last executing test programs: 9m24.397291517s ago: executing program 1 (id=1913): socket(0xa, 0x3, 0x3a) socketpair$auto(0xfffffffc, 0x2, 0x4, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000480)=0xff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf52, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) socket(0x1f, 0x3, 0x400001) socket(0x6, 0x1, 0xf) select$auto(0x9, &(0x7f0000000040)={[0x401, 0x1, 0x8, 0x7, 0x40, 0x7fffffff, 0x80000001, 0x0, 0x8, 0x80000000c28, 0x9be, 0x8, 0x1, 0x0, 0x1, 0x1c0]}, &(0x7f0000000380)={[0x8, 0xfffffffffffffffc, 0x0, 0x800000000000, 0x8, 0x800, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x4, 0x8e, 0x5, 0x8, 0x100000000, 0x9, 0x4]}, &(0x7f0000000400)={[0x94, 0x6, 0x2000000000000d, 0x481, 0x2, 0x5, 0x1, 0x1, 0x22d, 0x9, 0x1000, 0x5, 0x3dc7, 0x3, 0x2, 0x7]}, &(0x7f00000000c0)={0x7c050b5f, 0x9}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x44000, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x10, 0x940, 0x1ffde, 0x2, 0x4, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x20000001, 0x3, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x7, 0x9, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffc, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="06200000e472b9f63d2bccd48c7d2e9da50064537b47b96563f392e7faf9d165b82e85f9970cf7c7f8b1198ba604e59ba4147ec0021f1f3320fcdff19a8ed88552b05832eebf964ebf96adca3fee912e3f06a6cb7b4927f7fece025945fabb71b3958b69519cd137fb07545024ac595feffc31b58136"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4081) socket(0xa, 0x801, 0x84) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9m24.095597803s ago: executing program 1 (id=1914): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x5, 0x8) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x2) 9m23.833451384s ago: executing program 1 (id=1916): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x8, 0x8, 0x13, 0x3, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x5000aea5, 0x20) 9m23.145869669s ago: executing program 1 (id=1921): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b10000", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4000800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 9m22.879060436s ago: executing program 1 (id=1922): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x4, 0x6) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r3 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x100, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) socket(0xa, 0x2, 0x88) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r3, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) 9m18.895619679s ago: executing program 1 (id=1941): close_range$auto(0xffffffffffffffff, 0x8, 0x40) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x20000040) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 9m18.042190422s ago: executing program 32 (id=1941): close_range$auto(0xffffffffffffffff, 0x8, 0x40) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x20000040) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x64842, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 8m14.702276476s ago: executing program 0 (id=2238): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x80000, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x183d02, 0x0) writev$auto(r1, 0x0, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) unshare$auto(0x40000080) 8m14.219920926s ago: executing program 0 (id=2244): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) (fail_nth: 2) 8m13.260368416s ago: executing program 0 (id=2249): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0xa8440, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) newfstatat$auto(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x5, 0xd4e, 0x3, 0xfb, 0xee00, 0xee00, 0x0, 0x9, 0x8, 0x4, 0x0, 0xffffffff80000000, 0xfffffffffffffff4, 0x4, 0xfff, 0x7, 0x4}, 0x2) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) setrlimit$auto(0x1000000007, 0x0) close_range$auto(0x2, 0xa, 0x0) 8m12.389257038s ago: executing program 0 (id=2251): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) mmap$auto(0x0, 0x8, 0x8, 0x13, 0x3, 0x0) 8m12.020117823s ago: executing program 0 (id=2254): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x4, 0x6) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r0, r0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x1, 0xc53, 0x7, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r3 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x100, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) socket(0xa, 0x2, 0x88) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r3, 0x40085507, &(0x7f0000000340)={0x5, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) 8m10.895370083s ago: executing program 0 (id=2256): mmap$auto(0x0, 0x91d8, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setfsuid$auto(0xee01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp\x00', 0xce41, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x8946, 0x24) 8m10.385092533s ago: executing program 33 (id=2256): mmap$auto(0x0, 0x91d8, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setfsuid$auto(0xee01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x600002, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) setsockopt$auto(r1, 0x29, 0x39, 0x0, 0x110) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp\x00', 0xce41, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x101080, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x8946, 0x24) 6m23.8857096s ago: executing program 3 (id=2888): socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/reboot/cpu\x00', 0x3a3843, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4011) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) r3 = prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r3, 0x4144, 0x0) 6m23.369788439s ago: executing program 3 (id=2891): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0x11, 0x80003, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000000280)={&(0x7f0000001980)={0x2370, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}]}, @NL80211_ATTR_TX_RATES={0xeb, 0x5a, 0x0, 0x1, [@nested={0x8, 0xd2, 0x0, 0x1, [@nested={0x4, 0x139}]}, @generic, @generic="693e89ca59872cff7a2bde3c77e952fb749fb487ad0b27332ffbe729bfad2873eb0919a0d19feff916e655c4c035e570c9b954d7d539b828603e1af583ecbfaee9af948954fd2211ab0eb8f5f111cac7a044e27131746ee83a5a33cf421db4973013ba24aed59ba7dc9da4c7f5e12cfd4f76d379a0b30d07ec60d66147dd101e6cd7e94799a4827624219e578e86db8135afa5523db7f29ce4a87a049f1eb128d1b508ba7034fcd30355df77f2123129efd03f6bc5aa482332d35c366e5c1d344714b30b56257af5ced23606fce6c1b968d5929299b040b19da13e48f82aa6"]}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2250, 0x25, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @uid}, @typed={0x8, 0x10f, 0x0, 0x0, @ipv4=@loopback}, @nested={0x222a, 0xf0, 0x0, 0x1, [@generic="a048bfd794d66b4d4a880af9193356efe90c992e0cb95318926920ebc00ea6eb5dec8c102465b0486a0a802e30ebd75fc4862067d8a56ea8248350f55c61defb38d3807bf8d9883974eb4c5e19eaa060e8c34843d8881cc672a5ec4948af49a5b9f2a8bdcceb0706cdeb5a7e48f04959b2413487f5405527b648f2c2f61dadab490cdcf8", @generic="5ae375bc274f394c00517740caba5d87ed48aae93498118040b57b3682bb624d351d7c1d8143c73dc7d0e85442c9d38cc840d0406840cef20c3844b2aab98200d699251bc1de0ad363e8efd11b91fc94505297be290c26100839740042e3b309c8e35449e4398fdcc918b089b49a992be706e431273698abc736dcc1b72156c618fbdc1b8904cd0fe94bb775f0b365e6a8ffa55cd2ef5b816155a33b2962b54b4fc9d546bd4394bc", @generic="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", @generic="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", @nested={0x4, 0xc1}, @generic="00777250e7cf828a966969f1efe7ada7037130b9de87b38b7e1218336fae3c7c2d50c8f608c146355d7106a3b9d947c80a65854c0ca7356cd453e8abec8e38aedb79c6c3ec5630abce558679bb628ae8f2d3f6a913913a8ea1df70d94bad7a180c3e1a3fe9659835b5d2662ef63046e0ae85280046d097880b3559406bca3d7340e81151f24a883dd8552c87e0deb45f72172f7e04f96e4685403b944bf73cf3c083e33d642b34dc18a3ecf745bb7ea862372da92a668fd6c8e06881915b12e1d51fa87ba33238c2bf0567935900096bcb705645d0b001b9ee865d1eaff9f9c3f800e3e1887f38d4f5728a8848733ec5629d676fcb18"]}, @typed={0xf, 0x102, 0x0, 0x0, @str='%\x01\\+)[{:[\x16\x00'}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x2370}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) epoll_wait$auto(r1, &(0x7f0000000400)={0x1, 0xa}, 0x17a285d3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) r3 = socket(0x10, 0x2, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r3, &(0x7f0000000000)='-\x00', 0x2fb) 6m22.433796485s ago: executing program 3 (id=2901): mmap$auto(0x0, 0x2, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x40301, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ftruncate$auto(0x3, 0x700) 6m22.215476084s ago: executing program 3 (id=2903): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getpid() timer_create$auto(0x2, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc28c398", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2514000000180001801400020073797a5f74756e000000000000000000080003000400000005000b00fe00000008000a000500000008001b000600000044001d801c0001800800010002000000080001000000008008000300cd0b00000c00018008000200030000000c00018008000200fdffffff0c0001800800010005000000"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) 6m22.017159447s ago: executing program 3 (id=2904): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0x93, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) pidfd_open$auto(0x1, 0x0) socket(0xf, 0x3, 0x2) write$auto(0x3, 0x0, 0xfdef) socket(0x10, 0x2, 0x6) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8800, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/swradio0\x00', 0x109a81, 0x0) ioctl$auto(r2, 0xc0585611, r2) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x404, 0x7, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_OBSS_PD={0x68, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0x51, 0x5, "78f701a10d25a1503d255fcb7c01ca8c6d6a5e2b16a1718f1f04d9122af14e91ea0854ef2872fbfaf5f571f0654bf12057c68680874e0e1b827a580636517f23e4cf81ae057d74a6d0c0f0622d"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 6m20.767227371s ago: executing program 3 (id=2912): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r1, 0x4b4a) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x103e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001100), 0x292482, 0x0) pread64$auto(r3, 0x0, 0x20000000001, 0x20001) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x23, 0x5, 0x0) 6m5.498645449s ago: executing program 34 (id=2912): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r1, 0x4b4a) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x103e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000001100), 0x292482, 0x0) pread64$auto(r3, 0x0, 0x20000000001, 0x20001) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x23, 0x5, 0x0) 11.88020039s ago: executing program 6 (id=5092): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/environ\x00', 0x44000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) fcntl$auto(0x8000000000000001, 0x26, 0x8) (fail_nth: 1) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_MEMISLOCKED(r0, 0x80084d17, &(0x7f0000000080)={0xfffffffc, 0x4f90}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(0xffffffffffffffff, 0x0, 0x3) 11.761786935s ago: executing program 5 (id=5093): openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/environ\x00', 0x44000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c9180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) r0 = fcntl$auto(0x8000000000000001, 0x26, 0x8) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2000, 0x0) ioctl$auto_MEMISLOCKED(r1, 0x80084d17, &(0x7f0000000080)={0xfffffffc, 0x4f90}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) recvfrom$auto(0x4, 0x0, 0x1, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x155) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000000c0)={0xaf74bf90, 0x3, 0x40, 0x6, 0x0, "a9f3b9a34a68cf1ff21afb234230953f50486a4f0ee2180caae21c2e3f098383f02a82806255180dd1d75bdfbbeac50a0323973289aff2f2bc45e7311f0a1cf4", "4d289c534c47c2a8268795bfbf6b54dc1c0ec9aa591f19c279063be0d34a0acd96fabcbed1d09323d7db5d9bd61df1a75d0a0d8ca4b010fdcbe30953cbc0ec3ebdc761f943da50e22f8a4566863b2087", "e63e6f856145e549b2e76eb6d079e35d70b1a0f7e0d9ae2b80ff643656719f2c", 0x1, 0x7, 0x7, "7b9ff888d3d50b388c1efffa3dc612cc234fe9f87c26628806322699becd8a604baae72abf0a9e4410800a83fdab43d5b3d844d0d972db5e9ae87a2c"}) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d64688be86d547a05c861"}, 0x55) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000000f59098a905383e8e6245b5cff8ebff632276b29d3ff88daee7ee4c51d7c807b7a326ed", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf2511000000050039014d0000000600980005000000bc005b00f1a7ca20fadef2e9d08a497c38aac0ede73bb4f8447b6817f9b3b5cbadf2dcbc44e0a06c9c3cc873d634f95812488be0a77e40ca11d15672a29a2933ec2f52d82682701b6192d45b1c0e8a58f2f76038e35728417148acad98ead4d93b9731316c272b64f7c7544754209ac39439bf2a544fa7c688fe623c8f99a402f3d3e2b677dd4c9c1d4c617c2e2385a72f018688fe4c19602c59e54f9e54602237b5331792d4c009b96ffd01f03cc6078f9432ada7653d0f2945e7010400bf00"], 0xe4}}, 0x40040) getpeername$auto(0x3, 0x0, 0x0) 10.680471325s ago: executing program 6 (id=5096): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) (fail_nth: 1) 10.644694597s ago: executing program 5 (id=5097): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) write$auto(r0, &(0x7f00000007c0)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x81) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r1, 0x0) 10.072045754s ago: executing program 5 (id=5102): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = socket(0x1a, 0x2, 0x7) capset$auto(0x0, 0x0) sendmmsg$auto(r0, 0x0, 0x2, 0x100) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0xffffff7ffffffffd, 0x82) socket(0x10, 0x4, 0x100) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/machinecheck/machinecheck1/check_interval\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@typed={0x4, 0x7d, 0x0, 0x0, @binary}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x93, 0x0, 0x0, @str='\x00'}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) write$auto(r2, &(0x7f00000005c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k@\xf4\xc4\xa0\xe3\x10\xef\xaa\xeeP\xa3\xe1\xee\xaf\x88\x99J\x11\x99\xa4\x91\xd6dh\xca`\xeeL\x00\xd7\x87+yd\xa4WO\xf6\fC\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB='^\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r3, 0x11) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) tkill$auto(r3, 0x7) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) 5.615015156s ago: executing program 2 (id=5115): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) (fail_nth: 2) 4.956379251s ago: executing program 2 (id=5116): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 4.632424459s ago: executing program 2 (id=5117): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de44406c2fb21", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) r1 = io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x5, 0x2d, 0x0, 0x5) prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) ioctl$auto_TIOCMGET(r1, 0x5415, &(0x7f0000000080)="0b25a0cad3af9222910cc119b3d6349d0297c6bf4cb483e34ab5e08f7e12675dc99ea0e93fafea83f04fd28b81b225d76037d101decca5fc11a2a7a93b") close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, 0x0, 0x4) syz_clone(0x82000, &(0x7f0000000100)="169fd0187175887115d075868bfc74e03674b1ffdd41779fb000031774b59a2090a79b49fba4229119dca196fbdd4edec991a22c9aac01fb8e3eaa87171a31889a2ce9e609e2deaeb7f61f0883730b0de4b0355062b53f5aa915b46d5a53c2e01e64137f744effd9a3931eaa469c371c76de567088d048111b88d0f41643cc40cb4aa134cbfcee550e7e1740de48b13bf7f498bb7e9dde59cd7625ebb78a36dc7276", 0xa2, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="7f5dd07c52ccd9663c14b447cc373bb6bb2c6ce1132d23bc0aaac4521f4e58db226d308a6079456b76e69980a620d27864f961e875eaef09ec90bc87d2d19cad51a078d0a82266f33ad6b2f4bd10ddaef55e73845a88dc84d5f99c7111f8a71d5174d0bffe3df0a7700614c0366638ed2516da9516f9667d0229625f") kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) semctl$auto(0x1, 0x7ff, 0x903b, 0x5e) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f0000000040)="4a67d23edb3100000000000000000075210d2de44406c2fb21", 0x49}, 0x5, &(0x7f0000000180), 0x5}, 0x1}, 0x2, 0x3) (async) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) ioctl$auto(0x3, 0x5411, 0x38) (async) io_uring_setup$auto(0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$auto(0x3, 0x5, 0x2d, 0x0, 0x5) (async) prctl$auto_PR_SET_MM_ARG_START(0x1, 0x8, 0xffffffffffffffff, 0x9, 0x321) (async) ioctl$auto_TIOCMGET(r1, 0x5415, &(0x7f0000000080)="0b25a0cad3af9222910cc119b3d6349d0297c6bf4cb483e34ab5e08f7e12675dc99ea0e93fafea83f04fd28b81b225d76037d101decca5fc11a2a7a93b") (async) close_range$auto(0x2, 0x8, 0x0) (async) connect$auto(0x3, 0x0, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) write$auto(r2, 0x0, 0x4) (async) syz_clone(0x82000, &(0x7f0000000100)="169fd0187175887115d075868bfc74e03674b1ffdd41779fb000031774b59a2090a79b49fba4229119dca196fbdd4edec991a22c9aac01fb8e3eaa87171a31889a2ce9e609e2deaeb7f61f0883730b0de4b0355062b53f5aa915b46d5a53c2e01e64137f744effd9a3931eaa469c371c76de567088d048111b88d0f41643cc40cb4aa134cbfcee550e7e1740de48b13bf7f498bb7e9dde59cd7625ebb78a36dc7276", 0xa2, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="7f5dd07c52ccd9663c14b447cc373bb6bb2c6ce1132d23bc0aaac4521f4e58db226d308a6079456b76e69980a620d27864f961e875eaef09ec90bc87d2d19cad51a078d0a82266f33ad6b2f4bd10ddaef55e73845a88dc84d5f99c7111f8a71d5174d0bffe3df0a7700614c0366638ed2516da9516f9667d0229625f") (async) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) (async) semctl$auto(0x1, 0x7ff, 0x903b, 0x5e) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) (async) 4.348410475s ago: executing program 5 (id=5118): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) mmap$auto(0x3fc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000400)={{0x5, 0x25, 0x8672, 0x80}, "66ac010005000000009b5fd59000002000ada7272464028fdce8ecc6000000000000e5ff81dcdbd3d2d9c50cb822f66eb624ad63110d61771552c03dce580000000000000000000b00"}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) ioctl$auto_UI_SET_PHYS(r2, 