa2de, 0x1, 0x0, 0x791, 0x8, 0x100000000, 0x1, 0x61c, 0x0, 0x10001, 0x7fffffffffffffff, 0x3, 0x1, 0x1, 0x8, 0x2, 0x7, 0x80000001, 0x1, 0xfffffffffffffffe, 0x9, 0xdc53, 0x1, 0x3, 0x5, 0x200, 0x7, 0x9, 0x8, 0x5, 0x479a, 0x80000001, 0x0, 0x8], "ed88f2de760c2ee7ac066486ca122a82409f66ace9b4b64e320ef71803e97bef4e0863db1b5e2b3bcd629ecae47d5b9bff6485f29ceae21f070b1fd3e788abac81ef860a69a2ff116888303d8d59aa3727f1097f954151e06997d3b6f313def9e0012b20faa549ef101a0546287b9a351f6524d7bc54f7a286e837f5a59cfc4d2a4e8be4f64ac27c1194f18f25856c032599163fc1220135707b55894274f305c8f0e686cf8c9fa10051ab2c969317408a6a34b36d4f89a7edf7d7ee1f7afec8c29f184006b9262682ff4fb4e1396ba69f2770ad39f81af88cc2e174a899ebb98189d49d359cda3277d8e5fc9d5e07a09befb61bd32c5892901c2babda7f399c84c8e016a80f7d868aded9913e19a07f17af98ff939ad08dc62f07a5485d4310297052945235febee634046c938f55a5cb52e83c9cff3df40677528d7732f770b06bf420886f13a829ec8a427a1d11577d49d129b82b0ba664261ea410f5a4786fe426cd94cf191faccdbdb4581beb407a807ee62126de5aa6c9a14001e7fb046099e8c6043ae31edb368b9033880178392ba6e6dda4fb466d278330651e24bc567195fab19c86bc27b186d29680e95b3c580f66adb614341854cafdf28f7528f6a14b4286b0a381949a13390be092cd10fc33c7f06896fca0fdaa99b409f183868e97e6082f7ea2bdb2efae8e89c9fd3e5517dadd1603f1314f64f1b990f96b2259e7c52cae970b056bafc05cfb54985deb2bb7a4b3ad4301c21c620eacdb1c51e80e69e32057291c2ad389412efd77c3d0d3c9d12d3c9b8e1ac6dabd5763cd54e64196ecd825e03f89495fe4534cdb1cd149ff2a750335bb92c0e37e8f7bfee06f284836e712b7acc9ace8b63a77e417d5910f824b1d4b2da3e5c09ed40a3a48dd5c99454c62acbd459386bd5c83fb68e58c85b0e75aea2afb0a7218df358267bf351089dcb563cf9d65118910564cad60f02a3b027cef53fb687ae67479ca5d6778090cf6a5254f1e9af3798dc4948d1b7908977e532a69cc8fb9d6072dbd1b9ce02a11b3e4a791918cd01f210c161d9dcd59080964ee1d133b3223828f92ee25dce7667cb80343dc7bfb84d1d083d5560d5514b6568402dc5ace3a5ac31637752c3271cbd92f435176fe9c7a537a44c2954861fd19e4ebfe9e7b232de87e01976d0965ab60b37374176439c5f7febc0b0115c3456bb5fc6b3523df1ef0d1a3fce7f10ea7fb8e139524fffd1f0e92ae796ebbe20674d9e6b36ef545fa4aa0546969e3458009038032107950f37ad68d3019f8998341682310d30bb8b4cd33665d0615f4c39083d7b53e84902a37b3cb39e9ee3b94821989ed4275062d89c530d42e85fa542229bc10b0c195d2b5f34adb4e9930ea514ceef15e9bda7491252e76e27e437a9d2f61f45cc342d77f66e8c282bdce0cfa52ce15c2f2ee44dd6387b3977ff58ec58c9fa4e5d2b20dddcceafd8b8a9d7bb1d0580dda6e8bfaf9c72521999406b837eb1e161665afcd28d4126b3c1d9b07c77a2cedeb2b078dfdd909dba89e77df9fd696dbad2d05ec2a27d419724a1f699d9102d865d1f532311a58a3d02dc35a507021ab2b911f33b74dbdcfb48ba4bbebfc5030f732abd93c5f7abde252dc3a309103ba3caf2443720e7128333b11811c981e470dced1b3c0cebccfc706d1bf6380f26d6fb85e0590e905af5c308af8f94b169899bc140b291722f3811fd64e4b2ee236d5f9af7d12a19bc1e3b0d0189f50cda2d14e969f0cfdd1a77594e692960f9182771cf85e6ffa0bbafb92659d65c82a6b6774a2775ae7261ed20c998370caef33264b0345908bc478ddd281727d1988081ecc472cd73a336307978043a000eef20053fb4f8f87e39e29311259e2a0b7aed0ec6ddc8b4370f3954ed180ae580cb9be0a4c14a41b77d635b0a7dccdbde9d20dd0af957f194cb000d9c7d86de06e7ed3eaa2c5b5077065f8e5e31adf534d7c7a66ece349efc2ea0125577eeb2e4ec62e94acfe5380211005444ff51f1c8fa2365fdd0cc274a5de3198e771348f0c36ac4694c8b17dd9bde48a4b3c755fec27904fd64ed733e5eca06bd885860de03a9797dc229ed79091ae64264b2731e2512b1bf3fa1e660a05a52831da1c2082dd1b22411075992eea9f0e1728fbba1f648d30d1c591d65711d0f056f6213c7d69f0f79fd92a25210f0c0da01b9dfab732a92c798d0ac15ff3fdd826a49b3a2a38cab39efc1f221682fd3882d28f8ef24d8edbc88d75bdfdc51c6cacaf894395137112c3ed437305f3b0645bccd27d6dceacac4f29782cce0e552b3e6d686d61cfa4c0de8d616a17d83a9e5479a9c5ee48ec5ee49c8ddb280af9fe9d1b05fe6a63e2293414b75c5aff079d2c1ef8181c39f23522aad85c5cc9ae7c24efcbb5f73dd03b4c0733978d17295102840236677207a178c5e30921aaeba8e49cad960b17b8b0828e9c940299784527c382d63dd86c43701882199572e48a9f56dc2beb1e014f5f66088f8f3d40b6a94d723b678facecd502df3268f5f071cd7ba9ed278f1dec3661ae9685b4425ae8504137d417250403c8f04d19a22fe25beb4a80318d2b59a98b2ea58343a3cef0c6f469dcfc866053aafaf0c98b16e4ca18e22011696a863937878178f85882091177b4affc8813891ed56991d7ff4ae7cc96c2b0941ab0f1dfb53ca4ace0d79dbc87f076809bececb5c795ce1e6fbbe1f57998b7ef9be8ae74237179513b0b5880bcbdac3a504f06bf57274ff04ed91dda7705d2da443e4ac6c64f33917a5659f2acb587050e7fd0cc2180478ef1f1296f6570b43b5caa662ecc536e1a8fcfc2c3effa12867da493cc7d5e7f04bfcfc412f2d09d6c6d1942c498a4299ab73380be726ccd227ede5c21daae6dc0d62727dedc7e7113d640b5877fb9f04d803bad42db9514b8def43b0d959483261f1bdf6f5d22716cae0226a19f81dfc807552e831d2cd15da91f53c8f239aa286bd4a80ce67746f81ec771c94428db699a2e0cc6d301859e9a3b4bcb0ede9348e8af782b4ef51d9ff427ecb344f6799ee5a06685c64df45ac0933dfca1142fa284067c39f6b129403439e80cd8de17cb57f28e70846be546ca63762431213696bee7bbe2c351d01d4c143d49325d1b0054a9a5ef57e5d37e879368c2f2945d89bcb8c4c1600e852cc6ec0d32373858822c466ad33553b9a1994147f40af55e68182ceac8c1595ef4b0b1b94b29d75e86a1ebeebc2a0e098fa28fc41a21f46ed817db234c736aa99e5dcbe68fb867c69712d9ac2a1544f079b44f069890a063dbf564d85bd9e6accc696182d7a2972efc6c46df61469afbdeaf1e1aa9ba34f4c353a6ac0aae094bd2ad08855c578277ebde15221a474e07f2e5f3ca50fbad1ecbdb68a9b6b3fb91a28ad09dfa629393d6a3d1ffba62220c43a3f7efdd005d99a881418bb005f7db20b36a1f6ba22458d37074cd70a2d3adafa187e4e3fda26a2db0210a709195d54fcc049bfda5aa1a8e18c8f93397734d5930d53213b3c4351a4a3c753bb20879ed2f79731efe97403e615a754bb2d68e2119b3a1d5c70557c83d0e3be46bed43548a48b56a6583479a7471aca6856e94ae44b671107378c8ac60bec565c2fde94dceec558a6a5486e82f70cdd001fb70b71d2e98070f00f5b7883c49129bca7f4d241b7ed3ecffbaf2aab828c756ec6d2a71fc2dff35219cedcc3059d132e40668f8f2e2b34de4cfabf7d3641f777c2bcab0092a5f0ac5424d1205f3ff98b962dd339a7b4909ebfa9e0788ab844bc8b37097c5de328ee6bab2f182415cdcd48fbb45ca988f5edf26a1fdafc4a9ddd654843f063312a44d4cc3a71980b3e7e9cbcc771250290bd80c045cbde8dd7217336f8b18d0a9dc39f3033e91f34729b41242801d8976092c631abab0c13c89a6623a816c7514332e39c445dd936cfddc17c25b01bf7ab3ded1aebacb7fc04f51330db7006ce78c9c1905812f5470f8568be0c28200a46e8e791c5605ae1d4a957b70e137ae481ec8dd42a1f3322ede872836a32b60cf3f688222fdf20f7e66546b198f6b1088c84b68d31f9580ea21b4e11ddc2a4756d794a83dd8baed84e03b74a9f8bd0d03a8bbbde7871a20d889211a89969799e2c6d05c5527bf3008438932162c39330cea6dc6f003dfe4846bf8941cd1199c81cabce226f9d0e487f7d8b33fd95f7353c453a37a47a9ba73b328a9028cc4638a941b382bd9ca33c802efdcb0bf41634cd62aa4e76d05739bd803babe402812323d6f0f96d43d4b566a36f8b53970fb8ad4a3d4e45c4661c63464c616a5a1d817398b01aa39124d363faa8bb94a3fe5bc1c1d0c81d0c53c105525a1001253fe1292a62a32cd7b63ebe346afbbb6f495b369a3a9c459cb406026c483aaea5455addf5f073e9d163ee5056da841e9450027d59730c03139d67b6ba9a8f66245d6750b0fe5dc45cc3b0658b66325d44d3bbacf9f4008fc9e20af81c98942954e4777582ea4ec5854ea22d3fad838b72e9ea8e3bc88e49170d1cbd2c3d75732aa0c200ba46071a82ca73a71d9220619fe18d2a266a9af5653a2176cfe41ac31bc13c03794fe9a4eacc831efdef35a0bb6236e4fd7694b31cdc9cc8164cc0f4b3b8b6d38d1c8ac70188abe638c7451841f5aa118f72200191699282bf9f13d7fd1005a6afb44d29421f03e9d89e9061cd8b47d64854fa9c3bac6351f0b7603cc9b69f0952822683eb8a3ae2789952c18e2fcda4b85a968c3c1c28ca0f6882fd9406b9fe0ccbe64751a08ca0788fe05175f6988db19244c1b30823bc11d300343a9c0b305a645eb8cb0f926cc9fb760f6cf2c62112514670c993d345ce39626a8d4f2a94948bc960eaabc6b44fd3a6a7a43966640367145e08a83c9a9fc317c6318fede1165df85d6a1ee381f3edd66c34232d56b74787f062816c9ee52f6ff316155f0664ba4826944d88252e0a739693ec0bb7cf47b85b46e845252096889f1a499ea3eac2d910a61d60d56b47bf8497f4775daffc1cc8c549df6b6f8a9456a20a0255dfb1e1bd1fe9e9100de38cb9df225c4ad0d758b7c4e94a367468b75ca806248999db12873f682c824fbbc36452fe73f1b3a0f8f6db1547cb2e148d6552b143a4a5b1c7ea60e172cc298abc1a0d5ca3f42b5b01aaad6e13c2ece9ea4a6ef77a213ddc35d5f6966c2e64dd67a432866dcd0112716b0c8c04f4b6d9fc9b3f5e2bf083c57e2e26f84217a0b9f4d1b3d885b4df20c16624e0be22fc8a824becff176c647750e5b1e708836513e1ac2633fd375422510beac1c5ae1c83540ab99b83ee45050bd4c422f6f7f5278ca4c6d1b2490a754a0208af3594cdb233c87b1b618e920e1d3da9f90584c2b4220b8904d7ca6c790be01dc2ca9d02d0bada3569f531a3a7069f8348e0ecfd9ffc34483f2438b07aa756f73150a8f418a6a88b0b35c58aba7c338457f83825aa1962ceeeeb22002e8e2f63cc3042df10b0871d19d1f11e3e67fa7f870b7082632ccf5b0cc2d326c5b359440374226b4d52b93a02f343a8688443b9b157ec518d4bb7c5a6cdc2862868617259f86ce5d51a315ac19fc05f27a66ce5377e8d8e19ab8acb0cf2e44b2a51aa3a4fc2417023b798d86dc68270b5681306a19136b2ecdbf842857cd8fea93913fde5a31a5665581c482164579bb2db2c0b7d3e8f998282b0fd8fcca63f9b75c5689768b531678209f3e17656d4d3e624bdcf5385787469d801d17f64f5a65c15e5d6839547da8a538b66e5ee2864c6760f0144ce8ae93cef0d62b0ac792"}, 0x100, 0x401) (async, rerun: 64) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) (async) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) 2m59.07819245s ago: executing program 0 (id=501): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)="1c520b214b197e", 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x74801, 0x0) (async) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x74801, 0x0) ioctl$auto_BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000000c0)={0x0, 0x2, 0x8}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) wait4$auto(r0, 0x0, 0x80000001, 0x0) (async) wait4$auto(r0, 0x0, 0x80000001, 0x0) 2m43.678833465s ago: executing program 32 (id=501): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x3, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000240)="1c520b214b197e", 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x74801, 0x0) (async) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x74801, 0x0) ioctl$auto_BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000000c0)={0x0, 0x2, 0x8}) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) wait4$auto(r0, 0x0, 0x80000001, 0x0) (async) wait4$auto(r0, 0x0, 0x80000001, 0x0) 6.731847327s ago: executing program 3 (id=1222): r0 = prctl$auto(0x3e, 0x80000000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x800008000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r1) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) shmat$auto(0x0, 0x0, 0xfff) (async, rerun: 32) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x2) (async, rerun: 32) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x414000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) (async) socket(0x1e, 0x1, 0x0) (async) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = socketcall$auto(0x8000, 0x0) (async, rerun: 32) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0xffffffffffffffff, 0xae41, r5) (async) lstat$auto(0x0, &(0x7f0000000180)={0x9, 0x2, 0x5, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) (async) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 5.351156394s ago: executing program 3 (id=1228): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffffff, &(0x7f0000000440)=""/242, 0xf2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) readahead$auto(r0, 0x1, 0x420b) pread64$auto(r0, &(0x7f0000000040)='/&\x00', 0x5, 0x9) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvlan1/arp_announce\x00', 0x0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) 5.263165428s ago: executing program 1 (id=1230): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000340)={0x8f3, 0x8, 0x8, 0x7, 0x1000, 0x9, "0000000076571500000100", 0x6, 0x41, 0x7f, 0x9d, 0x6, 0xd, 0x80}) r1 = prctl$auto_PR_SCHED_CORE_GET(0x3ff, 0x0, 0x0, 0x1, 0x4) ioctl$auto_KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)={0x0, 0x0, [{0x5, 0x7, 0x200, 0x2, 0x2, 0x2, 0x80}, {0x56f, 0x5, 0xffffffab, 0x9, 0xe44, 0x8, 0x94d6}]}) 5.006709658s ago: executing program 1 (id=1232): r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x1b, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x2151, r0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004506, r1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(0xffffffffffffffff, 0x4, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}, 0x3}, 0x3, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r0) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) 4.201319406s ago: executing program 3 (id=1235): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001100)='/dev/dmmidi2\x00', 0x6000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xa, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x3, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x6, 0x10006, 0x400007f, 0xfff, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}, 0x1fa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd06, &(0x7f00000001c0)) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) fcntl$auto(r3, 0x402, 0xffffffffffffffff) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video24\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000340)='%]{\fZ', 0x100000000) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x801, 0x106) 4.033489528s ago: executing program 1 (id=1237): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x13e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) (async) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x200007, 0x19) socket(0x2, 0x1, 0x106) (async) ioctl$auto(0xffffffffffffffff, 0x400064c8, 0xffffffffffffffff) (async) setpriority$auto_PRIO_USER(0x2, 0x0, 0x3) 3.96244985s ago: executing program 4 (id=1238): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r1 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r1, 0x0, 0x1000e6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf251100000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)="87", 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) sendfile$auto(r0, r5, &(0x7f0000000040)=0xdbf, 0xfff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.682986947s ago: executing program 1 (id=1239): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) (async) socket(0xa, 0x3, 0xff) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x2c, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) prctl$auto(0x3e, 0x8, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x801, 0x106) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) r3 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f00000003c0), 0x84400, 0x0) getsockopt$auto_SO_COOKIE(r3, 0x40, 0x39, &(0x7f0000000400)='x--F(\'(-}\x00', &(0x7f0000000440)=0x9) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r4, &(0x7f0000000280)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\xc0\xf8\x01V?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99s\x81Q\xca\xeb\xee.\xe3\x85\xcd\xd0\xae!\x9fl}x\xd4\xa5D\x16\x94Ip\f\x96\xb8\xfa\xe5\xf9odtQ', 0x87ff, 0x5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x2, 0x0) 3.522128409s ago: executing program 3 (id=1240): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight\x00', 0x8001, 0x0) write$auto(r0, &(0x7f0000000000)='0\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) sysfs$auto(0x2, 0x6, 0x3) socket(0x11, 0x80003, 0x300) unshare$auto(0x8000000) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r1, 0x50009404, &(0x7f0000000040)={@raw=0x6, "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"}) shmget$auto(0x0, 0xfffffffffeffffdf, 0x80) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) setresuid$auto(0x0, 0x0, 0x0) mmap$auto(0x10000, 0x9, 0x2, 0x14, 0x405, 0x8000) socket(0x1a, 0x3, 0x6) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8b00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)={0x28, r4, 0x301, 0x70bd29, 0x25dfdbff, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xe0db2389416cc6ce}, 0xc040810) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xffffffffffff0000, 0x7b00000000000000, 0xeb1, 0x40000000000a5, 0x3e2) close_range$auto(0x0, 0x5, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) epoll_create$auto(0x3e) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0xa4e00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) 3.129981764s ago: executing program 3 (id=1242): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) (async) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) madvise$auto(0x0, 0xf663, 0x15) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x5, 0x0) (async) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\x0e\xfb\xffOL\xc8\xbe\x94\xf2\xa2\x00\x00\x00', 0x2d5) (async) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0xa54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0x4010ae67, 0x38) (async) ioctl$auto_XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)={0x2, 0x0, 0x8001, 0x6}) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.970285932s ago: executing program 4 (id=1243): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffffff, &(0x7f0000000440)=""/242, 0xf2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) readahead$auto(r0, 0x1, 0x420b) pread64$auto(r0, &(0x7f0000000040)='/&\x00', 0x5, 0x9) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvlan1/arp_announce\x00', 0x0, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) 2.927250385s ago: executing program 2 (id=1244): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="100025bd7040ffdbdf250a0000000c0002006e6c3830323131000600010009000000"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040854) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000a00)=0x101) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffd, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(r0, 0x0, 0x4, 0x3400000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x3, 0xdf, 0x17, r4, 0x8000) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x88202, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r6, 0x41015500, &(0x7f0000000140)={"a7a018b09bb196a05739a38a73473b93f5452886bc599ef976c54a71a5ce72a9af15390e93a8760df83859e16320e8d0b1161f13d12afae66b1d900a49586aa98d3504ca431aabab1964249251e57fa70517cc19b0e3974dc2a89e90c932b8859c767780d65e849700", "e600d778e82f8b8db7e27a036e39a8ac08de7e036d650e2184857e6b64f6a2c7fb08c6f5ce3828fb4e9498c076bef49c99c9cd91332e12b53664dc20fa879020fbd184c0d300c13be6047a70685ce029fb2385ae6e132c1c6adbcfbd873a3b925d397a08e8733e19ef5ec4f40b0b473c72efd18b8a9e9f3d12c5e44468922beb", 0x3}) lsm_set_self_attr$auto(0x7, &(0x7f0000000040)={0x20009, 0x6454, 0x2, 0xa5, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a658450b159e0d65748bb3538e"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) 2.395039484s ago: executing program 1 (id=1245): execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\\\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) semtimedop$auto(0x4, 0x0, 0x10001, 0xfffffffffffffffd) r2 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000380), r1) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x5}, @CIFS_GENL_ATTR_SWN_PASSWORD={0x10, 0xa, '/dev/nullb0\x00'}, @CIFS_GENL_ATTR_SWN_REGISTRATION_ID={0x8, 0x1, 0x7}, @CIFS_GENL_ATTR_SWN_USER_NAME={0x7, 0x9, '}\'('}, @CIFS_GENL_ATTR_SWN_KRB_AUTH={0x4}, @CIFS_GENL_ATTR_SWN_DOMAIN_NAME={0x13, 0xb, '/dev/dri/card1\x00'}, @CIFS_GENL_ATTR_SWN_KRB_AUTH={0x4}, @CIFS_GENL_ATTR_SWN_SHARE_NAME_NOTIFY={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0xc880) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0x1, 0x4, &(0x7f00000001c0)={0x2547cd0e, 0xf}, &(0x7f0000000200)={0x6}) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000280)=0x3) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r5, @ANYRES32], 0x18}}, 0x80) recvmmsg$auto(r4, 0x0, 0x4, 0x6586, 0x0) close_range$auto(0x2, 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r7, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000e000)={0x18, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0be023764f25583}, 0x40) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x34}, @CIFS_GENL_ATTR_SWN_NET_NAME={0xd, 0x2, '#!]