last executing test programs: 8.612276313s ago: executing program 1 (id=3194): socket(0x1a, 0x800, 0xfffffffd) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000007624bfcab435b22f0628c3d10d5421cf9af874d70769e5dc7a134377b19421240bac1aa7af33d77c41da85264c435a8f1fb3800510ea7e2a8e64db6bb335b0d69c5d50fab01c2a113bda4f9e36", @ANYRES16=r4, @ANYBLOB="010026bd7004fedbdf25010000000c0003000600000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000000180)='./file0\x00', 0x1001, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) readv$auto(0x3, 0x0, 0x1) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r2, 0x1) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 7.122370425s ago: executing program 3 (id=3199): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) getpgid$auto(0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x101200, 0x0) read$auto_tracing_buffers_fops_trace(r3, &(0x7f0000000040)=""/111, 0x6f) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x40c80, 0x0) read$auto_tracing_buffers_fops_trace(r4, &(0x7f0000000040)=""/163, 0xa3) landlock_restrict_self$auto(r2, 0x3) timer_create$auto(0xffff, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a) 6.577283755s ago: executing program 0 (id=3201): ioprio_get$auto(0x3, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) socket(0x2, 0x1, 0x106) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x20180, 0x0) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, 0x0, 0x9, 0x0) bind$auto(r1, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x3, 0x2}, 0x100006a) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0x55) read$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000001680)=""/4096, 0x1000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto(r2, 0x8983, 0x4) r3 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r4 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r3, 0x0, 0x5c8) close_range$auto(r4, 0xfffffffffffff000, 0x4000000000002) r5 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r5, 0xffffffffffffffff, 0x4) 5.838333778s ago: executing program 0 (id=3202): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x2, 0x7, &(0x7f00000000c0)='*\x00', &(0x7f0000000100)) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) lseek$auto(0x3, 0x0, 0x1) r2 = socket(0xa, 0x1, 0x3399) setsockopt$auto(r2, 0x29, 0x3e, 0x0, 0x110) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) 5.640008668s ago: executing program 3 (id=3203): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="1b0025bdb42d057000fddbdf"], 0x18}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) keyctl$auto(0x0, 0x0, 0x0, 0x0, 0x10000) mmap$auto(0x0, 0xf, 0x400000000000006, 0xeb1, 0xffffffffffffffff, 0x10000000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x3, 0x9, 0xf, 0x5, 0x0, 0xee01, 0x0, 0x10, 0x7, 0x7, 0x23, 0x5319, 0x71, 0x6, 0xfffffffffffffff8, 0x40, 0x9}) timerfd_create$auto(0x9, 0x0) r3 = socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) adjtimex$auto(&(0x7f0000000240)={0xffffffff, 0x0, 0x6, 0x4, 0x1, 0x2, 0x1, 0x0, 0x1, 0x401, 0x80000001, {0x5, 0xffffffffffff8000}, 0x3, 0xfff, 0x6, 0x1ff, 0x0, 0x8, 0x2, 0x8, 0x3, 0x7c, 0x8}) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x4, 0x8, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x2120, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) 5.423597205s ago: executing program 0 (id=3205): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x3, 0x9, 0x400000000006, 0x8000000000eb1, 0xffffffffffffffff, 0x8000004) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptya9\x00', 0x42880, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x2000000001ff) write$auto(0x3, 0x0, 0x7) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) socket(0x2c, 0x6, 0x84) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x10001, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000001) (rerun: 32) io_uring_setup$auto(0xc, 0x0) (async) mprotect$auto(0x0, 0x8000000000000001, 0x8) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x40, 0x0) (async, rerun: 64) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) (async, rerun: 64) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) (async) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) (async, rerun: 64) pkey_free$auto(0xfffffffd) (async) epoll_create1$auto(0x8) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) connect$auto(0xffffffffffffffff, 0x0, 0x55) (rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 5.093075905s ago: executing program 0 (id=3207): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) getdents64$auto(r0, 0x0, 0xb012) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) access$auto(&(0x7f0000000100)='./cgroup\x00', 0x6) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r2, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r2, 0x4, 0x6, 0x101, 0x1, r2}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x800, 0x0, &(0x7f00000001c0)) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r3, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 5.069861507s ago: executing program 1 (id=3208): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) r0 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r0, 0x0, 0x401, 0x5, 0x3}}}) prctl$auto(0x3e, 0xfffffffffffffffe, r1, 0x1, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sctp/assocs\x00', 0xc0003, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x4}, 0x1dc) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae67, 0x38) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$auto_XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f0000000040)={0x2, 0x4, 0xfffffffffffffffa, 0x8}) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x3, 0x6) 4.976659876s ago: executing program 2 (id=3209): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x2, 0x7, &(0x7f00000000c0)='*\x00', &(0x7f0000000100)) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) lseek$auto(0x3, 0x0, 0x1) r2 = socket(0xa, 0x1, 0x3399) setsockopt$auto(r2, 0x29, 0x3e, 0x0, 0x110) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fanotify_init$auto(0x65, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x6, 0x8000000000000006, 0x1b, 0x0, 0x7ffffc) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) 4.501438642s ago: executing program 2 (id=3210): madvise$auto(0x0, 0x2000040080000003, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x11, 0x20, 0x0, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(r0, 0x0, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003ef, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x2, 0x5c61fa2c, 0xf) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x20942, 0x0) write$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000004c0)="c9432739b5580773", 0x8) 4.358587268s ago: executing program 1 (id=3211): mmap$auto(0x40000, 0x4, 0x8, 0x40ef1, 0xffffffffffffffff, 0x2ffffffffffc) ioprio_get$auto(0x3, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x1, 0x2, 0x7) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x6c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) read$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000000680)=""/4096, 0x1000) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001240)='\t\x00', 0x2) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000240)="a80b41af3076959547827b99bfca8e8458bf8c50d96b") mmap$auto(0x2, 0x425, 0xdf, 0x9b72, 0x7, 0x100000000) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x8983, 0x4) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000cc9be8eda4875b39c60ccaae14849694198c78cd8bfad7560d43960740dbd773d28fcf87", @ANYRES16=0x0, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="eef82cfe7c996daba91eac141cf9f908152d5d3c53ee7180031cabb4c9807eac8230ec0d086ddbc46a76429975884be52ae43d22e079e6c12a8ab43dfc59095b5bb91b16ac293f2c19afe7508bd58e8b6ca4070ef02f061c7579d7c0d4479085376c6bcb07384ef0ff12a30667e6d856df5aba", @ANYRES16=0x0, @ANYBLOB="e23926bd7000fcdbdf250600000008000100010000000800010002000000c6000280b23557a56d0e8c4eab61106908443fc9b51da1d8df0170c90ddac70e0879c8ecafa9363ee02cad0f5608aa68e8123ec7f31d1ff5db13a5130123cc5b41c376c6949782758510e6b2a4f7fc53662fc2f3890cc163a140667e9fbda1befaeab5570719b2a0a438c1809065c89209b7d06cc92e29c10233053b3acfd9e85ea30bdc35a223f0f88c0b1a5970fd3f53aca801444901756d37cb1121ea276c2a6b1a09d24f0e00e6002f6465762f766d6369000000100096800400538004002e80040034800000"], 0xec}, 0x1, 0x0, 0x0, 0x8041}, 0x24804) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(0xffffffffffffffff, 0x2, 0x44, &(0x7f0000000180)='\x00', 0x7) sendmmsg$auto(r2, 0x0, 0x8, 0x7000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 4.140561205s ago: executing program 3 (id=3212): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0x7fffffff, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x4000b, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r3, 0x4, @old_prog_fd=r3}, 0xa3) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) 4.139500791s ago: executing program 0 (id=3220): mlockall$auto(0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000041201bb4dff2dc29916b4127f437e8f29f64f7691c214500abedbd32eb27e1bdb65956a709642be2d4e5e9cf3846260d84df7f547595dcbc999d1cfff3921f422fdcedbe98028ef7a0f57d560102a6089975ef3e53644b463d3bc1b15b9078c55b467ec8e56727305b5b93ea59a9cc5c439cb668913d089aebe0d05472036bf715681c3064204ef730ac10e8626cad50d46be51523f66969eaa15b9fee7696ecdffb1540f012f9c85fef6eeff228aba6538e203dba89cd84221e60656b9e5015382c1de5f1b1620c7e478c01fc17c37267bc623d64337614d980996a0a01ae7c77f427229ab6d21eb1", @ANYRES16=r1, @ANYBLOB="030426bd7000f9dbdf2502000000040003000a000100197588149b0c0000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) getpid() mprotect$auto(0x1ffffffff000, 0x100004, 0x6) r2 = open(&(0x7f0000000800)='./file0\x00', 0x422240, 0x114) fcntl$auto(r2, 0x400, 0x1) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000e00)="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") 3.188211311s ago: executing program 1 (id=3213): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0x81) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) 2.74776158s ago: executing program 1 (id=3214): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) mmap$auto(0x1000000, 0x9, 0xffb, 0x8000000008011, 0x3, 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x1a, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/veth0_to_bond/mc_forwarding\x00', 0x260243, 0x0) write$auto(0x3, 0x0, 0x3f00) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x48542, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94\x93\x998\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\r\xc9o{\xbd-\x1c\x89OO}e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1a\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x95\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9bjE\xf4\xe1\x98\x03\xc0\xb0\xc1\xe9(\x95', 0x4) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) madvise$auto(0x0, 0xf663, 0x15) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) 2.288544622s ago: executing program 2 (id=3215): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/index\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram10/queue/max_sectors_kb\x00', 0xe3102, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x10, 0x1, 0x600, 0x0, {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0xb4, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x0, 0x5, 0x8) setresgid$auto(0xa05, 0x4, 0x0) mknod$auto(&(0x7f0000000240)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x80e9, 0x105) access$auto(&(0x7f0000000000)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x3) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TUNSETVNETBE2(r3, 0x400454de, &(0x7f0000000040)=0x1) read$auto_gpiolib_fops_(r3, &(0x7f0000000340)=""/105, 0x69) prctl$auto_PR_SET_MM_START_DATA(0x6, 0x3, 0xffffffffffffffff, 0x5, 0x7) ioctl$auto(r1, 0x7, r2) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) ioctl$auto_PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000000c0)=0x7) ioctl$auto(r4, 0x5419, 0x38) 1.966876808s ago: executing program 3 (id=3216): unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = eventfd$auto(0x2200000c) socket(0x2, 0x3, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1") write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_rb_simple_fops_trace(r3, &(0x7f00000003c0)=""/125, 0x7d) setsockopt$auto_SO_DETACH_FILTER(r2, 0x7, 0x1b, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e0, 0x91) ioctl$auto(0x3, 0x89e1, 0x91) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 650.222946ms ago: executing program 2 (id=3217): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x100000, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) r1 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nbd4\x00', 0x16d202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) fstat$auto(r2, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) r4 = socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r4) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/state\x00', 0x2, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/orangefs/cache_timeout_msecs\x00', 0xb02, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 577.121872ms ago: executing program 3 (id=3218): r0 = pipe2$auto(0x0, 0x80) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000000)={@inferred=r0, "02cc5a16429208081bcad5ae4dcee8b2dab5808c7350d2d20e40f55ed82c13323b806a901241580f7cdfd729e3cb5b52febb8a7af4693740d3159aba1cb7f8b8623d02f43fce29435dee13bb29636e2a18d7c58e13073ca0985bc1d877367bbe9826a1eb5a59a334571d134b413501158d4c59d59e4086d1d8f803c5bccf41a3cae6800c41d51e5a788e1884cdf85e75324c44337c437a92962e3e63d87f881fe1471e371b6773bac25551585e56a895bda2d7ddce9eb71f92fb27d91eb49edad7fcfc09565731d999d13406b4015bd08071dd6d318d8e0b00bf43b85664c3f27ebf9e84ee58d6142772c39534ccaba9aa4420d51c2483d24aa39f762995c3540bc8e702cf6ea5aaa8201d7533b779772ec6777d9a8ca2541cd81a9e850c5265e27f55a9de5e66cb01a0942a23ee54849de271686ac7b913164036ef73e4c528068be1be9d27d391398006181d51d57f0e3622ef6265a65b2e5cb4f62efea0310d872f892055fc80fdaddc1f244816d434be592df1f0a2d3ded102a7666e3da2854f2158ebd74149ea3e6ab30e75a66661e68b4fde97f0e852b4f33a131bc59c475d47798b5fe93d21f0a5f8d877ce015f4ecac9afba75e465a72d87f57b1c491d9fabdff710f1ccbd205978ce171c1b88a35ccde57d7b591a13efa83b6d91688351f7f9f676cfab3dcc05a27108e59943f9b592dc7c9365b2acb2634b6ba27342ddea75e1b45a6657e97e5731bb7048d099eb5bbeb4dace1cc03117bebc14266a4c602ed92ca13e4d82a4cf658d2b0287315713835266936fea98e3d8e870f451d21fb1d1a0dceae41a1aeffe8f5c0fa0a7f1ae72d9ef61f80a2f27c3aefdd84c684c64826b6dc226030a01c417b17ae78e14a3d9f3270ac0f20bb54c387a52559e4f6c6f49001fb3b6fbe573c2c03b5e0fc915c22317155e85f8866b062e08a363dacb1e08da4dd666701c9d8246de730ceb5b81c8ff8299e3c81c2f54366627013a242352eecc0278f36ebcf690aa9576754a1f7de1c9c4c0e516480fbae60208af9ea304d7f4e73298bda099e3c4b5c885743c710865da7b2fdd22fa28c7e06131d1f94f3656ba030510b9f3015f1619bab81499d3ec627fc29d0bcf964744cca242b2f08e739f51c6e6181a8d949748b992bb6737a2fd903afb342980a9c225b5466c59678e053380ccb083911a3971a73cd55473268d83904484c2e467d788aac11c18839882167f63df3c262b9ec4e6e6f124c08a9a41a2900e177c93fa3d37f3023fbf29ab551d2fa3a0bd1734c607ba34285d1660e9a56eca39eac6c73fce673d95b45095659d16d741863c3ec6523d30c56308aa8b5c9e1b3db35466a3960cb07d49fd2f7602ed6445296a25812e2b15c626cc9e042059dcfa9916fab7cf612161c6cc072e73f38bee761bcd8e588e3593ec2aa8da6cacd966352a21fc4211d326af29557f740855f0fb8816ab2be08b6f349bfde78bfb8bd63d1effc1f9b2c90565900cbcf890b428eb1eeba19a88bf2d4aa8878efa0253aa8211e68f42b0088b13746e0332ac031ac2c3a278b891c2ffbf193bb896cb3752f7d4f723e789f030bacb100cdbc200f50ab401c2e36976f6e6a058b42d3e20f3629077fff2bf1393620d0c3f11071e391904c45250ba4569d22e144338f51714950eea5477d85b101342307bd8a4fe26488b6eb9ee41412df7ad5ac58c60c4d419d2a58a2bd4a89e87890cb58d20b6ccb79be27b476fffd8880aef3b2c4e25df987e0975ee9d7516e5d9839aea931b9d36f726c3cd91843876255100b5defab9f6197fa859769610e1c39019f7092e1f45a9370c57c3d9d3a8490c1d9ca35c8c57228950cf4e32793b3614f15648f11c81d295740b192fabcf2a51f2d240a06f0eed269a3f3d8c972131db204b9a9b366e37da6b037e2110f0edf09ee155a62ce1a325d349b2e1f9557a1d40c850bf38b20dedb2dcfb22c41c1d4ad3aae791963d4f81a4049559046a85f21f9a4659ad88fad93191ae274b355f9e473a45309ee2dc2a7a98bc14acf7d8619510e878a92ece8092904d2cce37a1c5c1bf5c66e28e1f13197a0b59c5c57ac3da296c9dea00b7968c711df8692922caae459b37335fb2d81a6e49afbe02335f0c6ad0efe3f7cc44102f22c6d22c46c22808b4cc0664fd37f42b0a2739880c8aef168c1f80f634e0d1e58a3bfa198b4fecb81247e274ab4ccd18074022d0d8bf0f0a01e985f77ca4b87ce5155946d93a344a33428b327b8964d52d7af678d759c4e65e2e168adc7b7f2975d179c1ca0c48cc2501d16090331c7cd6a4d13a456c64a63745a1b4f84e50b3d52115955362a83b5426fc57b1cee764a501885528d942635f0f7cb428f11b2cc4c3a3acf213ec21eef0dbbe6e891be199393ac0a363d0f33e5ff2628554e20c5bbcd3c63290f860483b6f7d26f2671c817de79948ada183c05171968fe2f783f0023f661e2ef118495fff7b78b6884b84b05b763661dbb563d55137240428d5b4b281ed1677980182e485f1e220bce88a33d9155dc19acd06da1591d3b625356c381fe6e3d21750db6138529bbf0ba68e29c3832540dc0c6edfff7d5627933c18e0c82cbf13eb5e30e1810400f19255f2fbfa32c97425c866d17882583e57f65965f11cc9d70ea3e11825300984d4f6bf85b23d51e40352fb44467a979c8bdf56a94d1a4763090703c39dc43e481e9fe64f5c4ba944b8f12d71a7cfec26da009450d1b3a61bac8204ce1e69dbc33159b95be5d588125f87bd245f1398da8c9a03aa2927b04144269a6b409687589e94ed54114de47359481f81ed7d6bd8ce633f469905e41b588815568ec11833e78dddf46cc5583dc93871f6e7f955aa473673d0e5bb147e9c20e602b82e619e9de5e961aa5a4eab87817a2b13537175b10915586b7adb1e81f733e96934a5ed31318f31fe99aabdfb83edc562f0e92730299ff752e54ed4857844a23fb1557095ddebd6e2fc8ccb7ebc4e13d84d481121b41bc52841f4f27cd9956d3676ba4d6a611e93eefea6b9ee9bc2620e5a10db6a5e31ba9f3e8c3e9c1699ddb9f1c665b59220797a25d9576e0af089bb1968f6c503b43f953686de8fec33b8a4225951fb077b8bc8a90d6b020ab11a58fae55beca62b321cb0e2d0