0x4008556c, 0x0) mmap$auto(0x0, 0x20009, 0x800000007, 0x12, r2, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x1d9402, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x7fffffffe000, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) r5 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto_fops_u8_(r5, &(0x7f0000000080)="e8fce183272ad4fe3b64f8da0ad5e39e34aa12b150e7eb22932a14a5fd5d934e3ef9a59f209cbdef796d8b9860d63b45e1d54520aecc1632769f560109258f49c4868565216ed7f146a0b9a7a0a866f0e7604d390e61bfb4e6951496438c4ccd9be842601922859c232764446b006edc2b78d781adea37fcfdb0e09119b53082dda164e6bb80cd48756e1fe9b635ed1a665a5a4e683cb0358bd28a8df384061ffba751c224240cf01be4d40315798c66a014ed8bd5afb6", 0xb7) socket(0xa, 0x4, 0xffff5f79) 4.154837041s ago: executing program 6 (id=5119): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x6) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) (async) socket(0x2, 0x2, 0x73) socket(0xa, 0x1, 0x84) (async, rerun: 32) r0 = io_uring_setup$auto(0x1, 0x0) (rerun: 32) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$auto_TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x1000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) (async, rerun: 32) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) (async) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r2, 0x6a, 0x3, 0x0, 0x4) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0x88282, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) userfaultfd$auto(0x1) close_range$auto(0x2, 0x8, 0x0) 4.036875132s ago: executing program 4 (id=5120): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/hwsim0/netdev_group\x00', 0x141000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2100, 0x0) read$auto(r0, 0x0, 0x20) 3.88442415s ago: executing program 2 (id=5121): r0 = socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r2 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x3, 0xc2, 0x8}, 0x80) read$auto_fops_u32_ro_(r2, &(0x7f00000001c0)=""/11, 0xb) write$auto(r1, 0x0, 0xfff) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54f5b50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.783558363s ago: executing program 4 (id=5122): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/hwsim0/netdev_group\x00', 0x141000, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x102, 0x0) ioctl$auto(r1, 0x900064b7, r1) ioctl$auto(r1, 0x3, r1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r2 = socket(0x2, 0x5, 0x0) getsockname$auto(r2, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) read$auto(r0, 0x0, 0x20) 3.669264569s ago: executing program 4 (id=5123): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/hwsim0/netdev_group\x00', 0x141000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2100, 0x0) read$auto(r0, 0x0, 0x20) (fail_nth: 2) 2.908335712s ago: executing program 4 (id=5124): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) sysfs$auto(0x2, 0x10, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x482b01, 0x0) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x400002, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r0, 0x8000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/netlink\x00', 0x141380, 0x0) socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) mq_getsetattr$auto(r3, &(0x7f00000000c0)={0x18a65f3b, 0x6, 0xffffffffffffffff, 0xbaa}, &(0x7f0000000100)={0xf5, 0x4, 0x7, 0x4c}) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x20000000001ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x6, 0xfffffffffffffffd, 0x10001, 0xaa9, 0x7ffffffd, 0x3, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fsopen$auto(0x0, 0x1) 2.882609734s ago: executing program 5 (id=5125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x1, 0x5, 0x0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 2.867132929s ago: executing program 6 (id=5126): socket(0xa, 0x3, 0xf2) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x9, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.8/usb26/26-0:1.0/usb26-port2/power/runtime_status\x00', 0x2, 0x0) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000380)='\x00', 0x163fdb7e) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x8, 0x806, 0x13, 0x46) sendmsg$auto_NL802154_CMD_STOP_BEACONS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000844}, 0x50) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\'w\x00I', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd12\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) read$auto(0xffffffffffffffff, 0x0, 0x1f) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7) 762.076911ms ago: executing program 6 (id=5127): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x482b01, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x400002, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, r3, 0x8000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x208001, 0x0) prctl$auto(0x5, 0x1, 0x0, 0x1, 0xfffffffffffffffd) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x100000000, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xe4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffbF\xfc\xf8\x9f9}z\xda=b\xb6\x012T\xff#\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xfc\x84\x1a\x81\x81\xe6\xfd{KE\xfe$Zz\xb0\xe9\xcc\n\xb9\xa3\x0f#\x8a\x1a{g\x02\xc2\x89\xee{\x960\x8c\x056\xfc\x8f\x0e\xb6y\xca^=YxlS\xb5\n\xef\x118\x9cr\xdc\xb7\xf2\x8eI\xa8BI\x15On\xc2\nt\xf9\xe0O\x94p\x11\xc7', 0x100000a3d9) 459.784342ms ago: executing program 5 (id=5128): r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/loginuid\x00', 0x90180, 0x0) io_uring_register$auto_IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000001c0)="014eaf61da05d1ed93acb7f34a265f5befe18b5debd9673d84e82c", 0x77a) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = socket(0xa, 0x80000, 0x3b) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r2) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac010093b0e20675c0cd237df5c14b00c9b95f01156aa4360b01ec842505da56322685d38e4e09b6fbbe712e3ff02cd965a102b0e7309fa6d1e18bf313adfa38e6e8e93883acd43dd9cbb79361d4b6beb489ac21e6be6abb", @ANYRES16=r3, @ANYBLOB="00012cbd7000fddbdf257a0000000600ab000900000065015a80d00098800400f600c2000c00e7d27def5a40959702826cd0bb8c4ea484f8ab40cc5e52f1a7fc1be2bab9132521814a07e27317a26d0a54db72bd7a09e653a9dbbc469359ebae112a369c6f6e32714f98036cd2d32c7685e726609bf622a54681e51906385ccfa8155d0534bb0daf0e2ee198bf5c2f93e208324fb38547322afc98103d221f519b050a5be2b028475693c3c6b922afebef3012808510bb5b132bc3a45ec6c85a3c4660a1d0b6be06d4013c09cdc424166307e9"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sysfs$auto(0x2, 0x2c, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x6, r4, &(0x7f0000000040)={0x6, 0x323}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r6, 0xc0686611, &(0x7f0000000080)={0x67, 0x1, 0x7fff, 0x5, 0x80000000007, 0x80000000000001, 0x6, 0xff, 0x400000000000005, 0x7f, 0xfbfffffe, 0x200, 0x7fb, 0x4, 0x9}) sendfile$auto(r5, r5, 0x0, 0xffffffff) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/merge_across_nodes\x00', 0x80202, 0x0) read$auto(r8, 0x0, 0x80) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, 0x0) r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001a80), r2) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf250100000008000100dc"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) connect$auto(r1, &(0x7f0000000000)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 0s ago: executing program 4 (id=5129): mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (fail_nth: 2) kernel console output (not intermixed with test programs): parsing attributes in process `syz.4.4682'. [ 957.013493][T22705] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4705'. [ 958.679850][T22761] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4720'. [ 958.731167][T22761] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4720'. [ 960.442169][T22810] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4731'. [ 961.222119][T22819] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4734'. [ 964.107419][T22904] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4758'. [ 965.432146][T22919] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4763'. [ 966.089234][T22943] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4769'. [ 966.172723][T22943] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4769'. [ 968.497245][T14058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 968.507504][T14058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 968.520452][T14058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 968.535482][T14058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 968.545552][T14058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 968.718501][T16031] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 968.812172][T23007] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4788'. [ 968.929403][T20450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.150155][T20450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.285471][T20450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.521607][T20450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.789155][T22995] chnl_net:caif_netlink_parms(): no params data found [ 970.155341][T20450] bridge_slave_1: left allmulticast mode [ 970.161146][T20450] bridge_slave_1: left promiscuous mode [ 970.219409][T20450] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.268386][T20450] bridge_slave_0: left allmulticast mode [ 970.287290][T20450] bridge_slave_0: left promiscuous mode [ 970.305402][T20450] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.602565][T14058] Bluetooth: hci3: command tx timeout [ 970.662695][T20450] ip_vti0 (unregistering): left allmulticast mode [ 971.028582][T20450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.042272][T20450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.053857][T20450] bond0 (unregistering): Released all slaves [ 971.149497][T23039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 971.159571][T23039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 971.213944][T23039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 971.228189][T22995] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.241270][T23039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 971.250282][T23039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 971.256746][T23039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 971.265745][T22995] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.278257][T23039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 971.287935][T22995] bridge_slave_0: entered allmulticast mode [ 971.298950][T23039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 971.306274][T23039] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 971.317998][T23039] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 971.323977][T22995] bridge_slave_0: entered promiscuous mode [ 971.341180][T23039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 971.357947][T23039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 971.384162][T23039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 971.447951][T22995] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.466864][T22995] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.489137][T22995] bridge_slave_1: entered allmulticast mode [ 971.497632][T22995] bridge_slave_1: entered promiscuous mode [ 971.539124][T23064] FAULT_INJECTION: forcing a failure. [ 971.539124][T23064] name failslab, interval 1, probability 0, space 0, times 0 [ 971.576542][T23064] CPU: 0 UID: 0 PID: 23064 Comm: syz.4.4800 Not tainted syzkaller #0 PREEMPT(full) [ 971.576576][T23064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.576590][T23064] Call Trace: [ 971.576598][T23064] [ 971.576607][T23064] dump_stack_lvl+0x16c/0x1f0 [ 971.576642][T23064] should_fail_ex+0x512/0x640 [ 971.576669][T23064] ? fs_reclaim_acquire+0xae/0x150 [ 971.576707][T23064] ? tomoyo_encode2+0x100/0x3e0 [ 971.576738][T23064] should_failslab+0xc2/0x120 [ 971.576764][T23064] __kmalloc_noprof+0xd2/0x510 [ 971.576802][T23064] tomoyo_encode2+0x100/0x3e0 [ 971.576841][T23064] tomoyo_encode+0x29/0x50 [ 971.576874][T23064] tomoyo_realpath_from_path+0x18f/0x6e0 [ 971.576913][T23064] ? tomoyo_profile+0x47/0x60 [ 971.576940][T23064] tomoyo_path_number_perm+0x245/0x580 [ 971.576970][T23064] ? tomoyo_path_number_perm+0x237/0x580 [ 971.577012][T23064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 971.577051][T23064] ? find_held_lock+0x2b/0x80 [ 971.577106][T23064] ? find_held_lock+0x2b/0x80 [ 971.577131][T23064] ? hook_file_ioctl_common+0x145/0x410 [ 971.577170][T23064] ? __fget_files+0x20e/0x3c0 [ 971.577202][T23064] security_file_ioctl+0x9b/0x240 [ 971.577237][T23064] __x64_sys_ioctl+0xb7/0x210 [ 971.577274][T23064] do_syscall_64+0xcd/0x4c0 [ 971.577305][T23064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.577331][T23064] RIP: 0033:0x7f888f98eec9 [ 971.577352][T23064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.577375][T23064] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 971.577399][T23064] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 971.577417][T23064] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 971.577433][T23064] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 971.577448][T23064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.577463][T23064] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 971.577498][T23064] [ 971.577522][T23064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 972.023618][T22995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.108109][T22995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.239819][T20450] hsr_slave_0: left promiscuous mode [ 972.261326][T23080] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4805'. [ 972.315735][T20450] hsr_slave_1: left promiscuous mode [ 972.330954][T20450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 972.366773][T20450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 972.401006][T20450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 972.460318][T20450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 972.516120][T20450] veth0_macvtap: left promiscuous mode [ 972.536231][T20450] veth1_vlan: left promiscuous mode [ 972.564155][T20450] veth0_vlan: left promiscuous mode [ 973.152674][T14058] Bluetooth: hci4: command 0x0406 tx timeout [ 973.316973][T14058] Bluetooth: hci1: command 0x0c1a tx timeout [ 973.319944][ T5162] Bluetooth: hci0: command 0x0c1a tx timeout [ 973.395212][ T5162] Bluetooth: hci3: command 0x040f tx timeout [ 974.020965][T20450] team0 (unregistering): Port device team_slave_1 removed [ 974.182628][T20450] team0 (unregistering): Port device team_slave_0 removed [ 974.748263][T22995] team0: Port device team_slave_0 added [ 974.793849][T22995] team0: Port device team_slave_1 added [ 974.988236][T22995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.999127][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.036283][T22995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.197907][T22995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.215113][T22995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.253341][ T5162] Bluetooth: hci4: command 0x0406 tx timeout [ 975.260068][T22995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.397757][ T5162] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.404021][T23102] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.477354][ T5162] Bluetooth: hci3: command 0x040f tx timeout [ 975.519555][T22995] hsr_slave_0: entered promiscuous mode [ 975.536886][T22995] hsr_slave_1: entered promiscuous mode [ 975.908253][T23142] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 976.417995][T23142] FAULT_INJECTION: forcing a failure. [ 976.417995][T23142] name failslab, interval 1, probability 0, space 0, times 0 [ 976.480685][T23142] CPU: 0 UID: 0 PID: 23142 Comm: syz.4.4814 Not tainted syzkaller #0 PREEMPT(full) [ 976.480725][T23142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 976.480743][T23142] Call Trace: [ 976.480753][T23142] [ 976.480764][T23142] dump_stack_lvl+0x16c/0x1f0 [ 976.480801][T23142] should_fail_ex+0x512/0x640 [ 976.480831][T23142] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 976.480869][T23142] should_failslab+0xc2/0x120 [ 976.480909][T23142] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 976.480939][T23142] ? __proc_create+0xc3/0x8e0 [ 976.480981][T23142] ? __proc_create+0x2ce/0x8e0 [ 976.481020][T23142] __proc_create+0x2ce/0x8e0 [ 976.481054][T23142] ? __pfx___proc_create+0x10/0x10 [ 976.481093][T23142] ? _raw_write_unlock+0x28/0x50 [ 976.481116][T23142] ? proc_register+0x559/0x8b0 [ 976.481157][T23142] proc_create_reg+0x7d/0x180 [ 976.481180][T23142] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 976.481210][T23142] proc_create_net_single+0x86/0x180 [ 976.481237][T23142] ? __pfx_proc_create_net_single+0x10/0x10 [ 976.481275][T23142] can_init_proc+0x2b3/0x4d0 [ 976.481305][T23142] can_pernet_init+0x1e4/0x370 [ 976.481342][T23142] ? __pfx_can_pernet_init+0x10/0x10 [ 976.481367][T23142] ops_init+0x1e2/0x5f0 [ 976.481403][T23142] setup_net+0x100/0x390 [ 976.481437][T23142] ? __pfx_setup_net+0x10/0x10 [ 976.481469][T23142] ? debug_mutex_init+0x37/0x70 [ 976.481502][T23142] copy_net_ns+0x2f8/0x690 [ 976.481539][T23142] create_new_namespaces+0x3ea/0xa90 [ 976.481585][T23142] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 976.481621][T23142] ksys_unshare+0x45b/0xa40 [ 976.481656][T23142] ? __pfx_ksys_unshare+0x10/0x10 [ 976.481694][T23142] ? xfd_validate_state+0x61/0x180 [ 976.481742][T23142] __x64_sys_unshare+0x31/0x40 [ 976.481777][T23142] do_syscall_64+0xcd/0x4c0 [ 976.481808][T23142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.481836][T23142] RIP: 0033:0x7f888f98eec9 [ 976.481859][T23142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.481887][T23142] RSP: 002b:00007f88908f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 976.481914][T23142] RAX: ffffffffffffffda RBX: 00007f888fbe6090 RCX: 00007f888f98eec9 [ 976.481932][T23142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 976.481949][T23142] RBP: 