!.((*!'}, @CIFS_GENL_ATTR_SWN_SHARE_NAME_NOTIFY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048840}, 0x40010) 1.933428099s ago: executing program 2 (id=1246): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x620f, 0x5, 0xeb4, r0, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x76e9, 0x1, 0x0, 0x6, 0x91) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2a, 0xa, 0x106) read$auto(r1, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) lsetxattr$auto(&(0x7f0000000240)=':,\x00', &(0x7f0000000480)='veth0_macvtap\x00', &(0x7f00000004c0)="4f904b486aafcf61b8261b873965ed5ae93f691162f085c6d1dc038c9bca99a23cc2cbea7368a4a867ca6d98e8", 0x4, 0x10000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x158, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80000001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}]}]}, 0x158}}, 0x4000000) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) fremovexattr$auto(r0, &(0x7f00000000c0)='systxm.pYsox_acl_access\x00') 1.902758214s ago: executing program 3 (id=1247): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/scheduler\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000140)={0xf0, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x1], {0x8, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x101, 0x6, 0x2}, {0xfff7ffff, 0xfffffff9, 0x52, 0x4af, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000003}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000100)={0x0, 0x40fff}, 0x8, &(0x7f0000000280)={0x0, 0x6}, 0x4000000000a, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x2, 0x920, 0x0, 0x56b) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/mtrr\x00', 0x1, 0x5) r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r3, 0x0, 0x3) memfd_create$auto(0x0, 0x9) socket(0x1a, 0x6, 0x968c) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) 1.865953963s ago: executing program 4 (id=1248): r0 = socket(0x2c, 0xa, 0x4) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x76e9, 0x1, 0x0, 0x6, 0x91) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x100) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) ioctl$auto(0xc8, 0x800454df, 0x4000000000008) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fedbdf25070000003c0001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r4, @ANYBLOB="1400020069705f7674693000000000000000000008000300fbffffff4400018008000100", @ANYRES32=r4, @ANYBLOB="08000300010000800800030008000000140002006c6f0000000000000000000000000000140002006d6163767461703000000000000000002000018008000300198400001400020069703667726574617030000000000000800001801400020064756d6d79300000000000010000000008000100", @ANYRES32=r4, @ANYBLOB="14000200636169663000000000000000000000001400020073797a6b616c6c65723100000000000014000200697036746e6c300000000000000000000800030002020000140002006772657461703000000000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x134}}, 0x4000000) pwrite64$auto(0xc8, &(0x7f0000000540)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xd12, 0x4000005) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES64=r2, @ANYRES32=0x4, @ANYBLOB="080001004866520008000300", @ANYRES32=0x9, @ANYBLOB="0800070000010000", @ANYRESHEX=r6, @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xa841}, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) 1.156361247s ago: executing program 1 (id=1249): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) mmap$auto(0xffffffffffffffff, 0x2020009, 0x100000000000003, 0xeb1, 0xffffffffffffffff, 0x4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) lseek$auto(0x3, 0x2, 0x3) (async) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0xa) (async) unshare$auto(0x40000080) socket(0x6, 0x1, 0x7) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cpu/0/cpuid\x00', 0x34d080, 0x0) (async) readv$auto(r0, &(0x7f00000000c0)={&(0x7f00000003c0)="7303d7f5add24b482843259d7ca2ee09dbe251e033f26e294f000000000000650000a9b20931b17bc82e7ab038cc674ca706119584ebd3c05ce2d8a67bfd1d3917e9b43be1108290980000ce4d7f2f77001ccb9c7f647d5a1262808a33bfb0007aa4315e1221cb157071a8bf1765edd9961c9d7dc16496e02659db9fd15d6e3ca09578705edd6d952c63be268b9e0e33cad85b3a2b1290974f830f0dd250fa0008130c0f6f37379197fbd6db", 0x9}, 0x6) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D3\x00', 0x191681, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x48) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ptyb1/uevent\x00', 0x8040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r4 = open(&(0x7f0000000040)='./file0/file0\x00', 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) bpf$auto(0x12, 0x0, 0x26) (async) write$auto(0x3, 0x0, 0x8) (async) lseek$auto(r4, 0x0, 0x3) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) 967.887419ms ago: executing program 2 (id=1250): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0xc8) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000000c0)={r0, 0x8, 0x0, 0x8000}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x4, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 728.661913ms ago: executing program 2 (id=1251): bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) read$auto(r0, &(0x7f0000000000)='!:\x00', 0x8) socket(0x11, 0x3, 0x400) (async) r1 = socket(0x11, 0x3, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x101) 692.302019ms ago: executing program 4 (id=1252): lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x0) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xfffffffd, 0x9, 0x80}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x5, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x5, 0x1, 0xfffffffffffffffe]}, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x1021, 0x3) setsockopt$auto(r0, 0x6, 0xfffffeff, 0x0, 0xfb3) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x4e, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x8, &(0x7f0000000100)={&(0x7f0000000200)="4c030000000000000033", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) 511.066196ms ago: executing program 2 (id=1253): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000003c0)=@qipcrtr={0x2a, 0x2, 0x4001}, 0x57) writev$auto(r0, &(0x7f0000000080)={0x0, 0x7114}, 0x1) setsockopt$auto_SO_RXQ_OVFL(r0, 0xffffffff, 0x28, &(0x7f0000000000)='/dev/video0\x00', 0x4) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2f75, 0x0, 0xee00, 0x94, 0x1, 0x80000001, 0x3}, 0x0, 0x0, 0x100, 0x7, 0xfffffffffffffff5, 0xffff, 0x1, 0xe, 0x9, 0x9, @inferred=0xffffffffffffffff}) ioctl$auto_FIOASYNC(r1, 0x5452, 0x0) 395.595359ms ago: executing program 4 (id=1254): bpf$auto(0x2d9, &(0x7f0000000000)=@enable_stats={0x3}, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto_FIOASYNC(r0, 0x5452, 0x0) 337.238292ms ago: executing program 2 (id=1255): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) shmctl$auto_SHM_UNLOCK(0x7, 0xc, &(0x7f0000000280)={{0x9, 0x0, 0xffffffffffffffff, 0x3, 0x1, 0xe, 0x80}, 0xa, 0x969, 0x4, 0x9, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000100)="ef2b1bcd44df113d8f82e5ed6f840b167e9388bcc7", &(0x7f00000001c0)="cd93f5e60e3c69551f83c0e83d065694dbf39042773d2aa370c2a4269a81b846b1f32ef0c5501a743c8635fb8e4b13ebdea71db8e0b6ab1e2613da0dfaf7bacbdfdedd0e30d596058f6a81c35d98ff9cd34f6d320de6ebeaf93546cc7b02442789e7e4a454c44a03e3338ef991bea3ce87233943e9434c021ae14151e447d792721a0c6864eaa3f0de4f00"}) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="94020000", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04004f800400408008007500ac1414bb0000002a0025018a4eb7b6ea5ae6fe9b9692496ff57cce46956bc12847ded3d362d47aafc053a4cb5b4a8e9e0c0000040005010c00cd00cb4af56f4edd76770700fc0070dcfd000400e200"], 0x294}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) read$auto(r1, 0x0, 0x400001f40) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc4\xc3\xd2pW\xf5>-%\x04}\x8c\xb7\xdd\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\xe0b-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x01\xad\x1e\xb7e\xfab|\x97OH!\xc3N\x81\x86\x16?\xd6\xbaH\xee/\xb3\xfa4\xa6xx\xaa\x04\xb4\xf47\xe7\x99%w6gg\x94\x17\xd7\x9a\xf1i\xdd\x8a\xef%p\x81\xdfp\xdfj:\xa0\xa3\b\xa9f\xd9/^\xa9{\x90\xf7\x91\xc3cI\x8c \x17!>=\x98\x9c\xeb\xd1\xcb\xd4\'\xd3\x048\xcb\xf9\t\x9f\'{rWcF\x06\fx\xff\x1a\xc9\x06\xf0@\xfbK+\xaa\xebC', 0x100000a3d9) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 0s ago: executing program 4 (id=1256): bpf$auto(0x0, 0x0, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x22, 0x5, 0xffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x104000000000010e, 0x8, 0x0, 0x20003fe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x4, 0x20009, 0xdf, 0x11, 0x40000000000a5, 0x3) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4a600, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r4, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(0xffffffffffffffff, 0x0, 0x8) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.3.290'. [ 190.277152][ T7374] netlink: 93 bytes leftover after parsing attributes in process `syz.3.290'. [ 191.350168][ T7401] FAULT_INJECTION: forcing a failure. [ 191.350168][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 191.382041][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.0.294 Not tainted syzkaller #0 PREEMPT(full) [ 191.382077][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.382100][ T7401] Call Trace: [ 191.382109][ T7401] [ 191.382118][ T7401] dump_stack_lvl+0x16c/0x1f0 [ 191.382153][ T7401] should_fail_ex+0x512/0x640 [ 191.382183][ T7401] ? __kmalloc_noprof+0xca/0x880 [ 191.382221][ T7401] should_failslab+0xc2/0x120 [ 191.382254][ T7401] __kmalloc_noprof+0xdd/0x880 [ 191.382292][ T7401] ? drm_atomic_state_init+0x17b/0x320 [ 191.382330][ T7401] ? drm_atomic_state_init+0x17b/0x320 [ 191.382357][ T7401] drm_atomic_state_init+0x17b/0x320 [ 191.382387][ T7401] ? __kasan_kmalloc+0xaa/0xb0 [ 191.382418][ T7401] drm_atomic_state_alloc+0xd3/0x120 [ 191.382450][ T7401] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 191.382482][ T7401] ? __pfx___might_resched+0x10/0x10 [ 191.382521][ T7401] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 191.382553][ T7401] ? __mutex_lock+0x1c5/0x1060 [ 191.382581][ T7401] ? rcu_is_watching+0x12/0xc0 [ 191.382646][ T7401] drm_client_modeset_commit_locked+0x14d/0x580 [ 191.382685][ T7401] drm_client_modeset_commit+0x4f/0x80 [ 191.382716][ T7401] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 191.382749][ T7401] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 191.382788][ T7401] drm_fbdev_client_restore+0x2c/0x40 [ 191.382826][ T7401] drm_client_dev_restore+0x1f6/0x2a0 [ 191.382863][ T7401] drm_release+0x2c4/0x360 [ 191.382893][ T7401] ? __pfx_drm_release+0x10/0x10 [ 191.382919][ T7401] __fput+0x402/0xb70 [ 191.382961][ T7401] task_work_run+0x150/0x240 [ 191.383001][ T7401] ? __pfx_task_work_run+0x10/0x10 [ 191.383040][ T7401] ? __pfx___do_sys_close_range+0x10/0x10 [ 191.383076][ T7401] exit_to_user_mode_loop+0xec/0x130 [ 191.383123][ T7401] do_syscall_64+0x426/0xfa0 [ 191.383155][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.383182][ T7401] RIP: 0033:0x7f040458eec9 [ 191.383204][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.383228][ T7401] RSP: 002b:00007f040544a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 191.383252][ T7401] RAX: 0000000000000000 RBX: 00007f04047e5fa0 RCX: 00007f040458eec9 [ 191.383270][ T7401] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 191.383284][ T7401] RBP: 00007f0404611f91 R08: 0000000000000000 R09: 0000000000000000 [ 191.383299][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.383314][ T7401] R13: 00007f04047e6038 R14: 00007f04047e5fa0 R15: 00007ffe3fc6e648 [ 191.383355][ T7401] [ 192.210648][ T5834] Bluetooth: hci1: SCO packet too small [ 192.405192][ T7418] FAULT_INJECTION: forcing a failure. [ 192.405192][ T7418] name failslab, interval 1, probability 0, space 0, times 0 [ 192.455893][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: syz.1.299 Not tainted syzkaller #0 PREEMPT(full) [ 192.455928][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.455945][ T7418] Call Trace: [ 192.455954][ T7418] [ 192.455964][ T7418] dump_stack_lvl+0x16c/0x1f0 [ 192.455998][ T7418] should_fail_ex+0x512/0x640 [ 192.456030][ T7418] ? __kmalloc_noprof+0xca/0x880 [ 192.456072][ T7418] should_failslab+0xc2/0x120 [ 192.456105][ T7418] __kmalloc_noprof+0xdd/0x880 [ 192.456144][ T7418] ? drm_atomic_state_init+0xe4/0x320 [ 192.456181][ T7418] ? drm_atomic_state_init+0xe4/0x320 [ 192.456208][ T7418] drm_atomic_state_init+0xe4/0x320 [ 192.456236][ T7418] ? __kasan_kmalloc+0xaa/0xb0 [ 192.456266][ T7418] drm_atomic_state_alloc+0xd3/0x120 [ 192.456296][ T7418] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 192.456327][ T7418] ? __pfx___might_resched+0x10/0x10 [ 192.456366][ T7418] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 192.456397][ T7418] ? __mutex_lock+0x1c5/0x1060 [ 192.456424][ T7418] ? rcu_is_watching+0x12/0xc0 [ 192.456491][ T7418] drm_client_modeset_commit_locked+0x14d/0x580 [ 192.456529][ T7418] drm_client_modeset_commit+0x4f/0x80 [ 192.456564][ T7418] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 192.456598][ T7418] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 192.456639][ T7418] drm_fbdev_client_restore+0x2c/0x40 [ 192.456676][ T7418] drm_client_dev_restore+0x1f6/0x2a0 [ 192.456713][ T7418] drm_release+0x2c4/0x360 [ 192.456751][ T7418] ? __pfx_drm_release+0x10/0x10 [ 192.456777][ T7418] __fput+0x402/0xb70 [ 192.456822][ T7418] task_work_run+0x150/0x240 [ 192.456863][ T7418] ? __pfx_task_work_run+0x10/0x10 [ 192.456900][ T7418] ? __pfx___do_sys_close_range+0x10/0x10 [ 192.456937][ T7418] exit_to_user_mode_loop+0xec/0x130 [ 192.456976][ T7418] do_syscall_64+0x426/0xfa0 [ 192.457007][ T7418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.457033][ T7418] RIP: 0033:0x7f8b6a18eec9 [ 192.457054][ T7418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.457078][ T7418] RSP: 002b:00007f8b6afe8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 192.457103][ T7418] RAX: 0000000000000000 RBX: 00007f8b6a3e5fa0 RCX: 00007f8b6a18eec9 [ 192.457120][ T7418] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 192.457135][ T7418] RBP: 00007f8b6a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 192.457152][ T7418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.457167][ T7418] R13: 00007f8b6a3e6038 R14: 00007f8b6a3e5fa0 R15: 00007ffc66d504a8 [ 192.457207][ T7418] [ 193.068112][ T7423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.143747][ T7423] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.236289][ T7423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 193.287255][ T7423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.142653][ T7407] Process accounting paused [ 194.887610][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.304'. [ 194.925591][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 195.076699][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 195.077266][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.236718][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.316681][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 195.451691][ T7453] : entered promiscuous mode [ 196.010056][ T7469] FAULT_INJECTION: forcing a failure. [ 196.010056][ T7469] name failslab, interval 1, probability 0, space 0, times 0 [ 196.042245][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT(full) [ 196.042277][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.042285][ T7469] Call Trace: [ 196.042290][ T7469] [ 196.042297][ T7469] dump_stack_lvl+0x16c/0x1f0 [ 196.042317][ T7469] should_fail_ex+0x512/0x640 [ 196.042334][ T7469] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 196.042356][ T7469] should_failslab+0xc2/0x120 [ 196.042375][ T7469] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 196.042390][ T7469] ? __d_alloc+0x32/0xae0 [ 196.042409][ T7469] ? __d_alloc+0x32/0xae0 [ 196.042423][ T7469] __d_alloc+0x32/0xae0 [ 196.042440][ T7469] d_alloc_pseudo+0x1c/0xc0 [ 196.042462][ T7469] alloc_file_pseudo+0xcf/0x230 [ 196.042505][ T7469] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 196.042524][ T7469] ? alloc_fd+0x471/0x7d0 [ 196.042540][ T7469] sock_alloc_file+0x50/0x210 [ 196.042559][ T7469] __sys_socket+0x1c0/0x260 [ 196.042580][ T7469] ? __pfx___sys_socket+0x10/0x10 [ 196.042601][ T7469] ? xfd_validate_state+0x61/0x180 [ 196.042620][ T7469] ? __pfx_ksys_write+0x10/0x10 [ 196.042641][ T7469] __x64_sys_socket+0x72/0xb0 [ 196.042660][ T7469] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.042676][ T7469] do_syscall_64+0xcd/0xfa0 [ 196.042692][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.042707][ T7469] RIP: 0033:0x7f066978eec9 [ 196.042721][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.042735][ T7469] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 196.042748][ T7469] RAX: ffffffffffffffda RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 196.042757][ T7469] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000023 [ 196.042765][ T7469] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 196.042773][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.042781][ T7469] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 196.042800][ T7469] [ 196.780763][ T7475] Invalid ELF header magic: != ELF [ 197.931407][ T7475] Invalid ELF header magic: != ELF [ 198.204236][ T7505] FAULT_INJECTION: forcing a failure. [ 198.204236][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 198.221605][ T7505] CPU: 0 UID: 0 PID: 7505 Comm: syz.0.315 Not tainted syzkaller #0 PREEMPT(full) [ 198.221641][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.221655][ T7505] Call Trace: [ 198.221664][ T7505] [ 198.221675][ T7505] dump_stack_lvl+0x16c/0x1f0 [ 198.221710][ T7505] should_fail_ex+0x512/0x640 [ 198.221741][ T7505] ? __kmalloc_noprof+0xca/0x880 [ 198.221784][ T7505] should_failslab+0xc2/0x120 [ 198.221818][ T7505] __kmalloc_noprof+0xdd/0x880 [ 198.221858][ T7505] ? handler_new_ref+0x1b0/0xc60 [ 198.221903][ T7505] ? handler_new_ref+0x1b0/0xc60 [ 198.221938][ T7505] ? handler_new_ref+0x827/0xc60 [ 198.221973][ T7505] handler_new_ref+0x1b0/0xc60 [ 198.222021][ T7505] v4l2_ctrl_new+0x196c/0x2190 [ 198.222074][ T7505] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 198.222123][ T7505] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 