df85888e85ef47b457633fd4e56f9414e87b6b3b1f39e4d70c73b502ea64af8caeae6e1cd89f4b523d7365c79bc2de267fb797920bb7b23360ab5180a15fd9445fb7294db55683708be170ad90891ee572db80d9643d8243abf9a1bd28dceb460ccfbceaa83945d9913387fcf2b3287ca24149a580f8179c702133cf971cc79bd644e3ed41dba67173b5d9fa6e88472a8ae94d95d963b67e464a906dc3f97324cd00a0d305bb6e04faabe7f5da85028fbf83b4aafe0a2ce083d69a3d79d1d0be0ac9fdfbb5aa191c81f987f53dc47e694a0bf6985a0f185aa1ce73e8a63939c5b59feb718dbc0bfa4bb7ffaf725faaaba7f6bdac3bfd61b048556d6da792801b0ee322d74a627fb951ac2cde6f6e94e522dac9ce081d8cd294ae0d8cee2dd39e1ceb3f08005d810277f3c2124e93a9687ddc2016ebc5c52653d1c4377a42de8ba98385b5fce77ae38d19063656297138cb1cdc88614e31100b8f8c9ad540cb620b0c46c16feb9621d8984eb30b0c4f458f2c50aa671311133dd07a2001d6ce8004b898d866982cfe294d16a094f05a90d3473bcae79685eea8e785bfb58306e34b70eb05c33b0254642fac3ac812a5fba5472bb32677301f0e10045370b5a48387f36c1ddfa3f75d11120898d6238ecb42f88f60eb9ed24a4521f1dadb8c9804e18fad354ab080ae388ca456e43204b88204b3c4bfd6cd2daf677c27f0675227843d63f422f54acb1266e85b6b4e4c6fb7d14631315b3ee9188366cb1cfcac30fcbbb783c0cf824265b42787b2c88442a80c75fa22695447052b335849d4723854b194c4384416c02dce5d8de087ade0965a9ddeb0e142678ab94c23e638fa51bd54aa6178a80389734a63710a6a55b4de774865fa53c3a3958e9b3818ba99fef3fe482949b2664f87a29816e3e0fd4d379c4ba38f18cc8ca97aceb8ff6d34ba48fc95f1216b0711cf18951548d46878becb494f42467ead4d05edd516b359b2cb6231d4ed6c50c253950cf706983147c4d099ed16f63f687f44e1a0b59ebf651025e5d03c921046ff1f1c5f6222b622ed2e258699002ec6f9c8fa68505856d1b822d7b87f2ddbc8d8975c56acf2f612aa38e861fe4fd5cea2aca3622d3b0c5638b5cdfbdb4b78bfe39f78a4909a65f73bf2541192d92a2410d89dcdc0ec8e3ae1947e02b62e64a0fe05daa5b8f37f192e125dcfc19af45e169a3b041f61a3bcc4b932e8402f9b9314b697bc927b1e1c2b8722b37f057b973781d6529edd08729f1d8048c37c563a9657a0e9ccc12317da131434ee0ed9b9214bda1358c16ca6d0bd52488a0afc59a6b0b125e271a600d72485f63f527b12a05bb26a5614377485058cb93bd96857469cb9f8e166f8e8df1c0c98e8ff808d92cdb60ecdd51936ff5ca9ff8542f469b696e47690102e93ac4bf0cd67c180b82d84ded2e269060293d934e9c19b5592f6a602c27bf654fc19e4d6fe2fb04de9d8ddeacd0c51767e061756c704f5ade6e1ab457a85bc064e4ec716b999ae95bee1d4795331289f4686e8279ec2138862b1b52f82ffc5a4103e95593ed8835b13077b2ccb0c0b1b0457910780c40c6607c5fff6a6526cd05b8e0aea63447e19b3167b81b3b83fab1ad8e20ae3820248e04c5e08891b2320b17f1517a3b218c35c66cab0e9be3ef978c86ed84d7904cf06887ed9ba9b06a202016e9b0329cd718613f2d4985edcc264558186fe9f42dbef5d04cdbdd5acc815eccd6b860dfe7cfde5e2d4d2b37a65ece62745554b4f4e07302ae39aefca2350d24b00381851cf9ee4854ee3e3c5ca7790423d11386fd350d1c29a26a64be2c5cddd2977304049a298e37b1975d4a81f5e4ab9c36a8072a07fe5d4f1653d983b4f9f046cbe445e2c2ac24bfb18452116733498524ba9f495ddfd34dc75e84b8c75ac6fc09ff0d9812aab1e7fda56975d33154dd96bb44c34aa64d2d9be031ec63d3ff205cf9ada09b3696123e15ec209115b05c6afbc3efc538f20124e1e36e70d2df49dbcad2659b9e92cc975a95d0146fe17ced216b8c261416f69dd3e58288b263e99e76e63e5a1c483f81b3ec367bb3357dc32c560853caaae67137cf9edec773505031ada137034566c9add1e68336c162f036339135585cca193d6923ffffb5c336324086f530a3d3c5c5b71f40d25938b4214ab764f96aa315589c6a29b15387c64b38273ac842df13bddbf67ca5a9664509897903f52dc5c806ebd873b6ae2a2c3eb0e056e36f3a2c67e739898f89e8aafb3ae14c30f39db0c47d8ce626301ff14cc62221abbcf17467ceadf66a995305cf583d0282d6e99752f52b0410a147d89b99e24119531de2a358224dd9306f7fb7c80bbb4f9e3e7e0e8ad11d027149f74447b20d1cce2513aed64bdcf35ccb6b0440fd70ee86b2b8e19ba9b979f3cf0522d29bf3e8e0c7c74f842afb992a603a64e7528e4986bd564ec9a5171a5969b5a4c787701be5e67a6bf97d2d0f65ab8074cfa267179bd718fba8e9e7d4b10c847c6c09fdd056f8bdf8d4f5aaed748d538332b91ee2cc4d942fe5d7262a828bd58b49abe68242e080e17ed1b242113d7bf40a3df777941029d03f3ac3535e1a463cd957d7313248fd7e55a"}) read$auto_proc_environ_operations_base(r1, &(0x7f0000001040)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002080)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/features\x00', 0x10b842, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000002180)='/proc/asound/card0/pcm0c/sub6/status\x00', 0x200000, 0x0) read$auto(r2, 0x0, 0x1ff) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) getrandom$auto(&(0x7f00000020c0)='\xf3\xd9roc/sys/net/ipv\xfd/tcp_t\x05\x00\x00\x00se\x00\x00\x8bA\x84\a\x05\xd9\x92Y\'\x17\xf1\x9aS\x13\x13\xce\xe5\xff\xff\xff\x7f\x00\x00\x00\x00\xe4\b\x9d\xe0\xea\x03?\xb5\xb8fi$Z\x9f\v\xb4$R\xfa\x81FIn\x8e,?\xde\xde\xddlw#t\xcb\x87\xf5\xa1(CCH\xa6fyZ~H\x1d\xd9\xed\xf0[\xc8\xb8\x12\xa6\x1dS#\x91\v\x12S\xf4q]\t6\xd7n\x90\x00\xc6R+\xa5\x8a\x1b\xde\x9d\x91i\f\x01\xc8T\xfd\x89M\x15\x90[\b\xcabm\xafx\xean', 0x5, 0x7) landlock_create_ruleset$auto(&(0x7f0000000140)={0x5, 0x3, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(0xffffffffffffffff, 0x0, 0x7) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000001000)={0x3, 0x81, 0x5b, 0x4, &(0x7f0000000280), 0xd22ff64, 0xeb90, 0x2, @number_of_packets, 0x7, 0x476, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x30) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x4) seccomp$auto(0x401, 0x10, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) 571.578488ms ago: executing program 1 (id=3219): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x130, r3, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x107, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\\\xdc\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) r3 = socket(0x9, 0x6, 0x3a) epoll_ctl$auto(r3, 0x8, r0, &(0x7f0000000180)={0x1000, 0x4}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) msgctl$auto_MSG_INFO(0x5, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D2\x00', 0x101, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) kernel console output (not intermixed with test programs): 8] [ 1212.821418][T23358] dump_stack_lvl+0x16c/0x1f0 [ 1212.821458][T23358] should_fail_ex+0x512/0x640 [ 1212.821494][T23358] ? fs_reclaim_acquire+0xae/0x150 [ 1212.821532][T23358] ? tomoyo_encode2+0x100/0x3e0 [ 1212.821563][T23358] should_failslab+0xc2/0x120 [ 1212.821595][T23358] __kmalloc_noprof+0xd2/0x510 [ 1212.821624][T23358] ? d_absolute_path+0x136/0x1a0 [ 1212.821664][T23358] tomoyo_encode2+0x100/0x3e0 [ 1212.821702][T23358] tomoyo_encode+0x29/0x50 [ 1212.821734][T23358] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1212.821777][T23358] tomoyo_path_number_perm+0x245/0x580 [ 1212.821806][T23358] ? tomoyo_path_number_perm+0x237/0x580 [ 1212.821839][T23358] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1212.821871][T23358] ? find_held_lock+0x2b/0x80 [ 1212.821926][T23358] ? find_held_lock+0x2b/0x80 [ 1212.821950][T23358] ? hook_file_ioctl_common+0x145/0x410 [ 1212.821991][T23358] ? __fget_files+0x20e/0x3c0 [ 1212.822025][T23358] security_file_ioctl+0x9b/0x240 [ 1212.822057][T23358] __x64_sys_ioctl+0xb7/0x210 [ 1212.822096][T23358] do_syscall_64+0xcd/0x4c0 [ 1212.822134][T23358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.822165][T23358] RIP: 0033:0x7f747298eec9 [ 1212.822186][T23358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.822210][T23358] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1212.822233][T23358] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1212.822250][T23358] RDX: 0000000000000008 RSI: 00000000c0104d04 RDI: 0000000000000003 [ 1212.822266][T23358] RBP: 00007f747390e090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.822281][T23358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.822296][T23358] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1212.822331][T23358] [ 1212.822355][T23358] ERROR: Out of memory at tomoyo_realpath_from_path. getty: ttyS0: read error: Resource temporarily unavailable [ 1214.271902][T23387] FAULT_INJECTION: forcing a failure. [ 1214.271902][T23387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1214.305110][T23387] CPU: 0 UID: 0 PID: 23387 Comm: syz.3.2832 Not tainted syzkaller #0 PREEMPT(full) [ 1214.305145][T23387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1214.305160][T23387] Call Trace: [ 1214.305169][T23387] [ 1214.305179][T23387] dump_stack_lvl+0x16c/0x1f0 [ 1214.305220][T23387] should_fail_ex+0x512/0x640 [ 1214.305261][T23387] _copy_to_user+0x32/0xd0 [ 1214.305291][T23387] vga_arb_read+0x3e9/0x5e0 [ 1214.305322][T23387] ? __pfx_vga_arb_read+0x10/0x10 [ 1214.305345][T23387] vfs_readv+0x5be/0x8b0 [ 1214.305380][T23387] ? __pfx_vfs_readv+0x10/0x10 [ 1214.305432][T23387] ? __fget_files+0x20e/0x3c0 [ 1214.305457][T23387] ? __fget_files+0x1d0/0x3c0 [ 1214.305492][T23387] ? do_readv+0x132/0x340 [ 1214.305515][T23387] do_readv+0x132/0x340 [ 1214.305541][T23387] ? __pfx_do_readv+0x10/0x10 [ 1214.305578][T23387] do_syscall_64+0xcd/0x4c0 [ 1214.305617][T23387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.305643][T23387] RIP: 0033:0x7fad6f58eec9 [ 1214.305663][T23387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.305688][T23387] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1214.305711][T23387] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1214.305728][T23387] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1214.305743][T23387] RBP: 00007fad70346090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.305759][T23387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1214.305774][T23387] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1214.305808][T23387] [ 1215.483324][T23407] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1217.397589][T23454] FAULT_INJECTION: forcing a failure. [ 1217.397589][T23454] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.410432][T23454] CPU: 1 UID: 0 PID: 23454 Comm: syz.0.2850 Not tainted syzkaller #0 PREEMPT(full) [ 1217.410471][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1217.410486][T23454] Call Trace: [ 1217.410495][T23454] [ 1217.410504][T23454] dump_stack_lvl+0x16c/0x1f0 [ 1217.410547][T23454] should_fail_ex+0x512/0x640 [ 1217.410582][T23454] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1217.410617][T23454] should_failslab+0xc2/0x120 [ 1217.410649][T23454] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1217.410679][T23454] ? __alloc_skb+0x2b2/0x380 [ 1217.410716][T23454] __alloc_skb+0x2b2/0x380 [ 1217.410748][T23454] ? __pfx___alloc_skb+0x10/0x10 [ 1217.410784][T23454] ? __lock_acquire+0xb97/0x1ce0 [ 1217.410816][T23454] ? __asan_memset+0x23/0x50 [ 1217.410845][T23454] tipc_buf_acquire+0x26/0xe0 [ 1217.410874][T23454] tipc_msg_build+0x59c/0x1150 [ 1217.410913][T23454] ? __pfx_tipc_msg_build+0x10/0x10 [ 1217.410953][T23454] ? tipc_nametbl_lookup_mcast_nodes+0x214/0x370 [ 1217.410995][T23454] tipc_sendmcast+0x79a/0xba0 [ 1217.411036][T23454] ? __pfx_tipc_sendmcast+0x10/0x10 [ 1217.411076][T23454] ? __pfx_woken_wake_function+0x10/0x10 [ 1217.411132][T23454] ? is_bpf_text_address+0x8a/0x1a0 [ 1217.411162][T23454] ? bpf_ksym_find+0x124/0x1c0 [ 1217.411192][T23454] __tipc_sendmsg+0x1360/0x19a0 [ 1217.411216][T23454] ? kernel_text_address+0x8d/0x100 [ 1217.411242][T23454] ? unwind_get_return_address+0x59/0xa0 [ 1217.411276][T23454] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1217.411307][T23454] ? aa_label_sk_perm+0x195/0x600 [ 1217.411338][T23454] ? __lock_acquire+0xb97/0x1ce0 [ 1217.411367][T23454] ? _parse_integer_limit+0x17f/0x1d0 [ 1217.411403][T23454] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1217.411434][T23454] ? _kstrtoull+0x145/0x200 [ 1217.411470][T23454] ? __pfx__kstrtoull+0x10/0x10 [ 1217.411510][T23454] ? register_lock_class+0x41/0x4c0 [ 1217.411542][T23454] ? register_lock_class+0x41/0x4c0 [ 1217.411582][T23454] __tipc_sendstream+0xe06/0x1170 [ 1217.411630][T23454] ? __pfx___tipc_sendstream+0x10/0x10 [ 1217.411658][T23454] ? do_raw_spin_lock+0x12c/0x2b0 [ 1217.411694][T23454] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1217.411735][T23454] ? __local_bh_enable_ip+0xa4/0x120 [ 1217.411766][T23454] tipc_sendstream+0x4f/0x70 [ 1217.411792][T23454] __sys_sendto+0x4a3/0x520 [ 1217.411823][T23454] ? __pfx___sys_sendto+0x10/0x10 [ 1217.411880][T23454] ? ksys_write+0x1ac/0x250 [ 1217.411906][T23454] ? __pfx_ksys_write+0x10/0x10 [ 1217.411939][T23454] __x64_sys_sendto+0xe0/0x1c0 [ 1217.411971][T23454] ? do_syscall_64+0x91/0x4c0 [ 1217.412005][T23454] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.412039][T23454] do_syscall_64+0xcd/0x4c0 [ 1217.412076][T23454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.412101][T23454] RIP: 0033:0x7f568b58eec9 [ 1217.412120][T23454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.412144][T23454] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1217.412168][T23454] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1217.412185][T23454] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1217.412200][T23454] RBP: 00007f568c361090 R08: 0000200000000440 R09: 0000000000000020 [ 1217.412217][T23454] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1217.412232][T23454] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1217.412268][T23454] [ 1217.895071][T23457] FAULT_INJECTION: forcing a failure. [ 1217.895071][T23457] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.989960][T23457] CPU: 1 UID: 0 PID: 23457 Comm: syz.2.2851 Not tainted syzkaller #0 PREEMPT(full) [ 1217.989995][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1217.990010][T23457] Call Trace: [ 1217.990019][T23457] [ 1217.990030][T23457] dump_stack_lvl+0x16c/0x1f0 [ 1217.990070][T23457] should_fail_ex+0x512/0x640 [ 1217.990105][T23457] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1217.990133][T23457] should_failslab+0xc2/0x120 [ 1217.990164][T23457] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1217.990190][T23457] ? __vb2_init_fileio+0x253/0x1100 [ 1217.990223][T23457] __vb2_init_fileio+0x253/0x1100 [ 1217.990249][T23457] ? lockdep_hardirqs_on+0x7c/0x110 [ 1217.990284][T23457] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1217.990317][T23457] ? __pollwait+0x271/0x490 [ 1217.990347][T23457] vb2_core_poll+0x486/0x700 [ 1217.990377][T23457] vb2_poll+0x33/0x150 [ 1217.990410][T23457] vb2_fop_poll+0x10f/0x2c0 [ 1217.990437][T23457] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1217.990461][T23457] v4l2_poll+0x160/0x320 [ 1217.990495][T23457] ? __pfx_v4l2_poll+0x10/0x10 [ 1217.990524][T23457] do_sys_poll+0x55c/0xdf0 [ 1217.990563][T23457] ? __pfx_do_sys_poll+0x10/0x10 [ 1217.990623][T23457] ? find_held_lock+0x2b/0x80 [ 1217.990648][T23457] ? __pfx___pollwait+0x10/0x10 [ 1217.990677][T23457] ? __pfx_pollwake+0x10/0x10 [ 1217.990757][T23457] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1217.990798][T23457] ? set_user_sigmask+0x21b/0x2b0 [ 1217.990824][T23457] ? __pfx_set_user_sigmask+0x10/0x10 [ 1217.990849][T23457] ? __fget_files+0x20e/0x3c0 [ 1217.990874][T23457] ? rcu_watching_snap_stopped_since+0xc0/0x110 [ 1217.990907][T23457] __x64_sys_ppoll+0x254/0x2d0 [ 1217.990973][T23457] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1217.990998][T23457] ? ksys_write+0x1ac/0x250 [ 1217.991027][T23457] ? __pfx_ksys_write+0x10/0x10 [ 1217.991066][T23457] do_syscall_64+0xcd/0x4c0 [ 1217.991104][T23457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.991129][T23457] RIP: 0033:0x7ff112b8eec9 [ 1217.991149][T23457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.991174][T23457] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1217.991198][T23457] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1217.991216][T23457] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 1217.991231][T23457] RBP: 00007ff1139dd090 R08: 0000000000000008 R09: 0000000000000000 [ 1217.991247][T23457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.991262][T23457] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1217.991297][T23457] [ 1218.490714][T23466] FAULT_INJECTION: forcing a failure. [ 1218.490714][T23466] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.567970][T23466] CPU: 1 UID: 0 PID: 23466 Comm: syz.2.2854 Not tainted syzkaller #0 PREEMPT(full) [ 1218.568003][T23466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1218.568017][T23466] Call Trace: [ 1218.568025][T23466] [ 1218.568035][T23466] dump_stack_lvl+0x16c/0x1f0 [ 1218.568074][T23466] should_fail_ex+0x512/0x640 [ 1218.568109][T23466] ? fs_reclaim_acquire+0xae/0x150 [ 1218.568146][T23466] ? tomoyo_encode2+0x100/0x3e0 [ 1218.568178][T23466] should_failslab+0xc2/0x120 [ 1218.568210][T23466] __kmalloc_noprof+0xd2/0x510 [ 1218.568239][T23466] ? d_absolute_path+0x136/0x1a0 [ 1218.568279][T23466] tomoyo_encode2+0x100/0x3e0 [ 1218.568325][T23466] tomoyo_encode+0x29/0x50 [ 1218.568357][T23466] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1218.568401][T23466] tomoyo_path_number_perm+0x245/0x580 [ 1218.568430][T23466] ? tomoyo_path_number_perm+0x237/0x580 [ 1218.568462][T23466] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1218.568495][T23466] ? find_held_lock+0x2b/0x80 [ 1218.568551][T23466] ? find_held_lock+0x2b/0x80 [ 1218.568575][T23466] ? hook_file_ioctl_common+0x145/0x410 [ 1218.568615][T23466] ? __fget_files+0x20e/0x3c0 [ 1218.568648][T23466] security_file_ioctl+0x9b/0x240 [ 1218.568681][T23466] __x64_sys_ioctl+0xb7/0x210 [ 1218.568721][T23466] do_syscall_64+0xcd/0x4c0 [ 1218.568760][T23466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.568786][T23466] RIP: 0033:0x7ff112b8eec9 [ 1218.568805][T23466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.568828][T23466] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.568852][T23466] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1218.568869][T23466] RDX: 0000000000000038 RSI: 0000000040045613 RDI: 0000000000000003 [ 1218.568885][T23466] RBP: 00007ff1139dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.568901][T23466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.568915][T23466] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1218.568947][T23466] [ 1218.568969][T23466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1218.595975][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 1219.098936][T23469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2855'. [ 1219.258956][T23486] [U] - [ 1219.262122][T23486] [U] [ 1219.264803][T23486] [U] ses: [ 1219.267831][T23486] [U] ffffffff9afd1a60 FD: 2 BD: 1501 -.