last executing test programs: 6m6.826832315s ago: executing program 0 (id=155): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x3, 0x948b, 0x8000000000003, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x7da, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r2 = getpid() r3 = set_tid_address$auto(0x0) tgkill$auto(r2, r3, 0x7) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) r4 = socket(0x2, 0x801, 0x106) listen$auto(r4, 0xf52b) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffffff, &(0x7f0000000140)=""/108, 0x6c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 6m5.694392747s ago: executing program 0 (id=157): ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r0 = socket(0x22, 0x2, 0x2) getsockname$auto(r0, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) pselect6$auto(0x9, &(0x7f0000000180)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x1, 0xfffffffffffffffe, 0xffffffff, 0x8000000000000001, 0xfffffffffffffffd, 0x211, 0x40000000, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x23, 0x800, 0xe7) 6m4.837162866s ago: executing program 0 (id=160): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r1, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="10e6ffffff101600"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xfffffffffffffff9, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8000000000000002, 0x5, 0x7fffffff, 0x7, 0x7, 0x0, 0x60, 0x40000103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbf7}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="230027bd7000fedbdf250900d37d001cd7052c164dccbdd85ac5bedc96136137d93565e0ffa7a05ba71cd49ec9bddfb5c51545d869b0aa5dedb060cdb43973d1be7dc9df5e2b30ce5178817f38934a801485182e4bd5540e928a666ca039656576bff67293c6b610ad436abbcf58a024589d765157", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@remote}, @nested={0x8, 0xf9, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000005) msgsnd$auto(0x1, &(0x7f00000000c0)={0x7f, 0x9}, 0x3, 0xfffffffd) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) ioctl$auto(r7, 0x7, r7) mmap$auto(0x6265, 0xffff, 0x100002, 0x9000000eb1, 0xffffffffffffffff, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) 6m4.417144019s ago: executing program 0 (id=161): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000080)=0x8) msgctl$auto_MSG_STAT(0x91b, 0xb, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) writev$auto(r1, &(0x7f0000000080)={&(0x7f00000000c0), 0x7114}, 0x1f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x8000, 0x5) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) (async) open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (async) ioctl$auto_MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000080)=0x8) (async) msgctl$auto_MSG_STAT(0x91b, 0xb, 0x0) (async) socket(0x2a, 0x2, 0x1) (async) connect$auto(r1, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) (async) writev$auto(r1, &(0x7f0000000080)={&(0x7f00000000c0), 0x7114}, 0x1f) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mprotect$auto(0x0, 0x8000, 0x5) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) (async) read$auto(r0, 0x0, 0x1) (async) write$auto(0x3, 0x0, 0xffd8) (async) 6m3.819381091s ago: executing program 0 (id=164): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) (async) mmap$auto(0x0, 0x6, 0xdf, 0xebf, r0, 0x88000) (async) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) socket(0x10, 0x3, 0xb) (async) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r2, 0x0, 0x100000009, 0xa4000000000002) (async) madvise$auto(0x0, 0x20499d, 0x9) (async) pkey_free$auto(0xfffffffd) 6m3.611436974s ago: executing program 0 (id=167): mmap$auto(0x0, 0x8000800046, 0x6e, 0x40eb2, 0xffffffffffffffff, 0x4300000000000) getpid() (async) getpid() prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) (async) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r3 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) (async) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) (async) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0x20000041) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0x20000041) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="591971fcc6c2f277bb848bb0c70c34844d3bed6253e7e573d3c6bfa516f64df23455124ac536b2661936b088ac6e", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf250900000004002101"], 0x18}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r5, 0x0, 0xb4d3) write$auto(r3, 0x0, 0x6) unshare$auto(0x20000) unshare$auto(0x20000) (async) unshare$auto(0x20000) 5m48.238637729s ago: executing program 32 (id=167): mmap$auto(0x0, 0x8000800046, 0x6e, 0x40eb2, 0xffffffffffffffff, 0x4300000000000) getpid() (async) getpid() prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) (async) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r3 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) (async) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) (async) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x12c0}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) (async) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0x20000041) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0x20000041) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="591971fcc6c2f277bb848bb0c70c34844d3bed6253e7e573d3c6bfa516f64df23455124ac536b2661936b088ac6e", @ANYRES16=r6, @ANYBLOB="00012bbd7000fedbdf250900000004002101"], 0x18}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r5, 0x0, 0xb4d3) write$auto(r3, 0x0, 0x6) unshare$auto(0x20000) unshare$auto(0x20000) (async) unshare$auto(0x20000) 7.942784767s ago: executing program 1 (id=1233): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x9) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r1, &(0x7f0000000c40)='gthtool\x00', 0x5) bind$auto(r0, &(0x7f0000000180)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r2, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) r3 = socket(0xa, 0x2, 0x1) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="188a0031", @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf250300000004000600"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4024800) read$auto(r0, 0x0, 0x2000000000007) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(r1, &(0x7f00000000c0)={&(0x7f0000000200)="aee0b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f0394296878a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b8b6f471c8587d3c2288847", 0x3}, 0x7) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000000)=""/65, 0x41) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130025bd7000dddbdf650208000008000300", @ANYRES32=r7, @ANYBLOB="05003e00ff"], 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x20040894) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20005, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) 7.134542503s ago: executing program 3 (id=1235): mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) r1 = gettid() read$auto_media_devnode_fops_mc_devnode(r0, 0x0, 0x0) kill$auto(r1, 0x11) rt_sigqueueinfo$auto(0x0, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xd9, 0x0, [{0x6a0, 0x400, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) sysfs$auto(0x1, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) lseek$auto(0x3, 0x20000, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x60302, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)=""/4096, 0x1000) open(0x0, 0x261c2, 0x84) write$auto_ftrace_enable_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) read$auto_cachefiles_daemon_fops_internal(r5, 0x0, 0x0) 6.884285556s ago: executing program 1 (id=1238): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x1, 0x2, 'u'}, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x2, 0x207, 0x7, 0x80000011, r2, 0xfffffffffffffff8) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd700001dcdf2502000000f568a82cdfa85b5d35d71714a4d28af9d64f6d0d120b7394125b83c104e8826230c5a7b270354985aacf029bf905648647fc5f4b2a267b5dbb5456bffbb2b9f4768fcf76b491fc3c03918df015194470a4f232668afafe6f578a072061ac7fec38e912bd3848dbc0d3eccff434df6124337a2994b1a50b2f0660a50b3595ba8177b267"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) socket(0x2, 0xa, 0xe57a) getpeername$auto(0x3, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon28\x00', 0x101000, 0x0) ioctl$auto_MON_IOCQ_RING_SIZE(r5, 0x9205, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x80000101, 0x4, "aab8e8dfffff7f000000000000000000205e782d000000000000000000021000", @raw=0x2}, 0x6, 0x8, 0x6, @raw=0x9, @enumerated={0x1, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x9}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x200200b8, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x502, 0x5, 0x0, 0x467, @raw=0x9, @raw=0xf, 0x7, 0x0, &(0x7f0000000380)="cf796bac33e50ef646b5c94256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf604d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537e5ef7ffffcb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb042d4efbc257e036c3242b2fd63d5345aa8a6e880f941fe5b0a7366d60ef5cf6b9ec7268d034035aacf10e", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d5adb424af07a9e8d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc99d0a6ff"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) 6.579394515s ago: executing program 4 (id=1239): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, r0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000", @ANYBLOB="080029bd7000fedbdf253f000000630015015e5ee824cb773f40477f976646f7267fa73f1abf2d6f7a1d54749ce74560c4fdd8b05d1f77feaa272ed45d4d2b7c360414b14b3fb33fbf1eedcf83fe4cf9f1b916eca77b239cc6d035c8f6f64e69acf38ae19adc6272b200c22c1fbb67e9690008010e809900030022dae8497e7d9e676b4067926fa1d0e1a7fca61228487a62821b7417e5c85b65979637208a1f378dbbd45091d1d4bae1a7f42fbf9e93f9efbe49174837bfeab72fafe95405136445ac2ada8a8631ed895ecf929cd66240bf21d06915ffc2cc13ded9c96bd9a6279d5277afee1dfeb7a3d054f31f9197c7ae281973bc38491fe005451357f200000068000200887b68f807d6cb577c60c7b0758223bdd3b7c46e419c663d3a28fa77f8ee131ac139255af962ea02b32fe1dfdef12bdb39343f480043a69819044baaec88970cb92ae7d1f0c50009e551981ef139e4ca0cb9e0cd6d40cee8293ff0d275"], 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) epoll_create$auto(0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) 5.568410103s ago: executing program 3 (id=1240): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x1d, 0x3, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) mmap$auto(0x9, 0xe981, 0xdf, 0xeb1, 0x401, 0x8003) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/114, 0x72) r2 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) mmap$auto(0x1, 0x4, 0xc43, 0xebd, r2, 0x2000000000007ffe) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x21a341, 0x0) socketpair$auto(0x2, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fa, 0x7, 0xd3e, 0x1, 0x2, 0x6, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x1, 0x6d3f, 0x7, 0x8000000000000001, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0xc000, 0x8, 0x3) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon9\x00', 0x282, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='[)\'@A|\x81\x02\x9c\xb5\xf9\xcd\x10\xa2u|\x89\x1c\x8f\x00\xb1Q\xd1\x84\x88\xab\x9b]\x1eC\xbc\xe8=\xd7i\xa2\xd5\xb2k\xe7\xe8:\xb7I\x862\xeeY\xf7P-v\xe0\xb6G\xbd\xb3\xe2&&\xff\xb6\xf2\xb9f~\xb5)\xcc\xc6\xed\x87\xf1\xd1\xedc\xe9XH\x06\x99\xac.\rh\xd3ow \xfc', 0x2) ioctl$auto_MON_IOCX_GET(r3, 0x40189206, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x5, &(0x7f0000000040)={0x4c, 0xc7f, 0x0, 0x9b, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb7b9f3395342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a68b45"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) 5.448069126s ago: executing program 1 (id=1241): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x1e, 0x0, 0x9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0040f5e617785da1e1420f5bbccd593546197892f648cc206d5c8a8e3cc20d8184fc1268d9b496b81f5e9f5efae376ce730bbd5733345c84c551f38f0227e6ef543158573250f90b4e79c8ebb4da74a33154d57d6ac970100b46c3cf827ed7260117cf7a4a57cbdc317143d7f2f67ee949fe69ffda5df2f3d5d17395d47a1ee84af9207abfae9221469bd492736fcfe2a547267642d4250034d12ed39adda32176db1ae42544c5c7a88d8c5c6cfb8ec05cd31837986d77c21213501506dbf6acf7bb67d1d49edf4e62577641e0fe1b32c52341"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) socket(0x2, 0xa, 0xe57a) getpeername$auto(0x3, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.111345452s ago: executing program 2 (id=1242): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="1c520b214b197e", 0x7) write$auto(r0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0xa) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x240, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SG_SET_RESERVED_SIZE2(r3, 0x2275, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r4, &(0x7f00000000c0)={&(0x7f0000000180), 0x200}, 0x6) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D3\x00', 0xa0980, 0x0) prctl$auto(0x3e, 0x1000000000001, 0x0, 0x1, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r1, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/veth1_vlan/secure_redirects\x00', 0x101202, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x700000000000000) socket(0x1e, 0x1, 0x8) ioctl$auto_BLKBSZSET(r6, 0x40081271, &(0x7f0000000380)=0x800) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) 5.01145413s ago: executing program 3 (id=1243): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd12/queue/nr_requests\x00', 0x129102, 0x0) read$auto(r0, 0x0, 0x18) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x1c, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x47) write$auto(r0, 0x0, 0xfdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f38327b97000fedbdf", @ANYRES32=r6], 0x1c}}, 0x4008000) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x80000, 0x0) sendmsg$auto_BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_NEIGH_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0xc840}, 0x810) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x201, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/bridge0/rpl_seg_enabled\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x1ff) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x198, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x174, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0xa4, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0xcc, 0x5, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x14, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x1}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x58}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x12, 0x1, "6322bf29ecfb51b1a73e64f32ae1"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x77, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) getdents$auto(r1, &(0x7f0000000040)={0xa995, 0x4, 0x7, "b52c3f86d951df0ee5449475b123ae22c84749d59fe0ab9093c7a48a152c4b1e946223ea3b62882a882638af3a97517d78e9f1e75b1f57e255251bc5096ca5e20da49daa51ac2e6a77bb96c1906dd8eab55da95f8575455549b597091b5634a4ab77d1bfab2671ee61ca4539174ac5b7d34d9f530fa84063c6c69747f28b3b21e4e85f08e271748f663568e65c7816f1bde756c70cf683360dc71d9a7c11b9324556d9e579a6e60d7fbb1b4519ad"}, 0x4) 4.697793853s ago: executing program 1 (id=1244): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x7da, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r3 = getpid() r4 = set_tid_address$auto(0x0) tgkill$auto(r3, r4, 0x7) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) r5 = socket(0x2, 0x801, 0x106) listen$auto(r5, 0xf52b) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_virtual_ncidev_fops_virtual_ncidev(r0, &(0x7f0000000140)=""/108, 0x6c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 4.00308348s ago: executing program 2 (id=1245): sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fde528e5260d908c8265", 0xff, 0x8}, 0xfffffff9}, 0x2, 0x2) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) 3.886202163s ago: executing program 3 (id=1246): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioprio_get$auto(0x3, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x7da, 0xcb}) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) r3 = getpid() r4 = set_tid_address$auto(0x0) tgkill$auto(r3, r4, 0x7) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) r5 = socket(0x2, 0x801, 0x106) listen$auto(r5, 0xf52b) write$auto(0x3, 0x0, 0xfffffdef) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto_virtual_ncidev_fops_virtual_ncidev(r0, &(0x7f0000000140)=""/108, 0x6c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 3.58577071s ago: executing program 2 (id=1247): mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x5, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000800000003) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/nbd0\x00', 0x2003, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12a09f6f013f847cbeba6410a4bf3f0f"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 3.499079097s ago: executing program 1 (id=1248): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, r0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000", @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd4, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_DATA={0xb7, 0xc5, "55a951b9b7ac200db2dc354e86d5d0fefec1931a0ad543537ba4efb5f94b9a55ceeeade3859a9d2009ab20b060f1025832a1aadf239dfea596230f896f61ba4f9b889570ff84b83a67af0e94ef3d97675499bf894ce0b51af952cc16877afe2ccab9951a7edf204c4f5dc283be2bd20e7f14a502afade9203025dacd90454a97fee39ac6c3a90f7831a98fea555d78e0e629c5dbb67863f3b277b10f3ef7f9fea06ea7bf0574981cc88f20be84f14f3c6c6b50"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}]}, 0xd4}, 0x1, 0x0, 0x0, 0xae96ea4a6ee81e51}, 0x4000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) 3.134884335s ago: executing program 4 (id=1249): fanotify_init$auto(0xfff, 0x1ff) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyqe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) accept$auto(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x4e21, @loopback}, &(0x7f0000000280)=0x2) (async) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, 0x0, 0x6d4) read$auto_posix_clock_file_operations_posix_clock(r3, &(0x7f0000000180)=""/232, 0xe8) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) io_setup$auto(0x7ffe, 0x0) (async) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) (async) mlockall$auto(0x7) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2c, r2, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) (async) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/apparmor/exec\x00', 0x68000, 0x0) (async) socket(0x2b, 0x3, 0x2) ioctl$auto_TIOCCONS2(r0, 0x541d, 0x0) 2.779394743s ago: executing program 4 (id=1250): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x4) 2.720248724s ago: executing program 4 (id=1251): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000040)=0x4) (fail_nth: 1) 2.69952273s ago: executing program 2 (id=1252): mmap$auto(0x0, 0x400004, 0x200000000000df, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x0) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) rename$auto(&(0x7f00000000c0)=':,\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 2.590458984s ago: executing program 3 (id=1253): sendmmsg$auto(0xffffffffffffffff, &(0x7f00000003c0)={{0x0, 0xfc2, 0x0, 0x7, &(0x7f0000000300)="198c4f4d2282dd68e10a768807754db909196243eb5cc4de177c102495af72071d87583e452f7165da3599158638dabe9a0c59ea019792cf59a0b062366bdba330b5fafb0c07285d35bdc084b4c1e5ddbcc51455d05555a5d940082b872c30f806f411fde528e5260d908c8265", 0xff, 0xa}, 0xfffffff9}, 0x2, 0x2) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYBLOB="20062abd7000fddbdf250200"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) execve$auto(&(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000000)='.]