00007f888fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.481965][T23142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.481981][T23142] R13: 00007f888fbe6128 R14: 00007f888fbe6090 R15: 00007ffee31f4438 [ 976.482018][T23142] [ 976.949257][T23169] zswap: compressor not available [ 976.997861][T23172] Setting dangerous option i915.mitigations - tainting kernel [ 977.123661][T23182] block nbd9: NBD_DISCONNECT [ 977.318682][ T5162] Bluetooth: hci4: command 0x0406 tx timeout [ 977.472663][ T5162] Bluetooth: hci1: command 0x0c1a tx timeout [ 977.472670][T23102] Bluetooth: hci0: command 0x0c1a tx timeout [ 977.553810][T23102] Bluetooth: hci3: command 0x040f tx timeout [ 978.335257][T22995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 978.374352][T22995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 978.496088][T22995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 978.552090][T22995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 978.859204][T22995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.976681][T22995] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.009544][T20450] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.016785][T20450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.145183][T23221] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4825'. [ 979.193025][T23221] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4825'. [ 979.195935][T20444] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.209645][T20444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.393105][T23102] Bluetooth: hci4: command 0x0406 tx timeout [ 979.632575][T23102] Bluetooth: hci3: command 0x040f tx timeout [ 980.047229][T23245] FAULT_INJECTION: forcing a failure. [ 980.047229][T23245] name failslab, interval 1, probability 0, space 0, times 0 [ 980.088486][T23245] CPU: 0 UID: 0 PID: 23245 Comm: syz.4.4829 Tainted: G U syzkaller #0 PREEMPT(full) [ 980.088526][T23245] Tainted: [U]=USER [ 980.088535][T23245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 980.088548][T23245] Call Trace: [ 980.088557][T23245] [ 980.088567][T23245] dump_stack_lvl+0x16c/0x1f0 [ 980.088599][T23245] should_fail_ex+0x512/0x640 [ 980.088625][T23245] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 980.088661][T23245] should_failslab+0xc2/0x120 [ 980.088693][T23245] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 980.088725][T23245] ? rxrpc_setsockopt+0x76c/0x890 [ 980.088754][T23245] rxrpc_server_keyring+0xfc/0x300 [ 980.088781][T23245] ? __pfx_rxrpc_server_keyring+0x10/0x10 [ 980.088812][T23245] ? __local_bh_enable_ip+0xa4/0x120 [ 980.088844][T23245] rxrpc_setsockopt+0x76c/0x890 [ 980.088870][T23245] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 980.088897][T23245] ? aa_sock_opt_perm+0xfd/0x1c0 [ 980.088925][T23245] ? __pfx_rxrpc_setsockopt+0x10/0x10 [ 980.088951][T23245] do_sock_setsockopt+0xf0/0x1d0 [ 980.088988][T23245] __sys_setsockopt+0x120/0x1a0 [ 980.089019][T23245] __x64_sys_setsockopt+0xbd/0x160 [ 980.089044][T23245] ? do_syscall_64+0x91/0x4c0 [ 980.089069][T23245] ? lockdep_hardirqs_on+0x7c/0x110 [ 980.089094][T23245] do_syscall_64+0xcd/0x4c0 [ 980.089129][T23245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.089155][T23245] RIP: 0033:0x7f888f98eec9 [ 980.089175][T23245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.089200][T23245] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 980.089224][T23245] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 980.089242][T23245] RDX: 0000000000000002 RSI: 0000001000000110 RDI: 0000000000000003 [ 980.089258][T23245] RBP: 00007f8890911090 R08: 00000000000000df R09: 0000000000000000 [ 980.089279][T23245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.089294][T23245] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 980.089330][T23245] [ 980.596855][T22995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.748278][T22995] veth0_vlan: entered promiscuous mode [ 980.795084][T22995] veth1_vlan: entered promiscuous mode [ 980.917180][T22995] veth0_macvtap: entered promiscuous mode [ 980.948508][T22995] veth1_macvtap: entered promiscuous mode [ 981.022547][T22995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.070177][T22995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.096215][T20450] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.126223][T20450] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.157794][T20455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.202260][T20455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.243178][T23280] FAULT_INJECTION: forcing a failure. [ 981.243178][T23280] name fail_futex, interval 1, probability 0, space 0, times 0 [ 981.312165][T23280] CPU: 1 UID: 0 PID: 23280 Comm: syz.5.4835 Tainted: G U syzkaller #0 PREEMPT(full) [ 981.312205][T23280] Tainted: [U]=USER [ 981.312214][T23280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 981.312229][T23280] Call Trace: [ 981.312237][T23280] [ 981.312247][T23280] dump_stack_lvl+0x16c/0x1f0 [ 981.312280][T23280] should_fail_ex+0x512/0x640 [ 981.312313][T23280] get_futex_key+0x1d0/0x1560 [ 981.312347][T23280] ? __pfx_get_futex_key+0x10/0x10 [ 981.312377][T23280] ? futex_private_hash_put+0x176/0x300 [ 981.312414][T23280] futex_wake+0xea/0x530 [ 981.312444][T23280] ? futex_wait+0x120/0x380 [ 981.312476][T23280] ? __pfx_futex_wait+0x10/0x10 [ 981.312507][T23280] ? __pfx_futex_wake+0x10/0x10 [ 981.312551][T23280] do_futex+0x1e3/0x350 [ 981.312581][T23280] ? __pfx_do_futex+0x10/0x10 [ 981.312608][T23280] ? __fget_files+0x204/0x3c0 [ 981.312641][T23280] __x64_sys_futex+0x1e0/0x4c0 [ 981.312676][T23280] ? __pfx___x64_sys_futex+0x10/0x10 [ 981.312709][T23280] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 981.312755][T23280] do_syscall_64+0xcd/0x4c0 [ 981.312785][T23280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.312811][T23280] RIP: 0033:0x7f350598eec9 [ 981.312832][T23280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.312855][T23280] RSP: 002b:00007f350683a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 981.312880][T23280] RAX: ffffffffffffffda RBX: 00007f3505be6098 RCX: 00007f350598eec9 [ 981.312898][T23280] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3505be609c [ 981.312913][T23280] RBP: 00007f3505be6090 R08: 00007f350685c000 R09: 0000000000000000 [ 981.312927][T23280] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 981.312940][T23280] R13: 00007f3505be6128 R14: 00007ffcd707fe70 R15: 00007ffcd707ff58 [ 981.312975][T23280] [ 981.647288][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.676024][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.714678][T23102] Bluetooth: hci3: command 0x040f tx timeout [ 981.804856][T23277] zswap: compressor not available [ 981.950945][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.970181][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.364112][T23308] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4782'. [ 982.420333][T23308] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4782'. [ 982.800277][T23315] FAULT_INJECTION: forcing a failure. [ 982.800277][T23315] name failslab, interval 1, probability 0, space 0, times 0 [ 982.940745][T23315] CPU: 1 UID: 0 PID: 23315 Comm: syz.5.4839 Tainted: G U syzkaller #0 PREEMPT(full) [ 982.940798][T23315] Tainted: [U]=USER [ 982.940808][T23315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 982.940822][T23315] Call Trace: [ 982.940831][T23315] [ 982.940842][T23315] dump_stack_lvl+0x16c/0x1f0 [ 982.940875][T23315] should_fail_ex+0x512/0x640 [ 982.940899][T23315] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 982.940930][T23315] should_failslab+0xc2/0x120 [ 982.940961][T23315] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 982.940989][T23315] ? do_raw_spin_unlock+0x172/0x230 [ 982.941024][T23315] ? alloc_inode+0xc3/0x240 [ 982.941062][T23315] alloc_inode+0xc3/0x240 [ 982.941096][T23315] new_inode+0x22/0x1c0 [ 982.941134][T23315] nfsd_get_inode+0x1a/0x190 [ 982.941162][T23315] nfsd_mkdir+0xba/0x3a0 [ 982.941194][T23315] nfsd_fill_super+0x3b4/0x530 [ 982.941224][T23315] ? __pfx_nfsd_fill_super+0x10/0x10 [ 982.941254][T23315] get_tree_keyed+0x10e/0x1d0 [ 982.941284][T23315] vfs_get_tree+0x8b/0x340 [ 982.941310][T23315] path_mount+0x1516/0x2060 [ 982.941344][T23315] ? __pfx_path_mount+0x10/0x10 [ 982.941375][T23315] ? kmem_cache_free+0x2d1/0x4d0 [ 982.941399][T23315] ? putname+0x154/0x1a0 [ 982.941434][T23315] ? putname+0x154/0x1a0 [ 982.941469][T23315] ? __x64_sys_mount+0x28d/0x310 [ 982.941495][T23315] __x64_sys_mount+0x28d/0x310 [ 982.941526][T23315] ? __pfx___x64_sys_mount+0x10/0x10 [ 982.941567][T23315] do_syscall_64+0xcd/0x4c0 [ 982.941598][T23315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 982.941623][T23315] RIP: 0033:0x7f350598eec9 [ 982.941644][T23315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 982.941670][T23315] RSP: 002b:00007f350683a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 982.941695][T23315] RAX: ffffffffffffffda RBX: 00007f3505be6090 RCX: 00007f350598eec9 [ 982.941711][T23315] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 982.941726][T23315] RBP: 00007f3505a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 982.941740][T23315] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 982.941753][T23315] R13: 00007f3505be6128 R14: 00007f3505be6090 R15: 00007ffcd707ff58 [ 982.941792][T23315] [ 984.138090][T23332] block nbd0: Unsupported socket: shutdown callout must be supported. [ 984.388678][T23342] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 985.102663][T23359] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 985.198471][T23363] synth uevent: /module/l2tp_ip6: unknown uevent action string [ 985.354054][T23363] FAULT_INJECTION: forcing a failure. [ 985.354054][T23363] name failslab, interval 1, probability 0, space 0, times 0 [ 985.397440][T23363] CPU: 0 UID: 0 PID: 23363 Comm: syz.6.4848 Tainted: G U syzkaller #0 PREEMPT(full) [ 985.397484][T23363] Tainted: [U]=USER [ 985.397494][T23363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 985.397509][T23363] Call Trace: [ 985.397542][T23363] [ 985.397554][T23363] dump_stack_lvl+0x16c/0x1f0 [ 985.397588][T23363] should_fail_ex+0x512/0x640 [ 985.397618][T23363] ? __kmalloc_noprof+0xbf/0x510 [ 985.397650][T23363] ? ops_init+0x77/0x5f0 [ 985.397676][T23363] should_failslab+0xc2/0x120 [ 985.397709][T23363] __kmalloc_noprof+0xd2/0x510 [ 985.397737][T23363] ? lockdep_init_map_type+0x5c/0x280 [ 985.397778][T23363] ops_init+0x77/0x5f0 [ 985.397810][T23363] setup_net+0x100/0x390 [ 985.397842][T23363] ? __pfx_setup_net+0x10/0x10 [ 985.397873][T23363] ? debug_mutex_init+0x37/0x70 [ 985.397905][T23363] copy_net_ns+0x2f8/0x690 [ 985.397942][T23363] create_new_namespaces+0x3ea/0xa90 [ 985.397980][T23363] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 985.398014][T23363] ksys_unshare+0x45b/0xa40 [ 985.398048][T23363] ? __pfx_ksys_unshare+0x10/0x10 [ 985.398084][T23363] ? xfd_validate_state+0x61/0x180 [ 985.398130][T23363] __x64_sys_unshare+0x31/0x40 [ 985.398162][T23363] do_syscall_64+0xcd/0x4c0 [ 985.398193][T23363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.398219][T23363] RIP: 0033:0x7fc80738eec9 [ 985.398241][T23363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.398269][T23363] RSP: 002b:00007fc808208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 985.398295][T23363] RAX: ffffffffffffffda RBX: 00007fc8075e6090 RCX: 00007fc80738eec9 [ 985.398314][T23363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 985.398332][T23363] RBP: 00007fc807411f91 R08: 0000000000000000 R09: 0000000000000000 [ 985.398349][T23363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.398366][T23363] R13: 00007fc8075e6128 R14: 00007fc8075e6090 R15: 00007ffee82da2a8 [ 985.398402][T23363] [ 985.651149][T23369] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4850'. [ 986.944410][T23407] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4858'. [ 986.995716][T23407] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4858'. [ 988.744090][T23459] netlink: zone id is out of range [ 988.754036][T23459] netlink: zone id is out of range [ 988.759200][T23459] netlink: zone id is out of range [ 988.776897][T23459] netlink: zone id is out of range [ 988.796201][T23459] netlink: zone id is out of range [ 988.818821][T23459] netlink: zone id is out of range [ 988.828051][T23459] netlink: zone id is out of range [ 988.840534][T23459] netlink: zone id is out of range [ 988.853915][T23464] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4869'. [ 988.865122][T23459] netlink: zone id is out of range [ 989.550780][T23480] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4876'. [ 989.618706][T23482] FAULT_INJECTION: forcing a failure. [ 989.618706][T23482] name failslab, interval 1, probability 0, space 0, times 0 [ 989.670621][T23482] CPU: 1 UID: 0 PID: 23482 Comm: syz.4.4877 Tainted: G U syzkaller #0 PREEMPT(full) [ 989.670667][T23482] Tainted: [U]=USER [ 989.670676][T23482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 989.670691][T23482] Call Trace: [ 989.670701][T23482] [ 989.670711][T23482] dump_stack_lvl+0x16c/0x1f0 [ 989.670746][T23482] should_fail_ex+0x512/0x640 [ 989.670775][T23482] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 989.670807][T23482] should_failslab+0xc2/0x120 [ 989.670841][T23482] __kmalloc_cache_noprof+0x6a/0x3e0 [ 989.670870][T23482] ? fuse_dev_alloc+0x8e/0x280 [ 989.670895][T23482] ? kasan_save_track+0x14/0x30 [ 989.670928][T23482] fuse_dev_alloc+0x8e/0x280 [ 989.670955][T23482] fuse_dev_alloc_install+0x13/0x40 [ 989.670982][T23482] cuse_channel_open+0x100/0x7f0 [ 989.671018][T23482] ? __pfx_cuse_channel_open+0x10/0x10 [ 989.671057][T23482] misc_open+0x35d/0x420 [ 989.671091][T23482] ? __pfx_misc_open+0x10/0x10 [ 989.671124][T23482] chrdev_open+0x234/0x6a0 [ 989.671163][T23482] ? __pfx_apparmor_file_open+0x10/0x10 [ 989.671195][T23482] ? __pfx_chrdev_open+0x10/0x10 [ 989.671229][T23482] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 989.671268][T23482] do_dentry_open+0x97f/0x1530 [ 989.671301][T23482] ? __pfx_chrdev_open+0x10/0x10 [ 989.671341][T23482] vfs_open+0x82/0x3f0 [ 989.671381][T23482] path_openat+0x1de4/0x2cb0 [ 989.671421][T23482] ? __pfx_path_openat+0x10/0x10 [ 989.671461][T23482] do_filp_open+0x20b/0x470 [ 989.671491][T23482] ? __pfx_do_filp_open+0x10/0x10 [ 989.671548][T23482] ? alloc_fd+0x471/0x7d0 [ 989.671585][T23482] do_sys_openat2+0x11b/0x1d0 [ 989.671621][T23482] ? __pfx_do_sys_openat2+0x10/0x10 [ 989.671672][T23482] __x64_sys_openat+0x174/0x210 [ 989.671696][T23482] ? __pfx___x64_sys_openat+0x10/0x10 [ 989.671735][T23482] do_syscall_64+0xcd/0x4c0 [ 989.671766][T23482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.671791][T23482] RIP: 0033:0x7f888f98eec9 [ 989.671812][T23482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.671837][T23482] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 989.671862][T23482] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 989.671879][T23482] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 989.671897][T23482] RBP: 00007f888fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 989.671914][T23482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.671930][T23482] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 989.671967][T23482] [ 990.195379][T23497] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 990.462710][T23503] FAULT_INJECTION: forcing a failure. [ 990.462710][T23503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.476125][T23503] CPU: 1 UID: 0 PID: 23503 Comm: syz.6.4883 Tainted: G U syzkaller #0 PREEMPT(full) [ 990.476165][T23503] Tainted: [U]=USER [ 990.476174][T23503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 990.476188][T23503] Call Trace: [ 990.476197][T23503] [ 990.476208][T23503] dump_stack_lvl+0x16c/0x1f0 [ 990.476239][T23503] should_fail_ex+0x512/0x640 [ 990.476272][T23503] _copy_from_user+0x2e/0xd0 [ 990.476303][T23503] move_addr_to_kernel+0x65/0x170 [ 990.476347][T23503] __copy_msghdr+0x386/0x470 [ 990.476375][T23503] copy_msghdr_from_user+0xc1/0x160 [ 990.476406][T23503] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 990.476440][T23503] ? __pfx__kstrtoull+0x10/0x10 [ 990.476481][T23503] ___sys_sendmsg+0xfe/0x1d0 [ 990.476514][T23503] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.476558][T23503] ? find_held_lock+0x2b/0x80 [ 990.476606][T23503] __sys_sendmmsg+0x200/0x420 [ 990.476638][T23503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 990.476676][T23503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 990.476718][T23503] ? fput+0x9b/0xd0 [ 990.476751][T23503] ? ksys_write+0x1ac/0x250 [ 990.476778][T23503] ? __pfx_ksys_write+0x10/0x10 [ 990.476815][T23503] __x64_sys_sendmmsg+0x9c/0x100 [ 990.476845][T23503] ? lockdep_hardirqs_on+0x7c/0x110 [ 990.476870][T23503] do_syscall_64+0xcd/0x4c0 [ 990.476900][T23503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.476925][T23503] RIP: 0033:0x7fc80738eec9 [ 990.476946][T23503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.476972][T23503] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 990.476996][T23503] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 990.477013][T23503] RDX: 0000000000000009 RSI: 0000200000000140 RDI: 0000000000000003 [ 990.477028][T23503] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 990.477044][T23503] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.477059][T23503] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 990.477100][T23503] [ 990.732781][T23508] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4884'. [ 991.543470][T23522] netlink: 25 bytes leftover after parsing attributes in process `syz.6.4887'. [ 993.195079][T23549] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4894'. [ 993.643066][T23553] FAULT_INJECTION: forcing a failure. [ 993.643066][T23553] name failslab, interval 1, probability 0, space 0, times 0 [ 993.677226][T23553] CPU: 0 UID: 0 PID: 23553 Comm: syz.4.4895 Tainted: G U syzkaller #0 PREEMPT(full) [ 993.677262][T23553] Tainted: [U]=USER [ 993.677270][T23553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.677285][T23553] Call Trace: [ 993.677293][T23553] [ 993.677303][T23553] dump_stack_lvl+0x16c/0x1f0 [ 