-.: &obj_hash[i].lock [ 1219.275549][T23486] [U] -> [ffffffff8f17f878] pool_lock#2 [ 1219.281171][T23486] [U] ffffffff8f17f5d8 FD: 1 BD: 1 ....: avg_lock [ 1219.351989][T23482] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1219.445679][T23475] [U] ffffffff8e61bec8 FD: 9 [ 1219.906831][T23505] FAULT_INJECTION: forcing a failure. [ 1219.906831][T23505] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.919680][T23505] CPU: 1 UID: 0 PID: 23505 Comm: syz.1.2863 Not tainted syzkaller #0 PREEMPT(full) [ 1219.919712][T23505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1219.919727][T23505] Call Trace: [ 1219.919736][T23505] [ 1219.919746][T23505] dump_stack_lvl+0x16c/0x1f0 [ 1219.919788][T23505] should_fail_ex+0x512/0x640 [ 1219.919824][T23505] ? __kmalloc_noprof+0xbf/0x510 [ 1219.919855][T23505] ? net_alloc_generic+0x1e/0x70 [ 1219.919889][T23505] should_failslab+0xc2/0x120 [ 1219.919921][T23505] __kmalloc_noprof+0xd2/0x510 [ 1219.919957][T23505] net_alloc_generic+0x1e/0x70 [ 1219.919994][T23505] copy_net_ns+0xc6/0x5f0 [ 1219.920017][T23505] ? copy_cgroup_ns+0x71/0x700 [ 1219.920048][T23505] create_new_namespaces+0x3ea/0xa90 [ 1219.920085][T23505] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1219.920117][T23505] ksys_unshare+0x45b/0xa40 [ 1219.920150][T23505] ? __pfx_ksys_unshare+0x10/0x10 [ 1219.920181][T23505] ? ksys_write+0x1ac/0x250 [ 1219.920220][T23505] __x64_sys_unshare+0x31/0x40 [ 1219.920252][T23505] do_syscall_64+0xcd/0x4c0 [ 1219.920291][T23505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.920316][T23505] RIP: 0033:0x7f747298eec9 [ 1219.920336][T23505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.920361][T23505] RSP: 002b:00007f74738ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1219.920384][T23505] RAX: ffffffffffffffda RBX: 00007f7472be6090 RCX: 00007f747298eec9 [ 1219.920401][T23505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1219.920417][T23505] RBP: 00007f74738ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.920433][T23505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.920448][T23505] R13: 00007f7472be6128 R14: 00007f7472be6090 R15: 00007ffc38159a38 [ 1219.920490][T23505] [ 1222.182876][T23542] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1222.312213][T23562] FAULT_INJECTION: forcing a failure. [ 1222.312213][T23562] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.327348][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.0.2872 Not tainted syzkaller #0 PREEMPT(full) [ 1222.327381][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1222.327393][T23562] Call Trace: [ 1222.327401][T23562] [ 1222.327409][T23562] dump_stack_lvl+0x16c/0x1f0 [ 1222.327446][T23562] should_fail_ex+0x512/0x640 [ 1222.327478][T23562] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1222.327508][T23562] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 1222.327541][T23562] should_failslab+0xc2/0x120 [ 1222.327572][T23562] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1222.327601][T23562] ? vma_merge_new_range+0x3ae/0xa50 [ 1222.327628][T23562] ? vm_area_alloc+0x1f/0x160 [ 1222.327655][T23562] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 1222.327689][T23562] vm_area_alloc+0x1f/0x160 [ 1222.327714][T23562] __mmap_region+0xf90/0x27b0 [ 1222.327747][T23562] ? __pfx___mmap_region+0x10/0x10 [ 1222.327786][T23562] ? is_bpf_text_address+0x8a/0x1a0 [ 1222.327816][T23562] ? bpf_ksym_find+0x124/0x1c0 [ 1222.327840][T23562] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1222.327869][T23562] ? is_bpf_text_address+0x94/0x1a0 [ 1222.327899][T23562] ? kernel_text_address+0x8d/0x100 [ 1222.327923][T23562] ? __kernel_text_address+0xd/0x40 [ 1222.328002][T23562] ? trace_cap_capable+0x18d/0x200 [ 1222.328048][T23562] mmap_region+0x1ab/0x3f0 [ 1222.328077][T23562] ? __get_unmapped_area+0x267/0x440 [ 1222.328115][T23562] do_mmap+0xa3e/0x1210 [ 1222.328155][T23562] ? __pfx_do_mmap+0x10/0x10 [ 1222.328189][T23562] ? __pfx_down_write_killable+0x10/0x10 [ 1222.328222][T23562] vm_mmap_pgoff+0x29e/0x470 [ 1222.328264][T23562] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1222.328301][T23562] ? __fget_files+0x20e/0x3c0 [ 1222.328338][T23562] ksys_mmap_pgoff+0x7d/0x5c0 [ 1222.328373][T23562] ? __pfx_ksys_write+0x10/0x10 [ 1222.328405][T23562] __x64_sys_mmap+0x125/0x190 [ 1222.328445][T23562] do_syscall_64+0xcd/0x4c0 [ 1222.328484][T23562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.328509][T23562] RIP: 0033:0x7f568b58eec9 [ 1222.328529][T23562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.328553][T23562] RSP: 002b:00007f56897f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1222.328577][T23562] RAX: ffffffffffffffda RBX: 00007f568b7e6180 RCX: 00007f568b58eec9 [ 1222.328594][T23562] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1222.328610][T23562] RBP: 00007f56897f6090 R08: fffffffffffffffa R09: 0000000000008000 [ 1222.328626][T23562] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 1222.328641][T23562] R13: 00007f568b7e6218 R14: 00007f568b7e6180 R15: 00007ffeb23146a8 [ 1222.328673][T23562] [ 1222.711747][T23560] futex_wake_op: syz.2.2873 tries to shift op by -2048; fix this program [ 1223.166124][T23575] FAULT_INJECTION: forcing a failure. [ 1223.166124][T23575] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.178833][T23575] CPU: 1 UID: 0 PID: 23575 Comm: syz.2.2875 Not tainted syzkaller #0 PREEMPT(full) [ 1223.178866][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1223.178881][T23575] Call Trace: [ 1223.178890][T23575] [ 1223.178899][T23575] dump_stack_lvl+0x16c/0x1f0 [ 1223.178941][T23575] should_fail_ex+0x512/0x640 [ 1223.178983][T23575] should_failslab+0xc2/0x120 [ 1223.179016][T23575] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1223.179047][T23575] ? dst_alloc+0x99/0x1a0 [ 1223.179083][T23575] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1223.179105][T23575] dst_alloc+0x99/0x1a0 [ 1223.179139][T23575] ip6_rt_cache_alloc+0x1f6/0x8c0 [ 1223.179174][T23575] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 1223.179223][T23575] ip6_pol_route+0xd7b/0x1230 [ 1223.179260][T23575] ? __pfx_ip6_pol_route+0x10/0x10 [ 1223.179305][T23575] ? find_held_lock+0x2b/0x80 [ 1223.179334][T23575] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1223.179367][T23575] fib6_rule_lookup+0x24c/0x720 [ 1223.179401][T23575] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1223.179431][T23575] ? kernel_text_address+0x8d/0x100 [ 1223.179454][T23575] ? __kernel_text_address+0xd/0x40 [ 1223.179490][T23575] ? __lock_acquire+0x62e/0x1ce0 [ 1223.179528][T23575] ip6_route_output_flags+0x1d0/0x640 [ 1223.179561][T23575] ip6_dst_lookup_tail.constprop.0+0x115a/0x2140 [ 1223.179595][T23575] ? look_up_lock_class+0x59/0x150 [ 1223.179632][T23575] ? register_lock_class+0x41/0x4c0 [ 1223.179663][T23575] ? find_held_lock+0x2b/0x80 [ 1223.179691][T23575] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 1223.179733][T23575] ? __lock_acquire+0x62e/0x1ce0 [ 1223.179778][T23575] ip6_dst_lookup_flow+0x99/0x1d0 [ 1223.179813][T23575] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 1223.179843][T23575] ? find_held_lock+0x2b/0x80 [ 1223.179869][T23575] ? rawv6_sendmsg+0xb6e/0x4820 [ 1223.179904][T23575] rawv6_sendmsg+0xe85/0x4820 [ 1223.179931][T23575] ? aa_label_sk_perm+0x195/0x600 [ 1223.179962][T23575] ? up_write+0x1b2/0x520 [ 1223.180000][T23575] ? aa_profile_af_perm+0x381/0x3a0 [ 1223.180035][T23575] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1223.180062][T23575] ? __lock_acquire+0x62e/0x1ce0 [ 1223.180101][T23575] ? __lock_acquire+0x62e/0x1ce0 [ 1223.180174][T23575] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1223.180213][T23575] ? inet_sendmsg+0x11c/0x140 [ 1223.180240][T23575] inet_sendmsg+0x11c/0x140 [ 1223.180271][T23575] ____sys_sendmsg+0x973/0xc70 [ 1223.180300][T23575] ? copy_msghdr_from_user+0x10a/0x160 [ 1223.180335][T23575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1223.180370][T23575] ? __pfx__kstrtoull+0x10/0x10 [ 1223.180412][T23575] ___sys_sendmsg+0x134/0x1d0 [ 1223.180449][T23575] ? __pfx____sys_sendmsg+0x10/0x10 [ 1223.180503][T23575] ? find_held_lock+0x2b/0x80 [ 1223.180551][T23575] __sys_sendmmsg+0x200/0x420 [ 1223.180592][T23575] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1223.180640][T23575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1223.180692][T23575] ? fput+0x9b/0xd0 [ 1223.180725][T23575] ? ksys_write+0x1ac/0x250 [ 1223.180752][T23575] ? __pfx_ksys_write+0x10/0x10 [ 1223.180787][T23575] __x64_sys_sendmmsg+0x9c/0x100 [ 1223.180822][T23575] ? lockdep_hardirqs_on+0x7c/0x110 [ 1223.180856][T23575] do_syscall_64+0xcd/0x4c0 [ 1223.180895][T23575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.180920][T23575] RIP: 0033:0x7ff112b8eec9 [ 1223.180941][T23575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.180965][T23575] RSP: 002b:00007ff11399b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1223.180989][T23575] RAX: ffffffffffffffda RBX: 00007ff112de6180 RCX: 00007ff112b8eec9 [ 1223.181006][T23575] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1223.181020][T23575] RBP: 00007ff11399b090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.181036][T23575] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000001 [ 1223.181052][T23575] R13: 00007ff112de6218 R14: 00007ff112de6180 R15: 00007fffb0d68348 [ 1223.181086][T23575] syzkaller syzkaller login: [ 1226.592301][T23620] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1228.587194][T23646] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2886'. [ 1229.217254][T23658] random: crng reseeded on system resumption [ 1229.365658][T23663] FAULT_INJECTION: forcing a failure. [ 1229.365658][T23663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1229.392230][T23663] CPU: 0 UID: 0 PID: 23663 Comm: syz.0.2889 Not tainted syzkaller #0 PREEMPT(full) [ 1229.392260][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1229.392274][T23663] Call Trace: [ 1229.392282][T23663] [ 1229.392291][T23663] dump_stack_lvl+0x16c/0x1f0 [ 1229.392330][T23663] should_fail_ex+0x512/0x640 [ 1229.392370][T23663] should_fail_alloc_page+0xe7/0x130 [ 1229.392405][T23663] prepare_alloc_pages+0x3c2/0x610 [ 1229.392442][T23663] ? is_bpf_text_address+0x8a/0x1a0 [ 1229.392475][T23663] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1229.392507][T23663] ? __lock_acquire+0x62e/0x1ce0 [ 1229.392541][T23663] ? look_up_lock_class+0x59/0x150 [ 1229.392577][T23663] ? register_lock_class+0x41/0x4c0 [ 1229.392621][T23663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1229.392649][T23663] ? look_up_lock_class+0x59/0x150 [ 1229.392684][T23663] ? register_lock_class+0x41/0x4c0 [ 1229.392725][T23663] ? __lock_acquire+0xb97/0x1ce0 [ 1229.392762][T23663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1229.392800][T23663] ? policy_nodemask+0xea/0x4e0 [ 1229.392835][T23663] alloc_pages_mpol+0x1fb/0x550 [ 1229.392869][T23663] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1229.392901][T23663] ? find_held_lock+0x2b/0x80 [ 1229.392931][T23663] alloc_pages_noprof+0x131/0x390 [ 1229.392964][T23663] get_free_pages_noprof+0x10/0xb0 [ 1229.392997][T23663] __pollwait+0x295/0x490 [ 1229.393022][T23663] ? __fget_files+0x20e/0x3c0 [ 1229.393052][T23663] snd_rawmidi_poll+0x4ed/0x6c0 [ 1229.393082][T23663] ? __pfx___pollwait+0x10/0x10 [ 1229.393108][T23663] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 1229.393139][T23663] do_select+0xd3a/0x17e0 [ 1229.393192][T23663] ? __pfx_do_select+0x10/0x10 [ 1229.393221][T23663] ? __pfx___pollwait+0x10/0x10 [ 1229.393250][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393278][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393305][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393333][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393360][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393388][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393415][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393446][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393471][T23663] ? __pfx_pollwake+0x10/0x10 [ 1229.393495][T23663] ? find_held_lock+0x2b/0x80 [ 1229.393516][T23663] ? __might_fault+0xe3/0x190 [ 1229.393541][T23663] ? __might_fault+0xe3/0x190 [ 1229.393566][T23663] ? __might_fault+0x13b/0x190 [ 1229.393612][T23663] ? core_sys_select+0x453/0xc10 [ 1229.393636][T23663] core_sys_select+0x453/0xc10 [ 1229.393671][T23663] ? __pfx_core_sys_select+0x10/0x10 [ 1229.393705][T23663] ? proc_fail_nth_write+0x9f/0x220 [ 1229.393761][T23663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1229.393807][T23663] kern_select+0x15d/0x1e0 [ 1229.393834][T23663] ? __pfx_kern_select+0x10/0x10 [ 1229.393865][T23663] ? __pfx_ksys_write+0x10/0x10 [ 1229.393899][T23663] __x64_sys_select+0xbd/0x160 [ 1229.393923][T23663] ? do_syscall_64+0x91/0x4c0 [ 1229.393958][T23663] ? lockdep_hardirqs_on+0x7c/0x110 [ 1229.393992][T23663] do_syscall_64+0xcd/0x4c0 [ 1229.394030][T23663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.394056][T23663] RIP: 0033:0x7f568b58eec9 [ 1229.394076][T23663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.394100][T23663] RSP: 002b:00007f568c340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1229.394123][T23663] RAX: ffffffffffffffda RBX: 00007f568b7e6090 RCX: 00007f568b58eec9 [ 1229.394140][T23663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1229.394154][T23663] RBP: 00007f568c340090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.394170][T23663] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1229.394185][T23663] R13: 00007f568b7e6128 R14: 00007f568b7e6090 R15: 00007ffeb23146a8 [ 1229.394219][T23663] [ 1230.530435][T23677] FAULT_INJECTION: forcing a failure. [ 1230.530435][T23677] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.543390][T23677] CPU: 1 UID: 0 PID: 23677 Comm: syz.1.2894 Not tainted syzkaller #0 PREEMPT(full) [ 1230.543430][T23677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1230.543450][T23677] Call Trace: [ 1230.543459][T23677] [ 1230.543469][T23677] dump_stack_lvl+0x16c/0x1f0 [ 1230.543514][T23677] should_fail_ex+0x512/0x640 [ 1230.543562][T23677] should_failslab+0xc2/0x120 [ 1230.543591][T23677] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1230.543614][T23677] ? tipc_dest_push+0x148/0x310 [ 1230.543651][T23677] ? kasan_save_track+0x14/0x30 [ 1230.543681][T23677] tipc_dest_push+0x148/0x310 [ 1230.543718][T23677] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 1230.543764][T23677] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 1230.543800][T23677] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 1230.543845][T23677] ? find_held_lock+0x2b/0x80 [ 1230.543871][T23677] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 1230.543901][T23677] tipc_mcast_xmit+0x711/0xfe0 [ 1230.543925][T23677] ? __pfx__copy_from_iter+0x10/0x10 [ 1230.543954][T23677] ? __pfx___alloc_skb+0x10/0x10 [ 1230.543993][T23677] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 1230.544046][T23677] ? mark_held_locks+0x49/0x80 [ 1230.544087][T23677] ? tipc_send_group_bcast+0x803/0xa50 [ 1230.544130][T23677] tipc_send_group_bcast+0x803/0xa50 [ 1230.544184][T23677] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 1230.544230][T23677] ? __pfx_woken_wake_function+0x10/0x10 [ 1230.544271][T23677] ? kmem_cache_free+0x2d1/0x4d0 [ 1230.544298][T23677] ? kfree_skbmem+0x16c/0x1f0 [ 1230.544326][T23677] ? sk_skb_reason_drop+0x136/0x1a0 [ 1230.544364][T23677] ? tipc_sk_filter_rcv+0x1b6a/0x3020 [ 1230.544392][T23677] ? tipc_sk_backlog_rcv+0xe9/0x1e0 [ 1230.544433][T23677] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1230.544478][T23677] __tipc_sendmsg+0x4ab/0x19a0 [ 1230.544505][T23677] ? __lock_acquire+0xb97/0x1ce0 [ 1230.544558][T23677] ? __pfx___tipc_sendmsg+0x10/0x10 [ 1230.544589][T23677] ? __lock_acquire+0xb97/0x1ce0 [ 1230.544658][T23677] ? __local_bh_enable_ip+0xa4/0x120 [ 1230.544694][T23677] tipc_sendmsg+0x4f/0x70 [ 1230.544724][T23677] ____sys_sendmsg+0xa98/0xc70 [ 1230.544758][T23677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.544796][T23677] ___sys_sendmsg+0x134/0x1d0 [ 1230.544831][T23677] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.544889][T23677] ? find_held_lock+0x2b/0x80 [ 1230.544940][T23677] __sys_sendmmsg+0x200/0x420 [ 1230.544984][T23677] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1230.545034][T23677] ? __pfx_do_futex+0x10/0x10 [ 1230.545066][T23677] ? rcu_is_watching+0x12/0xc0 [ 1230.545114][T23677] ? xfd_validate_state+0x61/0x180 [ 1230.545149][T23677] ? __sys_setsockopt+0x140/0x1a0 [ 1230.545192][T23677] __x64_sys_sendmmsg+0x9c/0x100 [ 1230.545231][T23677] ? lockdep_hardirqs_on+0x7c/0x110 [ 1230.545269][T23677] do_syscall_64+0xcd/0x4c0 [ 1230.545310][T23677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.545335][T23677] RIP: 0033:0x7f747298eec9 [ 1230.545353][T23677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.545378][T23677] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1230.545402][T23677] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1230.545418][T23677] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 1230.545433][T23677] RBP: 00007f7472a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1230.545448][T23677] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 1230.545462][T23677] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1230.545493][T23677] [ 1230.702992][T23680] FAULT_INJECTION: forcing a failure. [ 1230.702992][T23680] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.909925][T23680] CPU: 1 UID: 0 