-@\'$@\x00', &(0x7f0000000500)=&(0x7f0000000100)='/%{.\x00') ppoll$auto(0x0, 0x4007f, 0x0, &(0x7f00000001c0)={0x6}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r0 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, &(0x7f0000000280)=0xa) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media18\x00', 0x8000, 0x0) sendfile$auto(r0, r1, &(0x7f0000000080)=0x100000001, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x1000000004, 0x9, 0x8000000ffc, 0x410, 0xffffffffffffffff, 0xfffffffffffffff8) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xffffffff, 0x7, 0x7, 0x0, 0x46) mmap$auto(0x2, 0x1, 0x8, 0x13, r3, 0xfffffffffffefffe) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fcdbdf2519000000a9002880057db4403c2890d40113c6150e82cc9644d6094f715cb9b135313e092a8dbf473da044db328ea7a94a7a45b2ef926d93dec6e462cbe851aecd05e1d948e484adbcc7933e83593290d462e9b399dffbb7b399c42a1822673a8bc777836e7b60bc380fa58d2e942939c4f7e736abcde5a6f68d2019bc1461b52c7145594b12a4acff9f6fa77a5cc3025a24fbb5f51a0a85bc464ab5ae4e1f1a64fe7dec364ddb601d"], 0xc8}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) r4 = open(&(0x7f0000000340)='./file0\x00', 0x62c200, 0x108) ioctl$auto_BLKTRACESETUP2(r4, 0xc0481273, &(0x7f0000000380)={"e0a9b352507f62d4b3e401a5abdc6cf57c1d93ce1a725805c9f5056db7598c7c", 0x9, 0x4, 0xffff0000, 0xc, 0x0, 0x0}) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r5, 0x10, 0x5) epoll_ctl$auto_EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000400)={0xe, 0x3}) r6 = open(&(0x7f0000000440)='./file0\x00', 0x28240, 0x60f894d54e69b299) mmap$auto(0xb1, 0x40, 0x80000000, 0x11, r6, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000004c0), r0) sendmsg$auto_NFC_CMD_GET_DEVICE(r7, &(0x7f00000007c0)={&(0x7f0000000480), 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="50010000", @ANYRES16=r8, @ANYBLOB="000829bd7000fedbdf250100000005000a00030000000600110040000000130113805b00fb8008001e00ac1414bb1400d900fe80000c0000000000000000000000aa04003f808c3bf49941edc141232cfa74a5534c90e80a8a73fdd0d1fb9fa45959d41cd408009a00", @ANYRESDEC=r7, @ANYBLOB="0c0051000000000000000080040060800008008a000d000000d2286755c250a0a9ef7ad5338d37922639d0122d842c038659a9bc8a8a9237b0d0876b41ab730ed6868632a35581bac4c92ad48186eef963bdc33aaa5bb0dfbd1acd48b8c2ce4d7ebb649985a9a67b68009a00b1bce721aedcbb5cbd709cffb51bbd4bd906e16f126d86756e938000d87f7a6803035f2a17e8000000000000363fe79e35509deca6c898356c7ff80230208eb08b8c18a487c6b6e67d592aacab1aa8bee039a8470450f591bd98a83149e65cfef91744440005000c000600000008001500"], 0x150}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) 1.757954299s ago: executing program 4 (id=1254): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200006, 0x9) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)={0x6}) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x7, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = clone3$auto(&(0x7f0000000240)={0x3, 0x5b7, 0x941, 0x5, 0x10001, 0x40000, 0x5, 0x2, 0x7, 0x6, 0xff}, 0x88) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=@task_fd_query={r3, r0, 0xe, 0x7, 0xfff, 0x7, r1, 0x80000000, 0x2}, 0x8) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) 968.324426ms ago: executing program 2 (id=1255): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000e80)=""/199, 0xc7) pkey_free$auto(0x9) 862.524129ms ago: executing program 3 (id=1256): r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x7) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x6bcb3307, 0x6, 0x3, &(0x7f0000000000)=0x6) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r1, 0x4141, 0x0) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x2284, r2) mmap$auto(0x0, 0x6, 0xdf, 0x19, 0x0, 0x3) write$auto(0x3, 0x0, 0xfdef) 514.539386ms ago: executing program 1 (id=1257): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, r0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000", @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) epoll_create$auto(0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) 483.935447ms ago: executing program 2 (id=1258): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0x4) open(0x0, 0xa22c0, 0x151) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0xc380, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r1 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) clock_gettime$auto(0x2fb, &(0x7f0000001580)={0x5, 0x7ff}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r1, 0x0, 0x20000000) socket(0x2, 0x800, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x6, 0x20009, 0x4000000000df, 0x15, 0xffffffffffffffff, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/protocols\x00', 0x80080, 0x0) read$auto(r2, &(0x7f0000000000)='/,\x00', 0x5644) ioperm$auto(0x100, 0x5, 0xfff) modify_ldt$auto(0xc, 0x0, 0x100000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xebf, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) 0s ago: executing program 4 (id=1259): mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_SET(0xffffffffffffffff, 0x0, 0x40800) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) (async) write$auto(r0, 0x0, 0xb430) (async) io_uring_setup$auto(0x94, &(0x7f0000000180)={0x80, 0x6, 0x10000, 0x7, 0x1, 0xe, r0, [0x300, 0x7], {0x860fc07d, 0x7, 0x2, 0x8, 0x2, 0x6, 0x7, 0x0, 0x8000}, {0xfffffd90, 0x9, 0x100, 0x8, 0x2, 0x9, 0x9, 0xf, 0x81}}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x59, 0x0) (async, rerun: 64) io_uring_setup$auto(0xd364, 0x0) (async) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (rerun: 32) unshare$auto(0x40000080) (async) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) ioctl$auto(0xffffffffffffffff, 0x6f2d, 0xffffffffffffffff) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) (async) mmap$auto(0x200000000000, 0x2020009, 0x0, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x46a041, 0x0) (async, rerun: 64) ioctl$auto_USBDEVFS_CONTROL32(r1, 0xc0105500, &(0x7f0000000000)={0xd, 0x5, 0x0, 0x7, 0x9, 0x5c8}) kernel console output (not intermixed with test programs): subevent 0x01 length: 123 > 18 [ 295.171576][ T8961] zswap: compressor not available [ 295.241803][ T8971] FAULT_INJECTION: forcing a failure. [ 295.241803][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 295.352711][ T8971] CPU: 1 UID: 0 PID: 8971 Comm: syz.3.586 Not tainted syzkaller #0 PREEMPT(full) [ 295.352744][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 295.352758][ T8971] Call Trace: [ 295.352767][ T8971] [ 295.352777][ T8971] dump_stack_lvl+0x16c/0x1f0 [ 295.352813][ T8971] should_fail_ex+0x512/0x640 [ 295.352840][ T8971] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 295.352867][ T8971] should_failslab+0xc2/0x120 [ 295.352896][ T8971] kmem_cache_alloc_noprof+0x75/0x6e0 [ 295.352919][ T8971] ? __anon_vma_prepare+0xae/0x5e0 [ 295.352954][ T8971] ? __anon_vma_prepare+0xae/0x5e0 [ 295.352982][ T8971] __anon_vma_prepare+0xae/0x5e0 [ 295.353016][ T8971] ? __filemap_get_folio+0x32b/0xc30 [ 295.353046][ T8971] __vmf_anon_prepare+0x11c/0x240 [ 295.353076][ T8971] hugetlb_fault+0x1ba4/0x2f40 [ 295.353109][ T8971] ? __pfx_hugetlb_fault+0x10/0x10 [ 295.353147][ T8971] ? find_vma+0xbf/0x140 [ 295.353173][ T8971] ? __pfx_find_vma+0x10/0x10 [ 295.353205][ T8971] handle_mm_fault+0xbfa/0xd10 [ 295.353244][ T8971] ? __pkru_allows_pkey+0x11/0xb0 [ 295.353294][ T8971] do_user_addr_fault+0x7a6/0x1370 [ 295.353323][ T8971] ? rcu_is_watching+0x12/0xc0 [ 295.353356][ T8971] exc_page_fault+0x64/0xc0 [ 295.353385][ T8971] asm_exc_page_fault+0x26/0x30 [ 295.353408][ T8971] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 295.353441][ T8971] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 295.353465][ T8971] RSP: 0018:ffffc9000474f940 EFLAGS: 00050246 [ 295.353487][ T8971] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 295.353502][ T8971] RDX: fffff520008e9f41 RSI: 0000000000000000 RDI: ffffc9000474fa00 [ 295.353518][ T8971] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520008e9f40 [ 295.353530][ T8971] R10: ffffc9000474fa07 R11: 0000000000000000 R12: 0000000000000000 [ 295.353544][ T8971] R13: ffffc9000474fa00 R14: ffffffff892adfb0 R15: ffff88807a878940 [ 295.353561][ T8971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.353610][ T8971] _copy_from_user+0x98/0xd0 [ 295.353642][ T8971] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 295.353691][ T8971] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 295.353731][ T8971] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 295.353771][ T8971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.353803][ T8971] ? __local_bh_enable_ip+0xa4/0x120 [ 295.353836][ T8971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.353867][ T8971] sctp_getsockopt+0x124f/0x69b0 [ 295.353907][ T8971] ? __futex_wait+0x24b/0x2f0 [ 295.353948][ T8971] ? __pfx_sctp_getsockopt+0x10/0x10 [ 295.353981][ T8971] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.354022][ T8971] ? __lock_acquire+0xb97/0x1ce0 [ 295.354076][ T8971] ? find_held_lock+0x2b/0x80 [ 295.354099][ T8971] ? __might_fault+0xe3/0x190 [ 295.354121][ T8971] ? __might_fault+0xe3/0x190 [ 295.354142][ T8971] ? __might_fault+0x13b/0x190 [ 295.354177][ T8971] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 295.354210][ T8971] do_sock_getsockopt+0x34d/0x440 [ 295.354246][ T8971] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 295.354284][ T8971] ? __fget_files+0x204/0x3c0 [ 295.354330][ T8971] __sys_getsockopt+0x123/0x1b0 [ 295.354369][ T8971] __x64_sys_getsockopt+0xbd/0x160 [ 295.354395][ T8971] ? do_syscall_64+0x91/0xfa0 [ 295.354422][ T8971] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.354450][ T8971] do_syscall_64+0xcd/0xfa0 [ 295.354481][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.354507][ T8971] RIP: 0033:0x7f315938eec9 [ 295.354528][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.354551][ T8971] RSP: 002b:00007f315a19a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 295.354574][ T8971] RAX: ffffffffffffffda RBX: 00007f31595e6270 RCX: 00007f315938eec9 [ 295.354591][ T8971] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000005 [ 295.354606][ T8971] RBP: 00007f3159411f91 R08: 0000200000000280 R09: 0000000000000000 [ 295.354623][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.354638][ T8971] R13: 00007f31595e6308 R14: 00007f31595e6270 R15: 00007ffc12598d18 [ 295.354678][ T8971] [ 295.991368][ T8341] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.647727][ T8988] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 296.711581][ T8973] tty tty51: ldisc open failed (-12), clearing slot 50 [ 296.786212][ T8976] pty pty6: ldisc open failed (-12), clearing slot 6 [ 297.132460][ T8992] FAULT_INJECTION: forcing a failure. [ 297.132460][ T8992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.204378][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.1.590 Not tainted syzkaller #0 PREEMPT(full) [ 297.204415][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.204429][ T8992] Call Trace: [ 297.204438][ T8992] [ 297.204448][ T8992] dump_stack_lvl+0x16c/0x1f0 [ 297.204483][ T8992] should_fail_ex+0x512/0x640 [ 297.204518][ T8992] should_fail_alloc_page+0xe7/0x130 [ 297.204554][ T8992] prepare_alloc_pages+0x3c2/0x610 [ 297.204585][ T8992] ? rcu_is_watching+0x12/0xc0 [ 297.204616][ T8992] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 297.204641][ T8992] ? kasan_save_stack+0x33/0x60 [ 297.204667][ T8992] ? kasan_save_track+0x14/0x30 [ 297.204700][ T8992] ? __lock_acquire+0x62e/0x1ce0 [ 297.204735][ T8992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 297.204762][ T8992] ? css_rstat_updated+0x1c2/0x510 [ 297.204794][ T8992] ? __lock_acquire+0x62e/0x1ce0 [ 297.204827][ T8992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 297.204867][ T8992] ? policy_nodemask+0xea/0x4e0 [ 297.204900][ T8992] alloc_pages_mpol+0x1fb/0x550 [ 297.204930][ T8992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 297.204960][ T8992] ? __lock_acquire+0x62e/0x1ce0 [ 297.204992][ T8992] folio_alloc_mpol_noprof+0x36/0x2f0 [ 297.205027][ T8992] vma_alloc_folio_noprof+0xed/0x1e0 [ 297.205059][ T8992] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 297.205100][ T8992] do_pte_missing+0x2202/0x3ba0 [ 297.205145][ T8992] ? find_held_lock+0x2b/0x80 [ 297.205178][ T8992] __handle_mm_fault+0x1556/0x2aa0 [ 297.205222][ T8992] ? __pfx___handle_mm_fault+0x10/0x10 [ 297.205257][ T8992] ? __pte_offset_map_lock+0x174/0x310 [ 297.205283][ T8992] ? find_held_lock+0x2b/0x80 [ 297.205315][ T8992] ? follow_page_pte+0x5cf/0x1390 [ 297.205349][ T8992] handle_mm_fault+0x589/0xd10 [ 297.205388][ T8992] __get_user_pages+0x54e/0x3530 [ 297.205433][ T8992] ? __pfx___get_user_pages+0x10/0x10 [ 297.205473][ T8992] populate_vma_page_range+0x267/0x3f0 [ 297.205510][ T8992] ? __pfx_populate_vma_page_range+0x10/0x10 [ 297.205543][ T8992] ? __pfx_find_vma_intersection+0x10/0x10 [ 297.205577][ T8992] ? do_mmap+0x69c/0x1210 [ 297.205611][ T8992] __mm_populate+0x1d8/0x380 [ 297.205646][ T8992] ? __pfx___mm_populate+0x10/0x10 [ 297.205680][ T8992] ? up_write+0x1b2/0x520 [ 297.205718][ T8992] vm_mmap_pgoff+0x37f/0x470 [ 297.205752][ T8992] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 297.205791][ T8992] ? __x64_sys_futex+0x1e0/0x4c0 [ 297.205822][ T8992] ? __x64_sys_futex+0x1e9/0x4c0 [ 297.205859][ T8992] ksys_mmap_pgoff+0x7d/0x5c0 [ 297.205886][ T8992] ? xfd_validate_state+0x61/0x180 [ 297.205919][ T8992] ? __pfx_ksys_write+0x10/0x10 [ 297.205950][ T8992] __x64_sys_mmap+0x125/0x190 [ 297.205990][ T8992] do_syscall_64+0xcd/0xfa0 [ 297.206021][ T8992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.206046][ T8992] RIP: 0033:0x7fcb7938eec9 [ 297.206067][ T8992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.206090][ T8992] RSP: 002b:00007fcb7a2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 297.206114][ T8992] RAX: ffffffffffffffda RBX: 00007fcb795e5fa0 RCX: 00007fcb7938eec9 [ 297.206139][ T8992] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 297.206154][ T8992] RBP: 00007fcb79411f91 R08: 0000000000000002 R09: 0000000000008000 [ 297.206170][ T8992] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 297.206185][ T8992] R13: 00007fcb795e6038 R14: 00007fcb795e5fa0 R15: 00007ffcaf4f4838 [ 297.206221][ T8992] [ 298.334193][ T8990] FAULT_INJECTION: forcing a failure. [ 298.334193][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 298.396892][ T8990] CPU: 0 UID: 0 PID: 8990 Comm: syz.3.589 Not tainted syzkaller #0 PREEMPT(full) [ 298.396914][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.396923][ T8990] Call Trace: [ 298.396929][ T8990] [ 298.396935][ T8990] dump_stack_lvl+0x16c/0x1f0 [ 298.396957][ T8990] should_fail_ex+0x512/0x640 [ 298.396977][ T8990] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 298.396994][ T8990] should_failslab+0xc2/0x120 [ 298.397014][ T8990] kmem_cache_alloc_noprof+0x75/0x6e0 [ 298.397029][ T8990] ? mas_preallocate+0xe6a/0x11f0 [ 298.397049][ T8990] ? mas_preallocate+0xe6a/0x11f0 [ 298.397064][ T8990] mas_preallocate+0xe6a/0x11f0 [ 298.397085][ T8990] ? __pfx_mas_preallocate+0x10/0x10 [ 298.397106][ T8990] ? rcu_read_unlock+0x17/0x60 [ 298.397129][ T8990] vma_link+0x12e/0x6a0 [ 298.397145][ T8990] ? __pfx_vma_link+0x10/0x10 [ 298.397163][ T8990] ? anon_vma_clone+0x405/0x5c0 [ 298.397183][ T8990] ? anon_vma_name+0x81/0x2f0 [ 298.397206][ T8990] copy_vma+0x6b7/0xa90 [ 298.397223][ T8990] ? __pfx_copy_vma+0x10/0x10 [ 298.397241][ T8990] ? register_lock_class+0x41/0x4c0 [ 298.397276][ T8990] copy_vma_and_data+0x1cf/0x790 [ 298.397292][ T8990] ? __pfx_copy_vma_and_data+0x10/0x10 [ 298.397310][ T8990] ? __vma_enter_locked+0x163/0x3f0 [ 298.397333][ T8990] ? find_held_lock+0x2b/0x80 [ 298.397347][ T8990] ? move_vma+0x52e/0x1770 [ 298.397365][ T8990] move_vma+0x540/0x1770 [ 298.397381][ T8990] ? __pfx_move_vma+0x10/0x10 [ 298.397397][ T8990] ? shmem_get_unmapped_area+0x170/0xa00 [ 298.397419][ T8990] ? cap_mmap_addr+0x4b/0x120 [ 298.397437][ T8990] ? bpf_lsm_mmap_addr+0x9/0x10 [ 298.397452][ T8990] ? security_mmap_addr+0x6c/0x1e0 [ 298.397466][ T8990] ? __get_unmapped_area+0x267/0x440 [ 298.397486][ T8990] ? vrm_set_new_addr+0x208/0x290 [ 298.397501][ T8990] mremap_to+0x1b7/0x450 [ 298.397516][ T8990] do_mremap+0x13a8/0x2020 [ 298.397531][ T8990] ? futex_private_hash_put+0xf0/0x300 [ 298.397555][ T8990] ? __pfx_do_mremap+0x10/0x10 [ 298.397579][ T8990] __do_sys_mremap+0x119/0x170 [ 298.397593][ T8990] ? __pfx___do_sys_mremap+0x10/0x10 [ 298.397612][ T8990] ? __x64_sys_futex+0x1e0/0x4c0 [ 298.397643][ T8990] do_syscall_64+0xcd/0xfa0 [ 298.397661][ T8990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.397675][ T8990] RIP: 0033:0x7f315938eec9 [ 298.397689][ T8990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.397702][ T8990] RSP: 002b:00007f315a1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 298.397716][ T8990] RAX: ffffffffffffffda RBX: 00007f31595e6090 RCX: 00007f315938eec9 [ 298.397726][ T8990] RDX: 0000000000000843 RSI: 00000000000000ff RDI: 00000000001ff000 [ 298.397735][ T8990] RBP: 00007f3159411f91 R08: 00000000fffff000 R09: 0000000000000000 [ 298.397744][ T8990] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 298.397753][ T8990] R13: 00007f31595e6128 R14: 00007f31595e6090 R15: 00007ffc12598d18 [ 298.397774][ T8990] [ 300.170247][ T9011] openvswitch: HfR: Dropping previously announced user features [ 300.809556][ T9018] netlink: 'syz.1.598': attribute type 11 has an invalid length. [ 300.817571][ T9018] netlink: 'syz.1.598': attribute type 11 has an invalid length. [ 300.834130][ T9018] netlink: 'syz.1.598': attribute type 11 has an invalid length. [ 300.865176][ T9018] netlink: 'syz.1.598': attribute type 11 has an invalid length. [ 301.208528][ T9025] zswap: compressor not available [ 