198.222169][ T7505] v4l2_ctrl_new_std+0x1be/0x290 [ 198.222228][ T7505] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 198.222270][ T7505] ? rcu_is_watching+0x12/0xc0 [ 198.222295][ T7505] ? trace_kmalloc+0x2b/0xd0 [ 198.222324][ T7505] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 198.222356][ T7505] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 198.222400][ T7505] ? media_request_object_init+0x100/0x180 [ 198.222438][ T7505] vicodec_open+0x1b2/0xf70 [ 198.222468][ T7505] ? kobject_get_unless_zero+0x156/0x1e0 [ 198.222506][ T7505] v4l2_open+0x1d2/0x5e0 [ 198.222539][ T7505] ? __pfx_v4l2_open+0x10/0x10 [ 198.222572][ T7505] chrdev_open+0x231/0x6a0 [ 198.222601][ T7505] ? __pfx_apparmor_file_open+0x10/0x10 [ 198.222635][ T7505] ? __pfx_chrdev_open+0x10/0x10 [ 198.222666][ T7505] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 198.222701][ T7505] do_dentry_open+0x97f/0x1530 [ 198.222731][ T7505] ? __pfx_chrdev_open+0x10/0x10 [ 198.222768][ T7505] vfs_open+0x82/0x3f0 [ 198.222807][ T7505] path_openat+0x1de4/0x2cb0 [ 198.222847][ T7505] ? __pfx_path_openat+0x10/0x10 [ 198.222885][ T7505] do_filp_open+0x20b/0x470 [ 198.222913][ T7505] ? __pfx_do_filp_open+0x10/0x10 [ 198.222968][ T7505] ? alloc_fd+0x471/0x7d0 [ 198.223003][ T7505] do_sys_openat2+0x11b/0x1d0 [ 198.223033][ T7505] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.223079][ T7505] __x64_sys_openat+0x174/0x210 [ 198.223112][ T7505] ? __pfx___x64_sys_openat+0x10/0x10 [ 198.223163][ T7505] do_syscall_64+0xcd/0xfa0 [ 198.223194][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.223231][ T7505] RIP: 0033:0x7f040458eec9 [ 198.223253][ T7505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.223278][ T7505] RSP: 002b:00007f0405429038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.223303][ T7505] RAX: ffffffffffffffda RBX: 00007f04047e6090 RCX: 00007f040458eec9 [ 198.223322][ T7505] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 198.223339][ T7505] RBP: 00007f0404611f91 R08: 0000000000000000 R09: 0000000000000000 [ 198.223355][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.223371][ T7505] R13: 00007f04047e6128 R14: 00007f04047e6090 R15: 00007ffe3fc6e648 [ 198.223411][ T7505] [ 199.516428][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.522938][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.719164][ T7525] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 200.259603][ T7538] FAULT_INJECTION: forcing a failure. [ 200.259603][ T7538] name fail_futex, interval 1, probability 0, space 0, times 1 [ 200.359441][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(full) [ 200.359477][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.359493][ T7538] Call Trace: [ 200.359502][ T7538] [ 200.359513][ T7538] dump_stack_lvl+0x16c/0x1f0 [ 200.359548][ T7538] should_fail_ex+0x512/0x640 [ 200.359583][ T7538] get_futex_key+0x1d0/0x1560 [ 200.359619][ T7538] ? __pfx_get_futex_key+0x10/0x10 [ 200.359664][ T7538] futex_wake+0xea/0x530 [ 200.359705][ T7538] ? __pfx_futex_wake+0x10/0x10 [ 200.359742][ T7538] ? rcu_is_watching+0x12/0xc0 [ 200.359785][ T7538] do_futex+0x1e3/0x350 [ 200.359819][ T7538] ? __pfx_do_futex+0x10/0x10 [ 200.359850][ T7538] ? __fput+0x68d/0xb70 [ 200.359881][ T7538] ? __pfx___might_resched+0x10/0x10 [ 200.359913][ T7538] __x64_sys_futex+0x1e0/0x4c0 [ 200.359948][ T7538] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 200.359977][ T7538] ? __pfx___x64_sys_futex+0x10/0x10 [ 200.360010][ T7538] ? xfd_validate_state+0x61/0x180 [ 200.360042][ T7538] ? __pfx___do_sys_close_range+0x10/0x10 [ 200.360081][ T7538] do_syscall_64+0xcd/0xfa0 [ 200.360113][ T7538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.360139][ T7538] RIP: 0033:0x7f8b6a18eec9 [ 200.360161][ T7538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.360186][ T7538] RSP: 002b:00007f8b6afe80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 200.360212][ T7538] RAX: ffffffffffffffda RBX: 00007f8b6a3e5fa8 RCX: 00007f8b6a18eec9 [ 200.360237][ T7538] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8b6a3e5fac [ 200.360252][ T7538] RBP: 00007f8b6a3e5fa0 R08: 00007f8b6afe9000 R09: 0000000000000000 [ 200.360267][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.360283][ T7538] R13: 00007f8b6a3e6038 R14: 00007ffc66d503c0 R15: 00007ffc66d504a8 [ 200.360316][ T7538] [ 201.577480][ T7558] FAULT_INJECTION: forcing a failure. [ 201.577480][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 201.977435][ T7558] CPU: 0 UID: 0 PID: 7558 Comm: syz.3.325 Not tainted syzkaller #0 PREEMPT(full) [ 201.977469][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.977484][ T7558] Call Trace: [ 201.977493][ T7558] [ 201.977504][ T7558] dump_stack_lvl+0x16c/0x1f0 [ 201.977539][ T7558] should_fail_ex+0x512/0x640 [ 201.977572][ T7558] ? fs_reclaim_acquire+0xae/0x150 [ 201.977607][ T7558] should_failslab+0xc2/0x120 [ 201.977638][ T7558] __kmalloc_noprof+0xdd/0x880 [ 201.977674][ T7558] ? kfree+0x252/0x6d0 [ 201.977715][ T7558] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.977749][ T7558] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.977776][ T7558] tomoyo_realpath_from_path+0xc2/0x6e0 [ 201.977816][ T7558] tomoyo_check_open_permission+0x2ab/0x3c0 [ 201.977852][ T7558] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 201.977886][ T7558] ? proc_sys_lookup+0x2e6/0x400 [ 201.977954][ T7558] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.978005][ T7558] tomoyo_file_open+0x6b/0x90 [ 201.978038][ T7558] security_file_open+0x84/0x1e0 [ 201.978062][ T7558] do_dentry_open+0x596/0x1530 [ 201.978110][ T7558] vfs_open+0x82/0x3f0 [ 201.978151][ T7558] path_openat+0x1de4/0x2cb0 [ 201.978187][ T7558] ? __pfx_path_openat+0x10/0x10 [ 201.978222][ T7558] do_filp_open+0x20b/0x470 [ 201.978247][ T7558] ? __pfx_do_filp_open+0x10/0x10 [ 201.978294][ T7558] ? alloc_fd+0x471/0x7d0 [ 201.978326][ T7558] do_sys_openat2+0x11b/0x1d0 [ 201.978358][ T7558] ? __pfx_do_sys_openat2+0x10/0x10 [ 201.978405][ T7558] __x64_sys_openat+0x174/0x210 [ 201.978440][ T7558] ? __pfx___x64_sys_openat+0x10/0x10 [ 201.978490][ T7558] do_syscall_64+0xcd/0xfa0 [ 201.978521][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.978547][ T7558] RIP: 0033:0x7faa7498eec9 [ 201.978568][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.978591][ T7558] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.978616][ T7558] RAX: ffffffffffffffda RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 201.978633][ T7558] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 201.978647][ T7558] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.978663][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.978678][ T7558] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 201.978715][ T7558] [ 202.226919][ T7558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.641214][ T7573] FAULT_INJECTION: forcing a failure. [ 202.641214][ T7573] name fail_futex, interval 1, probability 0, space 0, times 0 [ 202.712828][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT(full) [ 202.712864][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.712880][ T7573] Call Trace: [ 202.712889][ T7573] [ 202.712899][ T7573] dump_stack_lvl+0x16c/0x1f0 [ 202.712933][ T7573] should_fail_ex+0x512/0x640 [ 202.712971][ T7573] get_futex_key+0x1d0/0x1560 [ 202.713017][ T7573] ? __pfx_get_futex_key+0x10/0x10 [ 202.713064][ T7573] futex_wake+0xea/0x530 [ 202.713108][ T7573] ? __pfx_futex_wake+0x10/0x10 [ 202.713147][ T7573] ? rcu_is_watching+0x12/0xc0 [ 202.713189][ T7573] do_futex+0x1e3/0x350 [ 202.713223][ T7573] ? __pfx_do_futex+0x10/0x10 [ 202.713257][ T7573] ? __fput+0x68d/0xb70 [ 202.713289][ T7573] ? __pfx___might_resched+0x10/0x10 [ 202.713321][ T7573] __x64_sys_futex+0x1e0/0x4c0 [ 202.713357][ T7573] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 202.713387][ T7573] ? __pfx___x64_sys_futex+0x10/0x10 [ 202.713422][ T7573] ? __pfx___do_sys_close_range+0x10/0x10 [ 202.713462][ T7573] do_syscall_64+0xcd/0xfa0 [ 202.713503][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.713530][ T7573] RIP: 0033:0x7faa7498eec9 [ 202.713552][ T7573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.713578][ T7573] RSP: 002b:00007faa757b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 202.713604][ T7573] RAX: ffffffffffffffda RBX: 00007faa74be5fa8 RCX: 00007faa7498eec9 [ 202.713621][ T7573] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa74be5fac [ 202.713638][ T7573] RBP: 00007faa74be5fa0 R08: 00007faa757b5000 R09: 0000000000000000 [ 202.713654][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.713668][ T7573] R13: 00007faa74be6038 R14: 00007ffdfcd1cb30 R15: 00007ffdfcd1cc18 [ 202.713705][ T7573] [ 203.230055][ T30] audit: type=1800 audit(4294967300.100:4): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.334" name="dbroot" dev="configfs" ino=15471 res=0 errno=0 [ 204.044850][ T7611] program syz.1.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.242796][ T7624] FAULT_INJECTION: forcing a failure. [ 205.242796][ T7624] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.242830][ T7624] CPU: 1 UID: 0 PID: 7624 Comm: syz.3.342 Not tainted syzkaller #0 PREEMPT(full) [ 205.242848][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.242857][ T7624] Call Trace: [ 205.242862][ T7624] [ 205.242869][ T7624] dump_stack_lvl+0x16c/0x1f0 [ 205.242889][ T7624] should_fail_ex+0x512/0x640 [ 205.242910][ T7624] get_futex_key+0x1d0/0x1560 [ 205.242931][ T7624] ? __pfx_get_futex_key+0x10/0x10 [ 205.242952][ T7624] ? stack_trace_save+0x8e/0xc0 [ 205.242970][ T7624] futex_wait_setup+0x9d/0x550 [ 205.242999][ T7624] __futex_wait+0x193/0x2f0 [ 205.243022][ T7624] ? __pfx___futex_wait+0x10/0x10 [ 205.243046][ T7624] ? __pfx_futex_wake_mark+0x10/0x10 [ 205.243071][ T7624] ? futex_private_hash_put+0x176/0x300 [ 205.243091][ T7624] ? futex_private_hash_put+0x18a/0x300 [ 205.243110][ T7624] futex_wait+0xe8/0x380 [ 205.243131][ T7624] ? __pfx_futex_wait+0x10/0x10 [ 205.243163][ T7624] do_futex+0x229/0x350 [ 205.243182][ T7624] ? __pfx_do_futex+0x10/0x10 [ 205.243201][ T7624] ? __fput+0x68d/0xb70 [ 205.243219][ T7624] ? __pfx___might_resched+0x10/0x10 [ 205.243237][ T7624] __x64_sys_futex+0x1e0/0x4c0 [ 205.243256][ T7624] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 205.243272][ T7624] ? __pfx___x64_sys_futex+0x10/0x10 [ 205.243291][ T7624] ? xfd_validate_state+0x61/0x180 [ 205.243310][ T7624] ? __pfx___do_sys_close_range+0x10/0x10 [ 205.243331][ T7624] do_syscall_64+0xcd/0xfa0 [ 205.243347][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.243362][ T7624] RIP: 0033:0x7faa7498eec9 [ 205.243383][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.243408][ T7624] RSP: 002b:00007faa757b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.243431][ T7624] RAX: ffffffffffffffda RBX: 00007faa74be5fa8 RCX: 00007faa7498eec9 [ 205.243447][ T7624] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa74be5fa8 [ 205.243463][ T7624] RBP: 00007faa74be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 205.243477][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.243489][ T7624] R13: 00007faa74be6038 R14: 00007ffdfcd1cb30 R15: 00007ffdfcd1cc18 [ 205.243527][ T7624] [ 206.270824][ T7652] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 206.298050][ T7641] tipc: can't start tipc receive workqueue [ 206.432964][ T30] audit: type=1800 audit(4294967303.299:5): pid=7651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.348" name="features" dev="configfs" ino=16513 res=0 errno=0 [ 207.220381][ T7657] FAULT_INJECTION: forcing a failure. [ 207.220381][ T7657] name fail_futex, interval 1, probability 0, space 0, times 0 [ 207.252667][ T7657] CPU: 0 UID: 0 PID: 7657 Comm: syz.0.348 Not tainted syzkaller #0 PREEMPT(full) [ 207.252700][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.252713][ T7657] Call Trace: [ 207.252721][ T7657] [ 207.252730][ T7657] dump_stack_lvl+0x16c/0x1f0 [ 207.252757][ T7657] should_fail_ex+0x512/0x640 [ 207.252778][ T7657] get_futex_key+0x293/0x1560 [ 207.252799][ T7657] ? __pfx_get_futex_key+0x10/0x10 [ 207.252816][ T7657] ? __mutex_trylock_common+0xe9/0x250 [ 207.252841][ T7657] futex_wake+0xea/0x530 [ 207.252864][ T7657] ? __pfx_futex_wake+0x10/0x10 [ 207.252893][ T7657] do_futex+0x1e3/0x350 [ 207.252912][ T7657] ? __pfx_do_futex+0x10/0x10 [ 207.252929][ T7657] ? __might_fault+0xe3/0x190 [ 207.252948][ T7657] mm_release+0x24e/0x300 [ 207.252969][ T7657] do_exit+0x68e/0x2bf0 [ 207.252993][ T7657] ? __pfx_do_exit+0x10/0x10 [ 207.253011][ T7657] ? do_raw_spin_lock+0x12c/0x2b0 [ 207.253032][ T7657] ? find_held_lock+0x2b/0x80 [ 207.253049][ T7657] do_group_exit+0xd3/0x2a0 [ 207.253073][ T7657] get_signal+0x2671/0x26d0 [ 207.253094][ T7657] ? do_futex+0xda/0x350 [ 207.253111][ T7657] ? do_futex+0x1f8/0x350 [ 207.253129][ T7657] ? __pfx_get_signal+0x10/0x10 [ 207.253144][ T7657] ? do_futex+0x122/0x350 [ 207.253163][ T7657] ? __pfx_do_futex+0x10/0x10 [ 207.253183][ T7657] arch_do_signal_or_restart+0x8f/0x790 [ 207.253201][ T7657] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.253223][ T7657] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 207.253245][ T7657] exit_to_user_mode_loop+0x85/0x130 [ 207.253268][ T7657] do_syscall_64+0x426/0xfa0 [ 207.253293][ T7657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.253317][ T7657] RIP: 0033:0x7f040458eec9 [ 207.253336][ T7657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.253363][ T7657] RSP: 002b:00007f04053840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 207.253384][ T7657] RAX: fffffffffffffe00 RBX: 00007f04047e6548 RCX: 00007f040458eec9 [ 207.253400][ T7657] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04047e6548 [ 207.253413][ T7657] RBP: 00007f04047e6540 R08: 0000000000000000 R09: 0000000000000000 [ 207.253427][ T7657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.253440][ T7657] R13: 00007f04047e65d8 R14: 00007ffe3fc6e560 R15: 00007ffe3fc6e648 [ 207.253472][ T7657] [ 207.774867][ T7665] FAULT_INJECTION: forcing a failure. [ 207.774867][ T7665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.823391][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.1.351 Not tainted syzkaller #0 PREEMPT(full) [ 207.823422][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.823436][ T7665] Call Trace: [ 207.823444][ T7665] [ 207.823455][ T7665] dump_stack_lvl+0x16c/0x1f0 [ 207.823489][ T7665] should_fail_ex+0x512/0x640 [ 207.823524][ T7665] should_fail_alloc_page+0xe7/0x130 [ 207.823559][ T7665] prepare_alloc_pages+0x3c2/0x610 [ 207.823589][ T7665] ? smp_call_function_many_cond+0x457/0x1600 [ 207.823620][ T7665] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 207.823656][ T7665] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 207.823693][ T7665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.823720][ T7665] ? __pfx___text_poke+0x10/0x10 [ 207.823746][ T7665] ? find_held_lock+0x2b/0x80 [ 207.823779][ T7665] ? static_key_slow_inc_cpuslocked+0x101/0x150 [ 207.823823][ T7665] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 207.823851][ T7665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.823895][ T7665] ? policy_nodemask+0xea/0x4e0 [ 207.823930][ T7665] alloc_pages_mpol+0x1fb/0x550 [ 207.823963][ T7665] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 207.824007][ T7665] alloc_pages_noprof+0x131/0x390 [ 207.824040][ T7665] kvm_arch_vcpu_create+0x2a7/0xb20 [ 207.824079][ T7665] ? lockdep_init_map_type+0x5c/0x280 [ 207.824121][ T7665] kvm_vm_ioctl+0xfec/0x3fd0 [ 207.824173][ T7665] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 207.824232][ T7665] ? kasan_quarantine_put+0x10a/0x240 [ 207.824259][ T7665] ? lockdep_hardirqs_on+0x7c/0x110 [ 207.824290][ T7665] ? find_held_lock+0x2b/0x80 [ 207.824317][ T7665] ? tomoyo_path_number_perm+0x295/0x580 [ 207.824368][ T7665] ? tomoyo_path_number_perm+0x18d/0x580 [ 207.824409][ T7665] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.824461][ T7665] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 207.824503][ T7665] ? do_vfs_ioctl+0x128/0x14f0 [ 207.824539][ T7665] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 207.824584][ T7665] ? find_held_lock+0x2b/0x80 [ 207.824608][ T7665] ? hook_file_ioctl_common+0x145/0x410 [ 207.824654][ T7665] ? __fget_files+0x20e/0x3c0 [ 207.824685][ T7665] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 207.824721][ T7665] __x64_sys_ioctl+0x18e/0x210 [ 207.824759][ T7665] do_syscall_64+0xcd/0xfa0 [ 207.824789][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.824816][ T7665] RIP: 0033:0x7f8b6a18eec9 [ 207.824838][ T7665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.824861][ T7665] RSP: 002b:00007f8b6afe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.824887][ T7665] RAX: ffffffffffffffda RBX: 00007f8b6a3e5fa0 RCX: 00007f8b6a18eec9 [ 207.824905][ T7665] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000003 [ 207.824922][ T7665] RBP: 00007f8b6a211f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.824938][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.824953][ T7665] R13: 00007f8b6a3e6038 R14: 00007f8b6a3e5fa0 R15: 00007ffc66d504a8 [ 207.824990][ T7665] [ 209.660175][ T7705] bridge0: port 3(gretap0) entered blocking state [ 209.679740][ T7705] bridge0: port 3(gretap0) entered disabled state [ 209.686464][ T7705] gretap0: entered allmulticast mode [ 209.695139][ T7705] gretap0: entered promiscuous mode [ 209.702210][ T7705] bridge0: port 3(gretap0) entered blocking state [ 209.708795][ T7705] bridge0: port 3(gretap0) entered forwarding state [ 211.571269][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 211.983421][ T7753] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 212.081623][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 213.887481][ T7806] capability: warning: `syz.1.377' uses 32-bit capabilities (legacy support in use) [ 214.007366][ T7793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.013552][ T7793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.028445][ T7793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.037095][ T7793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.337553][ T7817] netlink: 330 bytes leftover after parsing attributes in process `syz.2.381'. [ 214.480203][ T7817] veth0_macvtap: left promiscuous mode [ 214.511696][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 215.400825][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.046679][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.046686][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 216.116725][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 218.752809][ T5833] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 219.417956][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.415'. [ 221.121689][ T7987] bridge0: port 3(ipvlan1) entered blocking state [ 221.167775][ T7987] bridge0: port 3(ipvlan1) entered disabled state [ 221.203362][ T7987] ipvlan1: entered allmulticast mode [ 221.230843][ T7987] veth0_vlan: entered allmulticast mode [ 221.297520][ T7987] ipvlan1: left allmulticast mode [ 221.302607][ T7987] veth0_vlan: left allmulticast mode [ 222.607883][ T8007] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 223.535456][ T8040] netlink: 342 bytes leftover after parsing attributes in process `syz.1.435'. [ 223.543302][ T8038] can: request_module (can-proto-5) failed. [ 223.546361][ T8040] netlink: 154 bytes leftover after parsing attributes in process `syz.1.435'. [ 223.644158][ T8036] FAULT_INJECTION: forcing a failure. [ 223.644158][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 223.667148][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 223.667183][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 223.667198][ T8036] Call Trace: [ 223.667206][ T8036] [ 223.667216][ T8036] dump_stack_lvl+0x16c/0x1f0 [ 223.667250][ T8036] should_fail_ex+0x512/0x640 [ 223.667281][ T8036] ? __kmalloc_cache_noprof+0x5f/0x780 [ 223.667325][ T8036] should_failslab+0xc2/0x120 [ 223.667357][ T8036] __kmalloc_cache_noprof+0x72/0x780 [ 223.667394][ T8036] ? net_generic+0xea/0x2a0 [ 223.667419][ T8036] ? ife_init_net+0x56/0x270 [ 223.667451][ T8036] ? ife_init_net+0x56/0x270 [ 223.667476][ T8036] ? __pfx_ife_init_net+0x10/0x10 [ 223.667500][ T8036] ife_init_net+0x56/0x270 [ 223.667528][ T8036] ops_init+0x1df/0x5f0 [ 223.667562][ T8036] setup_net+0x100/0x390 [ 223.667592][ T8036] ? __pfx_setup_net+0x10/0x10 [ 223.667623][ T8036] ? debug_mutex_init+0x37/0x70 [ 223.667658][ T8036] copy_net_ns+0x2f8/0x690 [ 223.667695][ T8036] create_new_namespaces+0x3ea/0xa90 [ 223.667739][ T8036] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 223.667773][ T8036] ksys_unshare+0x45b/0xa40 [ 223.667807][ T8036] ? __pfx_ksys_unshare+0x10/0x10 [ 223.667841][ T8036] ? xfd_validate_state+0x61/0x180 [ 223.667887][ T8036] __x64_sys_unshare+0x31/0x40 [ 223.667919][ T8036] do_syscall_64+0xcd/0xfa0 [ 223.667949][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.667975][ T8036] RIP: 0033:0x7f066978eec9 [ 223.667996][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.668019][ T8036] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.668044][ T8036] RAX: ffffffffffffffda RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 223.668061][ T8036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 223.668078][ T8036] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 223.668094][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.668109][ T8036] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 223.668148][ T8036] [ 224.442006][ T8058] netlink: 338 bytes leftover after parsing attributes in process `syz.2.439'. [ 224.461373][ T8058] ipvlan1: entered allmulticast mode [ 224.467247][ T8058] veth0_vlan: entered allmulticast mode [ 224.631385][ T8060] bond0: invalid ARP target specified [ 224.690474][ T8061] bond0: invalid ARP target specified [ 224.885630][ T8068] Device name cannot be null; rc = [-22] [ 225.623286][ T8032] Process accounting resumed [ 225.749546][ T8092] Invalid ELF header magic: != ELF [ 226.545177][ T8112] netlink: 326 bytes leftover after parsing attributes in process `syz.0.452'. [ 226.641321][ T8118] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 227.920768][ T8157] FAULT_INJECTION: forcing a failure. [ 227.920768][ T8157] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.959607][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.2.462 Not tainted syzkaller #0 PREEMPT(full) [ 227.959644][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.959661][ T8157] Call Trace: [ 227.959670][ T8157] [ 227.959681][ T8157] dump_stack_lvl+0x16c/0x1f0 [ 227.959716][ T8157] should_fail_ex+0x512/0x640 [ 227.959753][ T8157] get_futex_key+0x1d0/0x1560 [ 227.959792][ T8157] ? __pfx_get_futex_key+0x10/0x10 [ 227.959838][ T8157] futex_wake+0xea/0x530 [ 227.959887][ T8157] ? __pfx_futex_wake+0x10/0x10 [ 227.959926][ T8157] ? rcu_is_watching+0x12/0xc0 [ 227.959970][ T8157] do_futex+0x1e3/0x350 [ 227.960005][ T8157] ? __pfx_do_futex+0x10/0x10 [ 227.960039][ T8157] ? __fput+0x68d/0xb70 [ 227.960072][ T8157] ? __pfx___might_resched+0x10/0x10 [ 227.960104][ T8157] __x64_sys_futex+0x1e0/0x4c0 [ 227.960139][ T8157] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 227.960168][ T8157] ? __pfx___x64_sys_futex+0x10/0x10 [ 227.960201][ T8157] ? xfd_validate_state+0x61/0x180 [ 227.960233][ T8157] ? __pfx___do_sys_close_range+0x10/0x10 [ 227.960272][ T8157] do_syscall_64+0xcd/0xfa0 [ 227.960303][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.960372][ T8157] RIP: 0033:0x7f066978eec9 [ 227.960395][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.960420][ T8157] RSP: 002b:00007f066a6950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.960447][ T8157] RAX: ffffffffffffffda RBX: 00007f06699e5fa8 RCX: 00007f066978eec9 [ 227.960465][ T8157] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06699e5fac [ 227.960480][ T8157] RBP: 00007f06699e5fa0 R08: 00007f066a696000 R09: 0000000000000000 [ 227.960500][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.960516][ T8157] R13: 00007f06699e6038 R14: 00007ffdaec50c60 R15: 00007ffdaec50d48 [ 227.960551][ T8157] [ 228.368962][ T8163] FAULT_INJECTION: forcing a failure. [ 228.368962][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.382305][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.2.464 Not tainted syzkaller #0 PREEMPT(full) [ 228.382341][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 228.382357][ T8163] Call Trace: [ 228.382365][ T8163] [ 228.382376][ T8163] dump_stack_lvl+0x16c/0x1f0 [ 228.382409][ T8163] should_fail_ex+0x512/0x640 [ 228.382445][ T8163] _copy_from_iter+0x29f/0x1720 [ 228.382482][ T8163] ? __alloc_skb+0x200/0x380 [ 228.382511][ T8163] ? __pfx__copy_from_iter+0x10/0x10 [ 228.382542][ T8163] ? netlink_autobind.isra.0+0x158/0x370 [ 228.382588][ T8163] netlink_sendmsg+0x820/0xdd0 [ 228.382623][ T8163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.382659][ T8163] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 228.382700][ T8163] ____sys_sendmsg+0xa98/0xc70 [ 228.382735][ T8163] ? copy_msghdr_from_user+0x10a/0x160 [ 228.382765][ T8163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.382809][ T8163] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.382853][ T8163] ___sys_sendmsg+0x134/0x1d0 [ 228.382885][ T8163] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.382959][ T8163] __sys_sendmsg+0x16d/0x220 [ 228.382990][ T8163] ? __pfx___sys_sendmsg+0x10/0x10 [ 228.383018][ T8163] ? __x64_sys_futex+0x1e0/0x4c0 [ 228.383073][ T8163] do_syscall_64+0xcd/0xfa0 [ 228.383104][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.383130][ T8163] RIP: 0033:0x7f066978eec9 [ 228.383152][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.383178][ T8163] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.383203][ T8163] RAX: ffffffffffffffda RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 228.383226][ T8163] RDX: 0000000010004010 RSI: 0000200000000100 RDI: 0000000000000005 [ 228.383242][ T8163] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 228.383258][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.383274][ T8163] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 228.383318][ T8163] [ 228.995549][ T8180] FAULT_INJECTION: forcing a failure. [ 228.995549][ T8180] name fail_futex, interval 1, probability 0, space 0, times 0 [ 229.018552][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.3.473 Not tainted syzkaller #0 PREEMPT(full) [ 229.018590][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.018605][ T8180] Call Trace: [ 229.018614][ T8180] [ 229.018625][ T8180] dump_stack_lvl+0x16c/0x1f0 [ 229.018659][ T8180] should_fail_ex+0x512/0x640 [ 229.018695][ T8180] get_futex_key+0x1d0/0x1560 [ 229.018734][ T8180] ? __pfx_get_futex_key+0x10/0x10 [ 229.018780][ T8180] futex_wake+0xea/0x530 [ 229.018820][ T8180] ? __pfx_futex_wake+0x10/0x10 [ 229.018857][ T8180] ? rcu_is_watching+0x12/0xc0 [ 229.018896][ T8180] do_futex+0x1e3/0x350 [ 229.018930][ T8180] ? __pfx_do_futex+0x10/0x10 [ 229.018963][ T8180] ? __fput+0x68d/0xb70 [ 229.018995][ T8180] ? __pfx___might_resched+0x10/0x10 [ 229.019026][ T8180] __x64_sys_futex+0x1e0/0x4c0 [ 229.019061][ T8180] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 229.019090][ T8180] ? __pfx___x64_sys_futex+0x10/0x10 [ 229.019125][ T8180] ? __pfx___do_sys_close_range+0x10/0x10 [ 229.019164][ T8180] do_syscall_64+0xcd/0xfa0 [ 229.019194][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.019220][ T8180] RIP: 0033:0x7faa7498eec9 [ 229.019240][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.019274][ T8180] RSP: 002b:00007faa757b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.019300][ T8180] RAX: ffffffffffffffda RBX: 00007faa74be5fa8 RCX: 00007faa7498eec9 [ 229.019317][ T8180] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa74be5fac [ 229.019333][ T8180] RBP: 00007faa74be5fa0 R08: 00007faa757b5000 R09: 0000000000000000 [ 229.019348][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.019362][ T8180] R13: 00007faa74be6038 R14: 00007ffdfcd1cb30 R15: 00007ffdfcd1cc18 [ 229.019397][ T8180] [ 229.739059][ T8200] zswap: compressor not available [ 233.078342][ T8269] netlink: 342 bytes leftover after parsing attributes in process `syz.3.492'. [ 233.190942][ T5833] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 233.192548][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 233.596451][ T8290] FAULT_INJECTION: forcing a failure. [ 233.596451][ T8290] name failslab, interval 1, probability 0, space 0, times 0 [ 233.619269][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.2.498 Not tainted syzkaller #0 PREEMPT(full) [ 233.619307][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.619324][ T8290] Call Trace: [ 233.619333][ T8290] [ 233.619345][ T8290] dump_stack_lvl+0x16c/0x1f0 [ 233.619380][ T8290] should_fail_ex+0x512/0x640 [ 233.619411][ T8290] ? fs_reclaim_acquire+0xae/0x150 [ 233.619447][ T8290] should_failslab+0xc2/0x120 [ 233.619479][ T8290] __kmalloc_noprof+0xdd/0x880 [ 233.619520][ T8290] ? tomoyo_encode2+0x100/0x3e0 [ 233.619553][ T8290] ? tomoyo_encode2+0x100/0x3e0 [ 233.619576][ T8290] tomoyo_encode2+0x100/0x3e0 [ 233.619607][ T8290] tomoyo_encode+0x29/0x50 [ 233.619631][ T8290] tomoyo_realpath_from_path+0x18f/0x6e0 [ 233.619670][ T8290] tomoyo_path_number_perm+0x245/0x580 [ 233.619705][ T8290] ? tomoyo_path_number_perm+0x237/0x580 [ 233.619745][ T8290] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 233.619828][ T8290] ? d_alloc_parallel+0xae4/0x1480 [ 233.619867][ T8290] ? current_check_access_path+0x33c/0x460 [ 233.619898][ T8290] ? __pfx_current_check_access_path+0x10/0x10 [ 233.619937][ T8290] tomoyo_path_mknod+0x10c/0x190 [ 233.619966][ T8290] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 233.620000][ T8290] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 233.620045][ T8290] security_path_mknod+0x161/0x310 [ 233.620085][ T8290] lookup_open.isra.0+0xc17/0x1580 [ 233.620131][ T8290] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 233.620177][ T8290] ? find_held_lock+0x2b/0x80 [ 233.620212][ T8290] ? __pfx_down_write+0x10/0x10 [ 233.620257][ T8290] path_openat+0x893/0x2cb0 [ 233.620297][ T8290] ? __pfx_path_openat+0x10/0x10 [ 233.620327][ T8290] ? __lock_acquire+0xb97/0x1ce0 [ 233.620364][ T8290] do_filp_open+0x20b/0x470 [ 233.620393][ T8290] ? __pfx_do_filp_open+0x10/0x10 [ 233.620449][ T8290] ? _raw_spin_unlock+0x28/0x50 [ 233.620472][ T8290] ? alloc_fd+0x471/0x7d0 [ 233.620509][ T8290] do_sys_openat2+0x11b/0x1d0 [ 233.620544][ T8290] ? __pfx_do_sys_openat2+0x10/0x10 [ 233.620595][ T8290] __x64_sys_open+0x153/0x1e0 [ 233.620630][ T8290] ? __pfx___x64_sys_open+0x10/0x10 [ 233.620673][ T8290] ? rcu_is_watching+0x12/0xc0 [ 233.620704][ T8290] do_syscall_64+0xcd/0xfa0 [ 233.620736][ T8290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.620763][ T8290] RIP: 0033:0x7f066978eec9 [ 233.620786][ T8290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.620820][ T8290] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 233.620846][ T8290] RAX: ffffffffffffffda RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 233.620865][ T8290] RDX: 0000000000000006 RSI: 0000000000004140 RDI: 0000000000000000 [ 233.620881][ T8290] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 233.620897][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.620913][ T8290] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 233.620953][ T8290] [ 233.623727][ T8290] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.055877][ T8455] Invalid ELF header magic: != ELF [ 242.505093][ T8483] FAULT_INJECTION: forcing a failure. [ 242.505093][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 242.529658][ T8483] CPU: 1 UID: 0 PID: 8483 Comm: syz.3.534 Not tainted syzkaller #0 PREEMPT(full) [ 242.529695][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.529711][ T8483] Call Trace: [ 242.529720][ T8483] [ 242.529734][ T8483] dump_stack_lvl+0x16c/0x1f0 [ 242.529770][ T8483] should_fail_ex+0x512/0x640 [ 242.529799][ T8483] ? __kmalloc_noprof+0xca/0x880 [ 242.529843][ T8483] should_failslab+0xc2/0x120 [ 242.529876][ T8483] __kmalloc_noprof+0xdd/0x880 [ 242.529914][ T8483] ? drm_atomic_state_init+0x17b/0x320 [ 242.529951][ T8483] ? drm_atomic_state_init+0x17b/0x320 [ 242.529977][ T8483] drm_atomic_state_init+0x17b/0x320 [ 242.530005][ T8483] ? __kasan_kmalloc+0xaa/0xb0 [ 242.530035][ T8483] drm_atomic_state_alloc+0xd3/0x120 [ 242.530067][ T8483] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 242.530098][ T8483] ? __pfx___might_resched+0x10/0x10 [ 242.530136][ T8483] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 242.530175][ T8483] ? __mutex_lock+0x1c5/0x1060 [ 242.530200][ T8483] ? rcu_is_watching+0x12/0xc0 [ 242.530267][ T8483] drm_client_modeset_commit_locked+0x14d/0x580 [ 242.530305][ T8483] drm_client_modeset_commit+0x4f/0x80 [ 242.530337][ T8483] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 242.530370][ T8483] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 242.530410][ T8483] drm_fbdev_client_restore+0x2c/0x40 [ 242.530447][ T8483] drm_client_dev_restore+0x1f6/0x2a0 [ 242.530483][ T8483] drm_release+0x2c4/0x360 [ 242.530511][ T8483] ? __pfx_drm_release+0x10/0x10 [ 242.530533][ T8483] __fput+0x402/0xb70 [ 242.530572][ T8483] task_work_run+0x150/0x240 [ 242.530610][ T8483] ? __pfx_task_work_run+0x10/0x10 [ 242.530648][ T8483] ? __pfx___do_sys_close_range+0x10/0x10 [ 242.530682][ T8483] exit_to_user_mode_loop+0xec/0x130 [ 242.530720][ T8483] do_syscall_64+0x426/0xfa0 [ 242.530748][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.530773][ T8483] RIP: 0033:0x7faa7498eec9 [ 242.530794][ T8483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.530816][ T8483] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 242.530840][ T8483] RAX: 0000000000000000 RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 242.530857][ T8483] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 242.530872][ T8483] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 242.530888][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.530902][ T8483] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 242.530944][ T8483] [ 243.151773][ T8494] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010006 [ 243.570656][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.533'. [ 246.330532][ T8534] FAULT_INJECTION: forcing a failure. [ 246.330532][ T8534] name failslab, interval 1, probability 0, space 0, times 0 [ 246.369878][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.2.543 Not tainted syzkaller #0 PREEMPT(full) [ 246.369920][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.369938][ T8534] Call Trace: [ 246.369946][ T8534] [ 246.369957][ T8534] dump_stack_lvl+0x16c/0x1f0 [ 246.369993][ T8534] should_fail_ex+0x512/0x640 [ 246.370023][ T8534] ? __kmalloc_noprof+0xca/0x880 [ 246.370066][ T8534] should_failslab+0xc2/0x120 [ 246.370099][ T8534] __kmalloc_noprof+0xdd/0x880 [ 246.370138][ T8534] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 246.370174][ T8534] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 246.370202][ T8534] apply_wqattrs_prepare+0xf8/0xbd0 [ 246.370246][ T8534] apply_workqueue_attrs_locked+0x64/0xe0 [ 246.370277][ T8534] __alloc_workqueue+0xf3f/0x1810 [ 246.370317][ T8534] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 246.370349][ T8534] alloc_workqueue_noprof+0xd2/0x200 [ 246.370382][ T8534] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 246.370427][ T8534] ? __pfx___debug_object_init+0x10/0x10 [ 246.370475][ T8534] nci_register_device+0x511/0xb80 [ 246.370515][ T8534] ? __pfx_nci_register_device+0x10/0x10 [ 246.370571][ T8534] ? lockdep_init_map_type+0x5c/0x280 [ 246.370615][ T8534] virtual_ncidev_open+0x141/0x220 [ 246.370654][ T8534] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 246.370689][ T8534] misc_open+0x26d/0x450 [ 246.370719][ T8534] ? __pfx_misc_open+0x10/0x10 [ 246.370748][ T8534] chrdev_open+0x231/0x6a0 [ 246.370777][ T8534] ? __pfx_apparmor_file_open+0x10/0x10 [ 246.370813][ T8534] ? __pfx_chrdev_open+0x10/0x10 [ 246.370847][ T8534] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 246.370883][ T8534] do_dentry_open+0x97f/0x1530 [ 246.370915][ T8534] ? __pfx_chrdev_open+0x10/0x10 [ 246.370953][ T8534] vfs_open+0x82/0x3f0 [ 246.370992][ T8534] path_openat+0x1de4/0x2cb0 [ 246.371033][ T8534] ? __pfx_path_openat+0x10/0x10 [ 246.371072][ T8534] do_filp_open+0x20b/0x470 [ 246.371106][ T8534] ? __pfx_do_filp_open+0x10/0x10 [ 246.371164][ T8534] ? alloc_fd+0x471/0x7d0 [ 246.371201][ T8534] do_sys_openat2+0x11b/0x1d0 [ 246.371236][ T8534] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.371276][ T8534] ? __fput+0x68d/0xb70 [ 246.371316][ T8534] __x64_sys_openat+0x174/0x210 [ 246.371352][ T8534] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.371404][ T8534] do_syscall_64+0xcd/0xfa0 [ 246.371435][ T8534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.371462][ T8534] RIP: 0033:0x7f066978eec9 [ 246.371484][ T8534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.371510][ T8534] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.371541][ T8534] RAX: ffffffffffffffda RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 246.371559][ T8534] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 246.371577][ T8534] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.371593][ T8534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.371609][ T8534] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 246.371649][ T8534] [ 248.003892][ T8579] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 248.052281][ T8579] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 248.539286][ T8588] random: crng