PID: 23680 Comm: syz.0.2895 Not tainted syzkaller #0 PREEMPT(full) [ 1230.909958][T23680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1230.909972][T23680] Call Trace: [ 1230.909981][T23680] [ 1230.909991][T23680] dump_stack_lvl+0x16c/0x1f0 [ 1230.910031][T23680] should_fail_ex+0x512/0x640 [ 1230.910065][T23680] ? fs_reclaim_acquire+0xae/0x150 [ 1230.910102][T23680] ? tomoyo_open_control+0x51f/0xa30 [ 1230.910125][T23680] should_failslab+0xc2/0x120 [ 1230.910157][T23680] __kmalloc_noprof+0xd2/0x510 [ 1230.910195][T23680] tomoyo_open_control+0x51f/0xa30 [ 1230.910225][T23680] do_dentry_open+0x97f/0x1530 [ 1230.910256][T23680] ? __pfx_tomoyo_open+0x10/0x10 [ 1230.910298][T23680] vfs_open+0x82/0x3f0 [ 1230.910338][T23680] path_openat+0x1de4/0x2cb0 [ 1230.910380][T23680] ? __pfx_path_openat+0x10/0x10 [ 1230.910420][T23680] do_filp_open+0x20b/0x470 [ 1230.910450][T23680] ? __pfx_do_filp_open+0x10/0x10 [ 1230.910506][T23680] ? alloc_fd+0x471/0x7d0 [ 1230.910542][T23680] do_sys_openat2+0x11b/0x1d0 [ 1230.910576][T23680] ? __pfx_do_sys_openat2+0x10/0x10 [ 1230.910625][T23680] __x64_sys_openat+0x174/0x210 [ 1230.910648][T23680] ? __pfx___x64_sys_openat+0x10/0x10 [ 1230.910686][T23680] do_syscall_64+0xcd/0x4c0 [ 1230.910726][T23680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.910752][T23680] RIP: 0033:0x7f568b58eec9 [ 1230.910772][T23680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1230.910795][T23680] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1230.910820][T23680] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1230.910837][T23680] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1230.910854][T23680] RBP: 00007f568b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1230.910870][T23680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.910885][T23680] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1230.910920][T23680] [ 1232.862122][T23708] random: crng reseeded on system resumption [ 1232.872529][T23708] FAULT_INJECTION: forcing a failure. [ 1232.872529][T23708] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1232.925769][T23708] CPU: 1 UID: 0 PID: 23708 Comm: syz.3.2901 Not tainted syzkaller #0 PREEMPT(full) [ 1232.925804][T23708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1232.925821][T23708] Call Trace: [ 1232.925830][T23708] [ 1232.925841][T23708] dump_stack_lvl+0x16c/0x1f0 [ 1232.925887][T23708] should_fail_ex+0x512/0x640 [ 1232.925932][T23708] should_fail_alloc_page+0xe7/0x130 [ 1232.925971][T23708] prepare_alloc_pages+0x3c2/0x610 [ 1232.926010][T23708] ? rcu_is_watching+0x12/0xc0 [ 1232.926041][T23708] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1232.926085][T23708] ? stack_trace_save+0x8e/0xc0 [ 1232.926115][T23708] ? __pfx_stack_trace_save+0x10/0x10 [ 1232.926149][T23708] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1232.926186][T23708] ? kasan_save_stack+0x42/0x60 [ 1232.926215][T23708] ? kasan_save_stack+0x33/0x60 [ 1232.926249][T23708] ? do_dentry_open+0x97f/0x1530 [ 1232.926279][T23708] ? vfs_open+0x82/0x3f0 [ 1232.926321][T23708] ? path_openat+0x1de4/0x2cb0 [ 1232.926351][T23708] ? do_filp_open+0x20b/0x470 [ 1232.926381][T23708] ? do_sys_openat2+0x11b/0x1d0 [ 1232.926419][T23708] ? __x64_sys_openat+0x174/0x210 [ 1232.926441][T23708] ? do_syscall_64+0xcd/0x4c0 [ 1232.926477][T23708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.926504][T23708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1232.926537][T23708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1232.926575][T23708] ? policy_nodemask+0xea/0x4e0 [ 1232.926613][T23708] alloc_pages_mpol+0x1fb/0x550 [ 1232.926650][T23708] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1232.926695][T23708] alloc_pages_noprof+0x131/0x390 [ 1232.926731][T23708] get_zeroed_page_noprof+0x18/0xb0 [ 1232.926769][T23708] get_image_page+0x18/0x190 [ 1232.926797][T23708] alloc_rtree_node+0x3c/0xb0 [ 1232.926826][T23708] memory_bm_create+0x519/0x810 [ 1232.926869][T23708] create_basic_memory_bitmaps+0xbd/0x320 [ 1232.926906][T23708] snapshot_open+0x235/0x2b0 [ 1232.926936][T23708] ? __pfx_snapshot_open+0x10/0x10 [ 1232.926969][T23708] misc_open+0x35a/0x420 [ 1232.927002][T23708] ? __pfx_misc_open+0x10/0x10 [ 1232.927033][T23708] chrdev_open+0x231/0x6a0 [ 1232.927065][T23708] ? __pfx_apparmor_file_open+0x10/0x10 [ 1232.927095][T23708] ? __pfx_chrdev_open+0x10/0x10 [ 1232.927131][T23708] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1232.927169][T23708] do_dentry_open+0x97f/0x1530 [ 1232.927202][T23708] ? __pfx_chrdev_open+0x10/0x10 [ 1232.927244][T23708] vfs_open+0x82/0x3f0 [ 1232.927287][T23708] path_openat+0x1de4/0x2cb0 [ 1232.927340][T23708] ? __pfx_path_openat+0x10/0x10 [ 1232.927385][T23708] do_filp_open+0x20b/0x470 [ 1232.927420][T23708] ? __pfx_do_filp_open+0x10/0x10 [ 1232.927480][T23708] ? alloc_fd+0x471/0x7d0 [ 1232.927520][T23708] do_sys_openat2+0x11b/0x1d0 [ 1232.927558][T23708] ? __pfx_do_sys_openat2+0x10/0x10 [ 1232.927613][T23708] __x64_sys_openat+0x174/0x210 [ 1232.927638][T23708] ? __pfx___x64_sys_openat+0x10/0x10 [ 1232.927679][T23708] do_syscall_64+0xcd/0x4c0 [ 1232.927721][T23708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.927749][T23708] RIP: 0033:0x7fad6f58eec9 [ 1232.927771][T23708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.927796][T23708] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1232.927822][T23708] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1232.927841][T23708] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1232.927859][T23708] RBP: 00007fad6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1232.927875][T23708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1232.927892][T23708] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1232.927929][T23708] [ 1233.794563][T23715] FAULT_INJECTION: forcing a failure. [ 1233.794563][T23715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.823559][T23715] CPU: 0 UID: 0 PID: 23715 Comm: syz.1.2903 Not tainted syzkaller #0 PREEMPT(full) [ 1233.823591][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1233.823604][T23715] Call Trace: [ 1233.823613][T23715] [ 1233.823622][T23715] dump_stack_lvl+0x16c/0x1f0 [ 1233.823663][T23715] should_fail_ex+0x512/0x640 [ 1233.823705][T23715] strncpy_from_user+0x3b/0x2e0 [ 1233.823743][T23715] getname_flags.part.0+0x8f/0x550 [ 1233.823784][T23715] getname_flags+0x93/0xf0 [ 1233.823811][T23715] do_sys_openat2+0xb8/0x1d0 [ 1233.823847][T23715] ? __pfx_do_sys_openat2+0x10/0x10 [ 1233.823886][T23715] ? __fget_files+0x20e/0x3c0 [ 1233.823917][T23715] __x64_sys_openat+0x174/0x210 [ 1233.823939][T23715] ? __pfx___x64_sys_openat+0x10/0x10 [ 1233.823958][T23715] ? ksys_write+0x1ac/0x250 [ 1233.823996][T23715] do_syscall_64+0xcd/0x4c0 [ 1233.824035][T23715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.824058][T23715] RIP: 0033:0x7f747298eec9 [ 1233.824078][T23715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.824100][T23715] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1233.824123][T23715] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1233.824140][T23715] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1233.824155][T23715] RBP: 00007f747390e090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.824171][T23715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.824186][T23715] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1233.824219][T23715] [ 1234.071517][T23719] FAULT_INJECTION: forcing a failure. [ 1234.071517][T23719] name failslab, interval 1, probability 0, space 0, times 0 [ 1234.141131][T23719] CPU: 1 UID: 0 PID: 23719 Comm: syz.1.2906 Not tainted syzkaller #0 PREEMPT(full) [ 1234.141167][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1234.141181][T23719] Call Trace: [ 1234.141190][T23719] [ 1234.141200][T23719] dump_stack_lvl+0x16c/0x1f0 [ 1234.141242][T23719] should_fail_ex+0x512/0x640 [ 1234.141278][T23719] ? fs_reclaim_acquire+0xae/0x150 [ 1234.141316][T23719] ? tomoyo_encode2+0x100/0x3e0 [ 1234.141347][T23719] should_failslab+0xc2/0x120 [ 1234.141380][T23719] __kmalloc_noprof+0xd2/0x510 [ 1234.141408][T23719] ? d_absolute_path+0x136/0x1a0 [ 1234.141449][T23719] tomoyo_encode2+0x100/0x3e0 [ 1234.141487][T23719] tomoyo_encode+0x29/0x50 [ 1234.141519][T23719] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1234.141563][T23719] tomoyo_path_number_perm+0x245/0x580 [ 1234.141592][T23719] ? tomoyo_path_number_perm+0x237/0x580 [ 1234.141625][T23719] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1234.141657][T23719] ? find_held_lock+0x2b/0x80 [ 1234.141715][T23719] ? find_held_lock+0x2b/0x80 [ 1234.141739][T23719] ? hook_file_ioctl_common+0x145/0x410 [ 1234.141778][T23719] ? __fget_files+0x20e/0x3c0 [ 1234.141812][T23719] security_file_ioctl+0x9b/0x240 [ 1234.141845][T23719] __x64_sys_ioctl+0xb7/0x210 [ 1234.141885][T23719] do_syscall_64+0xcd/0x4c0 [ 1234.141925][T23719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.141956][T23719] RIP: 0033:0x7f747298eec9 [ 1234.141977][T23719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.142000][T23719] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.142023][T23719] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1234.142040][T23719] RDX: 0000200000000080 RSI: 0000000080044dfd RDI: 0000000000000003 [ 1234.142056][T23719] RBP: 00007f747390e090 R08: 0000000000000000 R09: 0000000000000000 [ 1234.142072][T23719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1234.142087][T23719] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1234.142122][T23719] [ 1234.142146][T23719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1235.412167][T23740] program syz.3.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.499559][ T30] audit: type=1800 audit(1758662648.800:3): pid=23753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2911" name="members" dev="configfs" ino=80211 res=0 errno=0 [ 1235.863931][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1235.867340][T23764] FAULT_INJECTION: forcing a failure. [ 1235.867340][T23764] name failslab, interval 1, probability 0, space 0, times 0 [ 1235.870263][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1235.927076][T23764] CPU: 1 UID: 0 PID: 23764 Comm: syz.2.2913 Not tainted syzkaller #0 PREEMPT(full) [ 1235.927096][T23764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1235.927105][T23764] Call Trace: [ 1235.927110][T23764] [ 1235.927116][T23764] dump_stack_lvl+0x16c/0x1f0 [ 1235.927141][T23764] should_fail_ex+0x512/0x640 [ 1235.927162][T23764] ? __kmalloc_noprof+0xbf/0x510 [ 1235.927181][T23764] ? net_alloc_generic+0x1e/0x70 [ 1235.927202][T23764] should_failslab+0xc2/0x120 [ 1235.927221][T23764] __kmalloc_noprof+0xd2/0x510 [ 1235.927241][T23764] net_alloc_generic+0x1e/0x70 [ 1235.927261][T23764] copy_net_ns+0xc6/0x5f0 [ 1235.927275][T23764] ? copy_cgroup_ns+0x71/0x700 [ 1235.927292][T23764] create_new_namespaces+0x3ea/0xa90 [ 1235.927313][T23764] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1235.927331][T23764] ksys_unshare+0x45b/0xa40 [ 1235.927350][T23764] ? __pfx_ksys_unshare+0x10/0x10 [ 1235.927368][T23764] ? ksys_write+0x1ac/0x250 [ 1235.927391][T23764] __x64_sys_unshare+0x31/0x40 [ 1235.927409][T23764] do_syscall_64+0xcd/0x4c0 [ 1235.927431][T23764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.927445][T23764] RIP: 0033:0x7ff112b8eec9 [ 1235.927457][T23764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.927470][T23764] RSP: 002b:00007ff11399b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1235.927484][T23764] RAX: ffffffffffffffda RBX: 00007ff112de6180 RCX: 00007ff112b8eec9 [ 1235.927493][T23764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1235.927502][T23764] RBP: 00007ff11399b090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.927510][T23764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.927518][T23764] R13: 00007ff112de6218 R14: 00007ff112de6180 R15: 00007fffb0d68348 [ 1235.927536][T23764] [ 1235.927676][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.122222][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.130228][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.136520][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.144550][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.150818][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.916375][T23784] FAULT_INJECTION: forcing a failure. [ 1236.916375][T23784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1236.937555][T23784] CPU: 0 UID: 0 PID: 23784 Comm: syz.2.2919 Not tainted syzkaller #0 PREEMPT(full) [ 1236.937592][T23784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1236.937609][T23784] Call Trace: [ 1236.937617][T23784] [ 1236.937628][T23784] dump_stack_lvl+0x16c/0x1f0 [ 1236.937670][T23784] should_fail_ex+0x512/0x640 [ 1236.937716][T23784] should_fail_alloc_page+0xe7/0x130 [ 1236.937752][T23784] prepare_alloc_pages+0x3c2/0x610 [ 1236.937788][T23784] ? copy_net_ns+0x2a6/0x5f0 [ 1236.937814][T23784] ? create_new_namespaces+0x3ea/0xa90 [ 1236.937850][T23784] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1236.937887][T23784] ? find_entry.isra.0+0x1a0/0x280 [ 1236.937930][T23784] ? namecmp+0x49/0x60 [ 1236.937974][T23784] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1236.938006][T23784] ? find_entry.isra.0+0x1a0/0x280 [ 1236.938044][T23784] ? drop_sysctl_table+0x434/0x5f0 [ 1236.938078][T23784] ? xlate_dir+0x1a7/0x240 [ 1236.938116][T23784] ? __pfx_drop_sysctl_table+0x10/0x10 [ 1236.938159][T23784] ? insert_header+0xf8d/0x1480 [ 1236.938193][T23784] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1236.938234][T23784] ? policy_nodemask+0xea/0x4e0 [ 1236.938271][T23784] alloc_pages_mpol+0x1fb/0x550 [ 1236.938307][T23784] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1236.938353][T23784] ___kmalloc_large_node+0xed/0x160 [ 1236.938394][T23784] ? __pfx_can_pernet_init+0x10/0x10 [ 1236.938431][T23784] __kmalloc_large_noprof+0x1c/0x70 [ 1236.938470][T23784] can_pernet_init+0x4b/0x370 [ 1236.938507][T23784] ? __pfx_can_pernet_init+0x10/0x10 [ 1236.938540][T23784] ops_init+0x1df/0x5f0 [ 1236.938579][T23784] setup_net+0x10f/0x380 [ 1236.938601][T23784] ? lockdep_init_map_type+0x5c/0x280 [ 1236.938638][T23784] ? __pfx_setup_net+0x10/0x10 [ 1236.938665][T23784] ? debug_mutex_init+0x37/0x70 [ 1236.938693][T23784] copy_net_ns+0x2a6/0x5f0 [ 1236.938724][T23784] create_new_namespaces+0x3ea/0xa90 [ 1236.938763][T23784] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1236.938797][T23784] ksys_unshare+0x45b/0xa40 [ 1236.938833][T23784] ? __pfx_ksys_unshare+0x10/0x10 [ 1236.938870][T23784] ? xfd_validate_state+0x61/0x180 [ 1236.938916][T23784] __x64_sys_unshare+0x31/0x40 [ 1236.938960][T23784] do_syscall_64+0xcd/0x4c0 [ 1236.939003][T23784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.939030][T23784] RIP: 0033:0x7ff112b8eec9 [ 1236.939052][T23784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.939078][T23784] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1236.939104][T23784] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1236.939123][T23784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1236.939139][T23784] RBP: 00007ff112c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1236.939156][T23784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.939172][T23784] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1236.939208][T23784] [ 1238.603127][T23842] bridge0: port 4(gretap0) entered blocking state [ 1238.622982][T23842] bridge0: port 4(gretap0) entered disabled state [ 1238.630224][T23842] gretap0: entered allmulticast mode [ 1238.661009][T23842] gretap0: entered promiscuous mode [ 1238.690068][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.696589][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.717869][T23842] bridge0: port 4(gretap0) entered blocking state [ 1238.724420][T23842] bridge0: port 4(gretap0) entered forwarding state [ 1239.160817][T23854] FAULT_INJECTION: forcing a failure. [ 1239.160817][T23854] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.181490][T23854] CPU: 1 UID: 0 PID: 23854 Comm: syz.2.2938 Not tainted syzkaller #0 PREEMPT(full) [ 1239.181519][T23854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1239.181533][T23854] Call Trace: [ 1239.181542][T23854] [ 1239.181551][T23854] dump_stack_lvl+0x16c/0x1f0 [ 1239.181591][T23854] should_fail_ex+0x512/0x640 [ 1239.181623][T23854] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1239.181654][T23854] should_failslab+0xc2/0x120 [ 1239.181684][T23854] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1239.181709][T23854] ? __might_fault+0xe3/0x190 [ 1239.181735][T23854] ? __might_fault+0x13b/0x190 [ 1239.181761][T23854] ? getname_flags.part.0+0x4c/0x550 [ 1239.181807][T23854] getname_flags.part.0+0x4c/0x550 [ 1239.181847][T23854] getname_flags+0x93/0xf0 [ 1239.181873][T23854] user_path_at+0x24/0x60 [ 1239.181901][T23854] __x64_sys_mount+0x1fc/0x310 [ 1239.181934][T23854] ? __pfx___x64_sys_mount+0x10/0x10 [ 1239.181976][T23854] do_syscall_64+0xcd/0x4c0 [ 1239.182012][T23854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.182034][T23854] RIP: 0033:0x7ff112b8eec9 [ 1239.182054][T23854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.182076][T23854] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1239.182099][T23854] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1239.182115][T23854] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1239.182130][T23854] RBP: 00007ff1139dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.182145][T23854] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1239.182159][T23854] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1239.182193][T23854] [ 1239.436026][T23862] syz.0.2940 uses obsolete (PF_INET,SOCK_PACKET) [ 1239.916051][T23869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2943'. [ 