303.987526][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 305.391722][ T9095] zswap: compressor not available [ 305.544661][ T9101] ima: policy update failed [ 305.585709][ T30] audit: type=1802 audit(4294967308.090:8): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.614" res=0 errno=0 [ 305.791316][ T9106] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 307.295889][ T9123] openvswitch: HfR: Dropping previously announced user features [ 308.236347][ T9149] FAULT_INJECTION: forcing a failure. [ 308.236347][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 308.294048][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 308.294084][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.294100][ T9149] Call Trace: [ 308.294109][ T9149] [ 308.294119][ T9149] dump_stack_lvl+0x16c/0x1f0 [ 308.294153][ T9149] should_fail_ex+0x512/0x640 [ 308.294185][ T9149] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 308.294215][ T9149] should_failslab+0xc2/0x120 [ 308.294255][ T9149] kmem_cache_alloc_noprof+0x75/0x6e0 [ 308.294283][ T9149] ? vm_area_alloc+0x1f/0x160 [ 308.294328][ T9149] ? vm_area_alloc+0x1f/0x160 [ 308.294363][ T9149] vm_area_alloc+0x1f/0x160 [ 308.294401][ T9149] __mmap_region+0xf85/0x27a0 [ 308.294427][ T9149] ? find_held_lock+0x2b/0x80 [ 308.294454][ T9149] ? __pfx___mmap_region+0x10/0x10 [ 308.294477][ T9149] ? finish_task_switch.isra.0+0x21c/0xc10 [ 308.294505][ T9149] ? rcu_is_watching+0x12/0xc0 [ 308.294528][ T9149] ? finish_task_switch.isra.0+0x221/0xc10 [ 308.294552][ T9149] ? lockdep_hardirqs_on+0x7c/0x110 [ 308.294576][ T9149] ? finish_task_switch.isra.0+0x221/0xc10 [ 308.294626][ T9149] ? __pfx___schedule+0x10/0x10 [ 308.294686][ T9149] ? trace_cap_capable+0x18d/0x200 [ 308.294733][ T9149] mmap_region+0x1ab/0x3f0 [ 308.294760][ T9149] ? __get_unmapped_area+0x267/0x440 [ 308.294797][ T9149] do_mmap+0xa3e/0x1210 [ 308.294837][ T9149] ? __pfx_do_mmap+0x10/0x10 [ 308.294869][ T9149] ? __pfx_down_write_killable+0x10/0x10 [ 308.294910][ T9149] vm_mmap_pgoff+0x29e/0x470 [ 308.294950][ T9149] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 308.294990][ T9149] ? __x64_sys_futex+0x1e0/0x4c0 [ 308.295021][ T9149] ? __x64_sys_futex+0x1e9/0x4c0 [ 308.295059][ T9149] ksys_mmap_pgoff+0x7d/0x5c0 [ 308.295089][ T9149] ? xfd_validate_state+0x61/0x180 [ 308.295123][ T9149] ? __pfx_ksys_write+0x10/0x10 [ 308.295155][ T9149] __x64_sys_mmap+0x125/0x190 [ 308.295196][ T9149] do_syscall_64+0xcd/0xfa0 [ 308.295228][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.295343][ T9149] RIP: 0033:0x7f315938eec9 [ 308.295368][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.295391][ T9149] RSP: 002b:00007f315a1fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 308.295415][ T9149] RAX: ffffffffffffffda RBX: 00007f31595e5fa0 RCX: 00007f315938eec9 [ 308.295432][ T9149] RDX: 0000000000000001 RSI: 0000000002020009 RDI: 0000000000000000 [ 308.295447][ T9149] RBP: 00007f3159411f91 R08: fffffffffffffffa R09: 0000000000008000 [ 308.295464][ T9149] R10: 0000009000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 308.295481][ T9149] R13: 00007f31595e6038 R14: 00007f31595e5fa0 R15: 00007ffc12598d18 [ 308.295521][ T9149] [ 308.568913][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.914545][ T9163] openvswitch: HfR: Dropping previously announced user features [ 309.516083][ T9165] serio: Serial port pty6 [ 309.902908][ T9173] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 310.285806][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'. [ 310.771242][ T9177] team0: Port device team_slave_1 removed [ 311.775316][ T9211] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 311.784699][ T9211] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 311.794115][ T9211] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 311.802118][ T9211] netlink: 'syz.3.631': attribute type 11 has an invalid length. [ 312.155666][ T9188] openvswitch: HfR: Dropping previously announced user features [ 312.334751][ T9191] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 317.357508][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.372936][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.957339][ T9392] random: crng reseeded on system resumption [ 323.864943][ T9428] HfR: entered promiscuous mode [ 324.280567][ T9429] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.309470][ T9429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.319648][ T9429] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.331170][ T9429] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 324.437298][ T9429] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.467773][ T9429] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.528515][ T9429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.627911][ T9460] openvswitch: HfR: Dropping previously announced user features [ 325.744685][ T8341] Bluetooth: hci3: command 0x0c1a tx timeout [ 326.384188][ T8341] Bluetooth: hci2: command 0x0c1a tx timeout [ 326.390238][ T8654] Bluetooth: hci1: command 0x0c1a tx timeout [ 326.420830][ T9472] netlink: 'syz.3.669': attribute type 11 has an invalid length. [ 326.468464][ T8341] Bluetooth: hci0: command 0x0c1a tx timeout [ 326.494757][ T9472] netlink: 'syz.3.669': attribute type 11 has an invalid length. [ 326.568652][ T8341] Bluetooth: hci4: command 0x0c1a tx timeout [ 326.578214][ T9472] netlink: 'syz.3.669': attribute type 11 has an invalid length. [ 326.674070][ T9472] netlink: 'syz.3.669': attribute type 11 has an invalid length. [ 327.811490][ T9484] openvswitch: HfR: Dropping previously announced user features [ 327.820861][ T9501] random: crng reseeded on system resumption [ 328.470712][ T8341] Bluetooth: hci2: command 0x0c1a tx timeout [ 328.544307][ T8341] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.162045][ T9522] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 329.170201][ T9522] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 329.183399][ T9522] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 329.193568][ T9522] netlink: 'syz.3.680': attribute type 11 has an invalid length. [ 331.667226][ T9561] FAULT_INJECTION: forcing a failure. [ 331.667226][ T9561] name failslab, interval 1, probability 0, space 0, times 0 [ 331.684026][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) [ 331.684060][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.684073][ T9561] Call Trace: [ 331.684081][ T9561] [ 331.684090][ T9561] dump_stack_lvl+0x16c/0x1f0 [ 331.684135][ T9561] should_fail_ex+0x512/0x640 [ 331.684165][ T9561] ? __kmalloc_cache_noprof+0x5f/0x780 [ 331.684206][ T9561] should_failslab+0xc2/0x120 [ 331.684238][ T9561] __kmalloc_cache_noprof+0x72/0x780 [ 331.684273][ T9561] ? fuse_dev_alloc_install+0x2b/0x40 [ 331.684312][ T9561] ? cuse_channel_open+0x1de/0x7f0 [ 331.684347][ T9561] ? cuse_channel_open+0x1de/0x7f0 [ 331.684373][ T9561] cuse_channel_open+0x1de/0x7f0 [ 331.684402][ T9561] ? __pfx_cuse_channel_open+0x10/0x10 [ 331.684433][ T9561] misc_open+0x26d/0x450 [ 331.684467][ T9561] ? __pfx_misc_open+0x10/0x10 [ 331.684496][ T9561] chrdev_open+0x234/0x6a0 [ 331.684526][ T9561] ? __pfx_apparmor_file_open+0x10/0x10 [ 331.684565][ T9561] ? __pfx_chrdev_open+0x10/0x10 [ 331.684596][ T9561] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 331.684634][ T9561] do_dentry_open+0x982/0x1530 [ 331.684664][ T9561] ? __pfx_chrdev_open+0x10/0x10 [ 331.684709][ T9561] vfs_open+0x82/0x3f0 [ 331.684748][ T9561] path_openat+0x1de4/0x2cb0 [ 331.684793][ T9561] ? __pfx_path_openat+0x10/0x10 [ 331.684831][ T9561] do_filp_open+0x20b/0x470 [ 331.684861][ T9561] ? __pfx_do_filp_open+0x10/0x10 [ 331.684920][ T9561] ? alloc_fd+0x471/0x7d0 [ 331.684961][ T9561] do_sys_openat2+0x11b/0x1d0 [ 331.684999][ T9561] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.685049][ T9561] __x64_sys_openat+0x174/0x210 [ 331.685089][ T9561] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.685152][ T9561] do_syscall_64+0xcd/0xfa0 [ 331.685192][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.685218][ T9561] RIP: 0033:0x7f2dc618eec9 [ 331.685240][ T9561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.685269][ T9561] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.685294][ T9561] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 331.685312][ T9561] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 331.685332][ T9561] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 331.685348][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.685363][ T9561] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 331.685400][ T9561] [ 332.845569][ T9575] kAFS: Invalid Command on /proc/fs/afs/cells file [ 333.094991][ T9580] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 333.144313][ T9580] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 333.152098][ T9580] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 333.265180][ T9580] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 333.846431][ T9590] hub 1-0:1.0: USB hub found [ 333.911208][ T9590] hub 1-0:1.0: 1 port detected [ 334.062792][ T9597] random: crng reseeded on system resumption [ 334.845217][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 334.869930][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 334.880873][ T9603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 337.803174][ T9650] hub 1-0:1.0: USB hub found [ 337.864065][ T9650] hub 1-0:1.0: 1 port detected [ 339.628724][ T9671] openvswitch: HfR: Dropping previously announced user features [ 339.885590][ T9673] netlink: 'syz.1.715': attribute type 64 has an invalid length. [ 339.927776][ T9673] netlink: 74 bytes leftover after parsing attributes in process `syz.1.715'. [ 341.282337][ T9693] netlink: 'syz.4.720': attribute type 11 has an invalid length. [ 341.317997][ T9693] netlink: 'syz.4.720': attribute type 11 has an invalid length. [ 341.337362][ T9700] capability: warning: `syz.2.722' uses 32-bit capabilities (legacy support in use) [ 341.365521][ T9693] netlink: 'syz.4.720': attribute type 11 has an invalid length. [ 341.387590][ T9693] netlink: 'syz.4.720': attribute type 11 has an invalid length. [ 342.137267][ T9708] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 342.208341][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.724'. [ 342.532513][ T9717] hub 1-0:1.0: USB hub found [ 342.553048][ T9717] hub 1-0:1.0: 1 port detected [ 345.836625][ T9749] netlink: 'syz.1.732': attribute type 11 has an invalid length. [ 345.896610][ T9749] netlink: 'syz.1.732': attribute type 11 has an invalid length. [ 345.934274][ T9749] netlink: 'syz.1.732': attribute type 11 has an invalid length. [ 345.942069][ T9749] netlink: 'syz.1.732': attribute type 11 has an invalid length. [ 346.228819][ T9763] random: crng reseeded on system resumption [ 347.786719][ T9787] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 347.881253][ T30] audit: type=1804 audit(4294967350.369:9): pid=9783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.738" name="/newroot/203/file0" dev="tmpfs" ino=1078 res=1 errno=0 [ 349.068303][ T9814] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 349.477042][ T9819] binder: 9818:9819 ioctl 40046210 0 returned -14 [ 349.907512][ T9828] FAULT_INJECTION: forcing a failure. [ 349.907512][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 349.937032][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 349.937061][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.937071][ T9828] Call Trace: [ 349.937077][ T9828] [ 349.937083][ T9828] dump_stack_lvl+0x16c/0x1f0 [ 349.937104][ T9828] should_fail_ex+0x512/0x640 [ 349.937122][ T9828] ? __kmalloc_noprof+0xca/0x880 [ 349.937147][ T9828] should_failslab+0xc2/0x120 [ 349.937166][ T9828] __kmalloc_noprof+0xdd/0x880 [ 349.937188][ T9828] ? udp_init_sock+0x24e/0x450 [ 349.937207][ T9828] ? udp_init_sock+0x24e/0x450 [ 349.937222][ T9828] udp_init_sock+0x24e/0x450 [ 349.937236][ T9828] ? __pfx_udp_init_sock+0x10/0x10 [ 349.937253][ T9828] inet_create+0x939/0x1040 [ 349.937268][ T9828] ? inet_create+0x93/0x1040 [ 349.937286][ T9828] __sock_create+0x338/0x8d0 [ 349.937311][ T9828] inet_ctl_sock_create+0x94/0x230 [ 349.937333][ T9828] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 349.937354][ T9828] ? lockdep_init_map_type+0x5c/0x280 [ 349.937375][ T9828] ? lockdep_init_map_type+0x5c/0x280 [ 349.937395][ T9828] ? __pfx_igmp_net_init+0x10/0x10 [ 349.937410][ T9828] igmp_net_init+0xd0/0x1a0 [ 349.937425][ T9828] ops_init+0x1df/0x5f0 [ 349.937444][ T9828] setup_net+0x100/0x390 [ 349.937461][ T9828] ? __pfx_setup_net+0x10/0x10 [ 349.937479][ T9828] ? debug_mutex_init+0x37/0x70 [ 349.937495][ T9828] copy_net_ns+0x2f8/0x690 [ 349.937516][ T9828] create_new_namespaces+0x3ea/0xa90 [ 349.937537][ T9828] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 349.937555][ T9828] ksys_unshare+0x45b/0xa40 [ 349.937574][ T9828] ? __pfx_ksys_unshare+0x10/0x10 [ 349.937593][ T9828] ? xfd_validate_state+0x61/0x180 [ 349.937618][ T9828] __x64_sys_unshare+0x31/0x40 [ 349.937636][ T9828] do_syscall_64+0xcd/0xfa0 [ 349.937653][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.937667][ T9828] RIP: 0033:0x7f315938eec9 [ 349.937680][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.937693][ T9828] RSP: 002b:00007f315a1dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 349.937716][ T9828] RAX: ffffffffffffffda RBX: 00007f31595e6090 RCX: 00007f315938eec9 [ 349.937727][ T9828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 349.937735][ T9828] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 349.937744][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.937752][ T9828] R13: 00007f31595e6128 R14: 00007f31595e6090 R15: 00007ffc12598d18 [ 349.937773][ T9828] [ 349.937876][ T9828] Failed to initialize the IGMP autojoin socket (err -12) [ 351.491035][ T9852] random: crng reseeded on system resumption [ 354.497907][ T9913] openvswitch: HfR: Dropping previously announced user features [ 354.534522][ T9913] FAULT_INJECTION: forcing a failure. [ 354.534522][ T9913] name failslab, interval 1, probability 0, space 0, times 0 [ 354.580149][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.2.766 Not tainted syzkaller #0 PREEMPT(full) [ 354.580184][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.580199][ T9913] Call Trace: [ 354.580209][ T9913] [ 354.580220][ T9913] dump_stack_lvl+0x16c/0x1f0 [ 354.580251][ T9913] should_fail_ex+0x512/0x640 [ 354.580269][ T9913] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 354.580298][ T9913] should_failslab+0xc2/0x120 [ 354.580317][ T9913] kmem_cache_alloc_noprof+0x75/0x6e0 [ 354.580333][ T9913] ? skb_clone+0x190/0x3f0 [ 354.580354][ T9913] ? skb_clone+0x190/0x3f0 [ 354.580369][ T9913] skb_clone+0x190/0x3f0 [ 354.580386][ T9913] netlink_deliver_tap+0xabd/0xd30 [ 354.580408][ T9913] netlink_unicast+0x71f/0x870 [ 354.580428][ T9913] ? __pfx_netlink_unicast+0x10/0x10 [ 354.580446][ T9913] ? genl_rcv_msg+0x4bb/0x800 [ 354.580471][ T9913] netlink_ack+0x696/0xb80 [ 354.580494][ T9913] netlink_rcv_skb+0x332/0x420 [ 354.580511][ T9913] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.580531][ T9913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.580560][ T9913] ? netlink_deliver_tap+0x1ae/0xd30 [ 354.580579][ T9913] genl_rcv+0x28/0x40 [ 354.580596][ T9913] netlink_unicast+0x5a7/0x870 [ 354.580616][ T9913] ? __pfx_netlink_unicast+0x10/0x10 [ 354.580641][ T9913] netlink_sendmsg+0x8c8/0xdd0 [ 354.580662][ T9913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.580681][ T9913] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 354.580705][ T9913] ____sys_sendmsg+0xa98/0xc70 [ 354.580725][ T9913] ? copy_msghdr_from_user+0x10a/0x160 [ 354.580741][ T9913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.580766][ T9913] ? __pfx_futex_wake_mark+0x10/0x10 [ 354.580790][ T9913] ___sys_sendmsg+0x134/0x1d0 [ 354.580808][ T9913] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.580850][ T9913] __sys_sendmsg+0x16d/0x220 [ 354.580867][ T9913] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.580882][ T9913] ? __x64_sys_futex+0x1e0/0x4c0 [ 354.580920][ T9913] do_syscall_64+0xcd/0xfa0 [ 354.580939][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.580954][ T9913] RIP: 0033:0x7f2dc618eec9 [ 354.580967][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.580981][ T9913] RSP: 002b:00007f2dc6f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.580996][ T9913] RAX: ffffffffffffffda RBX: 00007f2dc63e6090 RCX: 00007f2dc618eec9 [ 354.581007][ T9913] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 354.581016][ T9913] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.581024][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.581033][ T9913] R13: 00007f2dc63e6128 R14: 00007f2dc63e6090 R15: 00007ffedfdd5d68 [ 354.581054][ T9913] [ 355.255871][ T9915] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 355.404854][ T9918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.767'. [ 355.824404][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.770'. [ 358.011200][ T9958] netlink: zone id is out of range [ 359.116405][ T9994] openvswitch: HfR: Dropping previously announced user features [ 359.176261][ T9994] FAULT_INJECTION: forcing a failure. [ 359.176261][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 359.204072][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.1.780 Not tainted syzkaller #0 PREEMPT(full) [ 359.204109][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 359.204124][ T9994] Call Trace: [ 359.204133][ T9994] [ 359.204142][ T9994] dump_stack_lvl+0x16c/0x1f0 [ 359.204178][ T9994] should_fail_ex+0x512/0x640 [ 359.204209][ T9994] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 359.204245][ T9994] should_failslab+0xc2/0x120 [ 359.204276][ T9994] kmem_cache_alloc_noprof+0x75/0x6e0 [ 359.204303][ T9994] ? skb_clone+0x190/0x3f0 [ 359.204338][ T9994] ? skb_clone+0x190/0x3f0 [ 359.204363][ T9994] skb_clone+0x190/0x3f0 [ 359.204394][ T9994] netlink_deliver_tap+0xabd/0xd30 [ 359.204433][ T9994] netlink_unicast+0x71f/0x870 [ 359.204465][ T9994] ? __pfx_netlink_unicast+0x10/0x10 [ 359.204496][ T9994] ? genl_rcv_msg+0x4bb/0x800 [ 359.204540][ T9994] netlink_ack+0x696/0xb80 [ 359.204580][ T9994] netlink_rcv_skb+0x332/0x420 [ 359.204611][ T9994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.204648][ T9994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.204695][ T9994] ? netlink_deliver_tap+0x1ae/0xd30 [ 359.204726][ T9994] genl_rcv+0x28/0x40 [ 359.204755][ T9994] netlink_unicast+0x5a7/0x870 [ 359.204788][ T9994] ? __pfx_netlink_unicast+0x10/0x10 [ 359.204827][ T9994] netlink_sendmsg+0x8c8/0xdd0 [ 359.204864][ T9994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.204895][ T9994] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 