reseeded on system resumption [ 250.050258][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.058531][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.066362][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.075018][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.087680][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.131464][ T8622] chnl_net:caif_netlink_parms(): no params data found [ 251.704115][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.730576][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.746757][ T8622] bridge_slave_0: entered allmulticast mode [ 251.759626][ T8622] bridge_slave_0: entered promiscuous mode [ 251.785408][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.802951][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.813191][ T8622] bridge_slave_1: entered allmulticast mode [ 251.855071][ T8622] bridge_slave_1: entered promiscuous mode [ 251.933357][ T8662] FAULT_INJECTION: forcing a failure. [ 251.933357][ T8662] name failslab, interval 1, probability 0, space 0, times 0 [ 251.976038][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.3.564 Not tainted syzkaller #0 PREEMPT(full) [ 251.976078][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.976095][ T8662] Call Trace: [ 251.976105][ T8662] [ 251.976115][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 251.976149][ T8662] should_fail_ex+0x512/0x640 [ 251.976179][ T8662] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 251.976215][ T8662] should_failslab+0xc2/0x120 [ 251.976250][ T8662] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 251.976281][ T8662] ? kstrdup_const+0x63/0x80 [ 251.976316][ T8662] ? kstrdup+0x53/0x100 [ 251.976340][ T8662] kstrdup+0x53/0x100 [ 251.976368][ T8662] kstrdup_const+0x63/0x80 [ 251.976395][ T8662] kvasprintf_const+0x10f/0x1a0 [ 251.976431][ T8662] kobject_set_name_vargs+0x5a/0x140 [ 251.976464][ T8662] kobject_init_and_add+0xe7/0x190 [ 251.976498][ T8662] ? __pfx_kobject_init_and_add+0x10/0x10 [ 251.976540][ T8662] ? up_write+0x1b2/0x520 [ 251.976585][ T8662] sysfs_slab_add+0x194/0x1f0 [ 251.976615][ T8662] do_kmem_cache_create+0x5bb/0x740 [ 251.976655][ T8662] __kmem_cache_create_args+0x202/0x3c0 [ 251.976698][ T8662] mon_text_open+0x333/0x510 [ 251.976734][ T8662] ? __pfx_mon_text_open+0x10/0x10 [ 251.976772][ T8662] ? __pfx_mon_text_ctor+0x10/0x10 [ 251.976808][ T8662] ? __pfx_apparmor_file_open+0x10/0x10 [ 251.976841][ T8662] ? lockdown_is_locked_down+0x3f/0x130 [ 251.976872][ T8662] ? bpf_lsm_locked_down+0x9/0x10 [ 251.976906][ T8662] ? __pfx_mon_text_open+0x10/0x10 [ 251.976936][ T8662] full_proxy_open_regular+0x1b6/0x360 [ 251.976974][ T8662] do_dentry_open+0x97f/0x1530 [ 251.977002][ T8662] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 251.977049][ T8662] vfs_open+0x82/0x3f0 [ 251.977092][ T8662] path_openat+0x1de4/0x2cb0 [ 251.977127][ T8662] ? __pfx_path_openat+0x10/0x10 [ 251.977162][ T8662] do_filp_open+0x20b/0x470 [ 251.977188][ T8662] ? __pfx_do_filp_open+0x10/0x10 [ 251.977240][ T8662] ? alloc_fd+0x471/0x7d0 [ 251.977271][ T8662] do_sys_openat2+0x11b/0x1d0 [ 251.977304][ T8662] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.977350][ T8662] __x64_sys_openat+0x174/0x210 [ 251.977387][ T8662] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.977438][ T8662] do_syscall_64+0xcd/0xfa0 [ 251.977469][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.977496][ T8662] RIP: 0033:0x7faa7498eec9 [ 251.977517][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.977542][ T8662] RSP: 002b:00007faa75772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.977566][ T8662] RAX: ffffffffffffffda RBX: 00007faa74be6180 RCX: 00007faa7498eec9 [ 251.977582][ T8662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 251.977598][ T8662] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.977612][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.977625][ T8662] R13: 00007faa74be6218 R14: 00007faa74be6180 R15: 00007ffdfcd1cc18 [ 251.977663][ T8662] [ 252.136961][ T5833] Bluetooth: hci4: command tx timeout [ 252.284956][ T8662] kobject: can not set name properly! [ 252.290444][ T8662] SLUB: Unable to add cache mon_text_ffff8880291a1c00 to sysfs [ 252.491853][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.673179][ T7729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.742787][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.963194][ T8622] team0: Port device team_slave_0 added [ 253.290113][ T8698] random: crng reseeded on system resumption [ 253.303801][ T7729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.444815][ T8622] team0: Port device team_slave_1 added [ 253.837960][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.885753][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.050591][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.064489][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.071598][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.097539][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.104235][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.357651][ T5833] Bluetooth: hci4: command tx timeout [ 254.384430][ T8715] __vm_enough_memory: pid: 8715, comm: syz.3.572, bytes: 4398046511104 not enough memory for the allocation [ 254.413241][ T7729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.726010][ T7729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.463177][ T8622] hsr_slave_0: entered promiscuous mode [ 255.507441][ T8622] hsr_slave_1: entered promiscuous mode [ 255.523985][ T8622] debugfs: 'hsr0' already exists in 'hsr' [ 255.556867][ T8622] Cannot create hsr debugfs directory [ 256.025876][ T8742] Process accounting paused [ 256.440642][ T5833] Bluetooth: hci4: command tx timeout [ 256.517887][ T7729] bridge_slave_1: left allmulticast mode [ 256.525310][ T7729] bridge_slave_1: left promiscuous mode [ 256.555751][ T7729] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.630051][ T7729] bridge_slave_0: left allmulticast mode [ 256.635835][ T7729] bridge_slave_0: left promiscuous mode [ 256.682743][ T7729] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.653817][ T7729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.718950][ T7729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.767855][ T7729] bond0 (unregistering): Released all slaves [ 257.910606][ T7729] ovs_: left promiscuous mode [ 258.516871][ T5833] Bluetooth: hci4: command tx timeout [ 258.980140][ T8622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.335107][ T7729] hsr_slave_0: left promiscuous mode [ 259.353599][ T7729] hsr_slave_1: left promiscuous mode [ 259.360611][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.377031][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.463672][ T7729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.481828][ T7729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.590065][ T7729] veth1_macvtap: left promiscuous mode [ 259.618678][ T7729] veth0_macvtap: left promiscuous mode [ 259.624416][ T7729] veth1_vlan: left promiscuous mode [ 259.666955][ T7729] veth0_vlan: left promiscuous mode [ 260.415457][ T8808] netlink: 268 bytes leftover after parsing attributes in process `syz.3.581'. [ 260.514286][ T8811] FAULT_INJECTION: forcing a failure. [ 260.514286][ T8811] name fail_futex, interval 1, probability 0, space 0, times 0 [ 260.577887][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.2.582 Not tainted syzkaller #0 PREEMPT(full) [ 260.577923][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.577938][ T8811] Call Trace: [ 260.577946][ T8811] [ 260.577958][ T8811] dump_stack_lvl+0x16c/0x1f0 [ 260.577993][ T8811] should_fail_ex+0x512/0x640 [ 260.578030][ T8811] get_futex_key+0x1d0/0x1560 [ 260.578064][ T8811] ? get_pid_task+0x106/0x250 [ 260.578097][ T8811] ? __pfx_get_futex_key+0x10/0x10 [ 260.578126][ T8811] ? rcu_is_watching+0x12/0xc0 [ 260.578157][ T8811] ? kfree+0x252/0x6d0 [ 260.578213][ T8811] futex_wake+0xea/0x530 [ 260.578257][ T8811] ? __pfx_futex_wake+0x10/0x10 [ 260.578294][ T8811] ? __pfx_vfs_writev+0x10/0x10 [ 260.578319][ T8811] ? __mutex_lock+0x1c5/0x1060 [ 260.578351][ T8811] ? do_writev+0x218/0x340 [ 260.578383][ T8811] do_futex+0x1e3/0x350 [ 260.578417][ T8811] ? __pfx_do_futex+0x10/0x10 [ 260.578447][ T8811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 260.578488][ T8811] __x64_sys_futex+0x1e0/0x4c0 [ 260.578527][ T8811] ? __pfx___x64_sys_futex+0x10/0x10 [ 260.578563][ T8811] ? __pfx_do_writev+0x10/0x10 [ 260.578598][ T8811] do_syscall_64+0xcd/0xfa0 [ 260.578628][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.578656][ T8811] RIP: 0033:0x7f066978eec9 [ 260.578678][ T8811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.578703][ T8811] RSP: 002b:00007f066a6950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.578728][ T8811] RAX: ffffffffffffffda RBX: 00007f06699e5fa8 RCX: 00007f066978eec9 [ 260.578747][ T8811] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06699e5fac [ 260.578764][ T8811] RBP: 00007f06699e5fa0 R08: 00007f066a696000 R09: 0000000000000000 [ 260.578780][ T8811] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 260.578796][ T8811] R13: 00007f06699e6038 R14: 00007ffdaec50c60 R15: 00007ffdaec50d48 [ 260.578834][ T8811] [ 260.927113][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.928799][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.976965][ T7729] team0 (unregistering): Port device team_slave_1 removed [ 261.057586][ T7729] team0 (unregistering): Port device team_slave_0 removed [ 262.057568][ T8622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.119281][ T8622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.126091][ T8808] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 262.153054][ T8622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.180645][ T8808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 262.210799][ T8808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 262.507785][ T8826] kAFS: bad VL server IP address [ 263.202692][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.496334][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.677777][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.684994][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.721267][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.728439][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.756462][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.797914][ T8880] program syz.3.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.923938][ T8880] netlink: 186 bytes leftover after parsing attributes in process `syz.3.591'. [ 265.404996][ T8896] tipc: Started in network mode [ 265.411841][ T8896] tipc: Node identity fe820562, cluster identity 4711 [ 265.418839][ T8896] tipc: Node number set to 4269933922 [ 265.838102][ T8622] veth0_vlan: entered promiscuous mode [ 265.975927][ T8622] veth1_vlan: entered promiscuous mode [ 265.977815][ T8898] netlink: 7 bytes leftover after parsing attributes in process `syz.1.594'. [ 266.109125][ T8622] veth0_macvtap: entered promiscuous mode [ 266.193701][ T8622] veth1_macvtap: entered promiscuous mode [ 266.245148][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.291723][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.410474][ T8802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.428618][ T8802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.498345][ T8802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.534897][ T8802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.604903][ T8914] netlink: 350 bytes leftover after parsing attributes in process `syz.3.596'. [ 266.794840][ T8800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.826010][ T8800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.934941][ T8804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.952199][ T8804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.216417][ T8934] FAULT_INJECTION: forcing a failure. [ 267.216417][ T8934] name failslab, interval 1, probability 0, space 0, times 0 [ 267.242690][ T8934] CPU: 0 UID: 0 PID: 8934 Comm: syz.4.555 Not tainted syzkaller #0 PREEMPT(full) [ 267.242728][ T8934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.242743][ T8934] Call Trace: [ 267.242751][ T8934] [ 267.242762][ T8934] dump_stack_lvl+0x16c/0x1f0 [ 267.242797][ T8934] should_fail_ex+0x512/0x640 [ 267.242828][ T8934] ? __kmalloc_cache_noprof+0x5f/0x780 [ 267.242871][ T8934] should_failslab+0xc2/0x120 [ 267.242904][ T8934] __kmalloc_cache_noprof+0x72/0x780 [ 267.242944][ T8934] ? vkms_plane_duplicate_state+0x45/0x130 [ 267.242991][ T8934] ? vkms_plane_duplicate_state+0x45/0x130 [ 267.243019][ T8934] vkms_plane_duplicate_state+0x45/0x130 [ 267.243046][ T8934] drm_atomic_get_plane_state+0x20e/0x590 [ 267.243078][ T8934] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 267.243108][ T8934] ? __pfx___might_resched+0x10/0x10 [ 267.243149][ T8934] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 267.243179][ T8934] ? __mutex_lock+0x1c5/0x1060 [ 267.243207][ T8934] ? rcu_is_watching+0x12/0xc0 [ 267.243268][ T8934] drm_client_modeset_commit_locked+0x14d/0x580 [ 267.243306][ T8934] drm_client_modeset_commit+0x4f/0x80 [ 267.243337][ T8934] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 267.243369][ T8934] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 267.243408][ T8934] drm_fbdev_client_restore+0x2c/0x40 [ 267.243445][ T8934] drm_client_dev_restore+0x1f6/0x2a0 [ 267.243482][ T8934] drm_release+0x2c4/0x360 [ 267.243512][ T8934] ? __pfx_drm_release+0x10/0x10 [ 267.243585][ T8934] __fput+0x402/0xb70 [ 267.243630][ T8934] task_work_run+0x150/0x240 [ 267.243674][ T8934] ? __pfx_task_work_run+0x10/0x10 [ 267.243712][ T8934] ? __pfx___do_sys_close_range+0x10/0x10 [ 267.243749][ T8934] exit_to_user_mode_loop+0xec/0x130 [ 267.243786][ T8934] do_syscall_64+0x426/0xfa0 [ 267.243819][ T8934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.243847][ T8934] RIP: 0033:0x7f54ec78eec9 [ 267.243868][ T8934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.243891][ T8934] RSP: 002b:00007f54ed562038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.243915][ T8934] RAX: 0000000000000000 RBX: 00007f54ec9e5fa0 RCX: 00007f54ec78eec9 [ 267.243932][ T8934] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 267.243947][ T8934] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.243963][ T8934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.243978][ T8934] R13: 00007f54ec9e6038 R14: 00007f54ec9e5fa0 R15: 00007ffcb39d8f88 [ 267.244014][ T8934] [ 268.107078][ T8949] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 268.114274][ T8949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.131541][ T8949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 268.179906][ T8949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.186074][ T8949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.287126][ T8949] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 268.631959][ T8966] netlink: 334 bytes leftover after parsing attributes in process `syz.4.605'. [ 268.687238][ T8968] netlink: 334 bytes leftover after parsing attributes in process `syz.4.605'. [ 269.496795][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'. [ 269.870362][ T9013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.616'. [ 269.929051][ T9027] netlink: 93 bytes leftover after parsing attributes in process `syz.3.616'. [ 270.099224][ T9016] FAULT_INJECTION: forcing a failure. [ 270.099224][ T9016] name fail_futex, interval 1, probability 0, space 0, times 0 [ 270.142890][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.4.617 Not tainted syzkaller #0 PREEMPT(full) [ 270.142913][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.142922][ T9016] Call Trace: [ 270.142927][ T9016] [ 270.142932][ T9016] dump_stack_lvl+0x16c/0x1f0 [ 270.142954][ T9016] should_fail_ex+0x512/0x640 [ 270.142975][ T9016] get_futex_key+0x1d0/0x1560 [ 270.142996][ T9016] ? __pfx_get_futex_key+0x10/0x10 [ 270.143013][ T9016] ? futex_private_hash_put+0x176/0x300 [ 270.143036][ T9016] futex_wake+0xea/0x530 [ 270.143066][ T9016] ? futex_wait+0x120/0x380 [ 270.143089][ T9016] ? __pfx_futex_wake+0x10/0x10 [ 270.143109][ T9016] ? __lock_acquire+0x62e/0x1ce0 [ 270.143133][ T9016] ? up_write+0x1b2/0x520 [ 270.143156][ T9016] do_futex+0x1e3/0x350 [ 270.143175][ T9016] ? __pfx_do_futex+0x10/0x10 [ 270.143194][ T9016] ? __fget_files+0x204/0x3c0 [ 270.143219][ T9016] __x64_sys_futex+0x1e0/0x4c0 [ 270.143241][ T9016] ? __pfx___x64_sys_futex+0x10/0x10 [ 270.143261][ T9016] ? __sys_setsockopt+0x140/0x1a0 [ 270.143282][ T9016] do_syscall_64+0xcd/0xfa0 [ 270.143299][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.143313][ T9016] RIP: 0033:0x7f54ec78eec9 [ 270.143326][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.143340][ T9016] RSP: 002b:00007f54ed5620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.143355][ T9016] RAX: ffffffffffffffda RBX: 00007f54ec9e5fa8 RCX: 00007f54ec78eec9 [ 270.143364][ T9016] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54ec9e5fac [ 270.143373][ T9016] RBP: 00007f54ec9e5fa0 R08: 00007f54ed563000 R09: 0000000000000000 [ 270.143381][ T9016] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 270.143390][ T9016] R13: 00007f54ec9e6038 R14: 00007ffcb39d8ea0 R15: 00007ffcb39d8f88 [ 270.143408][ T9016] [ 270.340644][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.343880][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.346968][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.352829][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.581793][ T9013] kfence: disabled [ 270.639749][ T30] audit: type=1800 audit(4294967360.529:6): pid=9013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.616" name="lu_gp_id" dev="configfs" ino=23473 res=0 errno=0 [ 270.733492][ T5839] Bluetooth: hci4: Malformed LE Event: 0x1d [ 271.182000][ T9053] netlink: 342 bytes leftover after parsing attributes in process `syz.3.621'. [ 271.885163][ T9056] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 272.436731][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.041711][ T9058] ima: policy update failed [ 273.064112][ T30] audit: type=1802 audit(4294967362.929:7): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.623" res=0 errno=0 [ 273.523407][ T9078] Invalid ELF header magic: != ELF [ 274.151608][ T9108] FAULT_INJECTION: forcing a failure. [ 274.151608][ T9108] name failslab, interval 1, probability 0, space 0, times 0 [ 274.205133][ T9108] CPU: 0 UID: 0 PID: 9108 Comm: syz.4.633 Not tainted syzkaller #0 PREEMPT(full) [ 274.205170][ T9108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.205187][ T9108] Call Trace: [ 274.205196][ T9108] [ 274.205206][ T9108] dump_stack_lvl+0x16c/0x1f0 [ 274.205240][ T9108] should_fail_ex+0x512/0x640 [ 274.205270][ T9108] ? __kmalloc_noprof+0xca/0x880 [ 274.205311][ T9108] should_failslab+0xc2/0x120 [ 274.205342][ T9108] __kmalloc_noprof+0xdd/0x880 [ 274.205378][ T9108] ? drm_atomic_state_init+0x17b/0x320 [ 274.205417][ T9108] ? drm_atomic_state_init+0x17b/0x320 [ 274.205444][ T9108] drm_atomic_state_init+0x17b/0x320 [ 274.205471][ T9108] ? __kasan_kmalloc+0xaa/0xb0 [ 274.205500][ T9108] drm_atomic_state_alloc+0xd3/0x120 [ 274.205529][ T9108] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 274.205559][ T9108] ? __pfx___might_resched+0x10/0x10 [ 274.205595][ T9108] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 274.205627][ T9108] ? __mutex_lock+0x1c5/0x1060 [ 274.205654][ T9108] ? rcu_is_watching+0x12/0xc0 [ 274.205717][ T9108] drm_client_modeset_commit_locked+0x14d/0x580 [ 274.205753][ T9108] drm_client_modeset_commit+0x4f/0x80 [ 274.205785][ T9108] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 274.205818][ T9108] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 274.205882][ T9108] drm_fbdev_client_restore+0x2c/0x40 [ 274.205926][ T9108] drm_client_dev_restore+0x1f6/0x2a0 [ 274.205966][ T9108] drm_release+0x2c4/0x360 [ 274.205995][ T9108] ? __pfx_drm_release+0x10/0x10 [ 274.206020][ T9108] __fput+0x402/0xb70 [ 274.206059][ T9108] task_work_run+0x150/0x240 [ 274.206096][ T9108] ? __pfx_task_work_run+0x10/0x10 [ 274.206134][ T9108] ? __pfx___do_sys_close_range+0x10/0x10 [ 274.206174][ T9108] exit_to_user_mode_loop+0xec/0x130 [ 274.206212][ T9108] do_syscall_64+0x426/0xfa0 [ 274.206243][ T9108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.206270][ T9108] RIP: 0033:0x7f54ec78eec9 [ 274.206292][ T9108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.206317][ T9108] RSP: 002b:00007f54ed562038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 274.206343][ T9108] RAX: 0000000000000000 RBX: 00007f54ec9e5fa0 RCX: 00007f54ec78eec9 [ 274.206361][ T9108] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 274.206376][ T9108] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.206392][ T9108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.206408][ T9108] R13: 00007f54ec9e6038 R14: 00007f54ec9e5fa0 R15: 00007ffcb39d8f88 [ 274.206448][ T9108] [ 274.465123][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.573774][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.008903][ T30] audit: type=1804 audit(4294967364.899:8): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.638" name="file0" dev="tmpfs" ino=1106 res=1 errno=0 [ 275.085127][ T30] audit: type=1804 audit(4294967364.939:9): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.638" name="file0" dev="tmpfs" ino=1106 res=1 errno=0 [ 275.680289][ T9157] FAULT_INJECTION: forcing a failure. [ 275.680289][ T9157] name failslab, interval 1, probability 0, space 0, times 0 [ 275.698891][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT(full) [ 275.698928][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.698945][ T9157] Call Trace: [ 275.698954][ T9157] [ 275.698965][ T9157] dump_stack_lvl+0x16c/0x1f0 [ 275.699001][ T9157] should_fail_ex+0x512/0x640 [ 275.699032][ T9157] ? __kmalloc_cache_noprof+0x5f/0x780 [ 275.699076][ T9157] should_failslab+0xc2/0x120 [ 275.699110][ T9157] __kmalloc_cache_noprof+0x72/0x780 [ 275.699150][ T9157] ? vkms_plane_duplicate_state+0x87/0x130 [ 275.699188][ T9157] ? vkms_plane_duplicate_state+0x87/0x130 [ 275.699216][ T9157] vkms_plane_duplicate_state+0x87/0x130 [ 275.699247][ T9157] drm_atomic_get_plane_state+0x20e/0x590 [ 275.699282][ T9157] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 275.699313][ T9157] ? __pfx___might_resched+0x10/0x10 [ 275.699351][ T9157] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 275.699383][ T9157] ? __mutex_lock+0x1c5/0x1060 [ 275.699411][ T9157] ? rcu_is_watching+0x12/0xc0 [ 275.699478][ T9157] drm_client_modeset_commit_locked+0x14d/0x580 [ 275.699516][ T9157] drm_client_modeset_commit+0x4f/0x80 [ 275.699548][ T9157] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 275.699581][ T9157] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 275.699620][ T9157] drm_fbdev_client_restore+0x2c/0x40 [ 275.699657][ T9157] drm_client_dev_restore+0x1f6/0x2a0 [ 275.699704][ T9157] drm_release+0x2c4/0x360 [ 275.699737][ T9157] ? __pfx_drm_release+0x10/0x10 [ 275.699763][ T9157] __fput+0x402/0xb70 [ 275.699809][ T9157] task_work_run+0x150/0x240 [ 275.699850][ T9157] ? __pfx_task_work_run+0x10/0x10 [ 275.699888][ T9157] ? __pfx___do_sys_close_range+0x10/0x10 [ 275.699926][ T9157] exit_to_user_mode_loop+0xec/0x130 [ 275.699965][ T9157] do_syscall_64+0x426/0xfa0 [ 275.699996][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.700022][ T9157] RIP: 0033:0x7f54ec78eec9 [ 275.700044][ T9157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.700069][ T9157] RSP: 002b:00007f54ed562038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 275.700095][ T9157] RAX: 0000000000000000 RBX: 00007f54ec9e5fa0 RCX: 00007f54ec78eec9 [ 275.700112][ T9157] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 275.700127][ T9157] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 275.700142][ T9157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.700158][ T9157] R13: 00007f54ec9e6038 R14: 00007f54ec9e5fa0 R15: 00007ffcb39d8f88 [ 275.700199][ T9157] [ 276.654813][ T9181] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 280.425598][ T9243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.668'. [ 282.108058][ T9298] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 282.170683][ T9298] CIFS mount error: No usable UNC path provided in device string! [ 282.170683][ T9298] [ 282.229616][ T9298] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.113215][ T9321] random: crng reseeded on system resumption [ 283.325620][ T9325] FAULT_INJECTION: forcing a failure. [ 283.325620][ T9325] name failslab, interval 1, probability 0, space 0, times 0 [ 283.367234][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.2.678 Not tainted syzkaller #0 PREEMPT(full) [ 283.367270][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.367285][ T9325] Call Trace: [ 283.367293][ T9325] [ 283.367302][ T9325] dump_stack_lvl+0x16c/0x1f0 [ 283.367336][ T9325] should_fail_ex+0x512/0x640 [ 283.367367][ T9325] ? __kmalloc_noprof+0xca/0x880 [ 283.367407][ T9325] should_failslab+0xc2/0x120 [ 283.367437][ T9325] __kmalloc_noprof+0xdd/0x880 [ 283.367474][ T9325] ? drm_atomic_state_init+0x17b/0x320 [ 283.367512][ T9325] ? drm_atomic_state_init+0x17b/0x320 [ 283.367541][ T9325] drm_atomic_state_init+0x17b/0x320 [ 283.367571][ T9325] ? __kasan_kmalloc+0xaa/0xb0 [ 283.367603][ T9325] drm_atomic_state_alloc+0xd3/0x120 [ 283.367634][ T9325] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 283.367666][ T9325] ? __pfx___might_resched+0x10/0x10 [ 283.367705][ T9325] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 283.367737][ T9325] ? __mutex_lock+0x1c5/0x1060 [ 283.367764][ T9325] ? rcu_is_watching+0x12/0xc0 [ 283.367830][ T9325] drm_client_modeset_commit_locked+0x14d/0x580 [ 283.367869][ T9325] drm_client_modeset_commit+0x4f/0x80 [ 283.367902][ T9325] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 283.367936][ T9325] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 283.367985][ T9325] drm_fbdev_client_restore+0x2c/0x40 [ 283.368021][ T9325] drm_client_dev_restore+0x1f6/0x2a0 [ 283.368057][ T9325] drm_release+0x2c4/0x360 [ 283.368087][ T9325] ? __pfx_drm_release+0x10/0x10 [ 283.368112][ T9325] __fput+0x402/0xb70 [ 283.368153][ T9325] task_work_run+0x150/0x240 [ 283.368189][ T9325] ? __pfx_task_work_run+0x10/0x10 [ 283.368226][ T9325] ? __pfx___do_sys_close_range+0x10/0x10 [ 283.368258][ T9325] exit_to_user_mode_loop+0xec/0x130 [ 283.368296][ T9325] do_syscall_64+0x426/0xfa0 [ 283.368325][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.368349][ T9325] RIP: 0033:0x7f066978eec9 [ 283.368368][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.368392][ T9325] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 283.368418][ T9325] RAX: 0000000000000000 RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 283.368434][ T9325] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 283.368449][ T9325] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 283.368464][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.368478][ T9325] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 283.368515][ T9325] [ 284.616967][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.680'. [ 284.671609][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.680'. [ 285.269133][ T9338] bond0: (slave bond_slave_1): Releasing backup interface [ 286.134043][ T9360] Process accounting resumed [ 286.768485][ T9381] FAULT_INJECTION: forcing a failure. [ 286.768485][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 286.877775][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.3.686 Not tainted syzkaller #0 PREEMPT(full) [ 286.877813][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.877828][ T9381] Call Trace: [ 286.877837][ T9381] [ 286.877847][ T9381] dump_stack_lvl+0x16c/0x1f0 [ 286.877881][ T9381] should_fail_ex+0x512/0x640 [ 286.877926][ T9381] ? __kmalloc_cache_noprof+0x5f/0x780 [ 286.877970][ T9381] should_failslab+0xc2/0x120 [ 286.878002][ T9381] __kmalloc_cache_noprof+0x72/0x780 [ 286.878042][ T9381] ? snd_pcm_oss_open+0x5eb/0x1400 [ 286.878078][ T9381] ? rcu_is_watching+0x12/0xc0 [ 286.878108][ T9381] ? snd_pcm_oss_open+0x5eb/0x1400 [ 286.878135][ T9381] snd_pcm_oss_open+0x5eb/0x1400 [ 286.878163][ T9381] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 286.878185][ T9381] ? __lock_acquire+0xb97/0x1ce0 [ 286.878204][ T9381] ? __pfx_default_wake_function+0x10/0x10 [ 286.878221][ T9381] ? __lock_acquire+0xb97/0x1ce0 [ 286.878243][ T9381] ? do_raw_spin_lock+0x12c/0x2b0 [ 286.878267][ T9381] ? soundcore_open+0x35a/0x580 [ 286.878286][ T9381] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 286.878308][ T9381] soundcore_open+0x409/0x580 [ 286.878328][ T9381] ? __pfx_soundcore_open+0x10/0x10 [ 286.878346][ T9381] chrdev_open+0x231/0x6a0 [ 286.878363][ T9381] ? __pfx_apparmor_file_open+0x10/0x10 [ 286.878383][ T9381] ? __pfx_chrdev_open+0x10/0x10 [ 286.878400][ T9381] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 286.878419][ T9381] do_dentry_open+0x97f/0x1530 [ 286.878436][ T9381] ? __pfx_chrdev_open+0x10/0x10 [ 286.878461][ T9381] vfs_open+0x82/0x3f0 [ 286.878496][ T9381] path_openat+0x1de4/0x2cb0 [ 286.878533][ T9381] ? __pfx_path_openat+0x10/0x10 [ 286.878571][ T9381] do_filp_open+0x20b/0x470 [ 286.878601][ T9381] ? __pfx_do_filp_open+0x10/0x10 [ 286.878656][ T9381] ? alloc_fd+0x471/0x7d0 [ 286.878692][ T9381] do_sys_openat2+0x11b/0x1d0 [ 286.878732][ T9381] ? __pfx_do_sys_openat2+0x10/0x10 [ 286.878790][ T9381] __x64_sys_openat+0x174/0x210 [ 286.878828][ T9381] ? __pfx___x64_sys_openat+0x10/0x10 [ 286.878883][ T9381] do_syscall_64+0xcd/0xfa0 [ 286.878927][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.878962][ T9381] RIP: 0033:0x7faa7498eec9 [ 286.878985][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.879011][ T9381] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 286.879037][ T9381] RAX: ffffffffffffffda RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 286.879055][ T9381] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 286.879073][ T9381] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.879089][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.879104][ T9381] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 286.879142][ T9381] [ 287.907772][ T30] audit: type=1806 audit(4294967377.789:10): xattr="" res=-22 [ 287.933877][ T9412] netlink: zone id is out of range [ 288.018047][ T9412] netlink: del zone limit has 4 unknown bytes [ 288.213866][ T9412] openvswitch: HfR: Dropping previously announced user features [ 288.259770][ T9406] netlink: set zone limit has 8 unknown bytes [ 288.581962][ T9421] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 289.708760][ T9427] kexec: Could not allocate control_code_buffer [ 289.826803][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 289.876956][ T9452] FAULT_INJECTION: forcing a failure. [ 289.876956][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 289.905464][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.2.701 Not tainted syzkaller #0 PREEMPT(full) [ 289.905504][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.905521][ T9452] Call Trace: [ 289.905530][ T9452] [ 289.905541][ T9452] dump_stack_lvl+0x16c/0x1f0 [ 289.905576][ T9452] should_fail_ex+0x512/0x640 [ 289.905606][ T9452] ? __kmalloc_cache_noprof+0x5f/0x780 [ 289.905657][ T9452] should_failslab+0xc2/0x120 [ 289.905692][ T9452] __kmalloc_cache_noprof+0x72/0x780 [ 289.905734][ T9452] ? vkms_plane_duplicate_state+0x45/0x130 [ 289.905773][ T9452] ? vkms_plane_duplicate_state+0x45/0x130 [ 289.905802][ T9452] vkms_plane_duplicate_state+0x45/0x130 [ 289.905834][ T9452] drm_atomic_get_plane_state+0x20e/0x590 [ 289.905867][ T9452] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 289.905900][ T9452] ? __pfx___might_resched+0x10/0x10 [ 289.905938][ T9452] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 289.905971][ T9452] ? __mutex_lock+0x1c5/0x1060 [ 289.905999][ T9452] ? rcu_is_watching+0x12/0xc0 [ 289.906066][ T9452] drm_client_modeset_commit_locked+0x14d/0x580 [ 289.906104][ T9452] drm_client_modeset_commit+0x4f/0x80 [ 289.906137][ T9452] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 289.906170][ T9452] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 289.906210][ T9452] drm_fbdev_client_restore+0x2c/0x40 [ 289.906259][ T9452] drm_client_dev_restore+0x1f6/0x2a0 [ 289.906298][ T9452] drm_release+0x2c4/0x360 [ 289.906330][ T9452] ? __pfx_drm_release+0x10/0x10 [ 289.906356][ T9452] __fput+0x402/0xb70 [ 289.906398][ T9452] task_work_run+0x150/0x240 [ 289.906437][ T9452] ? __pfx_task_work_run+0x10/0x10 [ 289.906477][ T9452] ? __pfx___do_sys_close_range+0x10/0x10 [ 289.906516][ T9452] exit_to_user_mode_loop+0xec/0x130 [ 289.906553][ T9452] do_syscall_64+0x426/0xfa0 [ 289.906582][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.906606][ T9452] RIP: 0033:0x7f066978eec9 [ 289.906634][ T9452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.906662][ T9452] RSP: 002b:00007f066a695038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 289.906690][ T9452] RAX: 0000000000000000 RBX: 00007f06699e5fa0 RCX: 00007f066978eec9 [ 289.906708][ T9452] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 289.906724][ T9452] RBP: 00007f0669811f91 R08: 0000000000000000 R09: 0000000000000000 [ 289.906741][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.906757][ T9452] R13: 00007f06699e6038 R14: 00007f06699e5fa0 R15: 00007ffdaec50d48 [ 289.906799][ T9452] [ 292.216446][ T9516] ICMPv6: process `syz.4.712' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 296.350000][ T5918] smpboot: CPU 1 is now offline [ 296.667709][ T9657] netlink: 268 bytes leftover after parsing attributes in process `syz.3.735'. [ 298.103205][ T9714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.749'. [ 298.699414][ T9763] pty pty243: ldisc open failed (-12), clearing slot 243 [ 300.838534][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 302.141169][ T9832] random: crng reseeded on system resumption [ 304.731447][ T9897] can: request_module (can-proto-0) failed. [ 308.450278][ T9978] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 310.427663][T10043] tipc: Started in network mode [ 310.442719][T10043] tipc: Node identity ee00, cluster identity 4711 [ 310.473462][T10043] tipc: Node number set to 60928 [ 312.659552][T10096] FAULT_INJECTION: forcing a failure. [ 312.659552][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 312.770596][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.3.831 Not tainted syzkaller #0 PREEMPT(full) [ 312.770616][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.770636][T10096] Call Trace: [ 312.770641][T10096] [ 312.770646][T10096] dump_stack_lvl+0x16c/0x1f0 [ 312.770667][T10096] should_fail_ex+0x512/0x640 [ 312.770686][T10096] ? fs_reclaim_acquire+0xae/0x150 [ 312.770706][T10096] should_failslab+0xc2/0x120 [ 312.770725][T10096] __kmalloc_noprof+0xdd/0x880 [ 312.770747][T10096] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 312.770766][T10096] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 312.770780][T10096] tomoyo_realpath_from_path+0xc2/0x6e0 [ 312.770796][T10096] ? tomoyo_profile+0x47/0x60 [ 312.770814][T10096] tomoyo_path_number_perm+0x245/0x580 [ 312.770834][T10096] ? tomoyo_path_number_perm+0x237/0x580 [ 312.770856][T10096] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 312.770896][T10096] ? find_held_lock+0x2b/0x80 [ 312.770911][T10096] ? hook_file_ioctl_common+0x145/0x410 [ 312.770938][T10096] ? __fget_files+0x20e/0x3c0 [ 312.770954][T10096] security_file_ioctl+0x9b/0x240 [ 312.770977][T10096] __x64_sys_ioctl+0xb7/0x210 [ 312.770999][T10096] do_syscall_64+0xcd/0xfa0 [ 312.771016][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.771031][T10096] RIP: 0033:0x7faa7498eec9 [ 312.771042][T10096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.771056][T10096] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.771071][T10096] RAX: ffffffffffffffda RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 312.771080][T10096] RDX: 0000000000000005 RSI: 0000000040085511 RDI: 0000000000000005 [ 312.771088][T10096] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.771097][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.771105][T10096] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 312.771134][T10096] [ 312.771139][T10096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.680712][T10141] FAULT_INJECTION: forcing a failure. [ 314.680712][T10141] name failslab, interval 1, probability 0, space 0, times 0 [ 314.765089][T10141] CPU: 0 UID: 0 PID: 10141 Comm: syz.3.844 Not tainted syzkaller #0 PREEMPT(full) [ 314.765113][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.765122][T10141] Call Trace: [ 314.765128][T10141] [ 314.765134][T10141] dump_stack_lvl+0x16c/0x1f0 [ 314.765155][T10141] should_fail_ex+0x512/0x640 [ 314.765174][T10141] ? __kmalloc_cache_noprof+0x5f/0x780 [ 314.765200][T10141] should_failslab+0xc2/0x120 [ 314.765219][T10141] __kmalloc_cache_noprof+0x72/0x780 [ 314.765243][T10141] ? vkms_plane_duplicate_state+0x45/0x130 [ 314.765264][T10141] ? vkms_plane_duplicate_state+0x45/0x130 [ 314.765280][T10141] vkms_plane_duplicate_state+0x45/0x130 [ 314.765297][T10141] drm_atomic_get_plane_state+0x20e/0x590 [ 314.765316][T10141] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 314.765334][T10141] ? __pfx___might_resched+0x10/0x10 [ 314.765356][T10141] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 314.765373][T10141] ? __mutex_lock+0x1c5/0x1060 [ 314.765389][T10141] ? rcu_is_watching+0x12/0xc0 [ 314.765423][T10141] drm_client_modeset_commit_locked+0x14d/0x580 [ 314.765445][T10141] drm_client_modeset_commit+0x4f/0x80 [ 314.765463][T10141] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 314.765481][T10141] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 314.765504][T10141] drm_fbdev_client_restore+0x2c/0x40 [ 314.765526][T10141] drm_client_dev_restore+0x1f6/0x2a0 [ 314.765546][T10141] drm_release+0x2c4/0x360 [ 314.765564][T10141] ? __pfx_drm_release+0x10/0x10 [ 314.765578][T10141] __fput+0x402/0xb70 [ 314.765602][T10141] task_work_run+0x150/0x240 [ 314.765625][T10141] ? __pfx_task_work_run+0x10/0x10 [ 314.765647][T10141] ? __pfx___do_sys_close_range+0x10/0x10 [ 314.765667][T10141] exit_to_user_mode_loop+0xec/0x130 [ 314.765690][T10141] do_syscall_64+0x426/0xfa0 [ 314.765707][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.765722][T10141] RIP: 0033:0x7faa7498eec9 [ 314.765736][T10141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.765750][T10141] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 314.765764][T10141] RAX: 0000000000000000 RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 314.765773][T10141] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 314.765782][T10141] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.765791][T10141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.765799][T10141] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 314.765821][T10141] [ 315.021987][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.389461][T10124] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 315.594921][T10150] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 315.616562][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 316.257535][T10164] Process accounting paused [ 317.842200][T10204] openvswitch: netlink: IP tunnel dst address not specified [ 317.982888][ T5839] Bluetooth: hci2: ACL packet too small [ 317.989796][ T5839] Bluetooth: hci2: ACL packet too small [ 317.995527][ T5839] Bluetooth: hci2: ACL packet too small [ 318.001999][ T5839] Bluetooth: hci2: ACL packet too small [ 318.011700][ T5839] Bluetooth: hci2: ACL packet too small [ 318.017994][ T5839] Bluetooth: hci2: ACL packet too small [ 318.023664][ T5839] Bluetooth: hci2: ACL packet too small [ 318.030301][ T5839] Bluetooth: hci2: ACL packet too small [ 318.046319][ T5839] Bluetooth: hci2: ACL packet too small [ 319.053503][T10231] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 319.803283][T10250] FAULT_INJECTION: forcing a failure. [ 319.803283][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 319.844281][T10250] CPU: 0 UID: 0 PID: 10250 Comm: syz.4.867 Not tainted syzkaller #0 PREEMPT(full) [ 319.844304][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 319.844313][T10250] Call Trace: [ 319.844319][T10250] [ 319.844325][T10250] dump_stack_lvl+0x16c/0x1f0 [ 319.844348][T10250] should_fail_ex+0x512/0x640 [ 319.844366][T10250] ? __kmalloc_cache_noprof+0x5f/0x780 [ 319.844392][T10250] should_failslab+0xc2/0x120 [ 319.844411][T10250] __kmalloc_cache_noprof+0x72/0x780 [ 319.844435][T10250] ? vkms_plane_duplicate_state+0x45/0x130 [ 319.844464][T10250] ? vkms_plane_duplicate_state+0x45/0x130 [ 319.844480][T10250] vkms_plane_duplicate_state+0x45/0x130 [ 319.844499][T10250] drm_atomic_get_plane_state+0x20e/0x590 [ 319.844518][T10250] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 319.844536][T10250] ? __pfx___might_resched+0x10/0x10 [ 319.844558][T10250] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 319.844575][T10250] ? __mutex_lock+0x1c5/0x1060 [ 319.844591][T10250] ? rcu_is_watching+0x12/0xc0 [ 319.844628][T10250] drm_client_modeset_commit_locked+0x14d/0x580 [ 319.844649][T10250] drm_client_modeset_commit+0x4f/0x80 [ 319.844667][T10250] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 319.844685][T10250] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 319.844708][T10250] drm_fbdev_client_restore+0x2c/0x40 [ 319.844731][T10250] drm_client_dev_restore+0x1f6/0x2a0 [ 319.844751][T10250] drm_release+0x2c4/0x360 [ 319.844769][T10250] ? __pfx_drm_release+0x10/0x10 [ 319.844783][T10250] __fput+0x402/0xb70 [ 319.844807][T10250] task_work_run+0x150/0x240 [ 319.844830][T10250] ? __pfx_task_work_run+0x10/0x10 [ 319.844852][T10250] ? __pfx___do_sys_close_range+0x10/0x10 [ 319.844873][T10250] exit_to_user_mode_loop+0xec/0x130 [ 319.844895][T10250] do_syscall_64+0x426/0xfa0 [ 319.844913][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.844928][T10250] RIP: 0033:0x7f54ec78eec9 [ 319.844940][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.844954][T10250] RSP: 002b:00007f54ed562038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 319.844968][T10250] RAX: 0000000000000000 RBX: 00007f54ec9e5fa0 RCX: 00007f54ec78eec9 [ 319.844977][T10250] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 319.844985][T10250] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.844994][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.845002][T10250] R13: 00007f54ec9e6038 R14: 00007f54ec9e5fa0 R15: 00007ffcb39d8f88 [ 319.845024][T10250] [ 320.716673][ T30] audit: type=1326 audit(4294967410.559:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10258 comm="syz.2.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f066978eec9 code=0x0 [ 321.080445][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.086841][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.510422][T10358] random: crng reseeded on system resumption [ 327.708734][T10407] FAULT_INJECTION: forcing a failure. [ 327.708734][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 327.900337][T10407] CPU: 0 UID: 0 PID: 10407 Comm: syz.4.905 Not tainted syzkaller #0 PREEMPT(full) [ 327.900359][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.900369][T10407] Call Trace: [ 327.900374][T10407] [ 327.900380][T10407] dump_stack_lvl+0x16c/0x1f0 [ 327.900400][T10407] should_fail_ex+0x512/0x640 [ 327.900417][T10407] ? fs_reclaim_acquire+0xae/0x150 [ 327.900437][T10407] should_failslab+0xc2/0x120 [ 327.900456][T10407] __kmalloc_noprof+0xdd/0x880 [ 327.900479][T10407] ? tomoyo_encode2+0x100/0x3e0 [ 327.900497][T10407] ? tomoyo_encode2+0x100/0x3e0 [ 327.900510][T10407] tomoyo_encode2+0x100/0x3e0 [ 327.900526][T10407] tomoyo_encode+0x29/0x50 [ 327.900539][T10407] tomoyo_realpath_from_path+0x18f/0x6e0 [ 327.900556][T10407] ? tomoyo_profile+0x47/0x60 [ 327.900574][T10407] tomoyo_path_number_perm+0x245/0x580 [ 327.900594][T10407] ? tomoyo_path_number_perm+0x237/0x580 [ 327.900616][T10407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.900657][T10407] ? find_held_lock+0x2b/0x80 [ 327.900671][T10407] ? hook_file_ioctl_common+0x145/0x410 [ 327.900705][T10407] ? __fget_files+0x20e/0x3c0 [ 327.900717][T10407] ? ep_get_upwards_depth_proc.isra.0+0x1c0/0x1d0 [ 327.900745][T10407] security_file_ioctl+0x9b/0x240 [ 327.900768][T10407] __x64_sys_ioctl+0xb7/0x210 [ 327.900790][T10407] do_syscall_64+0xcd/0xfa0 [ 327.900806][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.900821][T10407] RIP: 0033:0x7f54ec78eec9 [ 327.900833][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.900846][T10407] RSP: 002b:00007f54ed562038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.900861][T10407] RAX: ffffffffffffffda RBX: 00007f54ec9e5fa0 RCX: 00007f54ec78eec9 [ 327.900870][T10407] RDX: 0000000000000005 RSI: 0000000040085400 RDI: 0000000000000003 [ 327.900878][T10407] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 327.900887][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.900894][T10407] R13: 00007f54ec9e6038 R14: 00007f54ec9e5fa0 R15: 00007ffcb39d8f88 [ 327.900914][T10407] [ 327.900927][T10407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 330.381831][T10454] FAULT_INJECTION: forcing a failure. [ 330.381831][T10454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.458702][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 330.458726][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.458734][T10454] Call Trace: [ 330.458740][T10454] [ 330.458746][T10454] dump_stack_lvl+0x16c/0x1f0 [ 330.458768][T10454] should_fail_ex+0x512/0x640 [ 330.458788][T10454] strncpy_from_user+0x3b/0x2e0 [ 330.458806][T10454] getname_flags.part.0+0x8f/0x550 [ 330.458830][T10454] getname_flags+0x93/0xf0 [ 330.458844][T10454] do_sys_openat2+0xb8/0x1d0 [ 330.458864][T10454] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.458891][T10454] __x64_sys_openat+0x174/0x210 [ 330.458912][T10454] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.458939][T10454] do_syscall_64+0xcd/0xfa0 [ 330.458956][T10454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.458971][T10454] RIP: 0033:0x7faa7498eec9 [ 330.458983][T10454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.458997][T10454] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.459011][T10454] RAX: ffffffffffffffda RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 330.459020][T10454] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 330.459029][T10454] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.459037][T10454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.459045][T10454] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 330.459064][T10454] [ 330.621153][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.082520][T10462] random: crng reseeded on system resumption [ 331.693650][ T5839] Bluetooth: hci4: unexpected event 0x20 length: 123 > 7 [ 331.715180][T10489] vhci_hcd: invalid port number 255 [ 331.769476][T10489] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 332.042755][T10498] FAULT_INJECTION: forcing a failure. [ 332.042755][T10498] name fail_futex, interval 1, probability 0, space 0, times 0 [ 332.120493][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.3.925 Not tainted syzkaller #0 PREEMPT(full) [ 332.120516][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.120525][T10498] Call Trace: [ 332.120531][T10498] [ 332.120537][T10498] dump_stack_lvl+0x16c/0x1f0 [ 332.120558][T10498] should_fail_ex+0x512/0x640 [ 332.120580][T10498] get_futex_key+0x1d0/0x1560 [ 332.120600][T10498] ? get_pid_task+0x106/0x250 [ 332.120620][T10498] ? __pfx_get_futex_key+0x10/0x10 [ 332.120637][T10498] ? rcu_is_watching+0x12/0xc0 [ 332.120652][T10498] ? kfree+0x252/0x6d0 [ 332.120682][T10498] futex_wake+0xea/0x530 [ 332.120706][T10498] ? __pfx_futex_wake+0x10/0x10 [ 332.120727][T10498] ? __pfx_vfs_writev+0x10/0x10 [ 332.120740][T10498] ? __mutex_lock+0x1c5/0x1060 [ 332.120758][T10498] ? do_writev+0x218/0x340 [ 332.120774][T10498] do_futex+0x1e3/0x350 [ 332.120793][T10498] ? __pfx_do_futex+0x10/0x10 [ 332.120811][T10498] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 332.120833][T10498] __x64_sys_futex+0x1e0/0x4c0 [ 332.120867][T10498] ? __pfx___x64_sys_futex+0x10/0x10 [ 332.120888][T10498] ? __pfx_do_writev+0x10/0x10 [ 332.120908][T10498] do_syscall_64+0xcd/0xfa0 [ 332.120925][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.120940][T10498] RIP: 0033:0x7faa7498eec9 [ 332.120952][T10498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.120966][T10498] RSP: 002b:00007faa757b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.120980][T10498] RAX: ffffffffffffffda RBX: 00007faa74be5fa8 RCX: 00007faa7498eec9 [ 332.120990][T10498] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa74be5fac [ 332.120999][T10498] RBP: 00007faa74be5fa0 R08: 00007faa757b5000 R09: 0000000000000000 [ 332.121007][T10498] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 332.121016][T10498] R13: 00007faa74be6038 R14: 00007ffdfcd1cb30 R15: 00007ffdfcd1cc18 [ 332.121035][T10498] [ 333.810760][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 333.925347][T10538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'. [ 334.247996][T10544] bond0: option all_slaves_active: invalid value () [ 334.923172][T10562] netlink: 186 bytes leftover after parsing attributes in process `syz.1.935'. [ 336.705738][T10592] netlink: zone id is out of range [ 336.736751][T10592] netlink: zone id is out of range [ 336.756299][T10592] netlink: zone id is out of range [ 336.771136][T10592] netlink: zone id is out of range [ 336.800148][T10592] netlink: zone id is out of range [ 336.834942][T10592] netlink: zone id is out of range [ 336.865592][T10592] netlink: zone id is out of range [ 336.884335][T10592] netlink: zone id is out of range [ 336.901013][T10592] netlink: zone id is out of range [ 336.916004][T10592] netlink: zone id is out of range [ 337.693598][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 339.707982][ T5839] Bluetooth: hci1: SCO packet too small [ 340.504735][T10656] random: crng reseeded on system resumption [ 341.569959][ T5839] Bluetooth: hci1: unexpected subevent 0x0c length: 118 > 5 [ 342.825160][T10692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.965'. [ 343.005316][T10671] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 346.529136][T10754] random: crng reseeded on system resumption [ 346.629787][T10743] Process accounting resumed [ 346.754829][T10756] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 350.135682][T10801] bridge0: port 3(gretap0) entered blocking state [ 350.194583][T10801] bridge0: port 3(gretap0) entered disabled state [ 350.244489][T10801] gretap0: entered allmulticast mode [ 350.280931][T10801] gretap0: entered promiscuous mode [ 350.307065][T10801] bridge0: port 3(gretap0) entered blocking state [ 350.313576][T10801] bridge0: port 3(gretap0) entered forwarding state [ 350.337986][T10774] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 352.547906][T10843] block nbd0: not configured, cannot reconfigure [ 352.628886][T10845] deleting an unspecified loop device is not supported. [ 353.586011][T10861] bond0: invalid ARP target specified [ 353.638438][T10865] raw_sendmsg: syz.2.1006 forgot to set AF_INET. Fix it! [ 353.646631][T10864] usb usb2: usbfs: process 10864 (syz.4.1008) did not claim interface 0 before use [ 357.428058][T10932] usb usb2: usbfs: process 10932 (syz.3.1021) did not claim interface 0 before use [ 360.848868][T11003] Setting dangerous option i915.mitigations - tainting kernel [ 362.781002][T11043] nfs: Unknown parameter 'ީiʟby7J ؀V{ [ 362.781002][T11043] \9-*;#rRcFGL֍*(ܦ)5&yAlj Lp%Zw}GSιk' [ 363.720889][T11051] vivid-007: ================= START STATUS ================= [ 363.881794][T11051] vivid-007: Generate PTS: true [ 363.984879][T11051] vivid-007: Generate SCR: true [ 364.170508][T11051] tpg source WxH: 320x240 (Y'CbCr) [ 364.237367][T11051] tpg field: 1 [ 364.333744][T11059] can: request_module (can-proto-3) failed. [ 364.361178][T11051] tpg crop: (0,0)/320x240 [ 364.365547][T11051] tpg compose: (0,0)/320x240 [ 364.600518][T11051] tpg colorspace: 8 [ 364.739187][T11051] tpg transfer function: 0/0 [ 364.809010][T11051] tpg Y'CbCr encoding: 0/0 [ 364.979283][T11051] tpg quantization: 0/0 [ 365.095778][T11051] tpg RGB range: 0/2 [ 365.154540][T11051] vivid-007: ================== END STATUS ================== [ 366.452095][T11095] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010006 [ 367.033509][T11104] FAULT_INJECTION: forcing a failure. [ 367.033509][T11104] name fail_futex, interval 1, probability 0, space 0, times 0 [ 367.107413][T11104] CPU: 0 UID: 0 PID: 11104 Comm: syz.3.1065 Tainted: G U syzkaller #0 PREEMPT(full) [ 367.107441][T11104] Tainted: [U]=USER [ 367.107445][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.107455][T11104] Call Trace: [ 367.107460][T11104] [ 367.107466][T11104] dump_stack_lvl+0x16c/0x1f0 [ 367.107488][T11104] should_fail_ex+0x512/0x640 [ 367.107510][T11104] get_futex_key+0x1d0/0x1560 [ 367.107533][T11104] ? __pfx_get_futex_key+0x10/0x10 [ 367.107557][T11104] futex_wake+0xea/0x530 [ 367.107581][T11104] ? __pfx_futex_wake+0x10/0x10 [ 367.107603][T11104] ? rcu_is_watching+0x12/0xc0 [ 367.107625][T11104] do_futex+0x1e3/0x350 [ 367.107645][T11104] ? __pfx_do_futex+0x10/0x10 [ 367.107664][T11104] ? __fput+0x68d/0xb70 [ 367.107682][T11104] ? __pfx___might_resched+0x10/0x10 [ 367.107699][T11104] __x64_sys_futex+0x1e0/0x4c0 [ 367.107720][T11104] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 367.107736][T11104] ? __pfx___x64_sys_futex+0x10/0x10 [ 367.107756][T11104] ? syscall_user_dispatch+0x78/0x140 [ 367.107784][T11104] do_syscall_64+0xcd/0xfa0 [ 367.107801][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.107815][T11104] RIP: 0033:0x7faa7498eec9 [ 367.107840][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.107855][T11104] RSP: 002b:00007faa757b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.107870][T11104] RAX: ffffffffffffffda RBX: 00007faa74be5fa8 RCX: 00007faa7498eec9 [ 367.107879][T11104] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa74be5fac [ 367.107888][T11104] RBP: 00007faa74be5fa0 R08: 00007faa757b5000 R09: 0000000000000000 [ 367.107897][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.107906][T11104] R13: 00007faa74be6038 R14: 00007ffdfcd1cb30 R15: 00007ffdfcd1cc18 [ 367.107926][T11104] [ 367.305805][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.144911][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 370.228656][T11173] random: crng reseeded on system resumption [ 370.799397][T11180] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 370.958787][T11180] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 372.186350][T11202] netlink: 'syz.4.1091': attribute type 11 has an invalid length. [ 372.976368][T11215] hub 8-0:1.0: USB hub found [ 373.030073][T11215] hub 8-0:1.0: 1 port detected [ 374.025409][T11245] netlink: 'syz.4.1096': attribute type 4 has an invalid length. [ 374.066177][T11245] netlink: 'syz.4.1096': attribute type 1 has an invalid length. [ 376.406030][T11294] FAULT_INJECTION: forcing a failure. [ 376.406030][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 376.446634][T11294] CPU: 0 UID: 0 PID: 11294 Comm: syz.3.1111 Tainted: G U syzkaller #0 PREEMPT(full) [ 376.446662][T11294] Tainted: [U]=USER [ 376.446667][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.446677][T11294] Call Trace: [ 376.446682][T11294] [ 376.446688][T11294] dump_stack_lvl+0x16c/0x1f0 [ 376.446710][T11294] should_fail_ex+0x512/0x640 [ 376.446730][T11294] ? __kmalloc_noprof+0xca/0x880 [ 376.446756][T11294] should_failslab+0xc2/0x120 [ 376.446776][T11294] __kmalloc_noprof+0xdd/0x880 [ 376.446799][T11294] ? drm_atomic_state_init+0x17b/0x320 [ 376.446822][T11294] ? drm_atomic_state_init+0x17b/0x320 [ 376.446838][T11294] drm_atomic_state_init+0x17b/0x320 [ 376.446856][T11294] ? __kasan_kmalloc+0xaa/0xb0 [ 376.446874][T11294] drm_atomic_state_alloc+0xd3/0x120 [ 376.446896][T11294] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 376.446916][T11294] ? __pfx___might_resched+0x10/0x10 [ 376.446948][T11294] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 376.446969][T11294] ? __mutex_lock+0x1c5/0x1060 [ 376.446987][T11294] ? rcu_is_watching+0x12/0xc0 [ 376.447023][T11294] drm_client_modeset_commit_locked+0x14d/0x580 [ 