993.677336][T23553] should_fail_ex+0x512/0x640 [ 993.677360][T23553] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 993.677394][T23553] should_failslab+0xc2/0x120 [ 993.677426][T23553] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 993.677456][T23553] ? __d_alloc+0x32/0xae0 [ 993.677490][T23553] __d_alloc+0x32/0xae0 [ 993.677524][T23553] d_alloc_parallel+0x111/0x1480 [ 993.677567][T23553] ? find_held_lock+0x2b/0x80 [ 993.677594][T23553] ? __d_lookup+0x25c/0x4a0 [ 993.677631][T23553] ? __pfx_d_alloc_parallel+0x10/0x10 [ 993.677668][T23553] ? __d_lookup+0x266/0x4a0 [ 993.677708][T23553] ? lockdep_init_map_type+0x5c/0x280 [ 993.677743][T23553] ? lockdep_init_map_type+0x5c/0x280 [ 993.677804][T23553] proc_fill_cache+0x2e6/0x470 [ 993.677831][T23553] ? __pfx_proc_pid_instantiate+0x10/0x10 [ 993.677860][T23553] ? __pfx_proc_fill_cache+0x10/0x10 [ 993.677889][T23553] ? __pfx_vsnprintf+0x10/0x10 [ 993.677926][T23553] ? snprintf+0xc7/0x100 [ 993.677969][T23553] proc_pid_readdir+0x3c9/0x810 [ 993.678013][T23553] ? __pfx_proc_pid_readdir+0x10/0x10 [ 993.678064][T23553] proc_root_readdir+0xa1/0xd0 [ 993.678100][T23553] iterate_dir+0x293/0xaf0 [ 993.678129][T23553] __x64_sys_getdents64+0x13c/0x2c0 [ 993.678151][T23553] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 993.678171][T23553] ? __pfx_filldir64+0x10/0x10 [ 993.678200][T23553] do_syscall_64+0xcd/0x4c0 [ 993.678223][T23553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.678243][T23553] RIP: 0033:0x7f888f98eec9 [ 993.678259][T23553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.678278][T23553] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 993.678297][T23553] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 993.678311][T23553] RDX: 0000000000000803 RSI: 0000000000000000 RDI: 0000000000000003 [ 993.678323][T23553] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 993.678335][T23553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.678347][T23553] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 993.678374][T23553] [ 993.981158][T23562] FAULT_INJECTION: forcing a failure. [ 993.981158][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 993.994138][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.6.4898 Tainted: G U syzkaller #0 PREEMPT(full) [ 993.994177][T23562] Tainted: [U]=USER [ 993.994185][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 993.994198][T23562] Call Trace: [ 993.994205][T23562] [ 993.994214][T23562] dump_stack_lvl+0x16c/0x1f0 [ 993.994246][T23562] should_fail_ex+0x512/0x640 [ 993.994272][T23562] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 993.994305][T23562] should_failslab+0xc2/0x120 [ 993.994335][T23562] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 993.994364][T23562] ? getname_flags.part.0+0x4c/0x550 [ 993.994404][T23562] getname_flags.part.0+0x4c/0x550 [ 993.994442][T23562] getname_flags+0x93/0xf0 [ 993.994468][T23562] do_sys_openat2+0xb8/0x1d0 [ 993.994501][T23562] ? __pfx_do_sys_openat2+0x10/0x10 [ 993.994553][T23562] ? __fget_files+0x20e/0x3c0 [ 993.994582][T23562] __x64_sys_openat+0x174/0x210 [ 993.994601][T23562] ? __pfx___x64_sys_openat+0x10/0x10 [ 993.994623][T23562] ? ksys_write+0x1ac/0x250 [ 993.994663][T23562] do_syscall_64+0xcd/0x4c0 [ 993.994692][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.994717][T23562] RIP: 0033:0x7fc80738eec9 [ 993.994736][T23562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.994758][T23562] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 993.994781][T23562] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 993.994796][T23562] RDX: 00000000001cb803 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 993.994812][T23562] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 993.994826][T23562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.994841][T23562] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 993.994872][T23562] [ 994.224478][T23564] vhci_hcd: invalid port number 16 [ 994.258329][T23564] vhci_hcd: invalid port number 16 [ 995.004999][T23583] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 995.145070][T23588] FAULT_INJECTION: forcing a failure. [ 995.145070][T23588] name failslab, interval 1, probability 0, space 0, times 0 [ 995.179408][T23588] CPU: 0 UID: 0 PID: 23588 Comm: syz.2.4905 Tainted: G U syzkaller #0 PREEMPT(full) [ 995.179446][T23588] Tainted: [U]=USER [ 995.179454][T23588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 995.179467][T23588] Call Trace: [ 995.179476][T23588] [ 995.179484][T23588] dump_stack_lvl+0x16c/0x1f0 [ 995.179516][T23588] should_fail_ex+0x512/0x640 [ 995.179542][T23588] ? __kvmalloc_node_noprof+0x124/0x620 [ 995.179572][T23588] should_failslab+0xc2/0x120 [ 995.179603][T23588] __kvmalloc_node_noprof+0x137/0x620 [ 995.179633][T23588] ? io_uring_setup+0x37f/0x20c0 [ 995.179674][T23588] ? io_uring_setup+0x37f/0x20c0 [ 995.179706][T23588] io_uring_setup+0x37f/0x20c0 [ 995.179744][T23588] ? __pfx_io_uring_setup+0x10/0x10 [ 995.179776][T23588] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 995.179809][T23588] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 995.179840][T23588] ? __fget_files+0x20e/0x3c0 [ 995.179877][T23588] ? ksys_write+0x1ac/0x250 [ 995.179905][T23588] ? __pfx_ksys_write+0x10/0x10 [ 995.179949][T23588] __x64_sys_io_uring_setup+0xc2/0x170 [ 995.179986][T23588] do_syscall_64+0xcd/0x4c0 [ 995.180015][T23588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.180040][T23588] RIP: 0033:0x7f0c7658eec9 [ 995.180060][T23588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.180082][T23588] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 995.180105][T23588] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 995.180121][T23588] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000040 [ 995.180136][T23588] RBP: 00007f0c77493090 R08: 0000000000000000 R09: 0000000000000000 [ 995.180151][T23588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.180164][T23588] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 995.180198][T23588] [ 996.453470][T23615] random: crng reseeded on system resumption [ 997.174784][T23637] FAULT_INJECTION: forcing a failure. [ 997.174784][T23637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.208487][T23637] CPU: 1 UID: 0 PID: 23637 Comm: syz.5.4916 Tainted: G U syzkaller #0 PREEMPT(full) [ 997.208525][T23637] Tainted: [U]=USER [ 997.208532][T23637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 997.208545][T23637] Call Trace: [ 997.208552][T23637] [ 997.208562][T23637] dump_stack_lvl+0x16c/0x1f0 [ 997.208591][T23637] should_fail_ex+0x512/0x640 [ 997.208621][T23637] _copy_to_user+0x32/0xd0 [ 997.208652][T23637] simple_read_from_buffer+0xcb/0x170 [ 997.208680][T23637] proc_fail_nth_read+0x197/0x240 [ 997.208717][T23637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 997.208750][T23637] ? rw_verify_area+0xcf/0x6c0 [ 997.208775][T23637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 997.208803][T23637] vfs_read+0x1e1/0xcf0 [ 997.208836][T23637] ? __pfx___mutex_lock+0x10/0x10 [ 997.208862][T23637] ? __pfx_vfs_read+0x10/0x10 [ 997.208897][T23637] ? __fget_files+0x20e/0x3c0 [ 997.208930][T23637] ksys_read+0x12a/0x250 [ 997.208957][T23637] ? __pfx_ksys_read+0x10/0x10 [ 997.208995][T23637] do_syscall_64+0xcd/0x4c0 [ 997.209024][T23637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.209049][T23637] RIP: 0033:0x7f350598d8dc [ 997.209076][T23637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 997.209100][T23637] RSP: 002b:00007f350685b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 997.209125][T23637] RAX: ffffffffffffffda RBX: 00007f3505be5fa0 RCX: 00007f350598d8dc [ 997.209142][T23637] RDX: 000000000000000f RSI: 00007f350685b0a0 RDI: 0000000000000003 [ 997.209158][T23637] RBP: 00007f350685b090 R08: 0000000000000000 R09: 0000000000000000 [ 997.209173][T23637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.209188][T23637] R13: 00007f3505be6038 R14: 00007f3505be5fa0 R15: 00007ffcd707ff58 [ 997.209223][T23637] [ 998.214585][T23659] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4922'. [ 998.289844][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.296282][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.326957][T23659] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4922'. [ 998.538051][T23661] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4923'. [ 998.638741][T23661] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4923'. [ 1000.423355][T23705] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1000.485508][T23705] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4933'. [ 1000.670992][T23712] FAULT_INJECTION: forcing a failure. [ 1000.670992][T23712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.684696][T23712] CPU: 1 UID: 0 PID: 23712 Comm: syz.6.4936 Tainted: G U syzkaller #0 PREEMPT(full) [ 1000.684739][T23712] Tainted: [U]=USER [ 1000.684749][T23712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1000.684765][T23712] Call Trace: [ 1000.684775][T23712] [ 1000.684786][T23712] dump_stack_lvl+0x16c/0x1f0 [ 1000.684820][T23712] should_fail_ex+0x512/0x640 [ 1000.684856][T23712] should_fail_alloc_page+0xe7/0x130 [ 1000.684893][T23712] prepare_alloc_pages+0x3c2/0x610 [ 1000.684930][T23712] ? rcu_is_watching+0x12/0xc0 [ 1000.684961][T23712] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1000.684995][T23712] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1000.685036][T23712] ? is_bpf_text_address+0x94/0x1a0 [ 1000.685071][T23712] ? kernel_text_address+0x8d/0x100 [ 1000.685112][T23712] ? __kernel_text_address+0xd/0x40 [ 1000.685150][T23712] ? unwind_get_return_address+0x59/0xa0 [ 1000.685181][T23712] ? arch_stack_walk+0xa6/0x100 [ 1000.685211][T23712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1000.685259][T23712] ? stack_depot_save_flags+0x29/0x9c0 [ 1000.685293][T23712] ? stack_trace_save+0x8e/0xc0 [ 1000.685326][T23712] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1000.685369][T23712] ? policy_nodemask+0xea/0x4e0 [ 1000.685413][T23712] alloc_pages_mpol+0x1fb/0x550 [ 1000.685462][T23712] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1000.685523][T23712] alloc_pages_noprof+0x131/0x390 [ 1000.685559][T23712] kimage_alloc_pages+0x75/0x350 [ 1000.685601][T23712] kimage_alloc_control_pages+0x153/0xa00 [ 1000.685656][T23712] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1000.685700][T23712] do_kexec_load+0x478/0x8a0 [ 1000.685736][T23712] ? __pfx_do_kexec_load+0x10/0x10 [ 1000.685763][T23712] ? _copy_from_user+0x59/0xd0 [ 1000.685792][T23712] __x64_sys_kexec_load+0x1bf/0x230 [ 1000.685818][T23712] do_syscall_64+0xcd/0x4c0 [ 1000.685846][T23712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.685872][T23712] RIP: 0033:0x7fc80738eec9 [ 1000.685892][T23712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.685917][T23712] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1000.685942][T23712] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1000.685959][T23712] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000ee3 [ 1000.685974][T23712] RBP: 00007fc807411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1000.685990][T23712] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1000.686005][T23712] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1000.686040][T23712] [ 1000.686171][T23712] kexec: Could not allocate control_code_buffer [ 1001.176806][T23721] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4939'. [ 1002.227952][T23752] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1002.420595][T23761] FAULT_INJECTION: forcing a failure. [ 1002.420595][T23761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.445261][T23761] CPU: 0 UID: 0 PID: 23761 Comm: syz.2.4950 Tainted: G U syzkaller #0 PREEMPT(full) [ 1002.445300][T23761] Tainted: [U]=USER [ 1002.445315][T23761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1002.445329][T23761] Call Trace: [ 1002.445338][T23761] [ 1002.445348][T23761] dump_stack_lvl+0x16c/0x1f0 [ 1002.445380][T23761] should_fail_ex+0x512/0x640 [ 1002.445413][T23761] _copy_to_iter+0x463/0x1710 [ 1002.445451][T23761] ? __pfx__copy_to_iter+0x10/0x10 [ 1002.445483][T23761] ? __skb_recv_datagram+0x1b2/0x220 [ 1002.445524][T23761] ? __pfx___skb_recv_datagram+0x10/0x10 [ 1002.445562][T23761] simple_copy_to_iter+0x46/0x90 [ 1002.445595][T23761] __skb_datagram_iter+0x129/0x900 [ 1002.445626][T23761] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1002.445661][T23761] ? skb_recv_datagram+0x88/0xc0 [ 1002.445700][T23761] skb_copy_datagram_iter+0x40/0x50 [ 1002.445738][T23761] netlink_recvmsg+0x27e/0xa90 [ 1002.445768][T23761] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1002.445800][T23761] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1002.445837][T23761] sock_recvmsg+0x1f6/0x250 [ 1002.445870][T23761] ____sys_recvmsg+0x218/0x6b0 [ 1002.445908][T23761] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1002.445953][T23761] ? __lock_acquire+0x62e/0x1ce0 [ 1002.445990][T23761] ___sys_recvmsg+0x114/0x1a0 [ 1002.446018][T23761] ? __pfx____sys_recvmsg+0x10/0x10 [ 1002.446048][T23761] ? find_held_lock+0x2b/0x80 [ 1002.446095][T23761] do_recvmmsg+0x2fe/0x750 [ 1002.446127][T23761] ? __pfx_do_recvmmsg+0x10/0x10 [ 1002.446161][T23761] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1002.446200][T23761] ? __fget_files+0x20e/0x3c0 [ 1002.446235][T23761] __x64_sys_recvmmsg+0x22a/0x280 [ 1002.446263][T23761] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1002.446292][T23761] ? xfd_validate_state+0x61/0x180 [ 1002.446342][T23761] do_syscall_64+0xcd/0x4c0 [ 1002.446372][T23761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.446397][T23761] RIP: 0033:0x7f0c7658eec9 [ 1002.446417][T23761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.446439][T23761] RSP: 002b:00007f0c77472038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1002.446462][T23761] RAX: ffffffffffffffda RBX: 00007f0c767e6090 RCX: 00007f0c7658eec9 [ 1002.446479][T23761] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 1002.446493][T23761] RBP: 00007f0c77472090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.446509][T23761] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1002.446524][T23761] R13: 00007f0c767e6128 R14: 00007f0c767e6090 R15: 00007fff32b49c18 [ 1002.446558][T23761] [ 1003.495178][T23785] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4957'. [ 1004.172974][T23807] netlink: 334 bytes leftover after parsing attributes in process `syz.4.4963'. [ 1004.541563][T23814] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 1004.571475][T23816] FAULT_INJECTION: forcing a failure. [ 1004.571475][T23816] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.589548][T23816] CPU: 0 UID: 0 PID: 23816 Comm: syz.4.4966 Tainted: G U syzkaller #0 PREEMPT(full) [ 1004.589589][T23816] Tainted: [U]=USER [ 1004.589597][T23816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1004.589611][T23816] Call Trace: [ 1004.589620][T23816] [ 1004.589630][T23816] dump_stack_lvl+0x16c/0x1f0 [ 1004.589662][T23816] should_fail_ex+0x512/0x640 [ 1004.589687][T23816] ? fs_reclaim_acquire+0xae/0x150 [ 1004.589722][T23816] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1004.589755][T23816] should_failslab+0xc2/0x120 [ 1004.589787][T23816] __kmalloc_noprof+0xd2/0x510 [ 1004.589833][T23816] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1004.589871][T23816] ? tomoyo_profile+0x47/0x60 [ 1004.589899][T23816] tomoyo_path_number_perm+0x245/0x580 [ 1004.589927][T23816] ? tomoyo_path_number_perm+0x237/0x580 [ 1004.589961][T23816] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1004.589994][T23816] ? find_held_lock+0x2b/0x80 [ 1004.590049][T23816] ? find_held_lock+0x2b/0x80 [ 1004.590073][T23816] ? hook_file_ioctl_common+0x145/0x410 [ 1004.590116][T23816] ? __fget_files+0x20e/0x3c0 [ 1004.590150][T23816] security_file_ioctl+0x9b/0x240 [ 1004.590183][T23816] __x64_sys_ioctl+0xb7/0x210 [ 1004.590221][T23816] do_syscall_64+0xcd/0x4c0 [ 1004.590251][T23816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.590277][T23816] RIP: 0033:0x7f888f98eec9 [ 1004.590297][T23816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.590321][T23816] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1004.590342][T23816] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1004.590358][T23816] RDX: 0000200000000280 RSI: 0000000040086602 RDI: 0000000000000003 [ 1004.590373][T23816] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.590388][T23816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.590402][T23816] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1004.590433][T23816] [ 1004.590536][T23816] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1005.342197][T23823] bond0: invalid ARP target specified [ 1005.566655][T23837] FAULT_INJECTION: forcing a failure. [ 1005.566655][T23837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.597867][T23837] CPU: 0 UID: 0 PID: 23837 Comm: syz.6.4976 Tainted: G U syzkaller #0 PREEMPT(full) [ 1005.597909][T23837] Tainted: [U]=USER [ 1005.597918][T23837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1005.597932][T23837] Call Trace: [ 1005.597941][T23837] [ 1005.597951][T23837] dump_stack_lvl+0x16c/0x1f0 [ 1005.597990][T23837] should_fail_ex+0x512/0x640 [ 1005.598023][T23837] _copy_from_user+0x2e/0xd0 [ 1005.598054][T23837] copy_msghdr_from_user+0x98/0x160 [ 1005.598082][T23837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1005.598123][T23837] ___sys_sendmsg+0xfe/0x1d0 [ 1005.598151][T23837] ? __pfx____sys_sendmsg+0x10/0x10 [ 1005.598220][T23837] __sys_sendmsg+0x16d/0x220 [ 1005.598247][T23837] ? __pfx___sys_sendmsg+0x10/0x10 [ 1005.598298][T23837] do_syscall_64+0xcd/0x4c0 [ 1005.598327][T23837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.598352][T23837] RIP: 0033:0x7fc80738eec9 [ 1005.598373][T23837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.598396][T23837] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1005.598420][T23837] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1005.598437][T23837] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1005.598452][T23837] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.598468][T23837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.598483][T23837] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1005.598518][T23837] [ 