359.204932][ T9994] ____sys_sendmsg+0xa98/0xc70 [ 359.204965][ T9994] ? copy_msghdr_from_user+0x10a/0x160 [ 359.205002][ T9994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.205051][ T9994] ___sys_sendmsg+0x134/0x1d0 [ 359.205082][ T9994] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.205148][ T9994] __sys_sendmsg+0x16d/0x220 [ 359.205176][ T9994] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.205201][ T9994] ? __x64_sys_futex+0x1e0/0x4c0 [ 359.205253][ T9994] do_syscall_64+0xcd/0xfa0 [ 359.205281][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.205306][ T9994] RIP: 0033:0x7fcb7938eec9 [ 359.205327][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.205349][ T9994] RSP: 002b:00007fcb7a2b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.205374][ T9994] RAX: ffffffffffffffda RBX: 00007fcb795e6090 RCX: 00007fcb7938eec9 [ 359.205390][ T9994] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 359.205403][ T9994] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 359.205418][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.205432][ T9994] R13: 00007fcb795e6128 R14: 00007fcb795e6090 R15: 00007ffcaf4f4838 [ 359.205463][ T9994] [ 359.898952][T10002] db_root: not a directory: /dev/audio1 [ 359.915917][ T30] audit: type=1800 audit(4294967362.399:10): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.781" name="dbroot" dev="configfs" ino=29633 res=0 errno=0 [ 360.022289][ T9998] netlink: 'syz.4.781': attribute type 72 has an invalid length. [ 360.915022][T10018] Invalid ELF header magic: != ELF [ 362.187407][T10047] random: crng reseeded on system resumption [ 363.146092][T10067] openvswitch: HfR: Dropping previously announced user features [ 363.159527][T10067] FAULT_INJECTION: forcing a failure. [ 363.159527][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 363.201961][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.1.794 Not tainted syzkaller #0 PREEMPT(full) [ 363.201985][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.201993][T10067] Call Trace: [ 363.201999][T10067] [ 363.202006][T10067] dump_stack_lvl+0x16c/0x1f0 [ 363.202028][T10067] should_fail_ex+0x512/0x640 [ 363.202046][T10067] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 363.202063][T10067] should_failslab+0xc2/0x120 [ 363.202083][T10067] kmem_cache_alloc_node_noprof+0x78/0x770 [ 363.202097][T10067] ? __alloc_skb+0x2b2/0x380 [ 363.202116][T10067] ? __alloc_skb+0x2b2/0x380 [ 363.202129][T10067] __alloc_skb+0x2b2/0x380 [ 363.202143][T10067] ? __pfx___alloc_skb+0x10/0x10 [ 363.202158][T10067] ? genl_rcv_msg+0x4d0/0x800 [ 363.202176][T10067] ? genl_rcv_msg+0x4bb/0x800 [ 363.202200][T10067] netlink_ack+0x15d/0xb80 [ 363.202223][T10067] netlink_rcv_skb+0x332/0x420 [ 363.202240][T10067] ? __pfx_genl_rcv_msg+0x10/0x10 [ 363.202260][T10067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 363.202286][T10067] ? netlink_deliver_tap+0x1ae/0xd30 [ 363.202305][T10067] genl_rcv+0x28/0x40 [ 363.202322][T10067] netlink_unicast+0x5a7/0x870 [ 363.202342][T10067] ? __pfx_netlink_unicast+0x10/0x10 [ 363.202368][T10067] netlink_sendmsg+0x8c8/0xdd0 [ 363.202388][T10067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.202408][T10067] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 363.202431][T10067] ____sys_sendmsg+0xa98/0xc70 [ 363.202452][T10067] ? copy_msghdr_from_user+0x10a/0x160 [ 363.202468][T10067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.202498][T10067] ___sys_sendmsg+0x134/0x1d0 [ 363.202515][T10067] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.202557][T10067] __sys_sendmsg+0x16d/0x220 [ 363.202573][T10067] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.202589][T10067] ? __x64_sys_futex+0x1e0/0x4c0 [ 363.202621][T10067] do_syscall_64+0xcd/0xfa0 [ 363.202638][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.202660][T10067] RIP: 0033:0x7fcb7938eec9 [ 363.202674][T10067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.202688][T10067] RSP: 002b:00007fcb7a2b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.202702][T10067] RAX: ffffffffffffffda RBX: 00007fcb795e6090 RCX: 00007fcb7938eec9 [ 363.202712][T10067] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 363.202721][T10067] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.202730][T10067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.202738][T10067] R13: 00007fcb795e6128 R14: 00007fcb795e6090 R15: 00007ffcaf4f4838 [ 363.202760][T10067] [ 363.495374][T10072] netlink: 252 bytes leftover after parsing attributes in process `syz.4.795'. [ 363.826661][T10072] netlink: 252 bytes leftover after parsing attributes in process `syz.4.795'. [ 367.348563][T10129] netlink: 342 bytes leftover after parsing attributes in process `syz.3.804'. [ 369.075168][T10145] vivid-007: ================= START STATUS ================= [ 369.082890][T10145] vivid-007: Generate PTS: true [ 369.119994][T10145] vivid-007: Generate SCR: true [ 369.151309][T10145] tpg source WxH: 320x240 (Y'CbCr) [ 369.214006][T10145] tpg field: 1 [ 369.238186][T10145] tpg crop: (0,0)/320x240 [ 369.242582][T10145] tpg compose: (0,0)/320x240 [ 369.256205][T10145] tpg colorspace: 8 [ 369.265249][T10145] tpg transfer function: 0/0 [ 369.273827][T10145] tpg Y'CbCr encoding: 0/0 [ 369.344447][T10145] tpg quantization: 0/0 [ 369.348630][T10145] tpg RGB range: 0/2 [ 369.435160][T10145] vivid-007: ================== END STATUS ================== [ 370.351519][ T30] audit: type=1800 audit(4294967372.849:11): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.813" name="dbroot" dev="configfs" ino=31096 res=0 errno=0 [ 370.394192][T10166] db_root: not a directory: /dev/audio1 [ 370.765607][T10164] netlink: 'syz.2.813': attribute type 72 has an invalid length. [ 372.841670][T10201] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 372.977471][T10202] sd 0:0:1:0: PR command failed: 1026 [ 373.025887][T10202] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 373.036079][T10202] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 374.260245][T10211] random: crng reseeded on system resumption [ 376.229745][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 378.790426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.797036][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.591513][T10278] netlink: 'syz.1.838': attribute type 11 has an invalid length. [ 379.629495][T10278] netlink: 'syz.1.838': attribute type 11 has an invalid length. [ 379.678666][T10278] netlink: 'syz.1.838': attribute type 11 has an invalid length. [ 379.707916][T10278] netlink: 'syz.1.838': attribute type 11 has an invalid length. [ 380.818445][T10298] openvswitch: HfR: Dropping previously announced user features [ 381.721057][T10312] FAULT_INJECTION: forcing a failure. [ 381.721057][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 381.840195][T10312] CPU: 1 UID: 0 PID: 10312 Comm: syz.2.846 Not tainted syzkaller #0 PREEMPT(full) [ 381.840229][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.840245][T10312] Call Trace: [ 381.840253][T10312] [ 381.840263][T10312] dump_stack_lvl+0x16c/0x1f0 [ 381.840298][T10312] should_fail_ex+0x512/0x640 [ 381.840329][T10312] ? __kmalloc_cache_noprof+0x5f/0x780 [ 381.840374][T10312] should_failslab+0xc2/0x120 [ 381.840407][T10312] __kmalloc_cache_noprof+0x72/0x780 [ 381.840447][T10312] ? ovs_dp_cmd_new+0x42e/0xe60 [ 381.840476][T10312] ? ovs_dp_cmd_new+0x42e/0xe60 [ 381.840498][T10312] ovs_dp_cmd_new+0x42e/0xe60 [ 381.840532][T10312] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 381.840565][T10312] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 381.840604][T10312] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 381.840645][T10312] genl_family_rcv_msg_doit+0x209/0x2f0 [ 381.840683][T10312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 381.840732][T10312] ? bpf_lsm_capable+0x9/0x10 [ 381.840762][T10312] ? security_capable+0x7e/0x260 [ 381.840796][T10312] ? ns_capable+0xd7/0x110 [ 381.840826][T10312] genl_rcv_msg+0x55c/0x800 [ 381.840862][T10312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.840896][T10312] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 381.840935][T10312] netlink_rcv_skb+0x158/0x420 [ 381.840965][T10312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 381.841001][T10312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.841048][T10312] ? netlink_deliver_tap+0x1ae/0xd30 [ 381.841084][T10312] genl_rcv+0x28/0x40 [ 381.841114][T10312] netlink_unicast+0x5a7/0x870 [ 381.841151][T10312] ? __pfx_netlink_unicast+0x10/0x10 [ 381.841207][T10312] netlink_sendmsg+0x8c8/0xdd0 [ 381.841246][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.841285][T10312] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 381.841327][T10312] ____sys_sendmsg+0xa98/0xc70 [ 381.841364][T10312] ? copy_msghdr_from_user+0x10a/0x160 [ 381.841394][T10312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.841435][T10312] ? __pfx_futex_wake_mark+0x10/0x10 [ 381.841479][T10312] ___sys_sendmsg+0x134/0x1d0 [ 381.841511][T10312] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.841592][T10312] __sys_sendmsg+0x16d/0x220 [ 381.841619][T10312] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.841643][T10312] ? __x64_sys_futex+0x1e0/0x4c0 [ 381.841698][T10312] do_syscall_64+0xcd/0xfa0 [ 381.841731][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.841753][T10312] RIP: 0033:0x7f2dc618eec9 [ 381.841774][T10312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.841798][T10312] RSP: 002b:00007f2dc6f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.841822][T10312] RAX: ffffffffffffffda RBX: 00007f2dc63e6090 RCX: 00007f2dc618eec9 [ 381.841839][T10312] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 381.841854][T10312] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.841870][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.841884][T10312] R13: 00007f2dc63e6128 R14: 00007f2dc63e6090 R15: 00007ffedfdd5d68 [ 381.841922][T10312] [ 383.921796][T10342] openvswitch: HfR: Dropping previously announced user features [ 385.617254][T10376] FAULT_INJECTION: forcing a failure. [ 385.617254][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 385.672856][T10376] CPU: 0 UID: 0 PID: 10376 Comm: syz.3.861 Not tainted syzkaller #0 PREEMPT(full) [ 385.672891][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.672907][T10376] Call Trace: [ 385.672916][T10376] [ 385.672926][T10376] dump_stack_lvl+0x16c/0x1f0 [ 385.672963][T10376] should_fail_ex+0x512/0x640 [ 385.672995][T10376] ? __kmalloc_cache_noprof+0x5f/0x780 [ 385.673039][T10376] should_failslab+0xc2/0x120 [ 385.673073][T10376] __kmalloc_cache_noprof+0x72/0x780 [ 385.673114][T10376] ? ovs_dp_cmd_new+0x42e/0xe60 [ 385.673145][T10376] ? ovs_dp_cmd_new+0x42e/0xe60 [ 385.673167][T10376] ovs_dp_cmd_new+0x42e/0xe60 [ 385.673209][T10376] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 385.673248][T10376] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 385.673288][T10376] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 385.673335][T10376] genl_family_rcv_msg_doit+0x209/0x2f0 [ 385.673373][T10376] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 385.673419][T10376] ? bpf_lsm_capable+0x9/0x10 [ 385.673448][T10376] ? security_capable+0x7e/0x260 [ 385.673482][T10376] ? ns_capable+0xd7/0x110 [ 385.673513][T10376] genl_rcv_msg+0x55c/0x800 [ 385.673553][T10376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.673589][T10376] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 385.673624][T10376] netlink_rcv_skb+0x158/0x420 [ 385.673656][T10376] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.673693][T10376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.673741][T10376] ? netlink_deliver_tap+0x1ae/0xd30 [ 385.673776][T10376] genl_rcv+0x28/0x40 [ 385.673804][T10376] netlink_unicast+0x5a7/0x870 [ 385.673838][T10376] ? __pfx_netlink_unicast+0x10/0x10 [ 385.673882][T10376] netlink_sendmsg+0x8c8/0xdd0 [ 385.673918][T10376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.673953][T10376] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 385.674013][T10376] ____sys_sendmsg+0xa98/0xc70 [ 385.674074][T10376] ? copy_msghdr_from_user+0x10a/0x160 [ 385.674124][T10376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.674181][T10376] ? __pfx_futex_wake_mark+0x10/0x10 [ 385.674236][T10376] ___sys_sendmsg+0x134/0x1d0 [ 385.674255][T10376] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.674298][T10376] __sys_sendmsg+0x16d/0x220 [ 385.674320][T10376] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.674336][T10376] ? __x64_sys_futex+0x1e0/0x4c0 [ 385.674367][T10376] do_syscall_64+0xcd/0xfa0 [ 385.674392][T10376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.674407][T10376] RIP: 0033:0x7f315938eec9 [ 385.674419][T10376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.674433][T10376] RSP: 002b:00007f315a1bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.674447][T10376] RAX: ffffffffffffffda RBX: 00007f31595e6180 RCX: 00007f315938eec9 [ 385.674456][T10376] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 385.674465][T10376] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 385.674474][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.674483][T10376] R13: 00007f31595e6218 R14: 00007f31595e6180 R15: 00007ffc12598d18 [ 385.674504][T10376] [ 386.403454][T10388] HK&S: entered promiscuous mode [ 386.893884][T10384] delete_channel: no stack [ 387.342103][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 387.545485][T10405] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 387.553261][T10405] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 387.563189][T10405] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 387.595815][T10405] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 387.710038][T10401] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 387.888819][T10410] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 388.046238][T10410] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 388.054359][T10410] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 388.064634][T10410] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 390.059626][T10443] HK&S: entered promiscuous mode [ 390.127614][T10449] vivid-003: ================= START STATUS ================= [ 390.144234][T10449] vivid-003: ================== END STATUS ================== [ 390.612371][T10458] netlink: 'syz.2.879': attribute type 11 has an invalid length. [ 390.652727][T10458] netlink: 'syz.2.879': attribute type 11 has an invalid length. [ 390.782068][T10465] FAULT_INJECTION: forcing a failure. [ 390.782068][T10465] name failslab, interval 1, probability 0, space 0, times 0 [ 390.804333][T10465] CPU: 1 UID: 0 PID: 10465 Comm: syz.3.878 Not tainted syzkaller #0 PREEMPT(full) [ 390.804370][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.804384][T10465] Call Trace: [ 390.804392][T10465] [ 390.804403][T10465] dump_stack_lvl+0x16c/0x1f0 [ 390.804438][T10465] should_fail_ex+0x512/0x640 [ 390.804468][T10465] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 390.804498][T10465] should_failslab+0xc2/0x120 [ 390.804531][T10465] kmem_cache_alloc_noprof+0x75/0x6e0 [ 390.804558][T10465] ? sk_prot_alloc+0x60/0x2a0 [ 390.804600][T10465] ? sk_prot_alloc+0x60/0x2a0 [ 390.804630][T10465] sk_prot_alloc+0x60/0x2a0 [ 390.804668][T10465] sk_alloc+0x36/0xc20 [ 390.804696][T10465] inet_create+0x3a1/0x1040 [ 390.804730][T10465] ? inet_create+0x93/0x1040 [ 390.804762][T10465] __sock_create+0x338/0x8d0 [ 390.804808][T10465] inet_ctl_sock_create+0x94/0x230 [ 390.804851][T10465] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 390.804889][T10465] ? lockdep_init_map_type+0x5c/0x280 [ 390.804927][T10465] ? lockdep_init_map_type+0x5c/0x280 [ 390.804963][T10465] ? __pfx_igmp_net_init+0x10/0x10 [ 390.804990][T10465] igmp_net_init+0xd0/0x1a0 [ 390.805018][T10465] ops_init+0x1df/0x5f0 [ 390.805053][T10465] setup_net+0x100/0x390 [ 390.805084][T10465] ? __pfx_setup_net+0x10/0x10 [ 390.805117][T10465] ? debug_mutex_init+0x37/0x70 [ 390.805148][T10465] copy_net_ns+0x2f8/0x690 [ 390.805182][T10465] create_new_namespaces+0x3ea/0xa90 [ 390.805215][T10465] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 390.805245][T10465] ksys_unshare+0x45b/0xa40 [ 390.805276][T10465] ? __pfx_ksys_unshare+0x10/0x10 [ 390.805309][T10465] ? xfd_validate_state+0x61/0x180 [ 390.805349][T10465] __x64_sys_unshare+0x31/0x40 [ 390.805367][T10465] do_syscall_64+0xcd/0xfa0 [ 390.805385][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.805399][T10465] RIP: 0033:0x7f315938eec9 [ 390.805412][T10465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.805425][T10465] RSP: 002b:00007f315a1bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 390.805439][T10465] RAX: ffffffffffffffda RBX: 00007f31595e6180 RCX: 00007f315938eec9 [ 390.805449][T10465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 390.805458][T10465] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.805468][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.805476][T10465] R13: 00007f31595e6218 R14: 00007f31595e6180 R15: 00007ffc12598d18 [ 390.805502][T10465] [ 390.805546][T10465] Failed to initialize the IGMP autojoin socket (err -12) [ 391.388935][T10472] bridge0: port 3(gretap0) entered blocking state [ 391.396807][T10472] bridge0: port 3(gretap0) entered disabled state [ 391.409017][T10472] gretap0: entered allmulticast mode [ 391.436662][T10472] gretap0: entered promiscuous mode [ 391.444993][T10472] bridge0: port 3(gretap0) entered blocking state [ 391.451822][T10472] bridge0: port 3(gretap0) entered forwarding state [ 392.055702][T10484] nvme_fabrics: unknown parameter or missing value '0x00060000' in ctrl creation request [ 392.098109][T10486] HK&S: entered promiscuous mode [ 392.152143][T10484] FAULT_INJECTION: forcing a failure. [ 392.152143][T10484] name failslab, interval 1, probability 0, space 0, times 0 [ 392.194062][T10484] CPU: 1 UID: 0 PID: 10484 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT(full) [ 392.194094][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.194107][T10484] Call Trace: [ 392.194115][T10484] [ 392.194124][T10484] dump_stack_lvl+0x16c/0x1f0 [ 392.194159][T10484] should_fail_ex+0x512/0x640 [ 392.194191][T10484] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 392.194224][T10484] should_failslab+0xc2/0x120 [ 392.194258][T10484] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 392.194288][T10484] ? shmem_alloc_inode+0x25/0x50 [ 392.194324][T10484] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 392.194354][T10484] ? shmem_alloc_inode+0x25/0x50 [ 392.194385][T10484] shmem_alloc_inode+0x25/0x50 [ 392.194417][T10484] alloc_inode+0x61/0x240 [ 392.194451][T10484] new_inode+0x22/0x1c0 [ 