376.447045][T11294] drm_client_modeset_commit+0x4f/0x80 [ 376.447064][T11294] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 376.447085][T11294] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 376.447109][T11294] drm_fbdev_client_restore+0x2c/0x40 [ 376.447132][T11294] drm_client_dev_restore+0x1f6/0x2a0 [ 376.447154][T11294] drm_release+0x2c4/0x360 [ 376.447171][T11294] ? __pfx_drm_release+0x10/0x10 [ 376.447187][T11294] __fput+0x402/0xb70 [ 376.447212][T11294] task_work_run+0x150/0x240 [ 376.447237][T11294] ? __pfx_task_work_run+0x10/0x10 [ 376.447260][T11294] ? __pfx___do_sys_close_range+0x10/0x10 [ 376.447281][T11294] exit_to_user_mode_loop+0xec/0x130 [ 376.447306][T11294] do_syscall_64+0x426/0xfa0 [ 376.447325][T11294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.447342][T11294] RIP: 0033:0x7faa7498eec9 [ 376.447358][T11294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.447373][T11294] RSP: 002b:00007faa757b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 376.447389][T11294] RAX: 0000000000000000 RBX: 00007faa74be5fa0 RCX: 00007faa7498eec9 [ 376.447399][T11294] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 376.447408][T11294] RBP: 00007faa74a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.447417][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.447425][T11294] R13: 00007faa74be6038 R14: 00007faa74be5fa0 R15: 00007ffdfcd1cc18 [ 376.447447][T11294] [ 377.135350][T11293] Process accounting paused [ 378.530135][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1113'. [ 382.896948][T11360] kAFS: bad VL server IP address [ 383.802058][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.808456][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.266329][T11375] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 385.123008][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 388.832986][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1149'. [ 389.084041][T11457] tipc: Started in network mode [ 389.113861][T11457] tipc: Node identity ffffffff, cluster identity 4711 [ 389.145163][T11457] tipc: Node number set to 4294967295 [ 389.224658][T11460] net_ratelimit: 59 callbacks suppressed [ 389.224674][T11460] netlink: zone id is out of range [ 389.363790][T11460] netlink: zone id is out of range [ 389.455031][T11460] netlink: zone id is out of range [ 389.531587][T11460] netlink: zone id is out of range [ 389.610628][T11460] netlink: zone id is out of range [ 389.699243][T11460] netlink: zone id is out of range [ 389.792288][T11460] netlink: zone id is out of range [ 389.895411][T11460] netlink: zone id is out of range [ 389.927978][T11475] nfs: Unknown parameter 'ީiʟby7J ؀V{ [ 389.927978][T11475] \9-*;#rRcFGL֍*(ܦ)5&yAlj Lp%Zw}GSιk' [ 389.966627][T11460] netlink: zone id is out of range [ 389.971755][T11460] netlink: zone id is out of range [ 390.207379][T11460] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1152'. [ 391.898772][T11512] ecryptfs_miscdev_write: Error while inspecting packet size [ 393.412086][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 395.406820][T11559] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1172'. [ 395.442344][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 395.594291][T11565] [U]  [ 395.597283][T11565] [U] [ 395.599959][T11565] [U] [ 395.602640][T11565] [U] [ 395.643845][T11565] [U] [ 395.646559][T11565] [U] [ 395.649240][T11565] [U] [ 395.651907][T11565] [U] [ 395.769521][T11565] [U] [ 395.772238][T11565] [U] [ 395.774912][T11565] [U] [ 395.777588][T11565] [U] [ 395.859402][ T5839] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 395.859427][ T5839] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 395.874484][ T5839] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 395.874533][ T5839] Bluetooth: hci1: adv larger than maximum supported [ 395.889793][ T5839] Bluetooth: hci1: Malformed LE Event: 0x0d [ 395.935246][T11565] [U] [ 395.937981][T11565] [U] [ 395.940657][T11565] [U] [ 395.943351][T11565] [U] [ 396.015418][T11565] [U] [ 396.018129][T11565] [U] [ 396.020806][T11565] [U] [ 396.023478][T11565] [U] [ 396.080572][T11565] [U] [ 396.083279][T11565] [U] [ 396.085949][T11565] [U] [ 396.088618][T11565] [U] [ 396.099940][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 396.126824][T11565] [U] [ 396.129538][T11565] [U] [ 396.132214][T11565] [U] [ 396.134883][T11565] [U] [ 396.170291][T11565] [U] [ 396.173009][T11565] [U] [ 396.175686][T11565] [U] [ 396.178354][T11565] [U] [ 396.315655][T11565] [U] [ 396.792830][T11580] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 397.311870][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 398.817981][T11616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 398.913428][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1186'. [ 398.949726][T11618] block2mtd: device name too long [ 399.422168][T11616] bond0: (slave bond_slave_1): Releasing backup interface [ 399.581731][T11622] random: crng reseeded on system resumption [ 401.061699][T11655] net_ratelimit: 497 callbacks suppressed [ 401.061716][T11655] netlink: set zone limit has 8 unknown bytes [ 401.132783][T11658] netlink: zone id is out of range [ 401.181921][T11658] netlink: del zone limit has 4 unknown bytes [ 401.290965][T11655] HfR: entered promiscuous mode [ 401.769409][T11667] FAULT_INJECTION: forcing a failure. [ 401.769409][T11667] name failslab, interval 1, probability 0, space 0, times 0 [ 401.789529][T11671] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1200'. [ 401.941893][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.4.1197 Tainted: G U syzkaller #0 PREEMPT(full) [ 401.941920][T11667] Tainted: [U]=USER [ 401.941925][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.941935][T11667] Call Trace: [ 401.941940][T11667] [ 401.941946][T11667] dump_stack_lvl+0x16c/0x1f0 [ 401.941968][T11667] should_fail_ex+0x512/0x640 [ 401.941987][T11667] ? __kmalloc_cache_noprof+0x5f/0x780 [ 401.942013][T11667] should_failslab+0xc2/0x120 [ 401.942032][T11667] __kmalloc_cache_noprof+0x72/0x780 [ 401.942055][T11667] ? snd_pcm_oss_open+0x5eb/0x1400 [ 401.942077][T11667] ? rcu_is_watching+0x12/0xc0 [ 401.942094][T11667] ? snd_pcm_oss_open+0x5eb/0x1400 [ 401.942114][T11667] snd_pcm_oss_open+0x5eb/0x1400 [ 401.942143][T11667] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 401.942164][T11667] ? __lock_acquire+0xb97/0x1ce0 [ 401.942184][T11667] ? __pfx_default_wake_function+0x10/0x10 [ 401.942200][T11667] ? __lock_acquire+0xb97/0x1ce0 [ 401.942223][T11667] ? do_raw_spin_lock+0x12c/0x2b0 [ 401.942247][T11667] ? soundcore_open+0x35a/0x580 [ 401.942266][T11667] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 401.942288][T11667] soundcore_open+0x409/0x580 [ 401.942309][T11667] ? __pfx_soundcore_open+0x10/0x10 [ 401.942327][T11667] chrdev_open+0x231/0x6a0 [ 401.942343][T11667] ? __pfx_apparmor_file_open+0x10/0x10 [ 401.942363][T11667] ? __pfx_chrdev_open+0x10/0x10 [ 401.942380][T11667] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 401.942399][T11667] do_dentry_open+0x97f/0x1530 [ 401.942415][T11667] ? __pfx_chrdev_open+0x10/0x10 [ 401.942436][T11667] vfs_open+0x82/0x3f0 [ 401.942457][T11667] path_openat+0x1de4/0x2cb0 [ 401.942485][T11667] ? __pfx_path_openat+0x10/0x10 [ 401.942506][T11667] do_filp_open+0x20b/0x470 [ 401.942522][T11667] ? __pfx_do_filp_open+0x10/0x10 [ 401.942551][T11667] ? alloc_fd+0x471/0x7d0 [ 401.942571][T11667] do_sys_openat2+0x11b/0x1d0 [ 401.942592][T11667] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.942621][T11667] __x64_sys_openat+0x174/0x210 [ 401.942642][T11667] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.942670][T11667] do_syscall_64+0xcd/0xfa0 [ 401.942688][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.942703][T11667] RIP: 0033:0x7f54ec78eec9 [ 401.942715][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.942730][T11667] RSP: 002b:00007f54ed541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.942744][T11667] RAX: ffffffffffffffda RBX: 00007f54ec9e6090 RCX: 00007f54ec78eec9 [ 401.942753][T11667] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 401.942762][T11667] RBP: 00007f54ec811f91 R08: 0000000000000000 R09: 0000000000000000 [ 401.942771][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.942779][T11667] R13: 00007f54ec9e6128 R14: 00007f54ec9e6090 R15: 00007ffcb39d8f88 [ 401.942800][T11667] [ 403.425753][ T5839] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 404.539091][T11722] syz.2.1211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 405.172368][T11740] FAULT_INJECTION: forcing a failure. [ 405.172368][T11740] name fail_futex, interval 1, probability 0, space 0, times 0 [ 405.226871][T11740] CPU: 0 UID: 0 PID: 11740 Comm: syz.4.1216 Tainted: G U syzkaller #0 PREEMPT(full) [ 405.226897][T11740] Tainted: [U]=USER [ 405.226902][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 405.226911][T11740] Call Trace: [ 405.226917][T11740] [ 405.226923][T11740] dump_stack_lvl+0x16c/0x1f0 [ 405.226944][T11740] should_fail_ex+0x512/0x640 [ 405.226965][T11740] get_futex_key+0x1d0/0x1560 [ 405.226987][T11740] ? __pfx_get_futex_key+0x10/0x10 [ 405.227014][T11740] futex_wake+0xea/0x530 [ 405.227034][T11740] ? trace_kmem_cache_alloc+0x28/0xc0 [ 405.227057][T11740] ? __pfx_futex_wake+0x10/0x10 [ 405.227080][T11740] ? errseq_sample+0x53/0x70 [ 405.227097][T11740] ? file_init_path+0x4fe/0x760 [ 405.227120][T11740] do_futex+0x1e3/0x350 [ 405.227139][T11740] ? __pfx_do_futex+0x10/0x10 [ 405.227167][T11740] ? fd_install+0x225/0x750 [ 405.227185][T11740] __x64_sys_futex+0x1e0/0x4c0 [ 405.227207][T11740] ? __sys_socket+0xac/0x260 [ 405.227230][T11740] ? __pfx___x64_sys_futex+0x10/0x10 [ 405.227249][T11740] ? xfd_validate_state+0x61/0x180 [ 405.227270][T11740] ? __pfx_do_writev+0x10/0x10 [ 405.227288][T11740] do_syscall_64+0xcd/0xfa0 [ 405.227305][T11740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.227320][T11740] RIP: 0033:0x7f54ec78eec9 [ 405.227332][T11740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.227346][T11740] RSP: 002b:00007f54ed5620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 405.227361][T11740] RAX: ffffffffffffffda RBX: 00007f54ec9e5fa8 RCX: 00007f54ec78eec9 [ 405.227371][T11740] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54ec9e5fac [ 405.227380][T11740] RBP: 00007f54ec9e5fa0 R08: 00007f54ed563000 R09: 0000000000000000 [ 405.227388][T11740] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 405.227396][T11740] R13: 00007f54ec9e6038 R14: 00007ffcb39d8ea0 R15: 00007ffcb39d8f88 [ 405.227415][T11740] [ 405.351292][T11744] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1217'. [ 406.703981][T11746] kexec: Could not allocate control_code_buffer [ 406.982154][T11769] bond0: option peer_notif_delay: invalid value () [ 407.026175][T11769] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 407.536366][T11757] Process accounting resumed [ 408.337682][T11801] Invalid ELF header magic: != ELF [ 409.185787][T11815] device-mapper: ioctl: Invalid ioctl structure: name , dev 400007f00010006 [ 409.269331][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 409.572456][T11823] zswap: compressor not available [ 411.013711][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'. [ 411.520111][T11866] HfR: entered promiscuous mode [ 411.658817][T11877] random: crng reseeded on system resumption [ 413.505854][T11901] ------------[ cut here ]------------ [ 413.511427][T11901] WARNING: CPU: 0 PID: 11901 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 413.521888][T11901] Modules linked in: [ 413.526418][T11901] CPU: 0 UID: 0 PID: 11901 Comm: syz.4.1256 Tainted: G U syzkaller #0 PREEMPT(full) [ 413.537696][T11901] Tainted: [U]=USER [ 413.541512][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.551622][T11901] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 413.558093][T11901] Code: 75 46 48 8b 7b 08 e8 d2 96 ff ff 31 ff 89 c3 89 c6 e8 37 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 e9 51 fb ff e8 e4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 d6 51 fb ff e8 71 d0 62 00 eb 87 e8 9a [ 413.577687][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.584016][T11901] RSP: 0018:ffffc9000e407980 EFLAGS: 00010293 [ 413.590300][T11901] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81c08279 [ 413.598334][T11901] RDX: ffff888030700000 RSI: ffffffff81c0828c RDI: 0000000000000005 [ 413.606292][T11901] RBP: ffffffff81c081b0 R08: 0000000000000005 R09: 0000000000000000 [ 413.614340][T11901] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88804d092a48 [ 413.622331][T11901] R13: dffffc0000000000 R14: ffffc9000e407a08 R15: 0000000000000000 [ 413.630912][T11901] FS: 0000000000000000(0000) GS:ffff8881249e7000(0000) knlGS:0000000000000000 [ 413.640300][T11901] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.647039][T11901] CR2: 0000200000e00000 CR3: 0000000012488000 CR4: 00000000003526f0 [ 413.655027][T11901] Call Trace: [ 413.658381][T11901] [ 413.661321][T11901] remove_vma+0x88/0x160 [ 413.665579][T11901] exit_mmap+0x50a/0xb90 [ 413.669985][T11901] ? __pfx_exit_mmap+0x10/0x10 [ 413.674753][T11901] ? rcu_is_watching+0x12/0xc0 [ 413.679594][T11901] ? kasan_quarantine_put+0x10a/0x240 [ 413.684968][T11901] __mmput+0x12a/0x410 [ 413.689052][T11901] mmput+0x62/0x70 [ 413.692762][T11901] do_exit+0x7c7/0x2bf0 [ 413.696954][T11901] ? find_held_lock+0x2b/0x80 [ 413.701626][T11901] ? __pfx_do_exit+0x10/0x10 [ 413.706208][T11901] ? do_raw_spin_lock+0x12c/0x2b0 [ 413.711300][T11901] ? find_held_lock+0x2b/0x80 [ 413.716042][T11901] do_group_exit+0xd3/0x2a0 [ 413.721067][T11901] get_signal+0x2671/0x26d0 [ 413.725593][T11901] ? kmem_cache_free+0x2d4/0x6c0 [ 413.730978][T11901] ? __pfx_get_signal+0x10/0x10 [ 413.735835][T11901] ? do_futex+0x122/0x350 [ 413.740441][T11901] ? __pfx_do_futex+0x10/0x10 [ 413.745134][T11901] arch_do_signal_or_restart+0x8f/0x790 [ 413.750735][T11901] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 413.756911][T11901] ? __pfx_path_listxattrat+0x10/0x10 [ 413.762303][T11901] exit_to_user_mode_loop+0x85/0x130 [ 413.767703][T11901] do_syscall_64+0x426/0xfa0 [ 413.772387][T11901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.778323][T11901] RIP: 0033:0x7f54ec78eec9 [ 413.782737][T11901] Code: Unable to access opcode bytes at 0x7f54ec78ee9f. [ 413.789780][T11901] RSP: 002b:00007f54ed5620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 413.798444][T11901] RAX: 0000000000000001 RBX: 00007f54ec9e5fa8 RCX: 00007f54ec78eec9 [ 413.806397][T11901] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54ec9e5fac [ 413.814404][T11901] RBP: 00007f54ec9e5fa0 R08: 00007f54ed563000 R09: 0000000000000000 [ 413.822497][T11901] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 413.830509][T11901] R13: 00007f54ec9e6038 R14: 00007ffcb39d8ea0 R15: 00007ffcb39d8f88 [ 413.838954][T11901] [ 413.841967][T11901] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 413.849412][T11901] CPU: 0 UID: 0 PID: 11901 Comm: syz.4.1256 Tainted: G U syzkaller #0 PREEMPT(full) [ 413.860365][T11901] Tainted: [U]=USER [ 413.864158][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 413.874210][T11901] Call Trace: [ 413.877495][T11901] [ 413.880417][T11901] dump_stack_lvl+0x3d/0x1f0 [ 413.885020][T11901] vpanic+0x640/0x6f0 [ 413.888995][T11901] ? tracing_buffers_mmap_close+0xdd/0x130 [ 413.894874][T11901] panic+0xca/0xd0 [ 413.898585][T11901] ? __pfx_panic+0x10/0x10 [ 413.902996][T11901] ? check_panic_on_warn+0x1f/0xb0 [ 413.908099][T11901] check_panic_on_warn+0xab/0xb0 [ 413.913026][T11901] __warn+0xf6/0x3c0 [ 413.916918][T11901] ? tracing_buffers_mmap_close+0xdd/0x130 [ 413.922709][T11901] report_bug+0x3c3/0x580 [ 413.927026][T11901] ? tracing_buffers_mmap_close+0xdd/0x130 [ 413.932815][T11901] handle_bug+0x184/0x210 [ 413.937134][T11901] exc_invalid_op+0x17/0x50 [ 413.941646][T11901] asm_exc_invalid_op+0x1a/0x20 [ 413.946476][T11901] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 413.952873][T11901] Code: 75 46 48 8b 7b 08 e8 d2 96 ff ff 31 ff 89 c3 89 c6 e8 37 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 e9 51 fb ff e8 e4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 d6 51 fb ff e8 71 d0 62 00 eb 87 e8 9a [ 413.972461][T11901] RSP: 0018:ffffc9000e407980 EFLAGS: 00010293 [ 413.978518][T11901] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81c08279 [ 413.986555][T11901] RDX: ffff888030700000 RSI: ffffffff81c0828c RDI: 0000000000000005 [ 413.994506][T11901] RBP: ffffffff81c081b0 R08: 0000000000000005 R09: 0000000000000000 [ 414.002456][T11901] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88804d092a48 [ 414.010510][T11901] R13: dffffc0000000000 R14: ffffc9000e407a08 R15: 0000000000000000 [ 414.018488][T11901] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 414.024725][T11901] ? tracing_buffers_mmap_close+0xc9/0x130 [ 414.030557][T11901] ? tracing_buffers_mmap_close+0xdc/0x130 [ 414.036356][T11901] remove_vma+0x88/0x160 [ 414.040591][T11901] exit_mmap+0x50a/0xb90 [ 414.044827][T11901] ? __pfx_exit_mmap+0x10/0x10 [ 414.049579][T11901] ? rcu_is_watching+0x12/0xc0 [ 414.054324][T11901] ? kasan_quarantine_put+0x10a/0x240 [ 414.059710][T11901] __mmput+0x12a/0x410 [ 414.063764][T11901] mmput+0x62/0x70 [ 414.067468][T11901] do_exit+0x7c7/0x2bf0 [ 414.071609][T11901] ? find_held_lock+0x2b/0x80 [ 414.076268][T11901] ? __pfx_do_exit+0x10/0x10 [ 414.080846][T11901] ? do_raw_spin_lock+0x12c/0x2b0 [ 414.085859][T11901] ? find_held_lock+0x2b/0x80 [ 414.090518][T11901] do_group_exit+0xd3/0x2a0 [ 414.095011][T11901] get_signal+0x2671/0x26d0 [ 414.099528][T11901] ? kmem_cache_free+0x2d4/0x6c0 [ 414.104450][T11901] ? __pfx_get_signal+0x10/0x10 [ 414.109285][T11901] ? do_futex+0x122/0x350 [ 414.113613][T11901] ? __pfx_do_futex+0x10/0x10 [ 414.118284][T11901] arch_do_signal_or_restart+0x8f/0x790 [ 414.124272][T11901] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 414.130421][T11901] ? __pfx_path_listxattrat+0x10/0x10 [ 414.135788][T11901] exit_to_user_mode_loop+0x85/0x130 [ 414.141062][T11901] do_syscall_64+0x426/0xfa0 [ 414.145634][T11901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.151511][T11901] RIP: 0033:0x7f54ec78eec9 [ 414.155909][T11901] Code: Unable to access opcode bytes at 0x7f54ec78ee9f. [ 414.162921][T11901] RSP: 002b:00007f54ed5620e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 414.171337][T11901] RAX: 0000000000000001 RBX: 00007f54ec9e5fa8 RCX: 00007f54ec78eec9 [ 414.179313][T11901] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54ec9e5fac [ 414.187288][T11901] RBP: 00007f54ec9e5fa0 R08: 00007f54ed563000 R09: 0000000000000000 [ 414.195262][T11901] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 414.203226][T11901] R13: 00007f54ec9e6038 R14: 00007ffcb39d8ea0 R15: 00007ffcb39d8f88 [ 414.211190][T11901] [ 414.214245][T11901] Kernel Offset: disabled [ 414.218553][T11901] Rebooting in 86400 seconds..