1007.000565][T23861] FAULT_INJECTION: forcing a failure. [ 1007.000565][T23861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1007.029329][T23861] CPU: 0 UID: 0 PID: 23861 Comm: syz.6.4984 Tainted: G U syzkaller #0 PREEMPT(full) [ 1007.029369][T23861] Tainted: [U]=USER [ 1007.029377][T23861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1007.029392][T23861] Call Trace: [ 1007.029400][T23861] [ 1007.029408][T23861] dump_stack_lvl+0x16c/0x1f0 [ 1007.029452][T23861] should_fail_ex+0x512/0x640 [ 1007.029483][T23861] _copy_to_user+0x32/0xd0 [ 1007.029513][T23861] simple_read_from_buffer+0xcb/0x170 [ 1007.029539][T23861] proc_fail_nth_read+0x197/0x240 [ 1007.029566][T23861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1007.029596][T23861] ? rw_verify_area+0xcf/0x6c0 [ 1007.029621][T23861] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1007.029649][T23861] vfs_read+0x1e1/0xcf0 [ 1007.029691][T23861] ? __pfx___mutex_lock+0x10/0x10 [ 1007.029717][T23861] ? __pfx_vfs_read+0x10/0x10 [ 1007.029755][T23861] ? __fget_files+0x20e/0x3c0 [ 1007.029790][T23861] ksys_read+0x12a/0x250 [ 1007.029815][T23861] ? __pfx_ksys_read+0x10/0x10 [ 1007.029850][T23861] do_syscall_64+0xcd/0x4c0 [ 1007.029876][T23861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.029898][T23861] RIP: 0033:0x7fc80738d8dc [ 1007.029917][T23861] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1007.029935][T23861] RSP: 002b:00007fc808229030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1007.029955][T23861] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738d8dc [ 1007.029970][T23861] RDX: 000000000000000f RSI: 00007fc8082290a0 RDI: 0000000000000003 [ 1007.029983][T23861] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.029997][T23861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.030012][T23861] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1007.030047][T23861] [ 1007.233766][T23855] FAULT_INJECTION: forcing a failure. [ 1007.233766][T23855] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1007.246664][T23855] CPU: 0 UID: 0 PID: 23855 Comm: syz.4.4981 Tainted: G U syzkaller #0 PREEMPT(full) [ 1007.246688][T23855] Tainted: [U]=USER [ 1007.246693][T23855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1007.246702][T23855] Call Trace: [ 1007.246709][T23855] [ 1007.246716][T23855] dump_stack_lvl+0x16c/0x1f0 [ 1007.246738][T23855] should_fail_ex+0x512/0x640 [ 1007.246758][T23855] get_futex_key+0xff0/0x1560 [ 1007.246780][T23855] ? __pfx_get_futex_key+0x10/0x10 [ 1007.246796][T23855] ? __mutex_trylock_common+0xe9/0x250 [ 1007.246822][T23855] futex_wake+0xea/0x530 [ 1007.246844][T23855] ? __pfx_futex_wake+0x10/0x10 [ 1007.246873][T23855] do_futex+0x1e3/0x350 [ 1007.246892][T23855] ? __pfx_do_futex+0x10/0x10 [ 1007.246908][T23855] ? __might_fault+0xe3/0x190 [ 1007.246930][T23855] mm_release+0x24e/0x300 [ 1007.246947][T23855] do_exit+0x68e/0x2bf0 [ 1007.246970][T23855] ? __pfx_do_exit+0x10/0x10 [ 1007.246989][T23855] ? do_raw_spin_lock+0x12c/0x2b0 [ 1007.247010][T23855] ? find_held_lock+0x2b/0x80 [ 1007.247028][T23855] do_group_exit+0xd3/0x2a0 [ 1007.247048][T23855] get_signal+0x2673/0x26d0 [ 1007.247066][T23855] ? kmem_cache_free+0x2d1/0x4d0 [ 1007.247082][T23855] ? fd_install+0x225/0x750 [ 1007.247101][T23855] ? __pfx_get_signal+0x10/0x10 [ 1007.247117][T23855] ? do_futex+0x122/0x350 [ 1007.247135][T23855] ? __pfx_do_futex+0x10/0x10 [ 1007.247154][T23855] arch_do_signal_or_restart+0x8f/0x790 [ 1007.247175][T23855] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1007.247205][T23855] exit_to_user_mode_loop+0x84/0x110 [ 1007.247228][T23855] do_syscall_64+0x41c/0x4c0 [ 1007.247246][T23855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.247261][T23855] RIP: 0033:0x7f888f98eec9 [ 1007.247274][T23855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1007.247288][T23855] RSP: 002b:00007f88909110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1007.247302][T23855] RAX: fffffffffffffe00 RBX: 00007f888fbe5fa8 RCX: 00007f888f98eec9 [ 1007.247312][T23855] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f888fbe5fa8 [ 1007.247321][T23855] RBP: 00007f888fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1007.247332][T23855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.247344][T23855] R13: 00007f888fbe6038 R14: 00007ffee31f4350 R15: 00007ffee31f4438 [ 1007.247374][T23855] [ 1007.660893][ T30] audit: type=1800 audit(4294967454.060:14): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4985" name="discovery_nqn" dev="configfs" ino=97371 res=0 errno=0 [ 1008.061597][T23874] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4989'. [ 1008.121099][T23874] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4989: iget: checksum invalid [ 1008.146952][T23874] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1008.175851][T23874] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4989: iget: checksum invalid [ 1008.189157][T23874] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1008.199922][T23874] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4989: iget: checksum invalid [ 1008.216114][T23874] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1008.275384][T23874] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4989: iget: checksum invalid [ 1008.359441][T23874] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1008.378910][T23874] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1008.390442][T23896] FAULT_INJECTION: forcing a failure. [ 1008.390442][T23896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.404723][T23874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1008.418720][T23896] CPU: 1 UID: 0 PID: 23896 Comm: syz.5.4997 Tainted: G U syzkaller #0 PREEMPT(full) [ 1008.418757][T23896] Tainted: [U]=USER [ 1008.418765][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1008.418779][T23896] Call Trace: [ 1008.418788][T23896] [ 1008.418798][T23896] dump_stack_lvl+0x16c/0x1f0 [ 1008.418831][T23896] should_fail_ex+0x512/0x640 [ 1008.418865][T23896] strncpy_from_user+0x3b/0x2e0 [ 1008.418895][T23896] getname_flags.part.0+0x8f/0x550 [ 1008.418938][T23896] getname_flags+0x93/0xf0 [ 1008.418965][T23896] do_sys_openat2+0xb8/0x1d0 [ 1008.418999][T23896] ? __pfx_do_sys_openat2+0x10/0x10 [ 1008.419039][T23896] ? __fget_files+0x20e/0x3c0 [ 1008.419072][T23896] __x64_sys_openat+0x174/0x210 [ 1008.419096][T23896] ? __pfx___x64_sys_openat+0x10/0x10 [ 1008.419118][T23896] ? ksys_write+0x1ac/0x250 [ 1008.419159][T23896] do_syscall_64+0xcd/0x4c0 [ 1008.419190][T23896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.419215][T23896] RIP: 0033:0x7f350598eec9 [ 1008.419235][T23896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.419258][T23896] RSP: 002b:00007f350685b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1008.419282][T23896] RAX: ffffffffffffffda RBX: 00007f3505be5fa0 RCX: 00007f350598eec9 [ 1008.419300][T23896] RDX: 0000000000068b81 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1008.419316][T23896] RBP: 00007f350685b090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.419332][T23896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.419347][T23896] R13: 00007f3505be6038 R14: 00007f3505be5fa0 R15: 00007ffcd707ff58 [ 1008.419382][T23896] [ 1008.783650][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4996'. [ 1008.820126][T23904] netlink: 146 bytes leftover after parsing attributes in process `syz.5.4999'. [ 1008.968751][T23891] FAULT_INJECTION: forcing a failure. [ 1008.968751][T23891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1009.032441][T23891] CPU: 0 UID: 0 PID: 23891 Comm: syz.4.4994 Tainted: G U syzkaller #0 PREEMPT(full) [ 1009.032479][T23891] Tainted: [U]=USER [ 1009.032488][T23891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1009.032502][T23891] Call Trace: [ 1009.032511][T23891] [ 1009.032521][T23891] dump_stack_lvl+0x16c/0x1f0 [ 1009.032557][T23891] should_fail_ex+0x512/0x640 [ 1009.032588][T23891] get_futex_key+0xff0/0x1560 [ 1009.032622][T23891] ? __pfx_get_futex_key+0x10/0x10 [ 1009.032652][T23891] ? __mutex_trylock_common+0xe9/0x250 [ 1009.032700][T23891] futex_wake+0xea/0x530 [ 1009.032738][T23891] ? __pfx_futex_wake+0x10/0x10 [ 1009.032785][T23891] do_futex+0x1e3/0x350 [ 1009.032815][T23891] ? __pfx_do_futex+0x10/0x10 [ 1009.032842][T23891] ? __might_fault+0xe3/0x190 [ 1009.032881][T23891] mm_release+0x24e/0x300 [ 1009.032910][T23891] do_exit+0x68e/0x2bf0 [ 1009.032949][T23891] ? __pfx_do_exit+0x10/0x10 [ 1009.032979][T23891] ? do_raw_spin_lock+0x12c/0x2b0 [ 1009.033012][T23891] ? find_held_lock+0x2b/0x80 [ 1009.033043][T23891] do_group_exit+0xd3/0x2a0 [ 1009.033076][T23891] get_signal+0x2673/0x26d0 [ 1009.033105][T23891] ? kmem_cache_free+0x2d1/0x4d0 [ 1009.033133][T23891] ? fd_install+0x225/0x750 [ 1009.033164][T23891] ? __pfx_get_signal+0x10/0x10 [ 1009.033190][T23891] ? do_futex+0x122/0x350 [ 1009.033220][T23891] ? __pfx_do_futex+0x10/0x10 [ 1009.033253][T23891] arch_do_signal_or_restart+0x8f/0x790 [ 1009.033288][T23891] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1009.033340][T23891] exit_to_user_mode_loop+0x84/0x110 [ 1009.033377][T23891] do_syscall_64+0x41c/0x4c0 [ 1009.033406][T23891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.033431][T23891] RIP: 0033:0x7f888f98eec9 [ 1009.033452][T23891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.033476][T23891] RSP: 002b:00007f88909110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1009.033499][T23891] RAX: fffffffffffffe00 RBX: 00007f888fbe5fa8 RCX: 00007f888f98eec9 [ 1009.033516][T23891] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f888fbe5fa8 [ 1009.033531][T23891] RBP: 00007f888fbe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.033546][T23891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.033561][T23891] R13: 00007f888fbe6038 R14: 00007ffee31f4350 R15: 00007ffee31f4438 [ 1009.033595][T23891] [ 1009.532629][T23919] FAULT_INJECTION: forcing a failure. [ 1009.532629][T23919] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.548593][T23919] CPU: 0 UID: 0 PID: 23919 Comm: syz.4.5006 Tainted: G U syzkaller #0 PREEMPT(full) [ 1009.548640][T23919] Tainted: [U]=USER [ 1009.548649][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1009.548663][T23919] Call Trace: [ 1009.548672][T23919] [ 1009.548682][T23919] dump_stack_lvl+0x16c/0x1f0 [ 1009.548715][T23919] should_fail_ex+0x512/0x640 [ 1009.548743][T23919] ? __kmalloc_noprof+0xbf/0x510 [ 1009.548775][T23919] ? alloc_pipe_info+0x1ec/0x590 [ 1009.548803][T23919] should_failslab+0xc2/0x120 [ 1009.548836][T23919] __kmalloc_noprof+0xd2/0x510 [ 1009.548871][T23919] alloc_pipe_info+0x1ec/0x590 [ 1009.548906][T23919] splice_direct_to_actor+0x77d/0xa30 [ 1009.548936][T23919] ? __lock_acquire+0x62e/0x1ce0 [ 1009.548967][T23919] ? __pfx_direct_splice_actor+0x10/0x10 [ 1009.549001][T23919] ? __pfx_aa_file_perm+0x10/0x10 [ 1009.549024][T23919] ? find_held_lock+0x2b/0x80 [ 1009.549049][T23919] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1009.549074][T23919] ? get_pid_task+0xfc/0x250 [ 1009.549115][T23919] do_splice_direct+0x174/0x240 [ 1009.549144][T23919] ? __pfx_do_splice_direct+0x10/0x10 [ 1009.549171][T23919] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1009.549204][T23919] ? rw_verify_area+0xcf/0x6c0 [ 1009.549234][T23919] do_sendfile+0xb06/0xe50 [ 1009.549267][T23919] ? __pfx_do_sendfile+0x10/0x10 [ 1009.549296][T23919] ? __fget_files+0x20e/0x3c0 [ 1009.549333][T23919] __x64_sys_sendfile64+0x1d8/0x220 [ 1009.549363][T23919] ? ksys_write+0x1ac/0x250 [ 1009.549389][T23919] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1009.549433][T23919] do_syscall_64+0xcd/0x4c0 [ 1009.549462][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.549488][T23919] RIP: 0033:0x7f888f98eec9 [ 1009.549509][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.549533][T23919] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1009.549558][T23919] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1009.549574][T23919] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1009.549589][T23919] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.549611][T23919] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1009.549625][T23919] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1009.549659][T23919] [ 1009.784654][T23921] FAULT_INJECTION: forcing a failure. [ 1009.784654][T23921] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.876832][T23921] CPU: 1 UID: 0 PID: 23921 Comm: syz.2.5005 Tainted: G U syzkaller #0 PREEMPT(full) [ 1009.876871][T23921] Tainted: [U]=USER [ 1009.876879][T23921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1009.876893][T23921] Call Trace: [ 1009.876901][T23921] [ 1009.876911][T23921] dump_stack_lvl+0x16c/0x1f0 [ 1009.876941][T23921] should_fail_ex+0x512/0x640 [ 1009.876966][T23921] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1009.876999][T23921] should_failslab+0xc2/0x120 [ 1009.877031][T23921] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1009.877060][T23921] ? do_epoll_ctl+0x1170/0x3790 [ 1009.877092][T23921] do_epoll_ctl+0x1170/0x3790 [ 1009.877121][T23921] ? ksys_write+0x190/0x250 [ 1009.877160][T23921] ? __pfx_do_epoll_ctl+0x10/0x10 [ 1009.877184][T23921] ? find_held_lock+0x2b/0x80 [ 1009.877208][T23921] ? __might_fault+0xe3/0x190 [ 1009.877235][T23921] ? __might_fault+0xe3/0x190 [ 1009.877277][T23921] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1009.877304][T23921] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 1009.877343][T23921] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1009.877390][T23921] do_syscall_64+0xcd/0x4c0 [ 1009.877417][T23921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.877443][T23921] RIP: 0033:0x7f0c7658eec9 [ 1009.877463][T23921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.877487][T23921] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1009.877511][T23921] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1009.877528][T23921] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 1009.877544][T23921] RBP: 00007f0c77493090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.877558][T23921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.877573][T23921] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1009.877608][T23921] [ 1010.524050][T23932] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1012.253231][T23959] FAULT_INJECTION: forcing a failure. [ 1012.253231][T23959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1012.312822][T23959] CPU: 1 UID: 0 PID: 23959 Comm: syz.6.5014 Tainted: G U syzkaller #0 PREEMPT(full) [ 1012.312865][T23959] Tainted: [U]=USER [ 1012.312875][T23959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1012.312891][T23959] Call Trace: [ 1012.312900][T23959] [ 1012.312910][T23959] dump_stack_lvl+0x16c/0x1f0 [ 1012.312942][T23959] should_fail_ex+0x512/0x640 [ 1012.312963][T23959] should_fail_alloc_page+0xe7/0x130 [ 1012.312985][T23959] prepare_alloc_pages+0x3c2/0x610 [ 1012.313006][T23959] ? rcu_is_watching+0x12/0xc0 [ 1012.313023][T23959] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1012.313044][T23959] ? stack_trace_save+0x8e/0xc0 [ 1012.313061][T23959] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.313076][T23959] ? __pfx_stack_trace_save+0x10/0x10 [ 1012.313102][T23959] ? stack_depot_save_flags+0x29/0x9c0 [ 1012.313136][T23959] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1012.313171][T23959] ? __propagate_weights+0x2f8/0x780 [ 1012.313197][T23959] ? mmc_sd_init_uhs_card.part.0+0x1f5/0x12f0 [ 1012.313220][T23959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.313241][T23959] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1012.313264][T23959] ? policy_nodemask+0xea/0x4e0 [ 1012.313285][T23959] alloc_pages_mpol+0x1fb/0x550 [ 1012.313305][T23959] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1012.313329][T23959] alloc_pages_noprof+0x131/0x390 [ 1012.313348][T23959] alloc_pages_exact_noprof+0x37/0xe0 [ 1012.313361][T23959] ? __asan_memset+0x23/0x50 [ 1012.313376][T23959] snd_pcm_attach_substream+0x4bb/0xd60 [ 1012.313397][T23959] snd_pcm_open_substream+0x8d/0x17f0 [ 1012.313420][T23959] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1012.313444][T23959] ? lockdep_init_map_type+0x5c/0x280 [ 1012.313465][T23959] ? lockdep_init_map_type+0x5c/0x280 [ 1012.313487][T23959] snd_pcm_oss_open+0x735/0x1400 [ 1012.313514][T23959] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1012.313534][T23959] ? __lock_acquire+0xb97/0x1ce0 [ 1012.313552][T23959] ? __pfx_default_wake_function+0x10/0x10 [ 1012.313568][T23959] ? __lock_acquire+0xb97/0x1ce0 [ 1012.313592][T23959] ? do_raw_spin_lock+0x12c/0x2b0 [ 1012.313614][T23959] ? soundcore_open+0x35a/0x580 [ 1012.313632][T23959] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1012.313652][T23959] soundcore_open+0x40c/0x580 [ 1012.313670][T23959] ? __pfx_soundcore_open+0x10/0x10 [ 1012.313686][T23959] chrdev_open+0x234/0x6a0 [ 1012.313704][T23959] ? __pfx_apparmor_file_open+0x10/0x10 [ 1012.313722][T23959] ? __pfx_chrdev_open+0x10/0x10 [ 1012.313741][T23959] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1012.313763][T23959] do_dentry_open+0x97f/0x1530 [ 1012.313781][T23959] ? __pfx_chrdev_open+0x10/0x10 [ 1012.313803][T23959] vfs_open+0x82/0x3f0 [ 1012.313826][T23959] path_openat+0x1de4/0x2cb0 [ 1012.313850][T23959] ? __pfx_path_openat+0x10/0x10 [ 1012.313872][T23959] do_filp_open+0x20b/0x470 [ 1012.313889][T23959] ? __pfx_do_filp_open+0x10/0x10 [ 1012.313920][T23959] ? alloc_fd+0x471/0x7d0 [ 1012.313941][T23959] do_sys_openat2+0x11b/0x1d0 [ 1012.313963][T23959] ? __pfx_do_sys_openat2+0x10/0x10 [ 1012.313985][T23959] ? __pfx___might_resched+0x10/0x10 [ 1012.314006][T23959] __x64_sys_openat+0x174/0x210 [ 1012.314019][T23959] ? __pfx___x64_sys_openat+0x10/0x10 [ 1012.314040][T23959] do_syscall_64+0xcd/0x4c0 [ 1012.314058][T23959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.314073][T23959] RIP: 0033:0x7fc80738eec9 [ 1012.314086][T23959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.314101][T23959] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1012.314115][T23959] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1012.314125][T23959] RDX: 