392.194482][T10484] ? trace_cap_capable+0x18d/0x200 [ 392.194520][T10484] shmem_get_inode+0x19a/0xfb0 [ 392.194556][T10484] ? __vm_enough_memory+0x184/0x3f0 [ 392.194592][T10484] __shmem_file_setup+0x279/0x330 [ 392.194644][T10484] shmem_zero_setup+0x93/0x1a0 [ 392.194674][T10484] __mmap_region+0x2076/0x27a0 [ 392.194707][T10484] ? __pfx___mmap_region+0x10/0x10 [ 392.194730][T10484] ? finish_task_switch.isra.0+0x21c/0xc10 [ 392.194759][T10484] ? rcu_is_watching+0x12/0xc0 [ 392.194785][T10484] ? finish_task_switch.isra.0+0x221/0xc10 [ 392.194811][T10484] ? lockdep_hardirqs_on+0x7c/0x110 [ 392.194840][T10484] ? finish_task_switch.isra.0+0x221/0xc10 [ 392.194900][T10484] ? __pfx___schedule+0x10/0x10 [ 392.194971][T10484] ? trace_cap_capable+0x18d/0x200 [ 392.195018][T10484] mmap_region+0x1ab/0x3f0 [ 392.195043][T10484] ? __get_unmapped_area+0x267/0x440 [ 392.195080][T10484] do_mmap+0xa3e/0x1210 [ 392.195118][T10484] ? __pfx_do_mmap+0x10/0x10 [ 392.195151][T10484] ? __pfx_down_write_killable+0x10/0x10 [ 392.195192][T10484] vm_mmap_pgoff+0x29e/0x470 [ 392.195237][T10484] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 392.195270][T10484] ? __pfx___do_sys_clone+0x10/0x10 [ 392.195310][T10484] ? __x64_sys_futex+0x1e0/0x4c0 [ 392.195344][T10484] ? __x64_sys_futex+0x1e9/0x4c0 [ 392.195387][T10484] ksys_mmap_pgoff+0x7d/0x5c0 [ 392.195418][T10484] ? xfd_validate_state+0x61/0x180 [ 392.195461][T10484] __x64_sys_mmap+0x125/0x190 [ 392.195503][T10484] do_syscall_64+0xcd/0xfa0 [ 392.195535][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.195562][T10484] RIP: 0033:0x7f7323d8eec9 [ 392.195584][T10484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.195616][T10484] RSP: 002b:00007f7321ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 392.195643][T10484] RAX: ffffffffffffffda RBX: 00007f7323fe5fa0 RCX: 00007f7323d8eec9 [ 392.195661][T10484] RDX: 0000000000000006 RSI: 0000000002020009 RDI: 0000000000000000 [ 392.195677][T10484] RBP: 00007f7323e11f91 R08: fffffffffffffffa R09: 0000000000008000 [ 392.195694][T10484] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 392.195711][T10484] R13: 00007f7323fe6038 R14: 00007f7323fe5fa0 R15: 00007ffe422a3c98 [ 392.195750][T10484] [ 393.443397][T10503] FAULT_INJECTION: forcing a failure. [ 393.443397][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 393.460941][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.1.889 Not tainted syzkaller #0 PREEMPT(full) [ 393.460977][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.460992][T10503] Call Trace: [ 393.461000][T10503] [ 393.461009][T10503] dump_stack_lvl+0x16c/0x1f0 [ 393.461042][T10503] should_fail_ex+0x512/0x640 [ 393.461071][T10503] ? __kmalloc_cache_noprof+0x5f/0x780 [ 393.461113][T10503] should_failslab+0xc2/0x120 [ 393.461145][T10503] __kmalloc_cache_noprof+0x72/0x780 [ 393.461183][T10503] ? ovs_flow_tbl_init+0x1cc/0x600 [ 393.461226][T10503] ? ovs_flow_tbl_init+0x1cc/0x600 [ 393.461261][T10503] ovs_flow_tbl_init+0x1cc/0x600 [ 393.461307][T10503] ovs_dp_cmd_new+0x251/0xe60 [ 393.461335][T10503] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 393.461362][T10503] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 393.461392][T10503] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 393.461429][T10503] genl_family_rcv_msg_doit+0x209/0x2f0 [ 393.461464][T10503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.461511][T10503] ? bpf_lsm_capable+0x9/0x10 [ 393.461538][T10503] ? security_capable+0x7e/0x260 [ 393.461576][T10503] ? ns_capable+0xd7/0x110 [ 393.461607][T10503] genl_rcv_msg+0x55c/0x800 [ 393.461647][T10503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.461683][T10503] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 393.461721][T10503] netlink_rcv_skb+0x158/0x420 [ 393.461752][T10503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.461789][T10503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.461836][T10503] ? netlink_deliver_tap+0x1ae/0xd30 [ 393.461872][T10503] genl_rcv+0x28/0x40 [ 393.461903][T10503] netlink_unicast+0x5a7/0x870 [ 393.461940][T10503] ? __pfx_netlink_unicast+0x10/0x10 [ 393.461981][T10503] netlink_sendmsg+0x8c8/0xdd0 [ 393.462016][T10503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.462056][T10503] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 393.462097][T10503] ____sys_sendmsg+0xa98/0xc70 [ 393.462133][T10503] ? copy_msghdr_from_user+0x10a/0x160 [ 393.462162][T10503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.462205][T10503] ? __pfx_futex_wake_mark+0x10/0x10 [ 393.462248][T10503] ___sys_sendmsg+0x134/0x1d0 [ 393.462288][T10503] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.462365][T10503] __sys_sendmsg+0x16d/0x220 [ 393.462396][T10503] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.462425][T10503] ? __x64_sys_futex+0x1e0/0x4c0 [ 393.462486][T10503] do_syscall_64+0xcd/0xfa0 [ 393.462517][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.462543][T10503] RIP: 0033:0x7fcb7938eec9 [ 393.462563][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.462588][T10503] RSP: 002b:00007fcb7a2b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.462613][T10503] RAX: ffffffffffffffda RBX: 00007fcb795e6090 RCX: 00007fcb7938eec9 [ 393.462631][T10503] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 393.462647][T10503] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.462662][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.462677][T10503] R13: 00007fcb795e6128 R14: 00007fcb795e6090 R15: 00007ffcaf4f4838 [ 393.462713][T10503] [ 394.038069][ T30] audit: type=1800 audit(4294967405.532:12): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.893" name="discovery_nqn" dev="configfs" ino=33083 res=0 errno=0 [ 394.513115][T10523] netlink: 306 bytes leftover after parsing attributes in process `syz.3.896'. [ 395.055860][T10528] bridge0: port 3(gretap0) entered blocking state [ 395.062546][T10528] bridge0: port 3(gretap0) entered disabled state [ 395.079298][T10528] gretap0: entered allmulticast mode [ 395.094087][T10528] gretap0: entered promiscuous mode [ 395.114653][T10528] bridge0: port 3(gretap0) entered blocking state [ 395.121401][T10528] bridge0: port 3(gretap0) entered forwarding state [ 396.283668][T10555] netlink: 330 bytes leftover after parsing attributes in process `syz.3.904'. [ 396.689994][T10569] FAULT_INJECTION: forcing a failure. [ 396.689994][T10569] name failslab, interval 1, probability 0, space 0, times 0 [ 396.723676][T10569] CPU: 0 UID: 0 PID: 10569 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(full) [ 396.723712][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.723727][T10569] Call Trace: [ 396.723735][T10569] [ 396.723745][T10569] dump_stack_lvl+0x16c/0x1f0 [ 396.723779][T10569] should_fail_ex+0x512/0x640 [ 396.723810][T10569] ? __kmalloc_noprof+0xca/0x880 [ 396.723853][T10569] should_failslab+0xc2/0x120 [ 396.723883][T10569] __kmalloc_noprof+0xdd/0x880 [ 396.723919][T10569] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.723945][T10569] ? ovs_vport_alloc+0x30/0x3d0 [ 396.723976][T10569] ? ovs_vport_alloc+0x30/0x3d0 [ 396.724003][T10569] ovs_vport_alloc+0x30/0x3d0 [ 396.724046][T10569] internal_dev_create+0x25/0x520 [ 396.724082][T10569] ovs_vport_add+0x144/0x4d0 [ 396.724116][T10569] new_vport+0x16/0x1d0 [ 396.724155][T10569] ovs_dp_cmd_new+0x6ba/0xe60 [ 396.724191][T10569] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 396.724224][T10569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 396.724265][T10569] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 396.724311][T10569] genl_family_rcv_msg_doit+0x209/0x2f0 [ 396.724350][T10569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.724399][T10569] ? bpf_lsm_capable+0x9/0x10 [ 396.724430][T10569] ? security_capable+0x7e/0x260 [ 396.724465][T10569] ? ns_capable+0xd7/0x110 [ 396.724496][T10569] genl_rcv_msg+0x55c/0x800 [ 396.724536][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.724571][T10569] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 396.724608][T10569] netlink_rcv_skb+0x158/0x420 [ 396.724638][T10569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.724674][T10569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.724721][T10569] ? netlink_deliver_tap+0x1ae/0xd30 [ 396.724757][T10569] genl_rcv+0x28/0x40 [ 396.724786][T10569] netlink_unicast+0x5a7/0x870 [ 396.724819][T10569] ? __pfx_netlink_unicast+0x10/0x10 [ 396.724858][T10569] netlink_sendmsg+0x8c8/0xdd0 [ 396.724894][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.724929][T10569] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 396.724970][T10569] ____sys_sendmsg+0xa98/0xc70 [ 396.725005][T10569] ? copy_msghdr_from_user+0x10a/0x160 [ 396.725042][T10569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.725088][T10569] ? __pfx_futex_wake_mark+0x10/0x10 [ 396.725133][T10569] ___sys_sendmsg+0x134/0x1d0 [ 396.725165][T10569] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.725245][T10569] __sys_sendmsg+0x16d/0x220 [ 396.725275][T10569] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.725304][T10569] ? __x64_sys_futex+0x1e0/0x4c0 [ 396.725361][T10569] do_syscall_64+0xcd/0xfa0 [ 396.725393][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.725420][T10569] RIP: 0033:0x7f315938eec9 [ 396.725441][T10569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.725465][T10569] RSP: 002b:00007f315a1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.725490][T10569] RAX: ffffffffffffffda RBX: 00007f31595e6090 RCX: 00007f315938eec9 [ 396.725508][T10569] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 396.725525][T10569] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.725541][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.725557][T10569] R13: 00007f31595e6128 R14: 00007f31595e6090 R15: 00007ffc12598d18 [ 396.725598][T10569] [ 397.513697][T10575] Unable to find swap-space signature [ 397.664735][T10578] FAULT_INJECTION: forcing a failure. [ 397.664735][T10578] name failslab, interval 1, probability 0, space 0, times 0 [ 397.677807][T10578] CPU: 1 UID: 0 PID: 10578 Comm: syz.2.911 Not tainted syzkaller #0 PREEMPT(full) [ 397.677827][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.677836][T10578] Call Trace: [ 397.677841][T10578] [ 397.677847][T10578] dump_stack_lvl+0x16c/0x1f0 [ 397.677868][T10578] should_fail_ex+0x512/0x640 [ 397.677885][T10578] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 397.677902][T10578] should_failslab+0xc2/0x120 [ 397.677920][T10578] kmem_cache_alloc_noprof+0x75/0x6e0 [ 397.677933][T10578] ? anon_vma_clone+0x405/0x5c0 [ 397.677953][T10578] ? anon_vma_fork+0x200/0x620 [ 397.677977][T10578] ? anon_vma_fork+0x200/0x620 [ 397.677996][T10578] anon_vma_fork+0x200/0x620 [ 397.678019][T10578] dup_mmap+0x151f/0x2280 [ 397.678046][T10578] ? __pfx_dup_mmap+0x10/0x10 [ 397.678079][T10578] copy_process+0x3f0c/0x76a0 [ 397.678096][T10578] ? __pfx___futex_wait+0x10/0x10 [ 397.678117][T10578] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 397.678140][T10578] ? __pfx_copy_process+0x10/0x10 [ 397.678156][T10578] ? futex_private_hash_put+0x176/0x300 [ 397.678183][T10578] ? futex_private_hash_put+0x18a/0x300 [ 397.678204][T10578] kernel_clone+0xfc/0x930 [ 397.678222][T10578] ? __pfx_kernel_clone+0x10/0x10 [ 397.678251][T10578] __do_sys_clone+0xce/0x120 [ 397.678268][T10578] ? __pfx___do_sys_clone+0x10/0x10 [ 397.678294][T10578] ? xfd_validate_state+0x61/0x180 [ 397.678322][T10578] do_syscall_64+0xcd/0xfa0 [ 397.678340][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.678354][T10578] RIP: 0033:0x7f2dc618eec9 [ 397.678366][T10578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.678380][T10578] RSP: 002b:00007f2dc6f9ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 397.678393][T10578] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 397.678403][T10578] RDX: 0000200000000080 RSI: 0000200000001430 RDI: 0000000040000000 [ 397.678411][T10578] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.678419][T10578] R10: 00002000000000c0 R11: 0000000000000206 R12: 0000000000000000 [ 397.678427][T10578] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 397.678448][T10578] [ 398.652867][T10604] nla_validate_range_unsigned: 2 callbacks suppressed [ 398.652882][T10604] netlink: 'syz.4.916': attribute type 11 has an invalid length. [ 398.704314][T10604] netlink: 'syz.4.916': attribute type 11 has an invalid length. [ 398.712058][T10604] netlink: 'syz.4.916': attribute type 11 has an invalid length. [ 398.767477][T10604] netlink: 'syz.4.916': attribute type 11 has an invalid length. [ 398.887257][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 399.747602][T10623] FAULT_INJECTION: forcing a failure. [ 399.747602][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 399.772077][T10623] CPU: 1 UID: 0 PID: 10623 Comm: syz.1.921 Not tainted syzkaller #0 PREEMPT(full) [ 399.772115][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.772131][T10623] Call Trace: [ 399.772141][T10623] [ 399.772151][T10623] dump_stack_lvl+0x16c/0x1f0 [ 399.772187][T10623] should_fail_ex+0x512/0x640 [ 399.772217][T10623] ? __kmalloc_cache_noprof+0x5f/0x780 [ 399.772263][T10623] should_failslab+0xc2/0x120 [ 399.772296][T10623] __kmalloc_cache_noprof+0x72/0x780 [ 399.772336][T10623] ? ovs_flow_tbl_init+0x8b/0x600 [ 399.772381][T10623] ? ovs_flow_tbl_init+0x8b/0x600 [ 399.772418][T10623] ovs_flow_tbl_init+0x8b/0x600 [ 399.772462][T10623] ovs_dp_cmd_new+0x251/0xe60 [ 399.772498][T10623] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 399.772528][T10623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 399.772565][T10623] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 399.772611][T10623] genl_family_rcv_msg_doit+0x209/0x2f0 [ 399.772650][T10623] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 399.772699][T10623] ? bpf_lsm_capable+0x9/0x10 [ 399.772731][T10623] ? security_capable+0x7e/0x260 [ 399.772762][T10623] ? ns_capable+0xd7/0x110 [ 399.772790][T10623] genl_rcv_msg+0x55c/0x800 [ 399.772829][T10623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.772863][T10623] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 399.772900][T10623] netlink_rcv_skb+0x158/0x420 [ 399.772929][T10623] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.772964][T10623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.773020][T10623] genl_rcv+0x28/0x40 [ 399.773050][T10623] netlink_unicast+0x5a7/0x870 [ 399.773095][T10623] ? __pfx_netlink_unicast+0x10/0x10 [ 399.773143][T10623] netlink_sendmsg+0x8c8/0xdd0 [ 399.773182][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.773219][T10623] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 399.773260][T10623] ____sys_sendmsg+0xa98/0xc70 [ 399.773297][T10623] ? copy_msghdr_from_user+0x10a/0x160 [ 399.773326][T10623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.773371][T10623] ? __pfx_futex_wake_mark+0x10/0x10 [ 399.773416][T10623] ___sys_sendmsg+0x134/0x1d0 [ 399.773448][T10623] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.773526][T10623] __sys_sendmsg+0x16d/0x220 [ 399.773557][T10623] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.773586][T10623] ? __x64_sys_futex+0x1e0/0x4c0 [ 399.773642][T10623] do_syscall_64+0xcd/0xfa0 [ 399.773674][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.773699][T10623] RIP: 0033:0x7fcb7938eec9 [ 399.773721][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.773745][T10623] RSP: 002b:00007fcb7a2b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.773769][T10623] RAX: ffffffffffffffda RBX: 00007fcb795e6090 RCX: 00007fcb7938eec9 [ 399.773786][T10623] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 399.773800][T10623] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 399.773813][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.773832][T10623] R13: 00007fcb795e6128 R14: 00007fcb795e6090 R15: 00007ffcaf4f4838 [ 399.773873][T10623] [ 400.471769][T10633] hub 1-0:1.0: USB hub found [ 400.484470][T10633] hub 1-0:1.0: 1 port detected [ 402.285956][ T8341] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 403.545665][T10692] netlink: 342 bytes leftover after parsing attributes in process `syz.3.933'. [ 403.766162][T10705] ICMPv6: process `syz.2.936' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 404.783250][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 405.251777][T10747] FAULT_INJECTION: forcing a failure. [ 405.251777][T10747] name failslab, interval 1, probability 0, space 0, times 0 [ 405.304090][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.4.941 Not tainted syzkaller #0 PREEMPT(full) [ 405.304125][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.304140][T10747] Call Trace: [ 405.304147][T10747] [ 405.304157][T10747] dump_stack_lvl+0x16c/0x1f0 [ 405.304191][T10747] should_fail_ex+0x512/0x640 [ 405.304222][T10747] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 405.304252][T10747] should_failslab+0xc2/0x120 [ 405.304283][T10747] kmem_cache_alloc_noprof+0x75/0x6e0 [ 405.304307][T10747] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 405.304362][T10747] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 405.304398][T10747] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 405.304440][T10747] radix_tree_insert+0x247/0x630 [ 405.304484][T10747] qrtr_node_enqueue+0x1077/0x12e0 [ 405.304523][T10747] ? __asan_memcpy+0x3c/0x60 [ 405.304552][T10747] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 405.304580][T10747] ? skb_set_owner_w+0x31f/0x710 [ 405.304604][T10747] ? skb_copy_header+0x20/0x2b0 [ 405.304629][T10747] ? __pfx_skb_set_owner_w+0x10/0x10 [ 405.304654][T10747] ? __pskb_copy_fclone+0x48e/0xb50 [ 405.304687][T10747] ? __pfx__copy_from_iter+0x10/0x10 [ 405.304727][T10747] qrtr_bcast_enqueue+0xc7/0x1b0 [ 405.304766][T10747] qrtr_sendmsg+0x444/0x7b0 [ 405.304797][T10747] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 405.304824][T10747] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 405.304860][T10747] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 405.304901][T10747] sock_write_iter+0x563/0x610 [ 405.304939][T10747] ? __pfx_sock_write_iter+0x10/0x10 [ 405.304988][T10747] ? __futex_wait+0x24b/0x2f0 [ 405.305024][T10747] ? copy_iovec_from_user+0x131/0x170 [ 405.305057][T10747] do_iter_readv_writev+0x65f/0x9e0 [ 405.305087][T10747] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 405.305120][T10747] ? bpf_lsm_file_permission+0x9/0x10 [ 405.305147][T10747] ? security_file_permission+0x71/0x210 [ 405.305174][T10747] ? rw_verify_area+0xcf/0x6c0 [ 405.305202][T10747] vfs_writev+0x35f/0xde0 [ 405.305231][T10747] ? __lock_acquire+0x62e/0x1ce0 [ 405.305269][T10747] ? __pfx_vfs_writev+0x10/0x10 [ 405.305322][T10747] ? __fget_files+0x20e/0x3c0 [ 405.305367][T10747] ? do_writev+0x28c/0x340 [ 405.305389][T10747] do_writev+0x28c/0x340 [ 405.305416][T10747] ? __pfx_do_writev+0x10/0x10 [ 405.305454][T10747] do_syscall_64+0xcd/0xfa0 [ 405.305488][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.305515][T10747] RIP: 0033:0x7f7323d8eec9 [ 405.305536][T10747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.305561][T10747] RSP: 002b:00007f7321fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 405.305586][T10747] RAX: ffffffffffffffda RBX: 00007f7323fe6090 RCX: 00007f7323d8eec9 [ 405.305604][T10747] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 405.305621][T10747] RBP: 00007f7323e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 405.305638][T10747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.305653][T10747] R13: 00007f7323fe6128 R14: 00007f7323fe6090 R15: 00007ffe422a3c98 [ 405.305692][T10747] [ 407.355043][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 408.015605][T10799] syz_tun: tun_chr_ioctl cmd 2147767519 [ 408.214309][T10801] FAULT_INJECTION: forcing a failure. [ 408.214309][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 408.294655][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.2.950 Not tainted syzkaller #0 PREEMPT(full) [ 408.294690][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.294707][T10801] Call Trace: [ 408.294716][T10801] [ 408.294726][T10801] dump_stack_lvl+0x16c/0x1f0 [ 408.294762][T10801] should_fail_ex+0x512/0x640 [ 408.294792][T10801] ? __kmalloc_cache_noprof+0x5f/0x780 [ 408.294837][T10801] should_failslab+0xc2/0x120 [ 408.294871][T10801] __kmalloc_cache_noprof+0x72/0x780 [ 408.294912][T10801] ? tbl_mask_cache_alloc+0xa1/0x200 [ 408.294955][T10801] ? tbl_mask_cache_alloc+0xa1/0x200 [ 408.294991][T10801] tbl_mask_cache_alloc+0xa1/0x200 [ 408.295030][T10801] ovs_flow_tbl_init+0x24/0x600 [ 408.295067][T10801] ? kasan_save_track+0x14/0x30 [ 408.295101][T10801] ovs_dp_cmd_new+0x251/0xe60 [ 408.295135][T10801] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 408.295169][T10801] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 408.295209][T10801] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 408.295254][T10801] genl_family_rcv_msg_doit+0x209/0x2f0 [ 408.295293][T10801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.295342][T10801] ? bpf_lsm_capable+0x9/0x10 [ 408.295383][T10801] ? security_capable+0x7e/0x260 [ 408.295419][T10801] ? ns_capable+0xd7/0x110 [ 408.295450][T10801] genl_rcv_msg+0x55c/0x800 [ 408.295497][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.295535][T10801] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 408.295575][T10801] netlink_rcv_skb+0x158/0x420 [ 408.295608][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.295645][T10801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.295692][T10801] ? netlink_deliver_tap+0x1ae/0xd30 [ 408.295728][T10801] genl_rcv+0x28/0x40 [ 408.295756][T10801] netlink_unicast+0x5a7/0x870 [ 408.295786][T10801] ? __pfx_netlink_unicast+0x10/0x10 [ 408.295828][T10801] netlink_sendmsg+0x8c8/0xdd0 [ 408.295864][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.295900][T10801] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 408.295942][T10801] ____sys_sendmsg+0xa98/0xc70 [ 408.295980][T10801] ? copy_msghdr_from_user+0x10a/0x160 [ 408.296010][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.296064][T10801] ___sys_sendmsg+0x134/0x1d0 [ 408.296097][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.296173][T10801] __sys_sendmsg+0x16d/0x220 [ 408.296204][T10801] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.296233][T10801] ? __x64_sys_futex+0x1e0/0x4c0 [ 408.296292][T10801] do_syscall_64+0xcd/0xfa0 [ 408.296324][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.296351][T10801] RIP: 0033:0x7f2dc618eec9 [ 408.296381][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.296406][T10801] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.296432][T10801] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 408.296448][T10801] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 408.296464][T10801] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.296480][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.296495][T10801] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 408.296533][T10801] [ 409.954831][T10829] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 410.362553][T10831] futex_wake_op: syz.1.957 tries to shift op by -9; fix this program [ 411.420253][T10825] kexec: Could not allocate control_code_buffer [ 413.083933][T10866] syz.2.962 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 413.407899][T10882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.454148][T10882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.504765][T10882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.529768][T10882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.546433][T10882] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 413.593609][T10882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.453644][T10910] sd 0:0:1:0: PR command failed: 1026 [ 414.522935][T10910] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 414.609683][T10910] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 415.044487][T10917] program syz.1.974 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.427842][ T8654] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.505618][ T8654] Bluetooth: hci1: command 0x0c1a tx timeout [ 415.591691][ T8654] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.600571][ T8341] Bluetooth: hci2: command 0x0c1a tx timeout [ 415.665654][ T8654] Bluetooth: hci4: command 0x0c1a tx timeout [ 416.059499][T10927] blktrace: Concurrent blktraces are not allowed on loop2 [ 417.666743][ T8654] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.145920][T11012] FAULT_INJECTION: forcing a failure. [ 421.145920][T11012] name failslab, interval 1, probability 0, space 0, times 0 [ 421.159652][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 421.159683][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.159692][T11012] Call Trace: [ 421.159698][T11012] [ 421.159704][T11012] dump_stack_lvl+0x16c/0x1f0 [ 421.159728][T11012] should_fail_ex+0x512/0x640 [ 421.159745][T11012] ? __kmalloc_cache_noprof+0x5f/0x780 [ 421.159771][T11012] should_failslab+0xc2/0x120 [ 421.159789][T11012] __kmalloc_cache_noprof+0x72/0x780 [ 421.159812][T11012] ? ovs_flow_tbl_init+0x1cc/0x600 [ 421.159837][T11012] ? ovs_flow_tbl_init+0x1cc/0x600 [ 421.159857][T11012] ovs_flow_tbl_init+0x1cc/0x600 [ 421.159881][T11012] ovs_dp_cmd_new+0x251/0xe60 [ 421.159901][T11012] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 421.159919][T11012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 421.159940][T11012] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 421.159965][T11012] genl_family_rcv_msg_doit+0x209/0x2f0 [ 421.159986][T11012] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 421.160013][T11012] ? bpf_lsm_capable+0x9/0x10 [ 421.160031][T11012] ? security_capable+0x7e/0x260 [ 421.160050][T11012] ? ns_capable+0xd7/0x110 [ 421.160067][T11012] genl_rcv_msg+0x55c/0x800 [ 421.160089][T11012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.160109][T11012] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 421.160129][T11012] netlink_rcv_skb+0x158/0x420 [ 421.160146][T11012] ? __pfx_genl_rcv_msg+0x10/0x10 [ 421.160167][T11012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.160193][T11012] ? netlink_deliver_tap+0x1ae/0xd30 [ 421.160212][T11012] genl_rcv+0x28/0x40 [ 421.160229][T11012] netlink_unicast+0x5a7/0x870 [ 421.160249][T11012] ? __pfx_netlink_unicast+0x10/0x10 [ 421.160285][T11012] netlink_sendmsg+0x8c8/0xdd0 [ 421.160307][T11012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.160328][T11012] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 421.160351][T11012] ____sys_sendmsg+0xa98/0xc70 [ 421.160372][T11012] ? copy_msghdr_from_user+0x10a/0x160 [ 421.160402][T11012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.160427][T11012] ? __pfx_futex_wake_mark+0x10/0x10 [ 421.160453][T11012] ___sys_sendmsg+0x134/0x1d0 [ 421.160472][T11012] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.160515][T11012] __sys_sendmsg+0x16d/0x220 [ 421.160532][T11012] ? __pfx___sys_sendmsg+0x10/0x10 [ 421.160547][T11012] ? __x64_sys_futex+0x1e0/0x4c0 [ 421.160578][T11012] do_syscall_64+0xcd/0xfa0 [ 421.160596][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.160611][T11012] RIP: 0033:0x7f2dc618eec9 [ 421.160623][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.160638][T11012] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.160652][T11012] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 421.160661][T11012] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 421.160669][T11012] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.160678][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.160687][T11012] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 421.160707][T11012] [ 422.617717][T11028] random: crng reseeded on system resumption [ 423.058651][T11020] kexec: Could not allocate control_code_buffer [ 424.707492][T11066] netlink: 342 bytes leftover after parsing attributes in process `syz.1.999'. [ 425.855605][T11077] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1002'. [ 425.966916][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 427.135975][T11093] FAULT_INJECTION: forcing a failure. [ 427.135975][T11093] name failslab, interval 1, probability 0, space 0, times 0 [ 427.241606][T11093] CPU: 0 UID: 0 PID: 11093 Comm: syz.2.1004 Not tainted syzkaller #0 PREEMPT(full) [ 427.241628][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.241637][T11093] Call Trace: [ 427.241644][T11093] [ 427.241650][T11093] dump_stack_lvl+0x16c/0x1f0 [ 427.241672][T11093] should_fail_ex+0x512/0x640 [ 427.241690][T11093] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 427.241707][T11093] should_failslab+0xc2/0x120 [ 427.241727][T11093] kmem_cache_alloc_noprof+0x75/0x6e0 [ 427.241741][T11093] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 427.241769][T11093] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 427.241789][T11093] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 427.241815][T11093] radix_tree_insert+0x247/0x630 [ 427.241841][T11093] qrtr_node_enqueue+0x1077/0x12e0 [ 427.241863][T11093] ? __asan_memcpy+0x3c/0x60 [ 427.241878][T11093] ? __pfx_qrtr_node_enqueue+0x10/0x10 [ 427.241905][T11093] ? skb_set_owner_w+0x31f/0x710 [ 427.241920][T11093] ? skb_copy_header+0x20/0x2b0 [ 427.241934][T11093] ? __pfx_skb_set_owner_w+0x10/0x10 [ 427.241947][T11093] ? __pskb_copy_fclone+0x48e/0xb50 [ 427.241966][T11093] ? __pfx__copy_from_iter+0x10/0x10 [ 427.241987][T11093] qrtr_bcast_enqueue+0xc7/0x1b0 [ 427.242010][T11093] qrtr_sendmsg+0x444/0x7b0 [ 427.242028][T11093] ? __pfx_qrtr_bcast_enqueue+0x10/0x10 [ 427.242045][T11093] ? __pfx_qrtr_sendmsg+0x10/0x10 [ 427.242065][T11093] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 427.242088][T11093] sock_write_iter+0x563/0x610 [ 427.242109][T11093] ? __pfx_sock_write_iter+0x10/0x10 [ 427.242137][T11093] ? __futex_wait+0x24b/0x2f0 [ 427.242159][T11093] ? copy_iovec_from_user+0x131/0x170 [ 427.242178][T11093] do_iter_readv_writev+0x65f/0x9e0 [ 427.242194][T11093] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 427.242212][T11093] ? bpf_lsm_file_permission+0x9/0x10 [ 427.242228][T11093] ? security_file_permission+0x71/0x210 [ 427.242243][T11093] ? rw_verify_area+0xcf/0x6c0 [ 427.242257][T11093] vfs_writev+0x35f/0xde0 [ 427.242274][T11093] ? __lock_acquire+0x62e/0x1ce0 [ 427.242294][T11093] ? __pfx_vfs_writev+0x10/0x10 [ 427.242323][T11093] ? __fget_files+0x20e/0x3c0 [ 427.242343][T11093] ? do_writev+0x28c/0x340 [ 427.242354][T11093] do_writev+0x28c/0x340 [ 427.242368][T11093] ? __pfx_do_writev+0x10/0x10 [ 427.242388][T11093] do_syscall_64+0xcd/0xfa0 [ 427.242406][T11093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.242420][T11093] RIP: 0033:0x7f2dc618eec9 [ 427.242432][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.242446][T11093] RSP: 002b:00007f2dc6f7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 427.242460][T11093] RAX: ffffffffffffffda RBX: 00007f2dc63e6090 RCX: 00007f2dc618eec9 [ 427.242470][T11093] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 427.242478][T11093] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 427.242487][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.242495][T11093] R13: 00007f2dc63e6128 R14: 00007f2dc63e6090 R15: 00007ffedfdd5d68 [ 427.242517][T11093] [ 429.535703][T11126] netlink: 'syz.1.1008': attribute type 11 has an invalid length. [ 429.572800][T11126] netlink: 'syz.1.1008': attribute type 11 has an invalid length. [ 429.580822][T11126] netlink: 'syz.1.1008': attribute type 11 has an invalid length. [ 429.593533][T11126] netlink: 'syz.1.1008': attribute type 11 has an invalid length. [ 430.563836][T11139] sd 0:0:1:0: PR command failed: 1026 [ 430.708092][T11139] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 430.784686][T11139] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 430.791603][T11145] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1010'. [ 432.152531][T11167] FAULT_INJECTION: forcing a failure. [ 432.152531][T11167] name failslab, interval 1, probability 0, space 0, times 0 [ 432.274274][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.4.1013 Not tainted syzkaller #0 PREEMPT(full) [ 432.274297][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 432.274306][T11167] Call Trace: [ 432.274311][T11167] [ 432.274317][T11167] dump_stack_lvl+0x16c/0x1f0 [ 432.274339][T11167] should_fail_ex+0x512/0x640 [ 432.274358][T11167] ? __kmalloc_cache_noprof+0x5f/0x780 [ 432.274384][T11167] should_failslab+0xc2/0x120 [ 432.274403][T11167] __kmalloc_cache_noprof+0x72/0x780 [ 432.274426][T11167] ? ovs_flow_tbl_init+0x1cc/0x600 [ 432.274462][T11167] ? ovs_flow_tbl_init+0x1cc/0x600 [ 432.274485][T11167] ovs_flow_tbl_init+0x1cc/0x600 [ 432.274509][T11167] ovs_dp_cmd_new+0x251/0xe60 [ 432.274530][T11167] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 432.274549][T11167] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 432.274571][T11167] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 432.274596][T11167] genl_family_rcv_msg_doit+0x209/0x2f0 [ 432.274618][T11167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 432.274645][T11167] ? bpf_lsm_capable+0x9/0x10 [ 432.274663][T11167] ? security_capable+0x7e/0x260 [ 432.274682][T11167] ? ns_capable+0xd7/0x110 [ 432.274699][T11167] genl_rcv_msg+0x55c/0x800 [ 432.274721][T11167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.274741][T11167] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 432.274762][T11167] netlink_rcv_skb+0x158/0x420 [ 432.274778][T11167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 432.274799][T11167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.274824][T11167] ? netlink_deliver_tap+0x1ae/0xd30 [ 432.274844][T11167] genl_rcv+0x28/0x40 [ 432.274861][T11167] netlink_unicast+0x5a7/0x870 [ 432.274880][T11167] ? __pfx_netlink_unicast+0x10/0x10 [ 432.274906][T11167] netlink_sendmsg+0x8c8/0xdd0 [ 432.274926][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.274946][T11167] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 432.274969][T11167] ____sys_sendmsg+0xa98/0xc70 [ 432.274990][T11167] ? copy_msghdr_from_user+0x10a/0x160 [ 432.275006][T11167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.275030][T11167] ? __pfx_futex_wake_mark+0x10/0x10 [ 432.275055][T11167] ___sys_sendmsg+0x134/0x1d0 [ 432.275073][T11167] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.275115][T11167] __sys_sendmsg+0x16d/0x220 [ 432.275131][T11167] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.275147][T11167] ? __x64_sys_futex+0x1e0/0x4c0 [ 432.275179][T11167] do_syscall_64+0xcd/0xfa0 [ 432.275197][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.275212][T11167] RIP: 0033:0x7f7323d8eec9 [ 432.275224][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.275239][T11167] RSP: 002b:00007f7321ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.275253][T11167] RAX: ffffffffffffffda RBX: 00007f7323fe5fa0 RCX: 00007f7323d8eec9 [ 432.275263][T11167] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 432.275272][T11167] RBP: 00007f7323e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 432.275282][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.275290][T11167] R13: 00007f7323fe6038 R14: 00007f7323fe5fa0 R15: 00007ffe422a3c98 [ 432.275311][T11167] [ 433.655946][T11180] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1017'. [ 435.481691][T11203] FAULT_INJECTION: forcing a failure. [ 435.481691][T11203] name failslab, interval 1, probability 0, space 0, times 0 [ 435.565580][T11203] CPU: 1 UID: 0 PID: 11203 Comm: syz.1.1022 Not tainted syzkaller #0 PREEMPT(full) [ 435.565615][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.565629][T11203] Call Trace: [ 435.565638][T11203] [ 435.565649][T11203] dump_stack_lvl+0x16c/0x1f0 [ 435.565686][T11203] should_fail_ex+0x512/0x640 [ 435.565715][T11203] ? __kmalloc_noprof+0xca/0x880 [ 435.565753][T11203] should_failslab+0xc2/0x120 [ 435.565783][T11203] __kmalloc_noprof+0xdd/0x880 [ 435.565814][T11203] ? rcu_is_watching+0x12/0xc0 [ 435.565840][T11203] ? sk_prot_alloc+0x1a8/0x2a0 [ 435.565880][T11203] ? sk_prot_alloc+0x1a8/0x2a0 [ 435.565909][T11203] sk_prot_alloc+0x1a8/0x2a0 [ 435.565942][T11203] sk_alloc+0x36/0xc20 [ 435.565967][T11203] pfkey_create+0x105/0x600 [ 435.566001][T11203] __sock_create+0x338/0x8d0 [ 435.566047][T11203] __sys_socket+0x14d/0x260 [ 435.566081][T11203] ? __pfx___sys_socket+0x10/0x10 [ 435.566115][T11203] ? xfd_validate_state+0x61/0x180 [ 435.566155][T11203] __x64_sys_socket+0x72/0xb0 [ 435.566197][T11203] ? lockdep_hardirqs_on+0x7c/0x110 [ 435.566225][T11203] do_syscall_64+0xcd/0xfa0 [ 435.566254][T11203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.566277][T11203] RIP: 0033:0x7fcb7938eec9 [ 435.566298][T11203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.566321][T11203] RSP: 002b:00007fcb7a2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 435.566344][T11203] RAX: ffffffffffffffda RBX: 00007fcb795e5fa0 RCX: 00007fcb7938eec9 [ 435.566380][T11203] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 435.566395][T11203] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.566411][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.566426][T11203] R13: 00007fcb795e6038 R14: 00007fcb795e5fa0 R15: 00007ffcaf4f4838 [ 435.566462][T11203] [ 436.413862][T11213] FAULT_INJECTION: forcing a failure. [ 436.413862][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 436.473754][T11213] CPU: 1 UID: 0 PID: 11213 Comm: syz.3.1024 Not tainted syzkaller #0 PREEMPT(full) [ 