1239.925408][T23869] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1240.096154][T23882] FAULT_INJECTION: forcing a failure. [ 1240.096154][T23882] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.109975][T23882] CPU: 0 UID: 0 PID: 23882 Comm: syz.3.2946 Not tainted syzkaller #0 PREEMPT(full) [ 1240.110009][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1240.110024][T23882] Call Trace: [ 1240.110032][T23882] [ 1240.110042][T23882] dump_stack_lvl+0x16c/0x1f0 [ 1240.110083][T23882] should_fail_ex+0x512/0x640 [ 1240.110121][T23882] ? __kmalloc_noprof+0xbf/0x510 [ 1240.110153][T23882] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1240.110182][T23882] should_failslab+0xc2/0x120 [ 1240.110215][T23882] __kmalloc_noprof+0xd2/0x510 [ 1240.110253][T23882] vb2_core_allocated_buffers_storage+0x184/0x220 [ 1240.110284][T23882] vb2_core_reqbufs+0x398/0xfe0 [ 1240.110319][T23882] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1240.110366][T23882] __vb2_init_fileio+0x3f1/0x1100 [ 1240.110389][T23882] ? lockdep_hardirqs_on+0x7c/0x110 [ 1240.110418][T23882] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1240.110457][T23882] ? __pollwait+0x271/0x490 [ 1240.110487][T23882] vb2_core_poll+0x486/0x700 [ 1240.110516][T23882] vb2_poll+0x33/0x150 [ 1240.110540][T23882] vb2_fop_poll+0x10f/0x2c0 [ 1240.110568][T23882] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1240.110591][T23882] v4l2_poll+0x160/0x320 [ 1240.110625][T23882] ? __pfx_v4l2_poll+0x10/0x10 [ 1240.110654][T23882] do_sys_poll+0x55c/0xdf0 [ 1240.110691][T23882] ? __pfx_do_sys_poll+0x10/0x10 [ 1240.110746][T23882] ? find_held_lock+0x2b/0x80 [ 1240.110769][T23882] ? __pfx___pollwait+0x10/0x10 [ 1240.110795][T23882] ? __pfx_pollwake+0x10/0x10 [ 1240.110863][T23882] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1240.110904][T23882] ? set_user_sigmask+0x21b/0x2b0 [ 1240.110930][T23882] ? __pfx_set_user_sigmask+0x10/0x10 [ 1240.110955][T23882] ? __fget_files+0x20e/0x3c0 [ 1240.110984][T23882] __x64_sys_ppoll+0x254/0x2d0 [ 1240.111012][T23882] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1240.111036][T23882] ? ksys_write+0x1ac/0x250 [ 1240.111062][T23882] ? __pfx_ksys_write+0x10/0x10 [ 1240.111099][T23882] do_syscall_64+0xcd/0x4c0 [ 1240.111138][T23882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.111163][T23882] RIP: 0033:0x7fad6f58eec9 [ 1240.111183][T23882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.111207][T23882] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1240.111231][T23882] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1240.111247][T23882] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 1240.111262][T23882] RBP: 00007fad70346090 R08: 0000000000000008 R09: 0000000000000000 [ 1240.111277][T23882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.111291][T23882] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1240.111327][T23882] [ 1241.054263][T23889] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2948'. [ 1241.917363][T23901] syz.0.2950 (23901): attempted to duplicate a private mapping with mremap. This is not supported. [ 1242.594826][T23932] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1243.814114][T23943] FAULT_INJECTION: forcing a failure. [ 1243.814114][T23943] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.827382][T23943] CPU: 0 UID: 0 PID: 23943 Comm: syz.0.2958 Not tainted syzkaller #0 PREEMPT(full) [ 1243.827415][T23943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1243.827430][T23943] Call Trace: [ 1243.827439][T23943] [ 1243.827449][T23943] dump_stack_lvl+0x16c/0x1f0 [ 1243.827492][T23943] should_fail_ex+0x512/0x640 [ 1243.827528][T23943] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1243.827561][T23943] should_failslab+0xc2/0x120 [ 1243.827595][T23943] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1243.827625][T23943] ? copy_net_ns+0xe8/0x5f0 [ 1243.827655][T23943] copy_net_ns+0xe8/0x5f0 [ 1243.827678][T23943] ? copy_cgroup_ns+0x71/0x700 [ 1243.827706][T23943] create_new_namespaces+0x3ea/0xa90 [ 1243.827744][T23943] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1243.827775][T23943] ksys_unshare+0x45b/0xa40 [ 1243.827810][T23943] ? __pfx_ksys_unshare+0x10/0x10 [ 1243.827842][T23943] ? ksys_write+0x1ac/0x250 [ 1243.827883][T23943] __x64_sys_unshare+0x31/0x40 [ 1243.827916][T23943] do_syscall_64+0xcd/0x4c0 [ 1243.827954][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.827981][T23943] RIP: 0033:0x7f568b58eec9 [ 1243.828000][T23943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.828023][T23943] RSP: 002b:00007f568c340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1243.828048][T23943] RAX: ffffffffffffffda RBX: 00007f568b7e6090 RCX: 00007f568b58eec9 [ 1243.828065][T23943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1243.828080][T23943] RBP: 00007f568c340090 R08: 0000000000000000 R09: 0000000000000000 [ 1243.828096][T23943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1243.828111][T23943] R13: 00007f568b7e6128 R14: 00007f568b7e6090 R15: 00007ffeb23146a8 [ 1243.828145][T23943] [ 1245.600285][T23962] Setting dangerous option i915.mitigations - tainting kernel [ 1245.619530][T23971] FAULT_INJECTION: forcing a failure. [ 1245.619530][T23971] name failslab, interval 1, probability 0, space 0, times 0 [ 1245.699909][T23962] Bad "i915.mitigations=!hóì@ÛSÌo", 'hóì@ÛSÌo' is unknown [ 1245.719964][T23971] CPU: 0 UID: 0 PID: 23971 Comm: syz.0.2964 Tainted: G U syzkaller #0 PREEMPT(full) [ 1245.720002][T23971] Tainted: [U]=USER [ 1245.720010][T23971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1245.720024][T23971] Call Trace: [ 1245.720033][T23971] [ 1245.720043][T23971] dump_stack_lvl+0x16c/0x1f0 [ 1245.720081][T23971] should_fail_ex+0x512/0x640 [ 1245.720116][T23971] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1245.720148][T23971] should_failslab+0xc2/0x120 [ 1245.720178][T23971] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1245.720207][T23971] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1245.720233][T23971] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1245.720254][T23971] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1245.720280][T23971] alloc_inode+0x61/0x240 [ 1245.720311][T23971] new_inode+0x22/0x1c0 [ 1245.720347][T23971] hugetlbfs_get_inode+0x354/0x730 [ 1245.720371][T23971] ? __fget_files+0x20e/0x3c0 [ 1245.720401][T23971] hugetlb_file_setup+0x15b/0x620 [ 1245.720431][T23971] ksys_mmap_pgoff+0x189/0x5c0 [ 1245.720472][T23971] __x64_sys_mmap+0x125/0x190 [ 1245.720511][T23971] do_syscall_64+0xcd/0x4c0 [ 1245.720548][T23971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.720572][T23971] RIP: 0033:0x7f568b58eec9 [ 1245.720592][T23971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.720615][T23971] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1245.720638][T23971] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1245.720655][T23971] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1245.720670][T23971] RBP: 00007f568c361090 R08: 0000000000000401 R09: 0000300000000000 [ 1245.720685][T23971] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000001 [ 1245.720700][T23971] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1245.720734][T23971] [ 1246.136507][T23976] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 1246.477169][T23987] FAULT_INJECTION: forcing a failure. [ 1246.477169][T23987] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.509653][T23982] HfR: entered promiscuous mode [ 1246.541559][T23987] CPU: 0 UID: 0 PID: 23987 Comm: syz.1.2968 Tainted: G U syzkaller #0 PREEMPT(full) [ 1246.541583][T23987] Tainted: [U]=USER [ 1246.541588][T23987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1246.541597][T23987] Call Trace: [ 1246.541602][T23987] [ 1246.541608][T23987] dump_stack_lvl+0x16c/0x1f0 [ 1246.541632][T23987] should_fail_ex+0x512/0x640 [ 1246.541654][T23987] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1246.541671][T23987] should_failslab+0xc2/0x120 [ 1246.541690][T23987] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1246.541703][T23987] ? binder_get_thread+0x1eb/0x8c0 [ 1246.541717][T23987] ? binder_get_thread+0x225/0x8c0 [ 1246.541733][T23987] binder_get_thread+0x225/0x8c0 [ 1246.541747][T23987] ? rcu_is_watching+0x12/0xc0 [ 1246.541764][T23987] binder_ioctl+0x20f/0x71f0 [ 1246.541782][T23987] ? tomoyo_path_number_perm+0x295/0x580 [ 1246.541803][T23987] ? tomoyo_path_number_perm+0x18d/0x580 [ 1246.541821][T23987] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1246.541839][T23987] ? find_held_lock+0x2b/0x80 [ 1246.541853][T23987] ? __pfx_binder_ioctl+0x10/0x10 [ 1246.541877][T23987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1246.541899][T23987] ? do_vfs_ioctl+0x128/0x14f0 [ 1246.541921][T23987] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1246.541947][T23987] ? find_held_lock+0x2b/0x80 [ 1246.541960][T23987] ? hook_file_ioctl_common+0x145/0x410 [ 1246.541982][T23987] ? __fget_files+0x20e/0x3c0 [ 1246.542000][T23987] ? __pfx_binder_ioctl+0x10/0x10 [ 1246.542017][T23987] __x64_sys_ioctl+0x18b/0x210 [ 1246.542039][T23987] do_syscall_64+0xcd/0x4c0 [ 1246.542062][T23987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.542076][T23987] RIP: 0033:0x7f747298eec9 [ 1246.542088][T23987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.542101][T23987] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1246.542117][T23987] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1246.542127][T23987] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1246.542136][T23987] RBP: 00007f747390e090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.542144][T23987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.542152][T23987] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1246.542170][T23987] [ 1246.542177][T23987] binder: 23985:23987 ioctl c0306201 200000000000 returned -12 [ 1247.241666][T23980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 1250.006736][T24012] device-mapper: ioctl: Invalid ioctl structure: name ÿ, dev 400007f00010006 [ 1250.938328][T24050] capability: warning: `syz.3.2978' uses deprecated v2 capabilities in a way that may be insecure [ 1251.588963][T24058] Invalid ELF header magic: != ELF [ 1253.923411][T24106] FAULT_INJECTION: forcing a failure. [ 1253.923411][T24106] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.936379][T24106] CPU: 0 UID: 0 PID: 24106 Comm: syz.3.2986 Tainted: G U syzkaller #0 PREEMPT(full) [ 1253.936421][T24106] Tainted: [U]=USER [ 1253.936437][T24106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1253.936454][T24106] Call Trace: [ 1253.936464][T24106] [ 1253.936475][T24106] dump_stack_lvl+0x16c/0x1f0 [ 1253.936521][T24106] should_fail_ex+0x512/0x640 [ 1253.936559][T24106] ? fs_reclaim_acquire+0xae/0x150 [ 1253.936601][T24106] should_failslab+0xc2/0x120 [ 1253.936635][T24106] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1253.936667][T24106] ? security_inode_alloc+0x3b/0x2b0 [ 1253.936703][T24106] security_inode_alloc+0x3b/0x2b0 [ 1253.936734][T24106] inode_init_always_gfp+0xce4/0x1030 [ 1253.936771][T24106] alloc_inode+0x86/0x240 [ 1253.936808][T24106] sock_alloc+0x40/0x280 [ 1253.936835][T24106] __sock_create+0xc1/0x8d0 [ 1253.936872][T24106] __sys_socket+0x14d/0x260 [ 1253.936903][T24106] ? __pfx___sys_socket+0x10/0x10 [ 1253.936931][T24106] ? xfd_validate_state+0x61/0x180 [ 1253.936968][T24106] ? __pfx_do_writev+0x10/0x10 [ 1253.937003][T24106] __x64_sys_socket+0x72/0xb0 [ 1253.937032][T24106] ? lockdep_hardirqs_on+0x7c/0x110 [ 1253.937069][T24106] do_syscall_64+0xcd/0x4c0 [ 1253.937115][T24106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.937143][T24106] RIP: 0033:0x7fad6f58eec9 [ 1253.937165][T24106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.937191][T24106] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1253.937217][T24106] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1253.937236][T24106] RDX: 0000000000000000 RSI: 0000000000080802 RDI: 0000000000000028 [ 1253.937253][T24106] RBP: 00007fad6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.937270][T24106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.937286][T24106] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1253.937323][T24106] [ 1253.937387][T24106] socket: no more sockets [ 1254.088523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1254.516765][T24112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2987'. [ 1255.927509][T24132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1256.003710][T24132] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1256.231192][T24132] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1256.251868][T24132] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1256.335571][T24132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1256.448046][T24132] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1256.633267][T24132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1256.643184][T24132] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1257.295808][T24177] FAULT_INJECTION: forcing a failure. [ 1257.295808][T24177] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.311587][T24177] CPU: 0 UID: 0 PID: 24177 Comm: syz.3.2998 Tainted: G U syzkaller #0 PREEMPT(full) [ 1257.311627][T24177] Tainted: [U]=USER [ 1257.311636][T24177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1257.311652][T24177] Call Trace: [ 1257.311661][T24177] [ 1257.311670][T24177] dump_stack_lvl+0x16c/0x1f0 [ 1257.311698][T24177] should_fail_ex+0x512/0x640 [ 1257.311720][T24177] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1257.311740][T24177] should_failslab+0xc2/0x120 [ 1257.311759][T24177] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1257.311777][T24177] ? mas_alloc_nodes+0x18b/0x8b0 [ 1257.311798][T24177] mas_alloc_nodes+0x18b/0x8b0 [ 1257.311820][T24177] mas_node_count_gfp+0x105/0x130 [ 1257.311840][T24177] mas_preallocate+0x7e0/0xde0 [ 1257.311853][T24177] ? __memcg_slab_post_alloc_hook+0x492/0x960 [ 1257.311876][T24177] ? __pfx_mas_preallocate+0x10/0x10 [ 1257.311896][T24177] ? anon_vma_name+0x81/0x2f0 [ 1257.311919][T24177] __split_vma+0x34a/0x1070 [ 1257.311937][T24177] ? __pfx___split_vma+0x10/0x10 [ 1257.311957][T24177] ? __pfx_mas_prev+0x10/0x10 [ 1257.311981][T24177] vms_gather_munmap_vmas+0x3b1/0x1340 [ 1257.312001][T24177] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1257.312020][T24177] ? mas_walk+0x6f5/0x980 [ 1257.312044][T24177] __mmap_region+0x436/0x27b0 [ 1257.312062][T24177] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1257.312078][T24177] ? __pfx___mmap_region+0x10/0x10 [ 1257.312093][T24177] ? rcu_is_watching+0x12/0xc0 [ 1257.312118][T24177] ? rcu_is_watching+0x12/0xc0 [ 1257.312133][T24177] ? trace_sched_exit_tp+0xd1/0x120 [ 1257.312156][T24177] ? __schedule+0x11a3/0x5de0 [ 1257.312175][T24177] ? __lock_acquire+0x62e/0x1ce0 [ 1257.312201][T24177] ? __lock_acquire+0x62e/0x1ce0 [ 1257.312222][T24177] ? __pfx___schedule+0x10/0x10 [ 1257.312263][T24177] ? trace_cap_capable+0x18d/0x200 [ 1257.312285][T24177] mmap_region+0x1ab/0x3f0 [ 1257.312302][T24177] ? __get_unmapped_area+0x267/0x440 [ 1257.312324][T24177] do_mmap+0xa3e/0x1210 [ 1257.312347][T24177] ? __pfx_do_mmap+0x10/0x10 [ 1257.312367][T24177] ? __pfx_down_write_killable+0x10/0x10 [ 1257.312385][T24177] vm_mmap_pgoff+0x29e/0x470 [ 1257.312409][T24177] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1257.312433][T24177] ? __x64_sys_futex+0x1e0/0x4c0 [ 1257.312449][T24177] ? __x64_sys_futex+0x1e9/0x4c0 [ 1257.312469][T24177] ksys_mmap_pgoff+0x7d/0x5c0 [ 1257.312488][T24177] ? xfd_validate_state+0x61/0x180 [ 1257.312507][T24177] ? __pfx___do_sys_close_range+0x10/0x10 [ 1257.312527][T24177] __x64_sys_mmap+0x125/0x190 [ 1257.312550][T24177] do_syscall_64+0xcd/0x4c0 [ 1257.312577][T24177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.312592][T24177] RIP: 0033:0x7fad6f58eec9 [ 1257.312604][T24177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.312619][T24177] RSP: 002b:00007fad6d7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1257.312633][T24177] RAX: ffffffffffffffda RBX: 00007fad6f7e6180 RCX: 00007fad6f58eec9 [ 1257.312643][T24177] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1257.312652][T24177] RBP: 00007fad6f611f91 R08: 0000000000000002 R09: 0000000000008000 [ 1257.312662][T24177] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1257.312671][T24177] R13: 00007fad6f7e6218 R14: 00007fad6f7e6180 R15: 00007ffe19ba3ea8 [ 1257.312690][T24177] [ 1257.973585][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 1258.283591][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 1258.286099][T24181] FAULT_INJECTION: forcing a failure. [ 1258.286099][T24181] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.365492][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 1258.383820][T24181] CPU: 0 UID: 0 PID: 24181 Comm: syz.0.2999 Tainted: G U syzkaller #0 PREEMPT(full) [ 1258.383844][T24181] Tainted: [U]=USER [ 1258.383849][T24181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1258.383858][T24181] Call Trace: [ 1258.383864][T24181] [ 1258.383870][T24181] dump_stack_lvl+0x16c/0x1f0 [ 1258.383896][T24181] should_fail_ex+0x512/0x640 [ 1258.383917][T24181] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1258.383936][T24181] should_failslab+0xc2/0x120 [ 1258.383955][T24181] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1258.383972][T24181] ? alloc_empty_file+0x55/0x1e0 [ 1258.383994][T24181] alloc_empty_file+0x55/0x1e0 [ 1258.384015][T24181] path_openat+0xda/0x2cb0 [ 1258.384037][T24181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.384058][T24181] ? __pfx_path_openat+0x10/0x10 [ 1258.384079][T24181] do_filp_open+0x20b/0x470 [ 1258.384095][T24181] ? __pfx_do_filp_open+0x10/0x10 [ 1258.384124][T24181] ? alloc_fd+0x471/0x7d0 [ 1258.384144][T24181] do_sys_openat2+0x11b/0x1d0 [ 1258.384165][T24181] ? __pfx_do_sys_openat2+0x10/0x10 [ 1258.384188][T24181] ? __fget_files+0x20e/0x3c0 [ 1258.384205][T24181] __x64_sys_openat+0x174/0x210 [ 1258.384218][T24181] ? __pfx___x64_sys_openat+0x10/0x10 [ 1258.384230][T24181] ? ksys_write+0x1ac/0x250 [ 1258.384252][T24181] do_syscall_64+0xcd/0x4c0 [ 1258.384274][T24181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.384288][T24181] RIP: 0033:0x7f568b58eec9 [ 1258.384300][T24181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.384314][T24181] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1258.384327][T24181] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1258.384337][T24181] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1258.384346][T24181] RBP: 00007f568c361090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.384354][T24181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.384363][T24181] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1258.384381][T24181] [ 1258.684218][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 1260.043927][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 1260.420173][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 1260.432472][T24230] sp0: Synchronizing with TNC [ 1260.443535][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 1260.769429][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 1264.409169][T24289] FAULT_INJECTION: forcing a failure. [ 1264.409169][T24289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1264.448848][T24289] CPU: 0 UID: 0 PID: 24289 Comm: syz.0.3023 Tainted: G U syzkaller #0 PREEMPT(full) [ 1264.448886][T24289] Tainted: [U]=USER [ 1264.448894][T24289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1264.448908][T24289] Call Trace: [ 1264.448916][T24289] [ 1264.448925][T24289] dump_stack_lvl+0x16c/0x1f0 [ 1264.448964][T24289] should_fail_ex+0x512/0x640 [ 1264.449002][T24289] should_fail_alloc_page+0xe7/0x130 [ 1264.449034][T24289] prepare_alloc_pages+0x3c2/0x610 [ 1264.449074][T24289] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1264.449104][T24289] ? copy_splice_read+0x1a8/0xc20 [ 1264.449126][T24289] ? stack_trace_save+0x8e/0xc0 [ 1264.449153][T24289] ? __pfx_stack_trace_save+0x10/0x10 [ 1264.449179][T24289] ? stack_depot_save_flags+0x29/0x9c0 [ 1264.449223][T24289] ? bpf_ksym_find+0x124/0x1c0 [ 1264.449250][T24289] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1264.449278][T24289] ? kasan_save_stack+0x33/0x60 [ 1264.449305][T24289] ? __kasan_kmalloc+0xaa/0xb0 [ 1264.449330][T24289] ? copy_splice_read+0x1a8/0xc20 [ 1264.449352][T24289] ? do_splice_read+0x282/0x370 [ 1264.449374][T24289] ? splice_direct_to_actor+0x2a1/0xa30 [ 1264.449396][T24289] ? do_splice_direct+0x174/0x240 [ 1264.449418][T24289] ? do_sendfile+0xb06/0xe50 [ 1264.449442][T24289] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1264.449471][T24289] ? do_syscall_64+0xcd/0x4c0 [ 1264.449531][T24289] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1264.449572][T24289] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1264.449610][T24289] ? trace_kmalloc+0x2b/0xd0 [ 1264.449641][T24289] ? __kmalloc_noprof+0x242/0x510 [ 1264.449677][T24289] copy_splice_read+0x1e1/0xc20 [ 1264.449709][T24289] ? __pfx_copy_splice_read+0x10/0x10 [ 1264.449735][T24289] ? look_up_lock_class+0x59/0x150 [ 1264.449776][T24289] ? lockdep_init_map_type+0x5c/0x280 [ 1264.449810][T24289] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1264.449840][T24289] ? __pfx_copy_splice_read+0x10/0x10 [ 1264.449865][T24289] do_splice_read+0x282/0x370 [ 1264.449894][T24289] splice_direct_to_actor+0x2a1/0xa30 [ 1264.449922][T24289] ? __pfx_direct_splice_actor+0x10/0x10 [ 1264.449955][T24289] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1264.449979][T24289] ? get_pid_task+0xfc/0x250 [ 1264.450020][T24289] do_splice_direct+0x174/0x240 [ 1264.450046][T24289] ? __pfx_do_splice_direct+0x10/0x10 [ 1264.450073][T24289] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1264.450100][T24289] ? bpf_lsm_file_permission+0x9/0x10 [ 1264.450133][T24289] ? security_file_permission+0x71/0x210 [ 1264.450167][T24289] ? rw_verify_area+0xcf/0x6c0 [ 1264.450195][T24289] do_sendfile+0xb06/0xe50 [ 1264.450235][T24289] ? __pfx_do_sendfile+0x10/0x10 [ 1264.450263][T24289] ? __fget_files+0x20e/0x3c0 [ 1264.450298][T24289] __x64_sys_sendfile64+0x1d8/0x220 [ 1264.450329][T24289] ? ksys_write+0x1ac/0x250 [ 1264.450356][T24289] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1264.450399][T24289] do_syscall_64+0xcd/0x4c0 [ 1264.450436][T24289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.450461][T24289] RIP: 0033:0x7f568b58eec9 [ 1264.450480][T24289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.450503][T24289] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1264.450526][T24289] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1264.450544][T24289] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1264.450559][T24289] RBP: 00007f568c361090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.450574][T24289] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1264.450589][T24289] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1264.450623][T24289] [ 1265.516979][T24303] FAULT_INJECTION: forcing a failure. [ 1265.516979][T24303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.668166][T24303] CPU: 1 UID: 0 PID: 24303 Comm: syz.0.3027 Tainted: G U syzkaller #0 PREEMPT(full) [ 1265.668206][T24303] Tainted: [U]=USER [ 1265.668215][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1265.668228][T24303] Call Trace: [ 1265.668237][T24303] [ 1265.668247][T24303] dump_stack_lvl+0x16c/0x1f0 [ 1265.668288][T24303] should_fail_ex+0x512/0x640 [ 1265.668329][T24303] _copy_from_iter+0x29f/0x1720 [ 1265.668359][T24303] ? __alloc_skb+0x200/0x380 [ 1265.668405][T24303] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.668433][T24303] ? __pfx___might_resched+0x10/0x10 [ 1265.668458][T24303] ? __lock_acquire+0xb97/0x1ce0 [ 1265.668499][T24303] netlink_sendmsg+0x829/0xdd0 [ 1265.668543][T24303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1265.668583][T24303] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1265.668616][T24303] ____sys_sendmsg+0xa98/0xc70 [ 1265.668644][T24303] ? copy_msghdr_from_user+0x10a/0x160 [ 1265.668679][T24303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.668722][T24303] ___sys_sendmsg+0x134/0x1d0 [ 1265.668759][T24303] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.668837][T24303] __sys_sendmsg+0x16d/0x220 [ 1265.668873][T24303] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.668931][T24303] do_syscall_64+0xcd/0x4c0 [ 1265.668970][T24303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.668996][T24303] RIP: 0033:0x7f568b58eec9 [ 1265.669016][T24303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.669040][T24303] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.669064][T24303] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1265.669081][T24303] RDX: 0000000020000810 RSI: 0000200000000d00 RDI: 0000000000000003 [ 1265.669097][T24303] RBP: 00007f568c361090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.669112][T24303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.669127][T24303] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1265.669160][T24303] [ 1266.364184][T24314] FAULT_INJECTION: forcing a failure. [ 1266.364184][T24314] name failslab, interval 1, probability 0, space 0, times 0 [ 1266.384933][T24314] CPU: 0 UID: 0 PID: 24314 Comm: syz.2.3031 Tainted: G U syzkaller #0 PREEMPT(full) [ 1266.384974][T24314] Tainted: [U]=USER [ 1266.384983][T24314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1266.384998][T24314] Call Trace: [ 1266.385007][T24314] [ 1266.385017][T24314] dump_stack_lvl+0x16c/0x1f0 [ 1266.385058][T24314] should_fail_ex+0x512/0x640 [ 1266.385093][T24314] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1266.385127][T24314] ? __pfx_filemap_map_pages+0x10/0x10 [ 1266.385155][T24314] should_failslab+0xc2/0x120 [ 1266.385188][T24314] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1266.385218][T24314] ? ptlock_alloc+0x1f/0x70 [ 1266.385245][T24314] ? __pfx_filemap_map_pages+0x10/0x10 [ 1266.385274][T24314] ptlock_alloc+0x1f/0x70 [ 1266.385299][T24314] pte_alloc_one+0x82/0x3a0 [ 1266.385332][T24314] __do_fault+0x320/0x490 [ 1266.385360][T24314] ? do_raw_spin_lock+0x12c/0x2b0 [ 1266.385398][T24314] ? __pfx_filemap_map_pages+0x10/0x10 [ 1266.385426][T24314] do_pte_missing+0x1a6/0x3ba0 [ 1266.385454][T24314] ? do_raw_spin_unlock+0x172/0x230 [ 1266.385493][T24314] ? __pmd_alloc+0x3fb/0x930 [ 1266.385532][T24314] __handle_mm_fault+0x152a/0x2a50 [ 1266.385563][T24314] ? mt_find+0x3ef/0xa30 [ 1266.385590][T24314] ? __pfx___handle_mm_fault+0x10/0x10 [ 1266.385614][T24314] ? __pfx_mt_find+0x10/0x10 [ 1266.385659][T24314] ? find_vma+0xbf/0x140 [ 1266.385690][T24314] ? __pfx_find_vma+0x10/0x10 [ 1266.385726][T24314] handle_mm_fault+0x589/0xd10 [ 1266.385754][T24314] ? trace_raw_output_exceptions+0x131/0x150 [ 1266.385794][T24314] do_user_addr_fault+0x7a6/0x1370 [ 1266.385835][T24314] ? rcu_is_watching+0x12/0xc0 [ 1266.385867][T24314] exc_page_fault+0x5c/0xb0 [ 1266.385902][T24314] asm_exc_page_fault+0x26/0x30 [ 1266.385927][T24314] RIP: 0010:filldir64+0x1d3/0x600 [ 1266.385950][T24314] Code: 83 b0 82 ff 48 89 ee 4c 89 ff e8 28 ab 82 ff 48 83 7c 24 28 00 0f 85 3f 02 00 00 e8 67 b0 82 ff 0f 01 cb 0f ae e8 48 8b 04 24 <49> 89 47 08 e8 54 b0 82 ff 4c 8b 7c 24 30 48 8b 44 24 08 49 89 07 [ 1266.385975][T24314] RSP: 0018:ffffc90018b57cf0 EFLAGS: 00050293 [ 1266.385995][T24314] RAX: 0000000000000000 RBX: ffffc90018b57e80 RCX: ffffffff823859a8 [ 1266.386013][T24314] RDX: ffff88807c463c00 RSI: ffffffff823859b9 RDI: 0000000000000006 [ 1266.386029][T24314] RBP: 0000000000000018 R08: 0000000000000006 R09: 0000000000000000 [ 1266.386044][T24314] R10: 0000000000000018 R11: 0000000000000001 R12: 0000000000000018 [ 1266.386059][T24314] R13: ffffffff8bbfd7c0 R14: ffffc90018b57ea4 R15: 0000000000000000 [ 1266.386086][T24314] ? filldir64+0x1b8/0x600 [ 1266.386106][T24314] ? filldir64+0x1c9/0x600 [ 1266.386144][T24314] ? __pfx_filldir64+0x10/0x10 [ 1266.386166][T24314] dcache_readdir+0x4c1/0x850 [ 1266.386205][T24314] iterate_dir+0x293/0xaf0 [ 1266.386235][T24314] __x64_sys_getdents64+0x13c/0x2c0 [ 1266.386262][T24314] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 1266.386289][T24314] ? __pfx_filldir64+0x10/0x10 [ 1266.386331][T24314] do_syscall_64+0xcd/0x4c0 [ 1266.386371][T24314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.386395][T24314] RIP: 0033:0x7ff112b8eec9 [ 1266.386415][T24314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.386438][T24314] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 1266.386460][T24314] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1266.386477][T24314] RDX: 000000000000b012 RSI: 0000000000000000 RDI: 0000000000000003 [ 1266.386492][T24314] RBP: 00007ff1139dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.386507][T24314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.386522][T24314] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1266.386558][T24314] [ 1266.870706][T24321] vhci_hcd: default hub control req: 3000 v0000 i0000 l0 [ 1266.905528][T24321] Invalid ELF header magic: != ELF [ 1266.907873][T24323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1267.001185][T24323] macvtap0: entered promiscuous mode [ 1268.135917][T24355] sd 0:0:1:0: PR command failed: 1026 [ 1268.146458][T24360] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1268.487234][T24355] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1268.506407][T24355] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1268.694008][ T30] audit: type=1800 audit(1758662681.990:4): pid=24353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3039" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1268.882998][T24367] FAULT_INJECTION: forcing a failure. [ 1268.882998][T24367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1268.938494][T24367] CPU: 1 UID: 0 PID: 24367 Comm: syz.3.3043 Tainted: G U syzkaller #0 PREEMPT(full) [ 1268.938532][T24367] Tainted: [U]=USER [ 1268.938540][T24367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1268.938554][T24367] Call Trace: [ 1268.938562][T24367] [ 1268.938571][T24367] dump_stack_lvl+0x16c/0x1f0 [ 1268.938610][T24367] should_fail_ex+0x512/0x640 [ 1268.938648][T24367] _copy_from_iter+0x29f/0x1720 [ 1268.938680][T24367] ? rcu_is_watching+0x12/0xc0 [ 1268.938705][T24367] ? __pfx__copy_from_iter+0x10/0x10 [ 1268.938726][T24367] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1268.938755][T24367] ? __asan_memset+0x23/0x50 [ 1268.938778][T24367] ? __build_skb_around+0x278/0x3b0 [ 1268.938807][T24367] ? is_vmalloc_addr+0x86/0xa0 [ 1268.938838][T24367] netlink_sendmsg+0x829/0xdd0 [ 1268.938878][T24367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1268.938925][T24367] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1268.938957][T24367] ____sys_sendmsg+0xa98/0xc70 [ 1268.938983][T24367] ? copy_msghdr_from_user+0x10a/0x160 [ 1268.939017][T24367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1268.939048][T24367] ? __pfx__kstrtoull+0x10/0x10 [ 1268.939086][T24367] ___sys_sendmsg+0x134/0x1d0 [ 1268.939123][T24367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1268.939171][T24367] ? find_held_lock+0x2b/0x80 [ 1268.939218][T24367] __sys_sendmmsg+0x200/0x420 [ 1268.939256][T24367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1268.939299][T24367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1268.939348][T24367] ? fput+0x9b/0xd0 [ 1268.939382][T24367] ? ksys_write+0x1ac/0x250 [ 1268.939407][T24367] ? __pfx_ksys_write+0x10/0x10 [ 1268.939439][T24367] __x64_sys_sendmmsg+0x9c/0x100 [ 1268.939471][T24367] ? lockdep_hardirqs_on+0x7c/0x110 [ 1268.939504][T24367] do_syscall_64+0xcd/0x4c0 [ 1268.939541][T24367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.939566][T24367] RIP: 0033:0x7fad6f58eec9 [ 1268.939585][T24367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.939610][T24367] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1268.939633][T24367] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1268.939649][T24367] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1268.939665][T24367] RBP: 00007fad70346090 R08: 0000000000000000 R09: 0000000000000000 [ 1268.939679][T24367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1268.939694][T24367] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1268.939725][T24367] [ 1269.362253][T24381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 1269.527225][T24388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3046'. [ 1269.537145][T24388] ipvlan0: entered promiscuous mode [ 1269.542405][T24388] ipvlan0: entered allmulticast mode [ 1269.548455][T24388] veth0_vlan: entered allmulticast mode [ 1269.658765][T24391] ptrace attach of "./syz-executor exec"[24393] was attempted by "./syz-executor exec"[24391] [ 1269.711082][T24395] FAULT_INJECTION: forcing a failure. [ 1269.711082][T24395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.725050][T24395] CPU: 1 UID: 0 PID: 24395 Comm: syz.0.3050 Tainted: G U syzkaller #0 PREEMPT(full) [ 1269.725088][T24395] Tainted: [U]=USER [ 1269.725096][T24395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1269.725106][T24395] Call Trace: [ 1269.725112][T24395] [ 1269.725118][T24395] dump_stack_lvl+0x16c/0x1f0 [ 1269.725144][T24395] should_fail_ex+0x512/0x640 [ 1269.725169][T24395] _copy_from_user+0x2e/0xd0 [ 1269.725185][T24395] binder_ioctl+0x51c/0x71f0 [ 1269.725205][T24395] ? tomoyo_path_number_perm+0x295/0x580 [ 1269.725226][T24395] ? tomoyo_path_number_perm+0x18d/0x580 [ 1269.725244][T24395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1269.725262][T24395] ? find_held_lock+0x2b/0x80 [ 1269.725276][T24395] ? __pfx_binder_ioctl+0x10/0x10 [ 1269.725294][T24395] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1269.725316][T24395] ? do_vfs_ioctl+0x128/0x14f0 [ 1269.725338][T24395] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1269.725365][T24395] ? hook_file_ioctl_common+0x145/0x410 [ 1269.725388][T24395] ? __fget_files+0x20e/0x3c0 [ 1269.725406][T24395] ? __pfx_binder_ioctl+0x10/0x10 [ 1269.725423][T24395] __x64_sys_ioctl+0x18b/0x210 [ 1269.725445][T24395] do_syscall_64+0xcd/0x4c0 [ 1269.725468][T24395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.725483][T24395] RIP: 0033:0x7f568b58eec9 [ 1269.725494][T24395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.725509][T24395] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.725523][T24395] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1269.725533][T24395] RDX: 0000000000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1269.725541][T24395] RBP: 00007f568c361090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.725550][T24395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.725558][T24395] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1269.725576][T24395] [ 1269.725721][T24395] binder: 24394:24395 ioctl c0306201 0 returned -14 [ 1269.967072][T24391] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3049'. [ 1270.747319][T24403] FAULT_INJECTION: forcing a failure. [ 1270.747319][T24403] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.769895][T24403] CPU: 1 UID: 0 PID: 24403 Comm: syz.0.3052 Tainted: G U syzkaller #0 PREEMPT(full) [ 1270.769940][T24403] Tainted: [U]=USER [ 1270.769948][T24403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1270.769962][T24403] Call Trace: [ 1270.769971][T24403] [ 1270.769981][T24403] dump_stack_lvl+0x16c/0x1f0 [ 1270.770023][T24403] should_fail_ex+0x512/0x640 [ 1270.770059][T24403] ? __kmalloc_noprof+0xbf/0x510 [ 1270.770091][T24403] ? __vb2_queue_alloc+0x23e/0x1280 [ 