0000000000000102 RSI: 0000200000004000 RDI: ffffffffffffff9c [ 1012.314135][T23959] RBP: 00007fc807411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1012.314144][T23959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1012.314154][T23959] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1012.314173][T23959] [ 1012.901329][T23963] netlink: 334 bytes leftover after parsing attributes in process `syz.4.5016'. [ 1013.819362][T23988] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1013.927830][T23990] FAULT_INJECTION: forcing a failure. [ 1013.927830][T23990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.941390][T23990] CPU: 0 UID: 0 PID: 23990 Comm: syz.6.5024 Tainted: G U syzkaller #0 PREEMPT(full) [ 1013.941427][T23990] Tainted: [U]=USER [ 1013.941434][T23990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1013.941447][T23990] Call Trace: [ 1013.941455][T23990] [ 1013.941462][T23990] dump_stack_lvl+0x16c/0x1f0 [ 1013.941493][T23990] should_fail_ex+0x512/0x640 [ 1013.941522][T23990] _copy_from_user+0x2e/0xd0 [ 1013.941547][T23990] __x64_sys_rt_tgsigqueueinfo+0x11d/0x210 [ 1013.941583][T23990] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 1013.941630][T23990] do_syscall_64+0xcd/0x4c0 [ 1013.941659][T23990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.941684][T23990] RIP: 0033:0x7fc80738eec9 [ 1013.941703][T23990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.941725][T23990] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 1013.941749][T23990] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1013.941766][T23990] RDX: 000000000000000b RSI: 00000000000005f7 RDI: 00000000000005f6 [ 1013.941782][T23990] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.941797][T23990] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1013.941812][T23990] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1013.941846][T23990] [ 1014.580351][T24001] FAULT_INJECTION: forcing a failure. [ 1014.580351][T24001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.672322][T24001] CPU: 0 UID: 0 PID: 24001 Comm: syz.5.5028 Tainted: G U syzkaller #0 PREEMPT(full) [ 1014.672364][T24001] Tainted: [U]=USER [ 1014.672371][T24001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.672384][T24001] Call Trace: [ 1014.672392][T24001] [ 1014.672401][T24001] dump_stack_lvl+0x16c/0x1f0 [ 1014.672432][T24001] should_fail_ex+0x512/0x640 [ 1014.672463][T24001] _copy_to_user+0x32/0xd0 [ 1014.672493][T24001] __do_sys_mincore+0x28e/0x620 [ 1014.672528][T24001] do_syscall_64+0xcd/0x4c0 [ 1014.672556][T24001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.672582][T24001] RIP: 0033:0x7f350598eec9 [ 1014.672602][T24001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.672625][T24001] RSP: 002b:00007f350685b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 1014.672649][T24001] RAX: ffffffffffffffda RBX: 00007f3505be5fa0 RCX: 00007f350598eec9 [ 1014.672665][T24001] RDX: 0000000000000000 RSI: 0000000004000000 RDI: 0000000000001000 [ 1014.672681][T24001] RBP: 00007f350685b090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.672696][T24001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.672710][T24001] R13: 00007f3505be6038 R14: 00007f3505be5fa0 R15: 00007ffcd707ff58 [ 1014.672744][T24001] [ 1015.022432][T24013] FAULT_INJECTION: forcing a failure. [ 1015.022432][T24013] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.060075][T24015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5031'. [ 1015.078296][T24015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.079076][T24013] CPU: 1 UID: 0 PID: 24013 Comm: syz.6.5032 Tainted: G U syzkaller #0 PREEMPT(full) [ 1015.079112][T24013] Tainted: [U]=USER [ 1015.079121][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.079135][T24013] Call Trace: [ 1015.079144][T24013] [ 1015.079155][T24013] dump_stack_lvl+0x16c/0x1f0 [ 1015.079188][T24013] should_fail_ex+0x512/0x640 [ 1015.079214][T24013] ? __kmalloc_noprof+0xbf/0x510 [ 1015.079246][T24013] ? tracepoint_add_func+0x2a6/0xea0 [ 1015.079279][T24013] should_failslab+0xc2/0x120 [ 1015.079312][T24013] __kmalloc_noprof+0xd2/0x510 [ 1015.079345][T24013] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1015.079380][T24013] tracepoint_add_func+0x2a6/0xea0 [ 1015.079412][T24013] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1015.079453][T24013] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1015.079486][T24013] tracepoint_probe_register+0xbf/0x100 [ 1015.079522][T24013] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1015.079557][T24013] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1015.079601][T24013] tracing_start_sched_switch+0xaf/0x1e0 [ 1015.079634][T24013] __ftrace_event_enable_disable+0x694/0x810 [ 1015.079676][T24013] __ftrace_set_clr_event_nolock+0x390/0xb70 [ 1015.079724][T24013] ftrace_set_clr_event+0x16e/0x330 [ 1015.079751][T24013] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1015.079787][T24013] ftrace_event_write+0x259/0x2c0 [ 1015.079813][T24013] ? __pfx_ftrace_event_write+0x10/0x10 [ 1015.079858][T24013] ? __pfx_ftrace_event_write+0x10/0x10 [ 1015.079882][T24013] vfs_write+0x29d/0x11d0 [ 1015.079918][T24013] ? __pfx___mutex_lock+0x10/0x10 [ 1015.079944][T24013] ? __pfx_vfs_write+0x10/0x10 [ 1015.079986][T24013] ? __fget_files+0x20e/0x3c0 [ 1015.080024][T24013] ksys_write+0x12a/0x250 [ 1015.080050][T24013] ? __pfx_ksys_write+0x10/0x10 [ 1015.080089][T24013] do_syscall_64+0xcd/0x4c0 [ 1015.080118][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.080143][T24013] RIP: 0033:0x7fc80738eec9 [ 1015.080162][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.080185][T24013] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1015.080208][T24013] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1015.080225][T24013] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 1015.080240][T24013] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.080255][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.080270][T24013] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1015.080305][T24013] [ 1015.080421][T24013] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 1015.092617][T24015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.371908][T24018] FAULT_INJECTION: forcing a failure. [ 1015.371908][T24018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1015.395951][T24015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.404463][T24018] CPU: 1 UID: 0 PID: 24018 Comm: syz.6.5034 Tainted: G U syzkaller #0 PREEMPT(full) [ 1015.404502][T24018] Tainted: [U]=USER [ 1015.404512][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1015.404526][T24018] Call Trace: [ 1015.404536][T24018] [ 1015.404546][T24018] dump_stack_lvl+0x16c/0x1f0 [ 1015.404580][T24018] should_fail_ex+0x512/0x640 [ 1015.404615][T24018] should_fail_alloc_page+0xe7/0x130 [ 1015.404654][T24018] prepare_alloc_pages+0x3c2/0x610 [ 1015.404697][T24018] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1015.404733][T24018] ? mark_held_locks+0x49/0x80 [ 1015.404765][T24018] ? finish_task_switch.isra.0+0x221/0xc10 [ 1015.404792][T24018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.404817][T24018] ? finish_task_switch.isra.0+0x221/0xc10 [ 1015.404845][T24018] ? rcu_is_watching+0x12/0xc0 [ 1015.404872][T24018] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1015.404903][T24018] ? lock_acquire+0x179/0x350 [ 1015.404935][T24018] ? do_raw_spin_lock+0x12c/0x2b0 [ 1015.404977][T24018] ? __lock_acquire+0x62e/0x1ce0 [ 1015.405015][T24018] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1015.405054][T24018] ? policy_nodemask+0xea/0x4e0 [ 1015.405090][T24018] alloc_pages_mpol+0x1fb/0x550 [ 1015.405128][T24018] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1015.405171][T24018] alloc_pages_noprof+0x131/0x390 [ 1015.405205][T24018] __pmd_alloc+0x3b/0x930 [ 1015.405244][T24018] __handle_mm_fault+0xa06/0x2a50 [ 1015.405276][T24018] ? mt_find+0x3ef/0xa30 [ 1015.405307][T24018] ? __pfx___handle_mm_fault+0x10/0x10 [ 1015.405332][T24018] ? __pfx_mt_find+0x10/0x10 [ 1015.405380][T24018] ? find_vma+0xbf/0x140 [ 1015.405411][T24018] ? __pfx_find_vma+0x10/0x10 [ 1015.405448][T24018] handle_mm_fault+0x589/0xd10 [ 1015.405474][T24018] ? trace_raw_output_exceptions+0x131/0x150 [ 1015.405513][T24018] do_user_addr_fault+0x7a6/0x1370 [ 1015.405540][T24018] ? rcu_is_watching+0x12/0xc0 [ 1015.405565][T24018] exc_page_fault+0x5c/0xb0 [ 1015.405588][T24018] asm_exc_page_fault+0x26/0x30 [ 1015.405610][T24018] RIP: 0010:__get_user_8+0x14/0x30 [ 1015.405641][T24018] Code: ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 ff 16 04 00 66 66 2e 0f 1f 84 00 00 00 [ 1015.405664][T24018] RSP: 0018:ffffc9000d7bfd50 EFLAGS: 00050287 [ 1015.405684][T24018] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000d7bfcf4 [ 1015.405699][T24018] RDX: 00007ffffffff000 RSI: ffffffff822170ca RDI: ffffffff8bcfa140 [ 1015.405716][T24018] RBP: 0000000000000000 R08: 255fd69911439148 R09: 0000000000000001 [ 1015.405731][T24018] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff [ 1015.405744][T24018] R13: 0000000000000117 R14: 0000000000000000 R15: dffffc0000000000 [ 1015.405767][T24018] ? kernel_move_pages+0x31a/0x1380 [ 1015.405803][T24018] kernel_move_pages+0x328/0x1380 [ 1015.405848][T24018] ? __pfx_kernel_move_pages+0x10/0x10 [ 1015.405865][T24015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.405892][T24018] ? fput+0x9b/0xd0 [ 1015.405922][T24018] ? ksys_write+0x1ac/0x250 [ 1015.405947][T24018] ? __pfx_ksys_write+0x10/0x10 [ 1015.405979][T24018] __x64_sys_move_pages+0xe0/0x1c0 [ 1015.406014][T24018] ? do_syscall_64+0x91/0x4c0 [ 1015.406038][T24018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1015.406063][T24018] do_syscall_64+0xcd/0x4c0 [ 1015.406092][T24018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.406116][T24018] RIP: 0033:0x7fc80738eec9 [ 1015.406144][T24018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.406167][T24018] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1015.406190][T24018] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1015.406206][T24018] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 1015.406220][T24018] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000002 [ 1015.406235][T24018] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1015.406250][T24018] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1015.406284][T24018] [ 1015.968600][T24030] program syz.6.5038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.261638][T24029] FAULT_INJECTION: forcing a failure. [ 1016.261638][T24029] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1016.284867][T24029] CPU: 1 UID: 0 PID: 24029 Comm: syz.4.5037 Tainted: G U syzkaller #0 PREEMPT(full) [ 1016.284913][T24029] Tainted: [U]=USER [ 1016.284922][T24029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.284938][T24029] Call Trace: [ 1016.284948][T24029] [ 1016.284958][T24029] dump_stack_lvl+0x16c/0x1f0 [ 1016.284992][T24029] should_fail_ex+0x512/0x640 [ 1016.285027][T24029] should_fail_alloc_page+0xe7/0x130 [ 1016.285065][T24029] prepare_alloc_pages+0x3c2/0x610 [ 1016.285111][T24029] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1016.285145][T24029] ? copy_splice_read+0x1a8/0xc20 [ 1016.285171][T24029] ? stack_trace_save+0x8e/0xc0 [ 1016.285200][T24029] ? __pfx_stack_trace_save+0x10/0x10 [ 1016.285229][T24029] ? stack_depot_save_flags+0x29/0x9c0 [ 1016.285265][T24029] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1016.285295][T24029] ? kasan_save_stack+0x33/0x60 [ 1016.285324][T24029] ? __kasan_kmalloc+0xaa/0xb0 [ 1016.285348][T24029] ? copy_splice_read+0x1a8/0xc20 [ 1016.285368][T24029] ? do_splice_read+0x282/0x370 [ 1016.285388][T24029] ? splice_direct_to_actor+0x2a1/0xa30 [ 1016.285411][T24029] ? do_splice_direct+0x174/0x240 [ 1016.285436][T24029] ? do_sendfile+0xb06/0xe50 [ 1016.285461][T24029] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1016.285494][T24029] ? do_syscall_64+0xcd/0x4c0 [ 1016.285549][T24029] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1016.285592][T24029] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1016.285632][T24029] ? trace_kmalloc+0x2b/0xd0 [ 1016.285664][T24029] ? __kmalloc_noprof+0x242/0x510 [ 1016.285702][T24029] copy_splice_read+0x1e1/0xc20 [ 1016.285738][T24029] ? __pfx_copy_splice_read+0x10/0x10 [ 1016.285768][T24029] ? look_up_lock_class+0x59/0x150 [ 1016.285801][T24029] ? lockdep_init_map_type+0x5c/0x280 [ 1016.285835][T24029] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1016.285875][T24029] ? __pfx_copy_splice_read+0x10/0x10 [ 1016.285902][T24029] do_splice_read+0x282/0x370 [ 1016.285935][T24029] splice_direct_to_actor+0x2a1/0xa30 [ 1016.285966][T24029] ? __pfx_direct_splice_actor+0x10/0x10 [ 1016.286001][T24029] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1016.286040][T24029] do_splice_direct+0x174/0x240 [ 1016.286069][T24029] ? __pfx_do_splice_direct+0x10/0x10 [ 1016.286097][T24029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1016.286126][T24029] ? bpf_lsm_file_permission+0x9/0x10 [ 1016.286161][T24029] ? security_file_permission+0x71/0x210 [ 1016.286198][T24029] ? rw_verify_area+0xcf/0x6c0 [ 1016.286228][T24029] do_sendfile+0xb06/0xe50 [ 1016.286263][T24029] ? __pfx_do_sendfile+0x10/0x10 [ 1016.286297][T24029] ? __x64_sys_futex+0x1e0/0x4c0 [ 1016.286328][T24029] ? __x64_sys_futex+0x1e9/0x4c0 [ 1016.286363][T24029] __x64_sys_sendfile64+0x1d8/0x220 [ 1016.286398][T24029] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1016.286444][T24029] do_syscall_64+0xcd/0x4c0 [ 1016.286474][T24029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.286500][T24029] RIP: 0033:0x7f888f98eec9 [ 1016.286522][T24029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.286547][T24029] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1016.286571][T24029] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1016.286590][T24029] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000009 [ 1016.286606][T24029] RBP: 00007f888fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1016.286622][T24029] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 1016.286639][T24029] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1016.286674][T24029] [ 1016.799438][T24035] FAULT_INJECTION: forcing a failure. [ 1016.799438][T24035] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.821434][T24035] CPU: 1 UID: 0 PID: 24035 Comm: syz.6.5040 Tainted: G U syzkaller #0 PREEMPT(full) [ 1016.821474][T24035] Tainted: [U]=USER [ 1016.821482][T24035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.821496][T24035] Call Trace: [ 1016.821505][T24035] [ 1016.821514][T24035] dump_stack_lvl+0x16c/0x1f0 [ 1016.821546][T24035] should_fail_ex+0x512/0x640 [ 1016.821573][T24035] ? __kmalloc_noprof+0xbf/0x510 [ 1016.821603][T24035] ? alloc_pipe_info+0x1ec/0x590 [ 1016.821632][T24035] should_failslab+0xc2/0x120 [ 1016.821662][T24035] __kmalloc_noprof+0xd2/0x510 [ 1016.821697][T24035] alloc_pipe_info+0x1ec/0x590 [ 1016.821731][T24035] splice_direct_to_actor+0x77d/0xa30 [ 1016.821760][T24035] ? __lock_acquire+0x62e/0x1ce0 [ 1016.821854][T24035] ? __pfx_direct_splice_actor+0x10/0x10 [ 1016.821887][T24035] ? __pfx_aa_file_perm+0x10/0x10 [ 1016.821910][T24035] ? find_held_lock+0x2b/0x80 [ 1016.821934][T24035] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1016.821959][T24035] ? get_pid_task+0xfc/0x250 [ 1016.821999][T24035] do_splice_direct+0x174/0x240 [ 1016.822028][T24035] ? __pfx_do_splice_direct+0x10/0x10 [ 1016.822077][T24035] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1016.822109][T24035] ? rw_verify_area+0xcf/0x6c0 [ 1016.822139][T24035] do_sendfile+0xb06/0xe50 [ 1016.822172][T24035] ? __pfx_do_sendfile+0x10/0x10 [ 1016.822199][T24035] ? __fget_files+0x20e/0x3c0 [ 1016.822233][T24035] __x64_sys_sendfile64+0x1d8/0x220 [ 1016.822264][T24035] ? ksys_write+0x1ac/0x250 [ 1016.822291][T24035] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1016.822335][T24035] do_syscall_64+0xcd/0x4c0 [ 1016.822367][T24035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.822389][T24035] RIP: 0033:0x7fc80738eec9 [ 1016.822408][T24035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.822429][T24035] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1016.822452][T24035] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1016.822467][T24035] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1016.822481][T24035] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.822496][T24035] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1016.822511][T24035] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1016.822544][T24035] [ 1017.544856][T24054] FAULT_INJECTION: forcing a failure. [ 1017.544856][T24054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.558861][T24054] CPU: 0 UID: 0 PID: 24054 Comm: syz.6.5046 Tainted: G U syzkaller #0 PREEMPT(full) [ 1017.558898][T24054] Tainted: [U]=USER [ 1017.558908][T24054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1017.558922][T24054] Call Trace: [ 1017.558930][T24054] [ 1017.558940][T24054] dump_stack_lvl+0x16c/0x1f0 [ 1017.558972][T24054] should_fail_ex+0x512/0x640 [ 1017.559004][T24054] _copy_to_user+0x32/0xd0 [ 1017.559036][T24054] simple_read_from_buffer+0xcb/0x170 [ 1017.559064][T24054] proc_fail_nth_read+0x197/0x240 [ 1017.559094][T24054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1017.559124][T24054] ? rw_verify_area+0xcf/0x6c0 [ 1017.559150][T24054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1017.559177][T24054] vfs_read+0x1e1/0xcf0 [ 1017.559208][T24054] ? __pfx___mutex_lock+0x10/0x10 [ 1017.559235][T24054] ? __pfx_vfs_read+0x10/0x10 [ 1017.559272][T24054] ? __fget_files+0x20e/0x3c0 [ 1017.559309][T24054] ksys_read+0x12a/0x250 [ 1017.559335][T24054] ? __pfx_ksys_read+0x10/0x10 [ 1017.559374][T24054] do_syscall_64+0xcd/0x4c0 [ 1017.559403][T24054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.559426][T24054] RIP: 0033:0x7fc80738d8dc [ 1017.559444][T24054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1017.559462][T24054] RSP: 002b:00007fc808229030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1017.559482][T24054] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738d8dc [ 1017.559499][T24054] RDX: 