436.473788][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.473798][T11213] Call Trace: [ 436.473804][T11213] [ 436.473810][T11213] dump_stack_lvl+0x16c/0x1f0 [ 436.473832][T11213] should_fail_ex+0x512/0x640 [ 436.473850][T11213] ? __kmalloc_cache_noprof+0x5f/0x780 [ 436.473875][T11213] should_failslab+0xc2/0x120 [ 436.473902][T11213] __kmalloc_cache_noprof+0x72/0x780 [ 436.473926][T11213] ? ovs_flow_tbl_init+0x1cc/0x600 [ 436.473951][T11213] ? ovs_flow_tbl_init+0x1cc/0x600 [ 436.473973][T11213] ovs_flow_tbl_init+0x1cc/0x600 [ 436.473997][T11213] ovs_dp_cmd_new+0x251/0xe60 [ 436.474016][T11213] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 436.474034][T11213] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 436.474056][T11213] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 436.474080][T11213] genl_family_rcv_msg_doit+0x209/0x2f0 [ 436.474102][T11213] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 436.474128][T11213] ? bpf_lsm_capable+0x9/0x10 [ 436.474146][T11213] ? security_capable+0x7e/0x260 [ 436.474164][T11213] ? ns_capable+0xd7/0x110 [ 436.474181][T11213] genl_rcv_msg+0x55c/0x800 [ 436.474203][T11213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.474223][T11213] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 436.474243][T11213] netlink_rcv_skb+0x158/0x420 [ 436.474261][T11213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.474281][T11213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.474306][T11213] ? netlink_deliver_tap+0x1ae/0xd30 [ 436.474326][T11213] genl_rcv+0x28/0x40 [ 436.474343][T11213] netlink_unicast+0x5a7/0x870 [ 436.474363][T11213] ? __pfx_netlink_unicast+0x10/0x10 [ 436.474388][T11213] netlink_sendmsg+0x8c8/0xdd0 [ 436.474408][T11213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.474428][T11213] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 436.474450][T11213] ____sys_sendmsg+0xa98/0xc70 [ 436.474471][T11213] ? copy_msghdr_from_user+0x10a/0x160 [ 436.474487][T11213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.474511][T11213] ? __pfx_futex_wake_mark+0x10/0x10 [ 436.474536][T11213] ___sys_sendmsg+0x134/0x1d0 [ 436.474554][T11213] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.474595][T11213] __sys_sendmsg+0x16d/0x220 [ 436.474612][T11213] ? __pfx___sys_sendmsg+0x10/0x10 [ 436.474627][T11213] ? __x64_sys_futex+0x1e0/0x4c0 [ 436.474658][T11213] do_syscall_64+0xcd/0xfa0 [ 436.474676][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.474690][T11213] RIP: 0033:0x7f315938eec9 [ 436.474703][T11213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.474716][T11213] RSP: 002b:00007f315a1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.474731][T11213] RAX: ffffffffffffffda RBX: 00007f31595e6090 RCX: 00007f315938eec9 [ 436.474740][T11213] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 436.474749][T11213] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.474758][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.474766][T11213] R13: 00007f31595e6128 R14: 00007f31595e6090 R15: 00007ffc12598d18 [ 436.474787][T11213] [ 437.168548][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 438.095175][T11230] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1028'. [ 438.134234][T11235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1029'. [ 438.154406][T11235] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1029'. [ 438.208470][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 440.245868][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.252320][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.403054][T11273] openvswitch: HfR: Dropping previously announced user features [ 442.945983][T11303] nfs: Unknown parameter 'ީiʟby7J ؀V{ [ 442.945983][T11303] \9-*;#rRcFGL֍*' [ 443.664994][T11306] openvswitch: HfR: Dropping previously announced user features [ 448.268435][T11413] FAULT_INJECTION: forcing a failure. [ 448.268435][T11413] name failslab, interval 1, probability 0, space 0, times 0 [ 448.281548][T11413] CPU: 0 UID: 0 PID: 11413 Comm: syz.3.1057 Not tainted syzkaller #0 PREEMPT(full) [ 448.281581][T11413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.281595][T11413] Call Trace: [ 448.281604][T11413] [ 448.281614][T11413] dump_stack_lvl+0x16c/0x1f0 [ 448.281650][T11413] should_fail_ex+0x512/0x640 [ 448.281680][T11413] ? __kmalloc_noprof+0xca/0x880 [ 448.281724][T11413] should_failslab+0xc2/0x120 [ 448.281759][T11413] __kmalloc_noprof+0xdd/0x880 [ 448.281799][T11413] ? tbl_mask_array_alloc+0x38/0x160 [ 448.281844][T11413] ? tbl_mask_array_alloc+0x38/0x160 [ 448.281879][T11413] tbl_mask_array_alloc+0x38/0x160 [ 448.281919][T11413] ovs_flow_tbl_init+0x40/0x600 [ 448.281956][T11413] ? kasan_save_track+0x14/0x30 [ 448.281989][T11413] ovs_dp_cmd_new+0x251/0xe60 [ 448.282024][T11413] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 448.282058][T11413] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 448.282097][T11413] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 448.282151][T11413] genl_family_rcv_msg_doit+0x209/0x2f0 [ 448.282193][T11413] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 448.282240][T11413] ? bpf_lsm_capable+0x9/0x10 [ 448.282270][T11413] ? security_capable+0x7e/0x260 [ 448.282305][T11413] ? ns_capable+0xd7/0x110 [ 448.282336][T11413] genl_rcv_msg+0x55c/0x800 [ 448.282376][T11413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.282413][T11413] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 448.282452][T11413] netlink_rcv_skb+0x158/0x420 [ 448.282483][T11413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 448.282519][T11413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 448.282567][T11413] ? netlink_deliver_tap+0x1ae/0xd30 [ 448.282603][T11413] genl_rcv+0x28/0x40 [ 448.282634][T11413] netlink_unicast+0x5a7/0x870 [ 448.282671][T11413] ? __pfx_netlink_unicast+0x10/0x10 [ 448.282717][T11413] netlink_sendmsg+0x8c8/0xdd0 [ 448.282755][T11413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.282792][T11413] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 448.282834][T11413] ____sys_sendmsg+0xa98/0xc70 [ 448.282871][T11413] ? copy_msghdr_from_user+0x10a/0x160 [ 448.282900][T11413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 448.282951][T11413] ? __pfx_futex_wake_mark+0x10/0x10 [ 448.282996][T11413] ___sys_sendmsg+0x134/0x1d0 [ 448.283029][T11413] ? __pfx____sys_sendmsg+0x10/0x10 [ 448.283108][T11413] __sys_sendmsg+0x16d/0x220 [ 448.283139][T11413] ? __pfx___sys_sendmsg+0x10/0x10 [ 448.283179][T11413] ? __x64_sys_futex+0x1e0/0x4c0 [ 448.283227][T11413] ? fput+0x9b/0xd0 [ 448.283268][T11413] do_syscall_64+0xcd/0xfa0 [ 448.283300][T11413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.283327][T11413] RIP: 0033:0x7f315938eec9 [ 448.283349][T11413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.283374][T11413] RSP: 002b:00007f315a1dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.283399][T11413] RAX: ffffffffffffffda RBX: 00007f31595e6090 RCX: 00007f315938eec9 [ 448.283417][T11413] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 448.283432][T11413] RBP: 00007f3159411f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.283448][T11413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.283463][T11413] R13: 00007f31595e6128 R14: 00007f31595e6090 R15: 00007ffc12598d18 [ 448.283500][T11413] [ 448.816600][T11416] openvswitch: HfR: Dropping previously announced user features [ 450.286320][ T30] audit: type=1800 audit(4294967334.542:13): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1062" name="dbroot" dev="configfs" ino=37142 res=0 errno=0 [ 452.379305][T11457] Invalid ELF header magic: != ELF [ 452.479468][T11457] delete_channel: no stack [ 452.736748][T11462] vhci_hcd: invalid port number 21 [ 452.745297][T11462] vhci_hcd: invalid port number 21 [ 452.784446][T11462] vhci_hcd: invalid port number 21 [ 452.925517][T11462] vhci_hcd: invalid port number 21 [ 452.977833][T11462] vhci_hcd: invalid port number 21 [ 453.013483][T11462] vhci_hcd: invalid port number 21 [ 453.058039][T11462] vhci_hcd: invalid port number 21 [ 453.094676][T11462] vhci_hcd: invalid port number 21 [ 453.104661][T11462] vhci_hcd: invalid port number 21 [ 453.178845][T11462] vhci_hcd: invalid port number 21 [ 453.237280][T11462] vhci_hcd: invalid port number 21 [ 453.262161][T11462] vhci_hcd: invalid port number 21 [ 453.430187][T11462] vhci_hcd: invalid port number 21 [ 453.540819][T11462] vhci_hcd: invalid port number 21 [ 453.603724][T11462] vhci_hcd: invalid port number 21 [ 453.619940][T11462] vhci_hcd: invalid port number 21 [ 454.940945][T11452] ima: policy update failed [ 454.963909][ T30] audit: type=1802 audit(4294967339.210:14): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1065" res=0 errno=0 [ 454.992082][T11519] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 455.000143][T11519] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 455.008692][T11511] could not allocate digest TFM handle [ 455.025335][T11519] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 455.055960][T11519] netlink: 'syz.2.1076': attribute type 11 has an invalid length. [ 455.472854][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 457.085533][T11557] synth uevent: /bus/mei: unknown uevent action string [ 457.181152][T11562] netlink: 'syz.1.1086': attribute type 11 has an invalid length. [ 457.200135][T11562] netlink: 'syz.1.1086': attribute type 11 has an invalid length. [ 457.239192][T11562] netlink: 'syz.1.1086': attribute type 11 has an invalid length. [ 457.263284][T11562] netlink: 'syz.1.1086': attribute type 11 has an invalid length. [ 458.371764][T11581] cgroup: fork rejected by pids controller in /syz3 [ 458.383448][T11608] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 459.221063][T11645] netlink: 'syz.3.1099': attribute type 11 has an invalid length. [ 459.281165][T11645] netlink: 'syz.3.1099': attribute type 11 has an invalid length. [ 460.300154][T11667] Console: switching to colour frame buffer device 128x48 [ 460.951332][ T30] audit: type=1800 audit(4294967345.207:15): pid=11693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1108" name="dbroot" dev="configfs" ino=39080 res=0 errno=0 [ 462.287318][T11711] nla_validate_range_unsigned: 2 callbacks suppressed [ 462.287341][T11711] netlink: 'syz.2.1111': attribute type 11 has an invalid length. [ 462.349206][T11711] netlink: 'syz.2.1111': attribute type 11 has an invalid length. [ 462.369102][T11711] netlink: 'syz.2.1111': attribute type 11 has an invalid length. [ 462.376928][T11711] netlink: 'syz.2.1111': attribute type 11 has an invalid length. [ 465.275216][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 465.980920][T11757] Invalid ELF header magic: != ELF [ 466.030962][T11757] delete_channel: no stack [ 466.638952][T11765] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 466.679432][T11765] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 466.703079][T11765] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 466.759578][T11765] netlink: 'syz.4.1123': attribute type 11 has an invalid length. [ 469.643990][T11805] Invalid ELF header magic: != ELF [ 469.669734][T11805] delete_channel: no stack [ 469.940966][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 470.439818][T11827] openvswitch: HfR: Dropping previously announced user features [ 470.453441][T11827] FAULT_INJECTION: forcing a failure. [ 470.453441][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 470.466189][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.4.1136 Not tainted syzkaller #0 PREEMPT(full) [ 470.466224][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 470.466239][T11827] Call Trace: [ 470.466247][T11827] [ 470.466256][T11827] dump_stack_lvl+0x16c/0x1f0 [ 470.466288][T11827] should_fail_ex+0x512/0x640 [ 470.466320][T11827] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 470.466350][T11827] should_failslab+0xc2/0x120 [ 470.466385][T11827] kmem_cache_alloc_node_noprof+0x78/0x770 [ 470.466410][T11827] ? __alloc_skb+0x2b2/0x380 [ 470.466445][T11827] ? __alloc_skb+0x2b2/0x380 [ 470.466468][T11827] __alloc_skb+0x2b2/0x380 [ 470.466493][T11827] ? __pfx___alloc_skb+0x10/0x10 [ 470.466519][T11827] ? genl_rcv_msg+0x4d0/0x800 [ 470.466550][T11827] ? genl_rcv_msg+0x4bb/0x800 [ 470.466590][T11827] netlink_ack+0x15d/0xb80 [ 470.466632][T11827] netlink_rcv_skb+0x332/0x420 [ 470.466660][T11827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.466694][T11827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.466738][T11827] ? netlink_deliver_tap+0x1ae/0xd30 [ 470.466771][T11827] genl_rcv+0x28/0x40 [ 470.466802][T11827] netlink_unicast+0x5a7/0x870 [ 470.466837][T11827] ? __pfx_netlink_unicast+0x10/0x10 [ 470.466878][T11827] netlink_sendmsg+0x8c8/0xdd0 [ 470.466913][T11827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.466949][T11827] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 470.466984][T11827] ____sys_sendmsg+0xa98/0xc70 [ 470.467007][T11827] ? copy_msghdr_from_user+0x10a/0x160 [ 470.467023][T11827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.467054][T11827] ___sys_sendmsg+0x134/0x1d0 [ 470.467071][T11827] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.467113][T11827] __sys_sendmsg+0x16d/0x220 [ 470.467130][T11827] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.467145][T11827] ? __x64_sys_futex+0x1e0/0x4c0 [ 470.467185][T11827] do_syscall_64+0xcd/0xfa0 [ 470.467205][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.467219][T11827] RIP: 0033:0x7f7323d8eec9 [ 470.467233][T11827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.467247][T11827] RSP: 002b:00007f7321ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.467261][T11827] RAX: ffffffffffffffda RBX: 00007f7323fe5fa0 RCX: 00007f7323d8eec9 [ 470.467270][T11827] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 470.467279][T11827] RBP: 00007f7323e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 470.467288][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.467296][T11827] R13: 00007f7323fe6038 R14: 00007f7323fe5fa0 R15: 00007ffe422a3c98 [ 470.467316][T11827] [ 472.396046][T11879] FAULT_INJECTION: forcing a failure. [ 472.396046][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 472.451868][T11879] CPU: 0 UID: 0 PID: 11879 Comm: syz.2.1144 Not tainted syzkaller #0 PREEMPT(full) [ 472.451904][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.451918][T11879] Call Trace: [ 472.451926][T11879] [ 472.451936][T11879] dump_stack_lvl+0x16c/0x1f0 [ 472.451969][T11879] should_fail_ex+0x512/0x640 [ 472.451998][T11879] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 472.452024][T11879] should_failslab+0xc2/0x120 [ 472.452057][T11879] kmem_cache_alloc_noprof+0x75/0x6e0 [ 472.452081][T11879] ? kcm_create+0x11e/0x690 [ 472.452111][T11879] ? kcm_create+0x11e/0x690 [ 472.452132][T11879] kcm_create+0x11e/0x690 [ 472.452158][T11879] __sock_create+0x338/0x8d0 [ 472.452202][T11879] __sys_socket+0x14d/0x260 [ 472.452237][T11879] ? __pfx___sys_socket+0x10/0x10 [ 472.452280][T11879] ? xfd_validate_state+0x61/0x180 [ 472.452317][T11879] ? __pfx_ksys_write+0x10/0x10 [ 472.452352][T11879] __x64_sys_socket+0x72/0xb0 [ 472.452388][T11879] ? lockdep_hardirqs_on+0x7c/0x110 [ 472.452416][T11879] do_syscall_64+0xcd/0xfa0 [ 472.452447][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.452473][T11879] RIP: 0033:0x7f2dc618eec9 [ 472.452494][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.452520][T11879] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 472.452547][T11879] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 472.452565][T11879] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 472.452580][T11879] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 472.452596][T11879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.452611][T11879] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 472.452646][T11879] [ 472.861748][T11895] netlink: 'syz.3.1146': attribute type 11 has an invalid length. [ 472.922302][T11895] netlink: 'syz.3.1146': attribute type 11 has an invalid length. [ 472.946794][T11895] netlink: 'syz.3.1146': attribute type 11 has an invalid length. [ 473.021211][T11895] netlink: 'syz.3.1146': attribute type 11 has an invalid length. [ 474.043068][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'. [ 474.100711][T11924] hsr_slave_0: left promiscuous mode [ 474.401523][T11924] hsr_slave_1: left promiscuous mode [ 474.601052][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 475.432701][T11947] block2mtd: parameter too long [ 476.082941][T11951] netlink: 'syz.4.1158': attribute type 11 has an invalid length. [ 476.096035][T11951] netlink: 'syz.4.1158': attribute type 11 has an invalid length. [ 476.104149][T11951] netlink: 'syz.4.1158': attribute type 11 has an invalid length. [ 476.113298][T11951] netlink: 'syz.4.1158': attribute type 11 has an invalid length. [ 476.432208][T11964] ptrace attach of "./syz-executor exec"[5830] was attempted by "D9G&Cn_]i&e\x0d^lN5=8ME$I񼀿NVT9t6'о'\x07RQƓgFF}؋@?0\x0dqbqww]!oEWLd<\x07z,;\x5cD\x0b>ϻ^Eq!#)mFwq(+^ֈY\x1bm#P'Wl6oladɢj\x22`Bq\x22ˢQgZڼA2GHHBXjh>{iصԾ3\x0c1V}]P,j\x22gb\x0cK TfX\x1b=;@;M.