000000000000000f RSI: 00007fc8082290a0 RDI: 0000000000000004 [ 1017.559514][T24054] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.559529][T24054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.559543][T24054] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1017.559577][T24054] [ 1018.968057][T24085] FAULT_INJECTION: forcing a failure. [ 1018.968057][T24085] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.982897][T24085] CPU: 0 UID: 0 PID: 24085 Comm: syz.4.5053 Tainted: G U syzkaller #0 PREEMPT(full) [ 1018.982937][T24085] Tainted: [U]=USER [ 1018.982946][T24085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1018.982960][T24085] Call Trace: [ 1018.982968][T24085] [ 1018.982977][T24085] dump_stack_lvl+0x16c/0x1f0 [ 1018.983010][T24085] should_fail_ex+0x512/0x640 [ 1018.983036][T24085] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1018.983068][T24085] should_failslab+0xc2/0x120 [ 1018.983099][T24085] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1018.983129][T24085] ? alloc_empty_file+0x55/0x1e0 [ 1018.983168][T24085] alloc_empty_file+0x55/0x1e0 [ 1018.983203][T24085] path_openat+0xda/0x2cb0 [ 1018.983228][T24085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.983266][T24085] ? __pfx_path_openat+0x10/0x10 [ 1018.983304][T24085] do_filp_open+0x20b/0x470 [ 1018.983333][T24085] ? __pfx_do_filp_open+0x10/0x10 [ 1018.983388][T24085] ? alloc_fd+0x471/0x7d0 [ 1018.983424][T24085] do_sys_openat2+0x11b/0x1d0 [ 1018.983459][T24085] ? __pfx_do_sys_openat2+0x10/0x10 [ 1018.983497][T24085] ? __fget_files+0x20e/0x3c0 [ 1018.983530][T24085] __x64_sys_openat+0x174/0x210 [ 1018.983553][T24085] ? __pfx___x64_sys_openat+0x10/0x10 [ 1018.983581][T24085] ? ksys_write+0x1ac/0x250 [ 1018.983622][T24085] do_syscall_64+0xcd/0x4c0 [ 1018.983651][T24085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.983675][T24085] RIP: 0033:0x7f888f98d710 [ 1018.983695][T24085] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1018.983717][T24085] RSP: 002b:00007f8890910f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1018.983741][T24085] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f888f98d710 [ 1018.983758][T24085] RDX: 0000000000000002 RSI: 00007f8890910fa0 RDI: 00000000ffffff9c [ 1018.983773][T24085] RBP: 00007f8890910fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.983789][T24085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1018.983804][T24085] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1018.983837][T24085] [ 1019.738250][T24102] FAULT_INJECTION: forcing a failure. [ 1019.738250][T24102] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.751227][T24102] CPU: 1 UID: 0 PID: 24102 Comm: syz.6.5060 Tainted: G U syzkaller #0 PREEMPT(full) [ 1019.751261][T24102] Tainted: [U]=USER [ 1019.751269][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1019.751282][T24102] Call Trace: [ 1019.751291][T24102] [ 1019.751300][T24102] dump_stack_lvl+0x16c/0x1f0 [ 1019.751331][T24102] should_fail_ex+0x512/0x640 [ 1019.751356][T24102] ? __kvmalloc_node_noprof+0x124/0x620 [ 1019.751386][T24102] should_failslab+0xc2/0x120 [ 1019.751416][T24102] __kvmalloc_node_noprof+0x137/0x620 [ 1019.751443][T24102] ? sysctl_head_grab+0x51/0x70 [ 1019.751475][T24102] ? proc_sys_call_handler+0x281/0x570 [ 1019.751515][T24102] ? proc_sys_call_handler+0x281/0x570 [ 1019.751554][T24102] proc_sys_call_handler+0x281/0x570 [ 1019.751589][T24102] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1019.751631][T24102] vfs_write+0x7d3/0x11d0 [ 1019.751659][T24102] ? __pfx_proc_sys_write+0x10/0x10 [ 1019.751694][T24102] ? __pfx___mutex_lock+0x10/0x10 [ 1019.751721][T24102] ? __pfx_vfs_write+0x10/0x10 [ 1019.751774][T24102] ksys_write+0x12a/0x250 [ 1019.751802][T24102] ? __pfx_ksys_write+0x10/0x10 [ 1019.751841][T24102] do_syscall_64+0xcd/0x4c0 [ 1019.751871][T24102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.751896][T24102] RIP: 0033:0x7fc80738eec9 [ 1019.751916][T24102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.751937][T24102] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1019.751960][T24102] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1019.751976][T24102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1019.751994][T24102] RBP: 00007fc808229090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.752009][T24102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.752027][T24102] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1019.752061][T24102] [ 1020.453760][T24120] random: crng reseeded on system resumption [ 1020.481205][T24120] Restarting kernel threads ... [ 1020.489398][T24120] Done restarting kernel threads. [ 1020.610970][T24123] FAULT_INJECTION: forcing a failure. [ 1020.610970][T24123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.629569][T24123] CPU: 0 UID: 0 PID: 24123 Comm: syz.2.5067 Tainted: G U syzkaller #0 PREEMPT(full) [ 1020.629609][T24123] Tainted: [U]=USER [ 1020.629618][T24123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1020.629633][T24123] Call Trace: [ 1020.629648][T24123] [ 1020.629659][T24123] dump_stack_lvl+0x16c/0x1f0 [ 1020.629692][T24123] should_fail_ex+0x512/0x640 [ 1020.629725][T24123] _copy_from_user+0x2e/0xd0 [ 1020.629756][T24123] copy_msghdr_from_user+0x98/0x160 [ 1020.629785][T24123] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1020.629829][T24123] ___sys_sendmsg+0xfe/0x1d0 [ 1020.629858][T24123] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.629931][T24123] __sys_sendmsg+0x16d/0x220 [ 1020.629959][T24123] ? __pfx___sys_sendmsg+0x10/0x10 [ 1020.630010][T24123] do_syscall_64+0xcd/0x4c0 [ 1020.630039][T24123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.630066][T24123] RIP: 0033:0x7f0c7658eec9 [ 1020.630086][T24123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.630110][T24123] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.630134][T24123] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1020.630151][T24123] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000004 [ 1020.630167][T24123] RBP: 00007f0c77493090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.630182][T24123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.630198][T24123] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1020.630232][T24123] [ 1021.561162][T24130] FAULT_INJECTION: forcing a failure. [ 1021.561162][T24130] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.622543][T24130] CPU: 1 UID: 0 PID: 24130 Comm: syz.5.5071 Tainted: G U syzkaller #0 PREEMPT(full) [ 1021.622587][T24130] Tainted: [U]=USER [ 1021.622597][T24130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1021.622612][T24130] Call Trace: [ 1021.622622][T24130] [ 1021.622632][T24130] dump_stack_lvl+0x16c/0x1f0 [ 1021.622666][T24130] should_fail_ex+0x512/0x640 [ 1021.622695][T24130] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1021.622730][T24130] should_failslab+0xc2/0x120 [ 1021.622762][T24130] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1021.622790][T24130] ? lockdep_init_map_type+0x11/0x280 [ 1021.622821][T24130] ? mempool_init_node+0x302/0x6e0 [ 1021.622854][T24130] ? __init_waitqueue_head+0xca/0x150 [ 1021.622895][T24130] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1021.622928][T24130] mempool_init_node+0x302/0x6e0 [ 1021.622976][T24130] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 1021.623015][T24130] ? __pfx_mempool_free_slab+0x10/0x10 [ 1021.623050][T24130] mempool_init_noprof+0x3a/0x50 [ 1021.623090][T24130] bioset_init+0x37a/0x880 [ 1021.623119][T24130] ? __pfx_bioset_init+0x10/0x10 [ 1021.623159][T24130] __alloc_disk_node+0x83/0x640 [ 1021.623184][T24130] ? blk_alloc_queue+0x1a3/0x760 [ 1021.623219][T24130] __blk_alloc_disk+0xd0/0x160 [ 1021.623245][T24130] ? __pfx___blk_alloc_disk+0x10/0x10 [ 1021.623296][T24130] ? lockdep_init_map_type+0x5c/0x280 [ 1021.623344][T24130] ? lockdep_init_map_type+0x5c/0x280 [ 1021.623384][T24130] dm_create+0x4bf/0x1160 [ 1021.623413][T24130] dev_create+0x121/0x290 [ 1021.623444][T24130] ? __pfx_dev_create+0x10/0x10 [ 1021.623475][T24130] ? __might_fault+0x13b/0x190 [ 1021.623517][T24130] ctl_ioctl+0x798/0xd60 [ 1021.623550][T24130] ? __pfx_dev_create+0x10/0x10 [ 1021.623580][T24130] ? __pfx_ctl_ioctl+0x10/0x10 [ 1021.623645][T24130] ? __fget_files+0x20e/0x3c0 [ 1021.623680][T24130] dm_ctl_ioctl+0x22/0x30 [ 1021.623709][T24130] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 1021.623741][T24130] __x64_sys_ioctl+0x18e/0x210 [ 1021.623782][T24130] do_syscall_64+0xcd/0x4c0 [ 1021.623813][T24130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.623841][T24130] RIP: 0033:0x7f350598eec9 [ 1021.623862][T24130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1021.623888][T24130] RSP: 002b:00007f350685b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1021.623914][T24130] RAX: ffffffffffffffda RBX: 00007f3505be5fa0 RCX: 00007f350598eec9 [ 1021.623932][T24130] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000004 [ 1021.623950][T24130] RBP: 00007f3505a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1021.623965][T24130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.623981][T24130] R13: 00007f3505be6038 R14: 00007f3505be5fa0 R15: 00007ffcd707ff58 [ 1021.624017][T24130] [ 1022.363069][T24174] netlink: 342 bytes leftover after parsing attributes in process `syz.5.5081'. [ 1022.373168][T24175] FAULT_INJECTION: forcing a failure. [ 1022.373168][T24175] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.413083][T24175] CPU: 1 UID: 0 PID: 24175 Comm: syz.2.5078 Tainted: G U syzkaller #0 PREEMPT(full) [ 1022.413122][T24175] Tainted: [U]=USER [ 1022.413131][T24175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1022.413143][T24175] Call Trace: [ 1022.413151][T24175] [ 1022.413159][T24175] dump_stack_lvl+0x16c/0x1f0 [ 1022.413190][T24175] should_fail_ex+0x512/0x640 [ 1022.413216][T24175] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1022.413246][T24175] should_failslab+0xc2/0x120 [ 1022.413283][T24175] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1022.413310][T24175] ? do_timer_create+0x18a/0x1510 [ 1022.413349][T24175] do_timer_create+0x18a/0x1510 [ 1022.413385][T24175] ? __might_fault+0xe3/0x190 [ 1022.413410][T24175] ? __pfx_do_timer_create+0x10/0x10 [ 1022.413456][T24175] __x64_sys_timer_create+0x182/0x1d0 [ 1022.413488][T24175] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 1022.413536][T24175] do_syscall_64+0xcd/0x4c0 [ 1022.413563][T24175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.413585][T24175] RIP: 0033:0x7f0c7658eec9 [ 1022.413603][T24175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.413626][T24175] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 1022.413649][T24175] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1022.413663][T24175] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 1022.413676][T24175] RBP: 00007f0c77493090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.413692][T24175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.413706][T24175] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1022.413740][T24175] syzkaller syzkaller login: [ 1022.923066][T24193] netlink: 334 bytes leftover after parsing attributes in process `syz.6.5086'. [ 1023.097207][T24198] FAULT_INJECTION: forcing a failure. [ 1023.097207][T24198] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.109929][T24198] CPU: 1 UID: 0 PID: 24198 Comm: syz.2.5088 Tainted: G U syzkaller #0 PREEMPT(full) [ 1023.109954][T24198] Tainted: [U]=USER [ 1023.109959][T24198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1023.109967][T24198] Call Trace: [ 1023.109974][T24198] [ 1023.109981][T24198] dump_stack_lvl+0x16c/0x1f0 [ 1023.110002][T24198] should_fail_ex+0x512/0x640 [ 1023.110022][T24198] should_failslab+0xc2/0x120 [ 1023.110042][T24198] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1023.110059][T24198] ? lock_acquire+0x179/0x350 [ 1023.110079][T24198] ? dst_alloc+0x99/0x1a0 [ 1023.110094][T24198] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1023.110111][T24198] dst_alloc+0x99/0x1a0 [ 1023.110126][T24198] ip6_pol_route+0x96b/0x1230 [ 1023.110143][T24198] ? __pfx_ip6_pol_route+0x10/0x10 [ 1023.110162][T24198] ? __pfx_ip6_addr_string+0x10/0x10 [ 1023.110187][T24198] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1023.110202][T24198] fib6_rule_lookup+0x386/0x720 [ 1023.110226][T24198] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1023.110260][T24198] ip6_route_output_flags+0x1d0/0x640 [ 1023.110284][T24198] ip6_dst_lookup_tail.constprop.0+0xa52/0x2140 [ 1023.110298][T24198] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1023.110322][T24198] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1023.110337][T24198] ? __lock_acquire+0x62e/0x1ce0 [ 1023.110370][T24198] ip6_dst_lookup_flow+0x99/0x1d0 [ 1023.110385][T24198] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1023.110405][T24198] ip6_sk_dst_lookup_flow+0x56d/0x970 [ 1023.110418][T24198] ? udpv6_sendmsg+0x1605/0x2d20 [ 1023.110439][T24198] udpv6_sendmsg+0x19ef/0x2d20 [ 1023.110466][T24198] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1023.110490][T24198] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1023.110512][T24198] ? __lock_acquire+0xb97/0x1ce0 [ 1023.110547][T24198] ? inet_autobind+0x145/0x1a0 [ 1023.110565][T24198] ? rcu_is_watching+0x12/0xc0 [ 1023.110580][T24198] ? __local_bh_enable_ip+0xa4/0x120 [ 1023.110597][T24198] ? lockdep_hardirqs_on+0x7c/0x110 [ 1023.110611][T24198] ? inet_autobind+0x145/0x1a0 [ 1023.110628][T24198] ? __local_bh_enable_ip+0xa4/0x120 [ 1023.110645][T24198] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1023.110664][T24198] ? inet6_sendmsg+0x105/0x140 [ 1023.110682][T24198] inet6_sendmsg+0x105/0x140 [ 1023.110702][T24198] __sys_sendto+0x376/0x520 [ 1023.110718][T24198] ? __pfx___sys_sendto+0x10/0x10 [ 1023.110748][T24198] ? ksys_write+0x1ac/0x250 [ 1023.110765][T24198] ? __pfx_ksys_write+0x10/0x10 [ 1023.110785][T24198] __x64_sys_sendto+0xe0/0x1c0 [ 1023.110798][T24198] ? do_syscall_64+0x91/0x4c0 [ 1023.110813][T24198] ? lockdep_hardirqs_on+0x7c/0x110 [ 1023.110827][T24198] do_syscall_64+0xcd/0x4c0 [ 1023.110844][T24198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.110860][T24198] RIP: 0033:0x7f0c7658eec9 [ 1023.110873][T24198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.110887][T24198] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1023.110901][T24198] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1023.110911][T24198] RDX: 0000000000000402 RSI: 0000000000000000 RDI: 0000000000000003 [ 1023.110919][T24198] RBP: 00007f0c77493090 R08: 0000200000000040 R09: 000000000000001b [ 1023.110929][T24198] R10: 000000000000acf8 R11: 0000000000000246 R12: 0000000000000001 [ 1023.110937][T24198] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1023.110956][T24198] [ 1024.508005][T24226] FAULT_INJECTION: forcing a failure. [ 1024.508005][T24226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.634291][T24226] CPU: 0 UID: 0 PID: 24226 Comm: syz.6.5092 Tainted: G U syzkaller #0 PREEMPT(full) [ 1024.634328][T24226] Tainted: [U]=USER [ 1024.634335][T24226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1024.634349][T24226] Call Trace: [ 1024.634358][T24226] [ 1024.634374][T24226] dump_stack_lvl+0x16c/0x1f0 [ 1024.634406][T24226] should_fail_ex+0x512/0x640 [ 1024.634438][T24226] _copy_from_user+0x2e/0xd0 [ 1024.634468][T24226] do_fcntl+0xba2/0x15a0 [ 1024.634502][T24226] ? __pfx_do_fcntl+0x10/0x10 [ 1024.634541][T24226] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1024.634571][T24226] __x64_sys_fcntl+0x163/0x200 [ 1024.634606][T24226] do_syscall_64+0xcd/0x4c0 [ 1024.634636][T24226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.634661][T24226] RIP: 0033:0x7fc80738eec9 [ 1024.634682][T24226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.634706][T24226] RSP: 002b:00007fc808208038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1024.634731][T24226] RAX: ffffffffffffffda RBX: 00007fc8075e6090 RCX: 00007fc80738eec9 [ 1024.634749][T24226] RDX: 0000000000000008 RSI: 0000000000000026 RDI: 8000000000000001 [ 1024.634765][T24226] RBP: 00007fc808208090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.634779][T24226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.634794][T24226] R13: 00007fc8075e6128 R14: 00007fc8075e6090 R15: 00007ffee82da2a8 [ 1024.634825][T24226] [ 1025.368369][T24246] FAULT_INJECTION: forcing a failure. [ 1025.368369][T24246] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.537866][T24246] CPU: 1 UID: 0 PID: 24246 Comm: syz.6.5096 Tainted: G U syzkaller #0 PREEMPT(full) [ 1025.537907][T24246] Tainted: [U]=USER [ 1025.537916][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1025.537929][T24246] Call Trace: [ 1025.537938][T24246] [ 1025.537948][T24246] dump_stack_lvl+0x16c/0x1f0 [ 1025.537981][T24246] should_fail_ex+0x512/0x640 [ 1025.538008][T24246] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1025.538042][T24246] should_failslab+0xc2/0x120 [ 1025.538075][T24246] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1025.538105][T24246] ? vm_area_dup+0x27/0x8d0 [ 1025.538137][T24246] vm_area_dup+0x27/0x8d0 [ 1025.538174][T24246] __split_vma+0x18e/0x1070 [ 1025.538207][T24246] ? __pfx___split_vma+0x10/0x10 [ 1025.538255][T24246] vms_gather_munmap_vmas+0x1d2/0x1340 [ 1025.538290][T24246] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1025.538323][T24246] ? mas_walk+0x6f5/0x980 [ 1025.538360][T24246] __mmap_region+0x436/0x27b0 [ 1025.538393][T24246] ? __pfx___mmap_region+0x10/0x10 [ 1025.538432][T24246] ? is_bpf_text_address+0x8a/0x1a0 [ 1025.538462][T24246] ? bpf_ksym_find+0x124/0x1c0 [ 1025.538486][T24246] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1025.538516][T24246] ? is_bpf_text_address+0x94/0x1a0 [ 1025.538545][T24246] ? kernel_text_address+0x8d/0x100 [ 1025.538582][T24246] ? __kernel_text_address+0xd/0x40 [ 1025.538617][T24246] ? unwind_get_return_address+0x59/0xa0 [ 1025.538645][T24246] ? arch_stack_walk+0xa6/0x100 [ 1025.538674][T24246] ? __lock_acquire+0x62e/0x1ce0 [ 1025.538751][T24246] ? rcu_is_watching+0x12/0xc0 [ 1025.538788][T24246] mmap_region+0x1ab/0x3f0 [ 1025.538824][T24246] do_mmap+0xa3e/0x1210 [ 1025.538866][T24246] ? __pfx_do_mmap+0x10/0x10 [ 1025.538900][T24246] ? __pfx_down_write_killable+0x10/0x10 [ 1025.538937][T24246] vm_mmap_pgoff+0x29e/0x470 [ 1025.538984][T24246] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1025.539024][T24246] ? __fget_files+0x20e/0x3c0 [ 1025.539056][T24246] ksys_mmap_pgoff+0x32c/0x5c0 [ 1025.539087][T24246] ? __pfx_ksys_write+0x10/0x10 [ 1025.539117][T24246] __x64_sys_mmap+0x125/0x190 [ 1025.539144][T24246] do_syscall_64+0xcd/0x4c0 [ 1025.539180][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.539207][T24246] RIP: 0033:0x7fc80738eec9 [ 1025.539227][T24246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.539251][T24246] RSP: 002b:00007fc808229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1025.539275][T24246] RAX: ffffffffffffffda RBX: 00007fc8075e5fa0 RCX: 00007fc80738eec9 [ 1025.539292][T24246] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 1025.539308][T24246] RBP: 00007fc808229090 R08: 0000000000000003 R09: 0000000000000000 [ 1025.539323][T24246] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 1025.539338][T24246] R13: 00007fc8075e6038 R14: 00007fc8075e5fa0 R15: 00007ffee82da2a8 [ 1025.539369][T24246] [ 1025.936433][T24260] FAULT_INJECTION: forcing a failure. [ 1025.936433][T24260] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.949227][T24260] CPU: 1 UID: 0 PID: 24260 Comm: syz.4.5100 Tainted: G U syzkaller #0 PREEMPT(full) [ 1025.949260][T24260] Tainted: [U]=USER [ 1025.949267][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1025.949279][T24260] Call Trace: [ 1025.949287][T24260] [ 1025.949297][T24260] dump_stack_lvl+0x16c/0x1f0 [ 1025.949327][T24260] should_fail_ex+0x512/0x640 [ 1025.949353][T24260] ? fs_reclaim_acquire+0xae/0x150 [ 1025.949389][T24260] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1025.949424][T24260] should_failslab+0xc2/0x120 [ 1025.949456][T24260] __kmalloc_noprof+0xd2/0x510 [ 1025.949494][T24260] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1025.949532][T24260] ? tomoyo_profile+0x47/0x60 [ 1025.949560][T24260] tomoyo_path_number_perm+0x245/0x580 [ 1025.949591][T24260] ? tomoyo_path_number_perm+0x237/0x580 [ 1025.949625][T24260] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1025.949657][T24260] ? find_held_lock+0x2b/0x80 [ 1025.949714][T24260] ? find_held_lock+0x2b/0x80 [ 1025.949744][T24260] ? hook_file_ioctl_common+0x145/0x410 [ 1025.949784][T24260] ? __fget_files+0x20e/0x3c0 [ 1025.949818][T24260] security_file_ioctl+0x9b/0x240 [ 1025.949852][T24260] __x64_sys_ioctl+0xb7/0x210 [ 1025.949891][T24260] do_syscall_64+0xcd/0x4c0 [ 1025.949930][T24260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.949955][T24260] RIP: 0033:0x7f888f98eec9 [ 1025.949976][T24260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.950000][T24260] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1025.950024][T24260] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1025.950040][T24260] RDX: 0000000000000020 RSI: 000000005000aea5 RDI: 0000000000000004 [ 1025.950055][T24260] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.950071][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.950086][T24260] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1025.950120][T24260] [ 1025.950132][T24260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1026.338336][T24267] FAULT_INJECTION: forcing a failure. [ 1026.338336][T24267] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.360039][T24267] CPU: 1 UID: 0 PID: 24267 Comm: syz.2.5104 Tainted: G U syzkaller #0 PREEMPT(full) [ 1026.360067][T24267] Tainted: [U]=USER [ 1026.360073][T24267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.360082][T24267] Call Trace: [ 1026.360088][T24267] [ 1026.360095][T24267] dump_stack_lvl+0x16c/0x1f0 [ 1026.360116][T24267] should_fail_ex+0x512/0x640 [ 1026.360133][T24267] ? fs_reclaim_acquire+0xae/0x150 [ 1026.360158][T24267] should_failslab+0xc2/0x120 [ 1026.360178][T24267] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1026.360197][T24267] ? security_inode_alloc+0x3b/0x2b0 [ 1026.360218][T24267] security_inode_alloc+0x3b/0x2b0 [ 1026.360236][T24267] inode_init_always_gfp+0xce4/0x1030 [ 1026.360256][T24267] alloc_inode+0x86/0x240 [ 1026.360283][T24267] new_inode+0x22/0x1c0 [ 1026.360305][T24267] mqueue_get_inode+0x2e/0xdd0 [ 1026.360325][T24267] mqueue_create_attr+0x261/0x440 [ 1026.360346][T24267] vfs_mkobj+0x3d8/0x620 [ 1026.360360][T24267] ? __pfx_mqueue_create_attr+0x10/0x10 [ 1026.360379][T24267] do_mq_open+0x71e/0x8c0 [ 1026.360403][T24267] ? __pfx_do_mq_open+0x10/0x10 [ 1026.360426][T24267] __x64_sys_mq_open+0x155/0x1e0 [ 1026.360445][T24267] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 1026.360471][T24267] do_syscall_64+0xcd/0x4c0 [ 1026.360491][T24267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.360505][T24267] RIP: 0033:0x7f0c7658eec9 [ 1026.360518][T24267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.360532][T24267] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1026.360547][T24267] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1026.360556][T24267] RDX: 000000000000b9fb RSI: 00000000000061df RDI: 0000200000000040 [ 1026.360565][T24267] RBP: 00007f0c76611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.360573][T24267] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 1026.360582][T24267] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1026.360602][T24267] [ 1027.287033][T24280] FAULT_INJECTION: forcing a failure. [ 1027.287033][T24280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.414976][T24280] CPU: 0 UID: 0 PID: 24280 Comm: syz.4.5105 Tainted: G U syzkaller #0 PREEMPT(full) [ 1027.415017][T24280] Tainted: [U]=USER [ 1027.415025][T24280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1027.415040][T24280] Call Trace: [ 1027.415185][T24280] [ 1027.415199][T24280] dump_stack_lvl+0x16c/0x1f0 [ 1027.415233][T24280] should_fail_ex+0x512/0x640 [ 1027.415266][T24280] _copy_from_user+0x2e/0xd0 [ 1027.415297][T24280] kstrtouint_from_user+0xd6/0x1d0 [ 1027.415332][T24280] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1027.415366][T24280] ? __lock_acquire+0xb97/0x1ce0 [ 1027.415414][T24280] proc_fail_nth_write+0x83/0x220 [ 1027.415444][T24280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1027.415483][T24280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1027.415510][T24280] vfs_write+0x29d/0x11d0 [ 1027.415545][T24280] ? __pfx___mutex_lock+0x10/0x10 [ 1027.415572][T24280] ? __pfx_vfs_write+0x10/0x10 [ 1027.415611][T24280] ? __fget_files+0x20e/0x3c0 [ 1027.415649][T24280] ksys_write+0x12a/0x250 [ 1027.415676][T24280] ? __pfx_ksys_write+0x10/0x10 [ 1027.415716][T24280] do_syscall_64+0xcd/0x4c0 [ 1027.415746][T24280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.415773][T24280] RIP: 0033:0x7f888f98d97f [ 1027.415795][T24280] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1027.415818][T24280] RSP: 002b:00007f88908f0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1027.415841][T24280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f888f98d97f [ 1027.415855][T24280] RDX: 0000000000000001 RSI: 00007f88908f00a0 RDI: 0000000000000004 [ 1027.415868][T24280] RBP: 00007f88908f0090 R08: 0000000000000000 R09: 000000000000001c [ 1027.415881][T24280] R10: 0000000002000008 R11: 0000000000000293 R12: 0000000000000001 [ 1027.415895][T24280] R13: 00007f888fbe6128 R14: 00007f888fbe6090 R15: 00007ffee31f4438 [ 1027.415931][T24280] [ 1029.400270][T24315] : Can't lookup blockdev [ 1029.682690][T24264] netlink: 'syz.5.5102': attribute type 1 has an invalid length. [ 1029.702521][T24325] FAULT_INJECTION: forcing a failure. [ 1029.702521][T24325] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.734299][T24325] CPU: 0 UID: 0 PID: 24325 Comm: syz.4.5111 Tainted: G U syzkaller #0 PREEMPT(full) [ 1029.734340][T24325] Tainted: [U]=USER [ 1029.734348][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1029.734363][T24325] Call Trace: [ 1029.734371][T24325] [ 1029.734381][T24325] dump_stack_lvl+0x16c/0x1f0 [ 1029.734412][T24325] should_fail_ex+0x512/0x640 [ 1029.734438][T24325] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1029.734471][T24325] should_failslab+0xc2/0x120 [ 1029.734502][T24325] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1029.734532][T24325] ? alloc_empty_file+0x55/0x1e0 [ 1029.734579][T24325] alloc_empty_file+0x55/0x1e0 [ 1029.734612][T24325] path_openat+0xda/0x2cb0 [ 1029.734636][T24325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.734661][T24325] ? __pfx_path_openat+0x10/0x10 [ 1029.734682][T24325] do_filp_open+0x20b/0x470 [ 1029.734699][T24325] ? __pfx_do_filp_open+0x10/0x10 [ 1029.734730][T24325] ? alloc_fd+0x471/0x7d0 [ 1029.734751][T24325] do_sys_openat2+0x11b/0x1d0 [ 1029.734773][T24325] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.734802][T24325] __x64_sys_openat+0x174/0x210 [ 1029.734817][T24325] ? __pfx___x64_sys_openat+0x10/0x10 [ 1029.734832][T24325] ? syscall_user_dispatch+0x78/0x140 [ 1029.734861][T24325] do_syscall_64+0xcd/0x4c0 [ 1029.734878][T24325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.734892][T24325] RIP: 0033:0x7f888f98eec9 [ 1029.734905][T24325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.734919][T24325] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.734933][T24325] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1029.734943][T24325] RDX: 00000000000c0002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1029.734953][T24325] RBP: 00007f888fa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1029.734961][T24325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1029.734970][T24325] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1029.734988][T24325] [ 1029.737999][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5111'. [ 1030.422092][T24339] FAULT_INJECTION: forcing a failure. [ 1030.422092][T24339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.543449][T24339] CPU: 1 UID: 0 PID: 24339 Comm: syz.2.5115 Tainted: G U syzkaller #0 PREEMPT(full) [ 1030.543490][T24339] Tainted: [U]=USER [ 1030.543498][T24339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1030.543513][T24339] Call Trace: [ 1030.543522][T24339] [ 1030.543531][T24339] dump_stack_lvl+0x16c/0x1f0 [ 1030.543565][T24339] should_fail_ex+0x512/0x640 [ 1030.543598][T24339] strncpy_from_user+0x3b/0x2e0 [ 1030.543636][T24339] getname_flags.part.0+0x8f/0x550 [ 1030.543677][T24339] getname_flags+0x93/0xf0 [ 1030.543704][T24339] do_sys_openat2+0xb8/0x1d0 [ 1030.543740][T24339] ? __pfx_do_sys_openat2+0x10/0x10 [ 1030.543779][T24339] ? __fget_files+0x20e/0x3c0 [ 1030.543813][T24339] __x64_sys_openat+0x174/0x210 [ 1030.543841][T24339] ? __pfx___x64_sys_openat+0x10/0x10 [ 1030.543862][T24339] ? ksys_write+0x1ac/0x250 [ 1030.543903][T24339] do_syscall_64+0xcd/0x4c0 [ 1030.543934][T24339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.543959][T24339] RIP: 0033:0x7f0c7658eec9 [ 1030.543980][T24339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.544004][T24339] RSP: 002b:00007f0c77493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1030.544028][T24339] RAX: ffffffffffffffda RBX: 00007f0c767e5fa0 RCX: 00007f0c7658eec9 [ 1030.544046][T24339] RDX: 0000000000000000 RSI: 0000200000001480 RDI: ffffffffffffff9c [ 1030.544062][T24339] RBP: 00007f0c77493090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.544077][T24339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.544092][T24339] R13: 00007f0c767e6038 R14: 00007f0c767e5fa0 R15: 00007fff32b49c18 [ 1030.544126][T24339] [ 1032.070660][T24365] input: f¬ as /devices/virtual/input/input16 [ 1032.290947][T24384] FAULT_INJECTION: forcing a failure. [ 1032.290947][T24384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.354401][T24384] CPU: 1 UID: 0 PID: 24384 Comm: syz.4.5123 Tainted: G U syzkaller #0 PREEMPT(full) [ 1032.354450][T24384] Tainted: [U]=USER [ 1032.354458][T24384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1032.354472][T24384] Call Trace: [ 1032.354480][T24384] [ 1032.354489][T24384] dump_stack_lvl+0x16c/0x1f0 [ 1032.354521][T24384] should_fail_ex+0x512/0x640 [ 1032.354551][T24384] _copy_to_iter+0x29f/0x1710 [ 1032.354580][T24384] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1032.354608][T24384] ? __pfx__copy_to_iter+0x10/0x10 [ 1032.354630][T24384] ? kernfs_seq_stop+0xcd/0x120 [ 1032.354648][T24384] ? kernfs_put_active+0x86/0xe0 [ 1032.354672][T24384] seq_read_iter+0xcf8/0x12c0 [ 1032.354696][T24384] kernfs_fop_read_iter+0x46c/0x610 [ 1032.354712][T24384] ? rw_verify_area+0xcf/0x6c0 [ 1032.354729][T24384] vfs_read+0x8bf/0xcf0 [ 1032.354749][T24384] ? __pfx___mutex_lock+0x10/0x10 [ 1032.354764][T24384] ? __pfx_vfs_read+0x10/0x10 [ 1032.354793][T24384] ksys_read+0x12a/0x250 [ 1032.354810][T24384] ? __pfx_ksys_read+0x10/0x10 [ 1032.354832][T24384] do_syscall_64+0xcd/0x4c0 [ 1032.354850][T24384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.354865][T24384] RIP: 0033:0x7f888f98eec9 [ 1032.354877][T24384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.354892][T24384] RSP: 002b:00007f8890911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.354906][T24384] RAX: ffffffffffffffda RBX: 00007f888fbe5fa0 RCX: 00007f888f98eec9 [ 1032.354917][T24384] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 1032.354925][T24384] RBP: 00007f8890911090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.354934][T24384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.354942][T24384] R13: 00007f888fbe6038 R14: 00007f888fbe5fa0 R15: 00007ffee31f4438 [ 1032.354961][T24384] [ 1032.903417][T24385] netlink: 334 bytes leftover after parsing attributes in process `syz.2.5121'. [ 1035.847970][T24433] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1035.855827][T24433] #PF: supervisor instruction fetch in kernel mode [ 1035.862345][T24433] #PF: error_code(0x0010) - not-present page [ 1035.868335][T24433] PGD 800000007b648067 P4D 800000007b648067 PUD 32814067 PMD 339c0067 PTE 0 [ 1035.877070][T24433] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 1035.882458][T24433] CPU: 1 UID: 0 PID: 24433 Comm: syz.5.5128 Tainted: G U syzkaller #0 PREEMPT(full) [ 1035.893395][T24433] Tainted: [U]=USER [ 1035.897190][T24433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1035.907243][T24433] RIP: 0010:0x0 [ 1035.910710][T24433] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1035.918062][T24433] RSP: 0018:ffffc900035b79c8 EFLAGS: 00010283 [ 1035.924137][T24433] RAX: 00000000000008cd RBX: 0000000000000000 RCX: ffffc9000beca000 [ 1035.932107][T24433] RDX: 0000000000080000 RSI: ffffea000106efc0 RDI: ffff888028072a80 [ 1035.940231][T24433] RBP: ffffea000106efc0 R08: 0000000000000007 R09: 0000000000000000 [ 1035.948240][T24433] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006b6f3a [ 1035.956214][T24433] R13: ffff888028072a80 R14: 0000000000000000 R15: dffffc0000000000 [ 1035.964211][T24433] FS: 00007f350683a6c0(0000) GS:ffff888124f88000(0000) knlGS:0000000000000000 [ 1035.973146][T24433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1035.979732][T24433] CR2: ffffffffffffffd6 CR3: 0000000050218000 CR4: 00000000003526f0 [ 1035.987709][T24433] Call Trace: [ 1035.990985][T24433] [ 1035.993911][T24433] filemap_read_folio+0xc5/0x2a0 [ 1035.998861][T24433] ? __pfx_filemap_read_folio+0x10/0x10 [ 1036.004411][T24433] ? __filemap_get_folio+0x32b/0xc30 [ 1036.009704][T24433] ? down_read+0x13d/0x480 [ 1036.014124][T24433] do_read_cache_folio+0x263/0x5c0 [ 1036.019248][T24433] freader_get_folio+0x337/0x930 [ 1036.024189][T24433] freader_fetch+0xc2/0x5e0 [ 1036.028699][T24433] ? mt_find+0x3ef/0xa30 [ 1036.032955][T24433] __build_id_parse.isra.0+0xec/0x7a0 [ 1036.038334][T24433] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 1036.044323][T24433] ? __pfx_find_vma+0x10/0x10 [ 1036.049114][T24433] do_procmap_query+0xd96/0x1090 [ 1036.054061][T24433] ? __pfx_do_procmap_query+0x10/0x10 [ 1036.059619][T24433] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1036.065524][T24433] ? do_vfs_ioctl+0x128/0x14f0 [ 1036.070309][T24433] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1036.075356][T24433] ? __fget_files+0x20e/0x3c0 [ 1036.080038][T24433] procfs_procmap_ioctl+0x7d/0xb0 [ 1036.085079][T24433] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 1036.090893][T24433] __x64_sys_ioctl+0x18e/0x210 [ 1036.095670][T24433] do_syscall_64+0xcd/0x4c0 [ 1036.100262][T24433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.106151][T24433] RIP: 0033:0x7f350598eec9 [ 1036.110564][T24433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.130257][T24433] RSP: 002b:00007f350683a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.138669][T24433] RAX: ffffffffffffffda RBX: 00007f3505be6090 RCX: 00007f350598eec9 [ 1036.146634][T24433] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000006 [ 1036.154600][T24433] RBP: 00007f3505a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1036.162564][T24433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.170530][T24433] R13: 00007f3505be6128 R14: 00007f3505be6090 R15: 00007ffcd707ff58 [ 1036.178502][T24433] [ 1036.181513][T24433] Modules linked in: [ 1036.185414][T24433] CR2: 0000000000000000 [ 1036.189555][T24433] ---[ end trace 0000000000000000 ]--- [ 1036.194997][T24433] RIP: 0010:0x0 [ 1036.198457][T24433] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1036.205810][T24433] RSP: 0018:ffffc900035b79c8 EFLAGS: 00010283 [ 1036.211870][T24433] RAX: 00000000000008cd RBX: 0000000000000000 RCX: ffffc9000beca000 [ 1036.219837][T24433] RDX: 0000000000080000 RSI: ffffea000106efc0 RDI: ffff888028072a80 [ 1036.227808][T24433] RBP: ffffea000106efc0 R08: 0000000000000007 R09: 0000000000000000 [ 1036.235774][T24433] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff920006b6f3a [ 1036.243741][T24433] R13: ffff888028072a80 R14: 0000000000000000 R15: dffffc0000000000 [ 1036.251708][T24433] FS: 00007f350683a6c0(0000) GS:ffff888124f88000(0000) knlGS:0000000000000000 [ 1036.260636][T24433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1036.267218][T24433] CR2: ffffffffffffffd6 CR3: 0000000050218000 CR4: 00000000003526f0 [ 1036.275193][T24433] Kernel panic - not syncing: Fatal exception [ 1036.281577][T24433] Kernel Offset: disabled [ 1036.285978][T24433] Rebooting in 86400 seconds..