#GNK-L0N3U?Osʁpz.aU(L:υ1c+!6CwD^\x0cUIA@ƹ̴띍bPF\x0aиfZ$bepp\x07̶P5_@:OHC_PNthlwJHCMl}ӆ\x1b_0t)\x1bWIco(F~h+Xq:͍\x0c-8J\x0c)Z4B\x0bNor{wX sid-\x0c*}SW9*^n\x0aaQ@IO.pluHIEO*6ܧ?u\x0bLzT>|l\x1b;U\x5c.IhK(M8#\x5cڮf֙/j~4\x22}l)iy3\x0b:ڭ.s%=Aқ\x0bMM*ǺƩ^2\x0d[j*f\x07P_:VE!3{ERR [ 477.469324][T11983] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 477.560948][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.410844][ T30] audit: type=1806 audit(4294967312.092:16): xattr="." res=0 [ 481.887720][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 481.915150][T12067] hsr_slave_0: left promiscuous mode [ 481.921808][T12071] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 481.929869][T12071] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 481.967786][T12071] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 481.997396][T12071] netlink: 'syz.1.1180': attribute type 11 has an invalid length. [ 482.235366][T12067] hsr_slave_1: left promiscuous mode [ 486.011755][T12128] bond0: no command found in slaves file - use +ifname or -ifname [ 486.751360][T12138] openvswitch: HfR: Dropping previously announced user features [ 488.856042][T12175] bridge0: port 4(veth0_to_bridge) entered blocking state [ 488.877622][T12175] bridge0: port 4(veth0_to_bridge) entered disabled state [ 488.887383][T12175] veth0_to_bridge: entered allmulticast mode [ 488.897940][T12175] veth0_to_bridge: entered promiscuous mode [ 488.904578][T12175] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.935647][T12175] bridge0: port 4(veth0_to_bridge) entered blocking state [ 488.942983][T12175] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 489.264167][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1206'. [ 489.273365][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.320741][T12185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.354932][T12185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.373118][T12185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.530757][T12190] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 489.539306][T12190] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 489.579077][T12190] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 489.592762][T12190] netlink: 'syz.1.1208': attribute type 11 has an invalid length. [ 490.066568][T12198] netlink: 'syz.2.1210': attribute type 11 has an invalid length. [ 490.123108][T12198] netlink: 'syz.2.1210': attribute type 11 has an invalid length. [ 490.162964][T12198] netlink: 'syz.2.1210': attribute type 11 has an invalid length. [ 490.193034][T12198] netlink: 'syz.2.1210': attribute type 11 has an invalid length. [ 491.829268][T12226] random: crng reseeded on system resumption [ 492.495635][T12235] cgroup: fork rejected by pids controller in /syz1 [ 494.133248][T12288] netlink: 'syz.3.1222': attribute type 11 has an invalid length. [ 494.173522][T12288] netlink: 'syz.3.1222': attribute type 11 has an invalid length. [ 496.943748][T12378] openvswitch: HfR: Dropping previously announced user features [ 496.975529][T12378] FAULT_INJECTION: forcing a failure. [ 496.975529][T12378] name fail_futex, interval 1, probability 0, space 0, times 1 [ 497.246535][T12378] CPU: 1 UID: 0 PID: 12378 Comm: syz.4.1225 Not tainted syzkaller #0 PREEMPT(full) [ 497.246568][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.246582][T12378] Call Trace: [ 497.246590][T12378] [ 497.246599][T12378] dump_stack_lvl+0x16c/0x1f0 [ 497.246631][T12378] should_fail_ex+0x512/0x640 [ 497.246664][T12378] get_futex_key+0x1d0/0x1560 [ 497.246696][T12378] ? __pfx_get_futex_key+0x10/0x10 [ 497.246727][T12378] ? __lock_acquire+0x62e/0x1ce0 [ 497.246761][T12378] futex_wake+0xea/0x530 [ 497.246799][T12378] ? __pfx_futex_wake+0x10/0x10 [ 497.246838][T12378] ? task_mm_cid_work+0x704/0x900 [ 497.246865][T12378] do_futex+0x1e3/0x350 [ 497.246894][T12378] ? __pfx_do_futex+0x10/0x10 [ 497.246923][T12378] ? __pfx_task_mm_cid_work+0x10/0x10 [ 497.246942][T12378] ? __pfx___might_resched+0x10/0x10 [ 497.246970][T12378] __x64_sys_futex+0x1e0/0x4c0 [ 497.247000][T12378] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 497.247039][T12378] ? __pfx___x64_sys_futex+0x10/0x10 [ 497.247074][T12378] ? xfd_validate_state+0x61/0x180 [ 497.247116][T12378] do_syscall_64+0xcd/0xfa0 [ 497.247145][T12378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.247169][T12378] RIP: 0033:0x7f7323d8eec9 [ 497.247187][T12378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.247208][T12378] RSP: 002b:00007f7321fd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 497.247232][T12378] RAX: ffffffffffffffda RBX: 00007f7323fe6098 RCX: 00007f7323d8eec9 [ 497.247250][T12378] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7323fe609c [ 497.247265][T12378] RBP: 00007f7323fe6090 R08: 00007f7324b37000 R09: 0000000000000000 [ 497.247279][T12378] R10: 0000000000000034 R11: 0000000000000246 R12: 0000000000000000 [ 497.247294][T12378] R13: 00007f7323fe6128 R14: 00007ffe422a3bb0 R15: 00007ffe422a3c98 [ 497.247328][T12378] [ 499.393671][T12408] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 500.501246][T12439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'. [ 500.603855][T12439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.628571][T12439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.659237][T12439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.707534][T12439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.772301][T12445] FAULT_INJECTION: forcing a failure. [ 500.772301][T12445] name failslab, interval 1, probability 0, space 0, times 0 [ 500.838058][T12445] CPU: 1 UID: 0 PID: 12445 Comm: syz.1.1238 Not tainted syzkaller #0 PREEMPT(full) [ 500.838091][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 500.838109][T12445] Call Trace: [ 500.838117][T12445] [ 500.838126][T12445] dump_stack_lvl+0x16c/0x1f0 [ 500.838161][T12445] should_fail_ex+0x512/0x640 [ 500.838189][T12445] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 500.838216][T12445] should_failslab+0xc2/0x120 [ 500.838246][T12445] kmem_cache_alloc_noprof+0x75/0x6e0 [ 500.838267][T12445] ? __asan_memcpy+0x3c/0x60 [ 500.838290][T12445] ? __kernfs_new_node+0xd2/0x8e0 [ 500.838326][T12445] ? __kernfs_new_node+0xd2/0x8e0 [ 500.838354][T12445] __kernfs_new_node+0xd2/0x8e0 [ 500.838392][T12445] ? __pfx___kernfs_new_node+0x10/0x10 [ 500.838431][T12445] ? find_held_lock+0x2b/0x80 [ 500.838455][T12445] ? kernfs_root+0xee/0x2a0 [ 500.838490][T12445] kernfs_new_node+0x13c/0x1e0 [ 500.838531][T12445] __kernfs_create_file+0x53/0x350 [ 500.838559][T12445] cgroup_addrm_files+0x546/0xc20 [ 500.838604][T12445] ? __xa_store+0x1dc/0x2e0 [ 500.838634][T12445] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 500.838669][T12445] ? __pfx___xa_store+0x10/0x10 [ 500.838711][T12445] ? do_raw_spin_unlock+0x172/0x230 [ 500.838756][T12445] css_populate_dir+0x169/0x580 [ 500.838788][T12445] cgroup_apply_control_enable+0x3f3/0xbb0 [ 500.838838][T12445] cgroup_mkdir+0x5e0/0x12e0 [ 500.838866][T12445] ? __pfx_cgroup_mkdir+0x10/0x10 [ 500.838893][T12445] kernfs_iop_mkdir+0x10e/0x190 [ 500.838929][T12445] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 500.838958][T12445] vfs_mkdir+0x590/0x8c0 [ 500.839001][T12445] do_mkdirat+0x304/0x3e0 [ 500.839031][T12445] ? __pfx_do_mkdirat+0x10/0x10 [ 500.839070][T12445] ? getname_flags.part.0+0x1c5/0x550 [ 500.839113][T12445] __x64_sys_mkdir+0xef/0x140 [ 500.839144][T12445] do_syscall_64+0xcd/0xfa0 [ 500.839176][T12445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.839202][T12445] RIP: 0033:0x7fcb7938eec9 [ 500.839224][T12445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.839249][T12445] RSP: 002b:00007fcb7a295038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 500.839274][T12445] RAX: ffffffffffffffda RBX: 00007fcb795e6180 RCX: 00007fcb7938eec9 [ 500.839292][T12445] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 500.839309][T12445] RBP: 00007fcb79411f91 R08: 0000000000000000 R09: 0000000000000000 [ 500.839326][T12445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.839341][T12445] R13: 00007fcb795e6218 R14: 00007fcb795e6180 R15: 00007ffcaf4f4838 [ 500.839381][T12445] [ 501.425877][T12445] cgroup: cgroup_addrm_files: failed to add limit_in_bytes, err=-12 [ 501.776610][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.790164][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.072708][T12452] can: request_module (can-proto-3) failed. [ 502.240035][T12455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1241'. [ 502.435428][T12466] nla_validate_range_unsigned: 2 callbacks suppressed [ 502.435443][T12466] netlink: 'syz.3.1243': attribute type 11 has an invalid length. [ 502.569251][T12466] netlink: 'syz.3.1243': attribute type 11 has an invalid length. [ 502.615164][T12466] netlink: 'syz.3.1243': attribute type 11 has an invalid length. [ 502.729262][T12466] netlink: 'syz.3.1243': attribute type 11 has an invalid length. [ 504.578535][T12503] FAULT_INJECTION: forcing a failure. [ 504.578535][T12503] name failslab, interval 1, probability 0, space 0, times 0 [ 504.628302][T12503] CPU: 0 UID: 0 PID: 12503 Comm: syz.4.1251 Not tainted syzkaller #0 PREEMPT(full) [ 504.628335][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.628349][T12503] Call Trace: [ 504.628357][T12503] [ 504.628367][T12503] dump_stack_lvl+0x16c/0x1f0 [ 504.628401][T12503] should_fail_ex+0x512/0x640 [ 504.628429][T12503] ? fs_reclaim_acquire+0xae/0x150 [ 504.628463][T12503] should_failslab+0xc2/0x120 [ 504.628494][T12503] __kmalloc_noprof+0xdd/0x880 [ 504.628530][T12503] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 504.628564][T12503] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 504.628588][T12503] tomoyo_realpath_from_path+0xc2/0x6e0 [ 504.628617][T12503] ? tomoyo_profile+0x47/0x60 [ 504.628649][T12503] tomoyo_path_number_perm+0x245/0x580 [ 504.628682][T12503] ? tomoyo_path_number_perm+0x237/0x580 [ 504.628720][T12503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 504.628765][T12503] ? find_held_lock+0x2b/0x80 [ 504.628824][T12503] ? find_held_lock+0x2b/0x80 [ 504.628846][T12503] ? hook_file_ioctl_common+0x145/0x410 [ 504.628891][T12503] ? __fget_files+0x20e/0x3c0 [ 504.628922][T12503] security_file_ioctl+0x9b/0x240 [ 504.628960][T12503] __x64_sys_ioctl+0xb7/0x210 [ 504.628996][T12503] do_syscall_64+0xcd/0xfa0 [ 504.629024][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.629048][T12503] RIP: 0033:0x7f7323d8eec9 [ 504.629068][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.629090][T12503] RSP: 002b:00007f7321ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.629114][T12503] RAX: ffffffffffffffda RBX: 00007f7323fe5fa0 RCX: 00007f7323d8eec9 [ 504.629130][T12503] RDX: 0000200000000040 RSI: 0000000080045518 RDI: 0000000000000003 [ 504.629143][T12503] RBP: 00007f7321ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.629154][T12503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.629167][T12503] R13: 00007f7323fe6038 R14: 00007f7323fe5fa0 R15: 00007ffe422a3c98 [ 504.629199][T12503] [ 504.629208][T12503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 504.898984][T12505] FAULT_INJECTION: forcing a failure. [ 504.898984][T12505] name failslab, interval 1, probability 0, space 0, times 0 [ 504.949789][T12505] CPU: 1 UID: 0 PID: 12505 Comm: syz.2.1252 Not tainted syzkaller #0 PREEMPT(full) [ 504.949817][T12505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.949827][T12505] Call Trace: [ 504.949832][T12505] [ 504.949838][T12505] dump_stack_lvl+0x16c/0x1f0 [ 504.949860][T12505] should_fail_ex+0x512/0x640 [ 504.949878][T12505] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 504.949898][T12505] should_failslab+0xc2/0x120 [ 504.949917][T12505] __kvmalloc_node_noprof+0x141/0x9c0 [ 504.949934][T12505] ? lockdep_init_map_type+0x5c/0x280 [ 504.949954][T12505] ? alloc_netdev_mqs+0xc91/0x1550 [ 504.949980][T12505] ? alloc_netdev_mqs+0xc91/0x1550 [ 504.949995][T12505] alloc_netdev_mqs+0xc91/0x1550 [ 504.950016][T12505] internal_dev_create+0x8a/0x520 [ 504.950036][T12505] ovs_vport_add+0x144/0x4d0 [ 504.950053][T12505] new_vport+0x16/0x1d0 [ 504.950078][T12505] ovs_dp_cmd_new+0x6ba/0xe60 [ 504.950098][T12505] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 504.950116][T12505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 504.950137][T12505] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 504.950172][T12505] genl_family_rcv_msg_doit+0x209/0x2f0 [ 504.950207][T12505] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 504.950252][T12505] ? bpf_lsm_capable+0x9/0x10 [ 504.950282][T12505] ? security_capable+0x7e/0x260 [ 504.950316][T12505] ? ns_capable+0xd7/0x110 [ 504.950346][T12505] genl_rcv_msg+0x55c/0x800 [ 504.950384][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.950419][T12505] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 504.950456][T12505] netlink_rcv_skb+0x158/0x420 [ 504.950485][T12505] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.950531][T12505] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.950579][T12505] ? netlink_deliver_tap+0x1ae/0xd30 [ 504.950616][T12505] genl_rcv+0x28/0x40 [ 504.950645][T12505] netlink_unicast+0x5a7/0x870 [ 504.950678][T12505] ? __pfx_netlink_unicast+0x10/0x10 [ 504.950722][T12505] netlink_sendmsg+0x8c8/0xdd0 [ 504.950757][T12505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.950793][T12505] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 504.950832][T12505] ____sys_sendmsg+0xa98/0xc70 [ 504.950866][T12505] ? copy_msghdr_from_user+0x10a/0x160 [ 504.950894][T12505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.950935][T12505] ? __pfx_futex_wake_mark+0x10/0x10 [ 504.950976][T12505] ___sys_sendmsg+0x134/0x1d0 [ 504.951008][T12505] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.951067][T12505] __sys_sendmsg+0x16d/0x220 [ 504.951085][T12505] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.951100][T12505] ? __x64_sys_futex+0x1e0/0x4c0 [ 504.951132][T12505] do_syscall_64+0xcd/0xfa0 [ 504.951150][T12505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.951164][T12505] RIP: 0033:0x7f2dc618eec9 [ 504.951177][T12505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.951191][T12505] RSP: 002b:00007f2dc6f7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.951205][T12505] RAX: ffffffffffffffda RBX: 00007f2dc63e6090 RCX: 00007f2dc618eec9 [ 504.951214][T12505] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 504.951223][T12505] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 504.951232][T12505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.951240][T12505] R13: 00007f2dc63e6128 R14: 00007f2dc63e6090 R15: 00007ffedfdd5d68 [ 504.951262][T12505] [ 507.204772][T12526] ------------[ cut here ]------------ [ 507.211233][T12526] memcpy: detected field-spanning write (size 6) of single field "&entry->id" at kernel/trace/trace.c:7458 (size 4) [ 507.224227][T12526] WARNING: CPU: 1 PID: 12526 at kernel/trace/trace.c:7458 write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.235781][T12526] Modules linked in: [ 507.240402][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 507.249977][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.260886][T12526] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.268295][T12526] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 507.288062][T12526] RSP: 0018:ffffc90015e17b98 EFLAGS: 00010286 [ 507.294800][T12526] RAX: 0000000000000000 RBX: ffff888046c00014 RCX: ffffc9000d0bc000 [ 507.304223][T12526] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 507.313062][T12526] RBP: ffff888046c00010 R08: 0000000000000001 R09: 0000000000000000 [ 507.321583][T12526] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 507.329597][T12526] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 507.337702][T12526] FS: 00007f2dc6fa06c0(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 507.346755][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.353465][T12526] CR2: 0000001b31218ff8 CR3: 0000000075428000 CR4: 00000000003526f0 [ 507.361516][T12526] Call Trace: [ 507.364827][T12526] [ 507.367789][T12526] tracing_mark_raw_write+0x2da/0x4a0 [ 507.373286][T12526] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 507.379243][T12526] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 507.385220][T12526] vfs_writev+0x5dc/0xde0 [ 507.389605][T12526] ? __pfx_vfs_writev+0x10/0x10 [ 507.394562][T12526] ? kmem_cache_free+0x2d4/0x6c0 [ 507.399542][T12526] ? putname+0x154/0x1a0 [ 507.403891][T12526] ? __fget_files+0x20e/0x3c0 [ 507.408618][T12526] ? do_writev+0x28c/0x340 [ 507.413783][T12526] do_writev+0x28c/0x340 [ 507.418103][T12526] ? __pfx_do_writev+0x10/0x10 [ 507.423499][T12526] do_syscall_64+0xcd/0xfa0 [ 507.428068][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.434140][T12526] RIP: 0033:0x7f2dc618eec9 [ 507.438590][T12526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.458333][T12526] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 507.466863][T12526] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 507.474927][T12526] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 507.482963][T12526] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.490959][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.499027][T12526] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 507.507082][T12526] [ 507.510162][T12526] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 507.517463][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 507.526870][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.536952][T12526] Call Trace: [ 507.540254][T12526] [ 507.543200][T12526] dump_stack_lvl+0x3d/0x1f0 [ 507.547828][T12526] vpanic+0x640/0x6f0 [ 507.551843][T12526] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.558357][T12526] panic+0xca/0xd0 [ 507.562086][T12526] ? __pfx_panic+0x10/0x10 [ 507.566521][T12526] check_panic_on_warn+0xab/0xb0 [ 507.571464][T12526] __warn+0xf6/0x3c0 [ 507.575370][T12526] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.581871][T12526] report_bug+0x3c3/0x580 [ 507.586200][T12526] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.592707][T12526] handle_bug+0x184/0x210 [ 507.597051][T12526] exc_invalid_op+0x17/0x50 [ 507.601567][T12526] asm_exc_invalid_op+0x1a/0x20 [ 507.606414][T12526] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 507.613616][T12526] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 507.633237][T12526] RSP: 0018:ffffc90015e17b98 EFLAGS: 00010286 [ 507.639311][T12526] RAX: 0000000000000000 RBX: ffff888046c00014 RCX: ffffc9000d0bc000 [ 507.647276][T12526] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 507.655411][T12526] RBP: ffff888046c00010 R08: 0000000000000001 R09: 0000000000000000 [ 507.663381][T12526] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 507.671343][T12526] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 507.679317][T12526] ? __warn_printk+0x1a5/0x350 [ 507.684091][T12526] ? write_raw_marker_to_buffer.isra.0+0x2d3/0x330 [ 507.690594][T12526] tracing_mark_raw_write+0x2da/0x4a0 [ 507.695964][T12526] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 507.701863][T12526] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 507.707754][T12526] vfs_writev+0x5dc/0xde0 [ 507.712090][T12526] ? __pfx_vfs_writev+0x10/0x10 [ 507.716941][T12526] ? kmem_cache_free+0x2d4/0x6c0 [ 507.721879][T12526] ? putname+0x154/0x1a0 [ 507.726172][T12526] ? __fget_files+0x20e/0x3c0 [ 507.730861][T12526] ? do_writev+0x28c/0x340 [ 507.735280][T12526] do_writev+0x28c/0x340 [ 507.739525][T12526] ? __pfx_do_writev+0x10/0x10 [ 507.744292][T12526] do_syscall_64+0xcd/0xfa0 [ 507.748799][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.754691][T12526] RIP: 0033:0x7f2dc618eec9 [ 507.759100][T12526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.778705][T12526] RSP: 002b:00007f2dc6fa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 507.787117][T12526] RAX: ffffffffffffffda RBX: 00007f2dc63e5fa0 RCX: 00007f2dc618eec9 [ 507.795086][T12526] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 507.803064][T12526] RBP: 00007f2dc6211f91 R08: 0000000000000000 R09: 0000000000000000 [ 507.811027][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.818993][T12526] R13: 00007f2dc63e6038 R14: 00007f2dc63e5fa0 R15: 00007ffedfdd5d68 [ 507.826980][T12526] [ 507.830338][T12526] Kernel Offset: disabled [ 507.834660][T12526] Rebooting in 86400 seconds..