1270.770117][T24403] should_failslab+0xc2/0x120 [ 1270.770149][T24403] __kmalloc_noprof+0xd2/0x510 [ 1270.770178][T24403] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 1270.770217][T24403] __vb2_queue_alloc+0x23e/0x1280 [ 1270.770246][T24403] ? __kmalloc_noprof+0x242/0x510 [ 1270.770288][T24403] vb2_core_reqbufs+0xa90/0xfe0 [ 1270.770324][T24403] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1270.770372][T24403] __vb2_init_fileio+0x3f1/0x1100 [ 1270.770413][T24403] __vb2_perform_fileio+0x9c2/0x1660 [ 1270.770451][T24403] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1270.770480][T24403] ? get_pid_task+0xfc/0x250 [ 1270.770521][T24403] vb2_fop_write+0x207/0x3f0 [ 1270.770553][T24403] v4l2_write+0x226/0x360 [ 1270.770589][T24403] ? __pfx_v4l2_write+0x10/0x10 [ 1270.770621][T24403] vfs_write+0x29d/0x11d0 [ 1270.770658][T24403] ? __pfx_vfs_write+0x10/0x10 [ 1270.770683][T24403] ? find_held_lock+0x2b/0x80 [ 1270.770709][T24403] ? __fget_files+0x204/0x3c0 [ 1270.770741][T24403] ? __fget_files+0x20e/0x3c0 [ 1270.770778][T24403] ksys_write+0x12a/0x250 [ 1270.770806][T24403] ? __pfx_ksys_write+0x10/0x10 [ 1270.770844][T24403] do_syscall_64+0xcd/0x4c0 [ 1270.770883][T24403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.770907][T24403] RIP: 0033:0x7f568b58eec9 [ 1270.770933][T24403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.770957][T24403] RSP: 002b:00007f568c340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1270.770981][T24403] RAX: ffffffffffffffda RBX: 00007f568b7e6090 RCX: 00007f568b58eec9 [ 1270.770998][T24403] RDX: 0000000000000008 RSI: 00002000000004c0 RDI: 0000000000000002 [ 1270.771013][T24403] RBP: 00007f568c340090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.771029][T24403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.771043][T24403] R13: 00007f568b7e6128 R14: 00007f568b7e6090 R15: 00007ffeb23146a8 [ 1270.771078][T24403] [ 1271.377542][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 1274.273870][T24486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3068'. [ 1275.156733][T24502] zero sized request [ 1279.836646][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1280.457062][T24604] FAULT_INJECTION: forcing a failure. [ 1280.457062][T24604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1280.496341][T24604] CPU: 0 UID: 0 PID: 24604 Comm: syz.1.3089 Tainted: G U syzkaller #0 PREEMPT(full) [ 1280.496385][T24604] Tainted: [U]=USER [ 1280.496395][T24604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1280.496410][T24604] Call Trace: [ 1280.496420][T24604] [ 1280.496430][T24604] dump_stack_lvl+0x16c/0x1f0 [ 1280.496471][T24604] should_fail_ex+0x512/0x640 [ 1280.496517][T24604] should_fail_alloc_page+0xe7/0x130 [ 1280.496553][T24604] prepare_alloc_pages+0x3c2/0x610 [ 1280.496590][T24604] ? rcu_is_watching+0x12/0xc0 [ 1280.496619][T24604] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1280.496651][T24604] ? css_rstat_updated+0x1c2/0x510 [ 1280.496682][T24604] ? __pfx_css_rstat_updated+0x10/0x10 [ 1280.496710][T24604] ? trace_sched_exit_tp+0xd1/0x120 [ 1280.496750][T24604] ? __schedule+0x11a3/0x5de0 [ 1280.496784][T24604] ? __pfx___schedule+0x10/0x10 [ 1280.496834][T24604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1280.496882][T24604] ? __lock_acquire+0x62e/0x1ce0 [ 1280.496925][T24604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1280.496967][T24604] ? policy_nodemask+0xea/0x4e0 [ 1280.497004][T24604] alloc_pages_mpol+0x1fb/0x550 [ 1280.497040][T24604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1280.497078][T24604] ? __lock_acquire+0x62e/0x1ce0 [ 1280.497115][T24604] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1280.497156][T24604] vma_alloc_folio_noprof+0xed/0x1e0 [ 1280.497194][T24604] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1280.497244][T24604] do_pte_missing+0x2230/0x3ba0 [ 1280.497278][T24604] ? find_held_lock+0x2b/0x80 [ 1280.497315][T24604] __handle_mm_fault+0x152a/0x2a50 [ 1280.497355][T24604] ? __pfx___handle_mm_fault+0x10/0x10 [ 1280.497385][T24604] ? __pte_offset_map_lock+0x174/0x310 [ 1280.497422][T24604] ? find_held_lock+0x2b/0x80 [ 1280.497459][T24604] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1280.497506][T24604] handle_mm_fault+0x589/0xd10 [ 1280.497541][T24604] __get_user_pages+0x551/0x34a0 [ 1280.497592][T24604] ? __pfx___get_user_pages+0x10/0x10 [ 1280.497641][T24604] populate_vma_page_range+0x267/0x3f0 [ 1280.497684][T24604] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1280.497722][T24604] ? __pfx_find_vma_intersection+0x10/0x10 [ 1280.497762][T24604] ? do_mmap+0x69c/0x1210 [ 1280.497810][T24604] __mm_populate+0x1d8/0x380 [ 1280.497838][T24604] ? __pfx___mm_populate+0x10/0x10 [ 1280.497867][T24604] ? up_write+0x1b2/0x520 [ 1280.497909][T24604] vm_mmap_pgoff+0x37f/0x470 [ 1280.497950][T24604] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1280.497995][T24604] ? __x64_sys_futex+0x1e0/0x4c0 [ 1280.498026][T24604] ? __x64_sys_futex+0x1e9/0x4c0 [ 1280.498063][T24604] ksys_mmap_pgoff+0x7d/0x5c0 [ 1280.498098][T24604] ? xfd_validate_state+0x61/0x180 [ 1280.498134][T24604] ? __pfx_do_writev+0x10/0x10 [ 1280.498167][T24604] __x64_sys_mmap+0x125/0x190 [ 1280.498210][T24604] do_syscall_64+0xcd/0x4c0 [ 1280.498253][T24604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.498280][T24604] RIP: 0033:0x7f747298eec9 [ 1280.498304][T24604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.498331][T24604] RSP: 002b:00007f747390e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1280.498356][T24604] RAX: ffffffffffffffda RBX: 00007f7472be5fa0 RCX: 00007f747298eec9 [ 1280.498375][T24604] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1280.498392][T24604] RBP: 00007f7472a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 1280.498410][T24604] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1280.498426][T24604] R13: 00007f7472be6038 R14: 00007f7472be5fa0 R15: 00007ffc38159a38 [ 1280.498463][T24604] [ 1280.958485][ T5874] Bluetooth: hci4: unexpected event 0x35 length: 13 > 6 [ 1281.033321][T24608] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1282.178813][T24644] bond0: option lp_interval: invalid value (0) [ 1282.199708][T24644] bond0: option lp_interval: allowed values 1 - 2147483647 [ 1282.670112][T24653] random: crng reseeded on system resumption [ 1282.701526][T24653] FAULT_INJECTION: forcing a failure. [ 1282.701526][T24653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1282.808259][T24653] CPU: 0 UID: 0 PID: 24653 Comm: syz.3.3099 Tainted: G U syzkaller #0 PREEMPT(full) [ 1282.808302][T24653] Tainted: [U]=USER [ 1282.808312][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1282.808328][T24653] Call Trace: [ 1282.808337][T24653] [ 1282.808347][T24653] dump_stack_lvl+0x16c/0x1f0 [ 1282.808392][T24653] should_fail_ex+0x512/0x640 [ 1282.808436][T24653] should_fail_alloc_page+0xe7/0x130 [ 1282.808483][T24653] prepare_alloc_pages+0x3c2/0x610 [ 1282.808522][T24653] ? rcu_is_watching+0x12/0xc0 [ 1282.808554][T24653] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1282.808599][T24653] ? stack_trace_save+0x8e/0xc0 [ 1282.808630][T24653] ? __pfx_stack_trace_save+0x10/0x10 [ 1282.808664][T24653] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1282.808701][T24653] ? kasan_save_stack+0x42/0x60 [ 1282.808729][T24653] ? kasan_save_stack+0x33/0x60 [ 1282.808764][T24653] ? do_dentry_open+0x97f/0x1530 [ 1282.808794][T24653] ? vfs_open+0x82/0x3f0 [ 1282.808828][T24653] ? path_openat+0x1de4/0x2cb0 [ 1282.808856][T24653] ? do_filp_open+0x20b/0x470 [ 1282.808890][T24653] ? do_sys_openat2+0x11b/0x1d0 [ 1282.808926][T24653] ? __x64_sys_openat+0x174/0x210 [ 1282.808954][T24653] ? do_syscall_64+0xcd/0x4c0 [ 1282.808992][T24653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.809022][T24653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1282.809060][T24653] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1282.809101][T24653] ? policy_nodemask+0xea/0x4e0 [ 1282.809138][T24653] alloc_pages_mpol+0x1fb/0x550 [ 1282.809176][T24653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1282.809221][T24653] alloc_pages_noprof+0x131/0x390 [ 1282.809261][T24653] get_zeroed_page_noprof+0x18/0xb0 [ 1282.809298][T24653] get_image_page+0x18/0x190 [ 1282.809326][T24653] alloc_rtree_node+0x3c/0xb0 [ 1282.809355][T24653] memory_bm_create+0x519/0x810 [ 1282.809398][T24653] create_basic_memory_bitmaps+0xbd/0x320 [ 1282.809433][T24653] snapshot_open+0x235/0x2b0 [ 1282.809464][T24653] ? __pfx_snapshot_open+0x10/0x10 [ 1282.809496][T24653] misc_open+0x35a/0x420 [ 1282.809529][T24653] ? __pfx_misc_open+0x10/0x10 [ 1282.809559][T24653] chrdev_open+0x231/0x6a0 [ 1282.809592][T24653] ? __pfx_apparmor_file_open+0x10/0x10 [ 1282.809621][T24653] ? __pfx_chrdev_open+0x10/0x10 [ 1282.809657][T24653] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1282.809694][T24653] do_dentry_open+0x97f/0x1530 [ 1282.809727][T24653] ? __pfx_chrdev_open+0x10/0x10 [ 1282.809769][T24653] vfs_open+0x82/0x3f0 [ 1282.809811][T24653] path_openat+0x1de4/0x2cb0 [ 1282.809856][T24653] ? __pfx_path_openat+0x10/0x10 [ 1282.809898][T24653] do_filp_open+0x20b/0x470 [ 1282.809930][T24653] ? __pfx_do_filp_open+0x10/0x10 [ 1282.809994][T24653] ? alloc_fd+0x471/0x7d0 [ 1282.810035][T24653] do_sys_openat2+0x11b/0x1d0 [ 1282.810074][T24653] ? __pfx_do_sys_openat2+0x10/0x10 [ 1282.810128][T24653] __x64_sys_openat+0x174/0x210 [ 1282.810152][T24653] ? __pfx___x64_sys_openat+0x10/0x10 [ 1282.810192][T24653] do_syscall_64+0xcd/0x4c0 [ 1282.810232][T24653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.810257][T24653] RIP: 0033:0x7fad6f58eec9 [ 1282.810279][T24653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1282.810307][T24653] RSP: 002b:00007fad70346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1282.810333][T24653] RAX: ffffffffffffffda RBX: 00007fad6f7e5fa0 RCX: 00007fad6f58eec9 [ 1282.810352][T24653] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1282.810371][T24653] RBP: 00007fad6f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1282.810388][T24653] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 1282.810404][T24653] R13: 00007fad6f7e6038 R14: 00007fad6f7e5fa0 R15: 00007ffe19ba3ea8 [ 1282.810442][T24653] [ 1284.378533][T24673] FAULT_INJECTION: forcing a failure. [ 1284.378533][T24673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.560047][T24673] CPU: 1 UID: 0 PID: 24673 Comm: syz.0.3103 Tainted: G U syzkaller #0 PREEMPT(full) [ 1284.560083][T24673] Tainted: [U]=USER [ 1284.560091][T24673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1284.560103][T24673] Call Trace: [ 1284.560111][T24673] [ 1284.560120][T24673] dump_stack_lvl+0x16c/0x1f0 [ 1284.560160][T24673] should_fail_ex+0x512/0x640 [ 1284.560201][T24673] _copy_from_user+0x2e/0xd0 [ 1284.560227][T24673] memdup_user+0x6b/0xe0 [ 1284.560258][T24673] kvm_vcpu_ioctl+0x2f5/0x1690 [ 1284.560293][T24673] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1284.560323][T24673] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1284.560361][T24673] ? do_vfs_ioctl+0x128/0x14f0 [ 1284.560399][T24673] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1284.560444][T24673] ? find_held_lock+0x2b/0x80 [ 1284.560469][T24673] ? hook_file_ioctl_common+0x145/0x410 [ 1284.560517][T24673] ? __fget_files+0x20e/0x3c0 [ 1284.560549][T24673] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1284.560581][T24673] __x64_sys_ioctl+0x18b/0x210 [ 1284.560620][T24673] do_syscall_64+0xcd/0x4c0 [ 1284.560658][T24673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.560681][T24673] RIP: 0033:0x7f568b58eec9 [ 1284.560700][T24673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.560725][T24673] RSP: 002b:00007f568c340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.560748][T24673] RAX: ffffffffffffffda RBX: 00007f568b7e6090 RCX: 00007f568b58eec9 [ 1284.560766][T24673] RDX: 0000000000000000 RSI: 000000004138ae84 RDI: 0000000000000006 [ 1284.560780][T24673] RBP: 00007f568c340090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.560794][T24673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1284.560809][T24673] R13: 00007f568b7e6128 R14: 00007f568b7e6090 R15: 00007ffeb23146a8 [ 1284.560845][T24673] [ 1286.306643][T24699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1286.312965][T24699] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1286.343250][T24699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1286.393771][T24699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1286.898989][T24711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3111'. [ 1286.908460][T24711] ipvlan0: entered promiscuous mode [ 1286.927341][T24711] ipvlan0: entered allmulticast mode [ 1286.933681][T24711] veth0_vlan: entered allmulticast mode [ 1287.858043][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 1287.963039][T24727] capability: warning: `syz.2.3114' uses 32-bit capabilities (legacy support in use) [ 1288.363721][T22418] Bluetooth: hci4: command 0x0406 tx timeout [ 1288.369765][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 1288.443801][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 1291.616498][T24784] FAULT_INJECTION: forcing a failure. [ 1291.616498][T24784] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.648580][T24784] CPU: 0 UID: 0 PID: 24784 Comm: syz.2.3125 Tainted: G U syzkaller #0 PREEMPT(full) [ 1291.648605][T24784] Tainted: [U]=USER [ 1291.648610][T24784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1291.648619][T24784] Call Trace: [ 1291.648624][T24784] [ 1291.648630][T24784] dump_stack_lvl+0x16c/0x1f0 [ 1291.648655][T24784] should_fail_ex+0x512/0x640 [ 1291.648676][T24784] ? __kvmalloc_node_noprof+0x124/0x620 [ 1291.648695][T24784] should_failslab+0xc2/0x120 [ 1291.648714][T24784] __kvmalloc_node_noprof+0x137/0x620 [ 1291.648730][T24784] ? io_alloc_cache_init+0x33/0x170 [ 1291.648747][T24784] ? io_alloc_cache_init+0x33/0x170 [ 1291.648759][T24784] io_alloc_cache_init+0x33/0x170 [ 1291.648774][T24784] io_uring_setup+0x633/0x20c0 [ 1291.648796][T24784] ? __pfx_io_uring_setup+0x10/0x10 [ 1291.648815][T24784] ? do_futex+0x122/0x350 [ 1291.648839][T24784] ? __pfx_do_futex+0x10/0x10 [ 1291.648866][T24784] ? xfd_validate_state+0x61/0x180 [ 1291.648886][T24784] ? __pfx_ksys_write+0x10/0x10 [ 1291.648906][T24784] __x64_sys_io_uring_setup+0xc2/0x170 [ 1291.648926][T24784] do_syscall_64+0xcd/0x4c0 [ 1291.648948][T24784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.648963][T24784] RIP: 0033:0x7ff112b8eec9 [ 1291.648975][T24784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.648989][T24784] RSP: 002b:00007ff1139bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1291.649003][T24784] RAX: ffffffffffffffda RBX: 00007ff112de6090 RCX: 00007ff112b8eec9 [ 1291.649012][T24784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000004a [ 1291.649020][T24784] RBP: 00007ff112c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1291.649029][T24784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.649037][T24784] R13: 00007ff112de6128 R14: 00007ff112de6090 R15: 00007fffb0d68348 [ 1291.649055][T24784] [ 1291.924713][T24791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3126'. [ 1292.753581][T24804] sctp: [Deprecated]: syz.2.3128 (pid 24804) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1292.753581][T24804] Use struct sctp_sack_info instead [ 1293.753100][T24817] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1293.807986][T24817] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3129'. [ 1297.471426][T24886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 1298.542704][T24915] FAULT_INJECTION: forcing a failure. [ 1298.542704][T24915] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.609948][T24915] CPU: 1 UID: 0 PID: 24915 Comm: syz.0.3148 Tainted: G U syzkaller #0 PREEMPT(full) [ 1298.609987][T24915] Tainted: [U]=USER [ 1298.609994][T24915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1298.610008][T24915] Call Trace: [ 1298.610016][T24915] [ 1298.610026][T24915] dump_stack_lvl+0x16c/0x1f0 [ 1298.610064][T24915] should_fail_ex+0x512/0x640 [ 1298.610096][T24915] ? __kmalloc_noprof+0xbf/0x510 [ 1298.610125][T24915] ? __vb2_queue_alloc+0x23e/0x1280 [ 1298.610149][T24915] should_failslab+0xc2/0x120 [ 1298.610178][T24915] __kmalloc_noprof+0xd2/0x510 [ 1298.610209][T24915] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 1298.610246][T24915] __vb2_queue_alloc+0x23e/0x1280 [ 1298.610272][T24915] ? trace_kmalloc+0x2b/0xd0 [ 1298.610300][T24915] ? __kmalloc_noprof+0x242/0x510 [ 1298.610338][T24915] vb2_core_reqbufs+0xa90/0xfe0 [ 1298.610373][T24915] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1298.610421][T24915] __vb2_init_fileio+0x3f1/0x1100 [ 1298.610448][T24915] ? lockdep_hardirqs_on+0x7c/0x110 [ 1298.610482][T24915] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1298.610516][T24915] ? __pollwait+0x271/0x490 [ 1298.610545][T24915] vb2_core_poll+0x486/0x700 [ 1298.610576][T24915] vb2_poll+0x33/0x150 [ 1298.610602][T24915] vb2_fop_poll+0x10f/0x2c0 [ 1298.610630][T24915] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1298.610655][T24915] v4l2_poll+0x160/0x320 [ 1298.610688][T24915] ? __pfx_v4l2_poll+0x10/0x10 [ 1298.610717][T24915] do_sys_poll+0x55c/0xdf0 [ 1298.610756][T24915] ? __pfx_do_sys_poll+0x10/0x10 [ 1298.610816][T24915] ? find_held_lock+0x2b/0x80 [ 1298.610842][T24915] ? __pfx___pollwait+0x10/0x10 [ 1298.610872][T24915] ? __pfx_pollwake+0x10/0x10 [ 1298.610951][T24915] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1298.610997][T24915] ? set_user_sigmask+0x21b/0x2b0 [ 1298.611024][T24915] ? __pfx_set_user_sigmask+0x10/0x10 [ 1298.611050][T24915] ? __fget_files+0x20e/0x3c0 [ 1298.611083][T24915] __x64_sys_ppoll+0x254/0x2d0 [ 1298.611112][T24915] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1298.611137][T24915] ? ksys_write+0x1ac/0x250 [ 1298.611166][T24915] ? __pfx_ksys_write+0x10/0x10 [ 1298.611221][T24915] do_syscall_64+0xcd/0x4c0 [ 1298.611260][T24915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.611285][T24915] RIP: 0033:0x7f568b58eec9 [ 1298.611305][T24915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.611329][T24915] RSP: 002b:00007f568c361038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1298.611353][T24915] RAX: ffffffffffffffda RBX: 00007f568b7e5fa0 RCX: 00007f568b58eec9 [ 1298.611370][T24915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 1298.611386][T24915] RBP: 00007f568c361090 R08: 0000000000000008 R09: 0000000000000000 [ 1298.611402][T24915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.611417][T24915] R13: 00007f568b7e6038 R14: 00007f568b7e5fa0 R15: 00007ffeb23146a8 [ 1298.611451][T24915] [ 1299.002031][T24919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3149'. [ 1299.817696][T24920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1299.835610][T24920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1299.841905][T24920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1299.867527][T24920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1300.140615][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.151176][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.297226][T24945] FAULT_INJECTION: forcing a failure. [ 1300.297226][T24945] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.372006][T24949] bond0: option all_slaves_active: invalid value () [ 1300.391345][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.3.3155 Tainted: G U syzkaller #0 PREEMPT(full) [ 1300.391383][T24945] Tainted: [U]=USER [ 1300.391392][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1300.391406][T24945] Call Trace: [ 1300.391416][T24945] [ 1300.391426][T24945] dump_stack_lvl+0x16c/0x1f0 [ 1300.391466][T24945] should_fail_ex+0x512/0x640 [ 1300.391508][T24945] should_failslab+0xc2/0x120 [ 1300.391541][T24945] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1300.391573][T24945] ? skb_clone+0x190/0x3f0 [ 1300.391614][T24945] skb_clone+0x190/0x3f0 [ 1300.391650][T24945] netlink_deliver_tap+0xabd/0xd30 [ 1300.391693][T24945] netlink_unicast+0x64c/0x870 [ 1300.391735][T24945] ? __pfx_netlink_unicast+0x10/0x10 [ 1300.391773][T24945] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1300.391807][T24945] ? __lock_acquire+0xb97/0x1ce0 [ 1300.391848][T24945] netlink_sendmsg+0x8d1/0xdd0 [ 1300.391891][T24945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1300.391933][T24945] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1300.391966][T24945] ____sys_sendmsg+0xa98/0xc70 [ 1300.391995][T24945] ? copy_msghdr_from_user+0x10a/0x160 [ 1300.392031][T24945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1300.392075][T24945] ___sys_sendmsg+0x134/0x1d0 [ 1300.392113][T24945] ? __pfx____sys_sendmsg+0x10/0x10 [ 1300.392193][T24945] __sys_sendmsg+0x16d/0x220 [ 1300.392231][T24945] ? __pfx___sys_sendmsg+0x10/0x10 [ 1300.392295][T24945] do_syscall_64+0xcd/0x4c0 [ 1300.392338][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.392363][T24945] RIP: 0033:0x7fad6f58eec9 [ 1300.392383][T24945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.392407][T24945] RSP: 002b:00007fad6d7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1300.392431][T24945] RAX: ffffffffffffffda RBX: 00007fad6f7e6090 RCX: 00007fad6f58eec9 [ 1300.392448][T24945] RDX: 000000002404c810 RSI: 0000200000000240 RDI: 0000000000000003 [ 1300.392464][T24945] RBP: 00007fad6d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1300.392479][T24945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1300.392494][T24945] R13: 00007fad6f7e6128 R14: 00007fad6f7e6090 R15: 00007ffe19ba3ea8 [ 1300.392528][T24945] [ 1301.323658][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 1301.412977][T24960] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3159'. [ 1301.884905][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 1301.885227][T22418] Bluetooth: hci2: command 0x0406 tx timeout [ 1301.891101][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 1302.196996][ T5874] Bluetooth: hci0: ISO packet too small [ 1302.508096][T24993] binder: 24992:24993 ioctl c0306201 0 returned -14 [ 1302.524342][T24993] FAULT_INJECTION: forcing a failure. [ 1302.524342][T24993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.573515][T24993] CPU: 0 UID: 0 PID: 24993 Comm: syz.2.3169 Tainted: G U syzkaller #0 PREEMPT(full) [ 1302.573553][T24993] Tainted: [U]=USER [ 1302.573561][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1302.573576][T24993] Call Trace: [ 1302.573584][T24993] [ 1302.573594][T24993] dump_stack_lvl+0x16c/0x1f0 [ 1302.573631][T24993] should_fail_ex+0x512/0x640 [ 1302.573670][T24993] _copy_to_user+0x32/0xd0 [ 1302.573697][T24993] simple_read_from_buffer+0xcb/0x170 [ 1302.573723][T24993] proc_fail_nth_read+0x197/0x240 [ 1302.573752][T24993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1302.573783][T24993] ? rw_verify_area+0xcf/0x6c0 [ 1302.573808][T24993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1302.573836][T24993] vfs_read+0x1e1/0xcf0 [ 1302.573869][T24993] ? __pfx___mutex_lock+0x10/0x10 [ 1302.573906][T24993] ? __pfx_vfs_read+0x10/0x10 [ 1302.573945][T24993] ? __fget_files+0x20e/0x3c0 [ 1302.573983][T24993] ksys_read+0x12a/0x250 [ 1302.574011][T24993] ? __pfx_ksys_read+0x10/0x10 [ 1302.574050][T24993] do_syscall_64+0xcd/0x4c0 [ 1302.574090][T24993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.574122][T24993] RIP: 0033:0x7ff112b8d8dc [ 1302.574143][T24993] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1302.574167][T24993] RSP: 002b:00007ff1139dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1302.574191][T24993] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8d8dc [ 1302.574208][T24993] RDX: 000000000000000f RSI: 00007ff1139dd0a0 RDI: 0000000000000004 [ 1302.574223][T24993] RBP: 00007ff1139dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.574239][T24993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.574253][T24993] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1302.574289][T24993] [ 1303.258520][T25005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1304.266244][T25014] sctp: [Deprecated]: syz.0.3175 (pid 25014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1304.266244][T25014] Use struct sctp_sack_info instead [ 1305.060251][T25037] random: crng reseeded on system resumption [ 1305.518067][T25047] bridge0: port 3(team0) entered blocking state [ 1305.549806][T25047] bridge0: port 3(team0) entered disabled state [ 1305.559452][T25047] team0: entered allmulticast mode [ 1305.594901][T25047] team_slave_0: entered allmulticast mode [ 1305.600674][T25047] team_slave_1: entered allmulticast mode [ 1305.667276][T25047] team0: entered promiscuous mode [ 1305.672414][T25047] team_slave_0: entered promiscuous mode [ 1305.684109][T25047] team_slave_1: entered promiscuous mode [ 1305.732610][T25047] bridge0: port 3(team0) entered blocking state [ 1305.739062][T25047] bridge0: port 3(team0) entered forwarding state [ 1306.171567][T25068] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3185'. [ 1306.738043][T25081] random: crng reseeded on system resumption [ 1310.650952][T25156] FAULT_INJECTION: forcing a failure. [ 1310.650952][T25156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.723607][T25156] CPU: 0 UID: 0 PID: 25156 Comm: syz.2.3198 Tainted: G U syzkaller #0 PREEMPT(full) [ 1310.723645][T25156] Tainted: [U]=USER [ 1310.723653][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1310.723667][T25156] Call Trace: [ 1310.723676][T25156] [ 1310.723685][T25156] dump_stack_lvl+0x16c/0x1f0 [ 1310.723725][T25156] should_fail_ex+0x512/0x640 [ 1310.723768][T25156] _copy_to_user+0x32/0xd0 [ 1310.723798][T25156] simple_read_from_buffer+0xcb/0x170 [ 1310.723827][T25156] proc_fail_nth_read+0x197/0x240 [ 1310.723857][T25156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.723888][T25156] ? rw_verify_area+0xcf/0x6c0 [ 1310.723914][T25156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1310.723941][T25156] vfs_read+0x1e1/0xcf0 [ 1310.723974][T25156] ? __pfx___mutex_lock+0x10/0x10 [ 1310.724011][T25156] ? __pfx_vfs_read+0x10/0x10 [ 1310.724050][T25156] ? __fget_files+0x20e/0x3c0 [ 1310.724088][T25156] ksys_read+0x12a/0x250 [ 1310.724123][T25156] ? __pfx_ksys_read+0x10/0x10 [ 1310.724152][T25156] ? fput+0x9b/0xd0 [ 1310.724192][T25156] do_syscall_64+0xcd/0x4c0 [ 1310.724231][T25156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.724257][T25156] RIP: 0033:0x7ff112b8d8dc [ 1310.724277][T25156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1310.724301][T25156] RSP: 002b:00007ff1139dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1310.724324][T25156] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8d8dc [ 1310.724342][T25156] RDX: 000000000000000f RSI: 00007ff1139dd0a0 RDI: 0000000000000004 [ 1310.724357][T25156] RBP: 00007ff1139dd090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.724371][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.724387][T25156] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1310.724422][T25156] [ 1310.920853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1311.034525][T25150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1311.424343][T25168] FAULT_INJECTION: forcing a failure. [ 1311.424343][T25168] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1311.630470][T25168] CPU: 0 UID: 0 PID: 25168 Comm: syz.3.3199 Tainted: G U syzkaller #0 PREEMPT(full) [ 1311.630513][T25168] Tainted: [U]=USER [ 1311.630523][T25168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1311.630539][T25168] Call Trace: [ 1311.630549][T25168] [ 1311.630559][T25168] dump_stack_lvl+0x16c/0x1f0 [ 1311.630602][T25168] should_fail_ex+0x512/0x640 [ 1311.630647][T25168] get_futex_key+0x1d0/0x1560 [ 1311.630685][T25168] ? __pfx_get_futex_key+0x10/0x10 [ 1311.630730][T25168] futex_wake+0xea/0x530 [ 1311.630770][T25168] ? rcu_is_watching+0x12/0xc0 [ 1311.630799][T25168] ? __pfx_futex_wake+0x10/0x10 [ 1311.630840][T25168] ? kmem_cache_free+0x2d1/0x4d0 [ 1311.630868][T25168] ? fd_install+0x225/0x750 [ 1311.630894][T25168] ? putname+0x154/0x1a0 [ 1311.630935][T25168] do_futex+0x1e3/0x350 [ 1311.630969][T25168] ? __pfx_do_futex+0x10/0x10 [ 1311.631010][T25168] __x64_sys_futex+0x1e0/0x4c0 [ 1311.631045][T25168] ? __x64_sys_openat+0x174/0x210 [ 1311.631070][T25168] ? __pfx___x64_sys_futex+0x10/0x10 [ 1311.631117][T25168] do_syscall_64+0xcd/0x4c0 [ 1311.631160][T25168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.631186][T25168] RIP: 0033:0x7fad6f58eec9 [ 1311.631208][T25168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.631234][T25168] RSP: 002b:00007fad6d7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1311.631259][T25168] RAX: ffffffffffffffda RBX: 00007fad6f7e6098 RCX: 00007fad6f58eec9 [ 1311.631285][T25168] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fad6f7e609c [ 1311.631303][T25168] RBP: 00007fad6f7e6090 R08: 00007fad70347000 R09: 0000000000000000 [ 1311.631320][T25168] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1311.631337][T25168] R13: 00007fad6f7e6128 R14: 00007ffe19ba3dc0 R15: 00007ffe19ba3ea8 [ 1311.631373][T25168] [ 1312.974205][T25190] FAULT_INJECTION: forcing a failure. [ 1312.974205][T25190] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.990392][T25190] CPU: 1 UID: 0 PID: 25190 Comm: syz.2.3209 Tainted: G U syzkaller #0 PREEMPT(full) [ 1312.990434][T25190] Tainted: [U]=USER [ 1312.990444][T25190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1312.990461][T25190] Call Trace: [ 1312.990470][T25190] [ 1312.990481][T25190] dump_stack_lvl+0x16c/0x1f0 [ 1312.990527][T25190] should_fail_ex+0x512/0x640 [ 1312.990567][T25190] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1312.990603][T25190] should_failslab+0xc2/0x120 [ 1312.990639][T25190] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1312.990674][T25190] ? alloc_empty_file+0x55/0x1e0 [ 1312.990717][T25190] alloc_empty_file+0x55/0x1e0 [ 1312.990756][T25190] path_openat+0xda/0x2cb0 [ 1312.990785][T25190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.990825][T25190] ? __pfx_path_openat+0x10/0x10 [ 1312.990858][T25190] ? __lock_acquire+0xb97/0x1ce0 [ 1312.990896][T25190] do_filp_open+0x20b/0x470 [ 1312.990937][T25190] ? __pfx_do_filp_open+0x10/0x10 [ 1312.990995][T25190] ? _raw_spin_unlock+0x28/0x50 [ 1312.991027][T25190] ? alloc_fd+0x471/0x7d0 [ 1312.991066][T25190] do_sys_openat2+0x11b/0x1d0 [ 1312.991104][T25190] ? __pfx_do_sys_openat2+0x10/0x10 [ 1312.991155][T25190] __x64_sys_open+0x153/0x1e0 [ 1312.991194][T25190] ? __pfx___x64_sys_open+0x10/0x10 [ 1312.991239][T25190] ? rcu_is_watching+0x12/0xc0 [ 1312.991270][T25190] do_syscall_64+0xcd/0x4c0 [ 1312.991311][T25190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.991336][T25190] RIP: 0033:0x7ff112b8eec9 [ 1312.991357][T25190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.991384][T25190] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1312.991410][T25190] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1312.991429][T25190] RDX: 0000000000000155 RSI: 0000000000022240 RDI: 0000000000000000 [ 1312.991446][T25190] RBP: 00007ff112c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1312.991463][T25190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.991479][T25190] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1312.991517][T25190] [ 1313.588421][T25175] syz.3.3203 (25175) used greatest stack depth: 18712 bytes left [ 1315.847156][ T5874] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1315.847193][ T5874] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 1315.862067][ T5874] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 1315.862097][ T5874] Bluetooth: hci4: adv larger than maximum supported [ 1315.869262][ T5874] Bluetooth: hci4: adv larger than maximum supported [ 1315.876002][ T5874] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1317.467155][T25240] usb usb36: usbfs: process 25240 (syz.3.3218) did not claim interface 0 before use [ 1317.544954][T25243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input16 [ 1317.629187][T25248] sd 0:0:1:0: PR command failed: 1026 [ 1317.636405][T25248] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1317.643286][T25248] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1317.892192][T25252] random: crng reseeded on system resumption [ 1317.928823][T25252] FAULT_INJECTION: forcing a failure. [ 1317.928823][T25252] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.970206][T25252] CPU: 1 UID: 0 PID: 25252 Comm: syz.2.3223 Tainted: G U syzkaller #0 PREEMPT(full) [ 1317.970250][T25252] Tainted: [U]=USER [ 1317.970259][T25252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1317.970274][T25252] Call Trace: [ 1317.970283][T25252] [ 1317.970293][T25252] dump_stack_lvl+0x16c/0x1f0 [ 1317.970336][T25252] should_fail_ex+0x512/0x640 [ 1317.970373][T25252] ? lockdep_hardirqs_on+0x7c/0x110 [ 1317.970415][T25252] should_failslab+0xc2/0x120 [ 1317.970450][T25252] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1317.970477][T25252] ? preempt_schedule_common+0x44/0xc0 [ 1317.970512][T25252] ? async_schedule_node_domain+0x54/0x120 [ 1317.970547][T25252] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1317.970583][T25252] async_schedule_node_domain+0x54/0x120 [ 1317.970620][T25252] dev_cache_fw_image+0x38e/0x490 [ 1317.970657][T25252] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1317.970698][T25252] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1317.970733][T25252] dpm_for_each_dev+0x5d/0xb0 [ 1317.970773][T25252] fw_pm_notify+0x81/0x150 [ 1317.970804][T25252] notifier_call_chain+0xb9/0x410 [ 1317.970838][T25252] ? __pfx_fw_pm_notify+0x10/0x10 [ 1317.970880][T25252] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1317.970918][T25252] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1317.970967][T25252] pm_notifier_call_chain_robust+0x27/0x60 [ 1317.971004][T25252] snapshot_open+0x218/0x2b0 [ 1317.971034][T25252] ? __pfx_snapshot_open+0x10/0x10 [ 1317.971067][T25252] misc_open+0x35a/0x420 [ 1317.971099][T25252] ? __pfx_misc_open+0x10/0x10 [ 1317.971131][T25252] chrdev_open+0x231/0x6a0 [ 1317.971165][T25252] ? __pfx_apparmor_file_open+0x10/0x10 [ 1317.971195][T25252] ? __pfx_chrdev_open+0x10/0x10 [ 1317.971232][T25252] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1317.971270][T25252] do_dentry_open+0x97f/0x1530 [ 1317.971303][T25252] ? __pfx_chrdev_open+0x10/0x10 [ 1317.971344][T25252] vfs_open+0x82/0x3f0 [ 1317.971388][T25252] path_openat+0x1de4/0x2cb0 [ 1317.971433][T25252] ? __pfx_path_openat+0x10/0x10 [ 1317.971476][T25252] do_filp_open+0x20b/0x470 [ 1317.971508][T25252] ? __pfx_do_filp_open+0x10/0x10 [ 1317.971570][T25252] ? alloc_fd+0x471/0x7d0 [ 1317.971612][T25252] do_sys_openat2+0x11b/0x1d0 [ 1317.971650][T25252] ? __pfx_do_sys_openat2+0x10/0x10 [ 1317.971706][T25252] __x64_sys_openat+0x174/0x210 [ 1317.971731][T25252] ? __pfx___x64_sys_openat+0x10/0x10 [ 1317.971779][T25252] do_syscall_64+0xcd/0x4c0 [ 1317.971823][T25252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.971851][T25252] RIP: 0033:0x7ff112b8eec9 [ 1317.971874][T25252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.971901][T25252] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1317.971927][T25252] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1317.971946][T25252] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1317.971964][T25252] RBP: 00007ff112c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1317.971980][T25252] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1317.971997][T25252] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1317.972037][T25252] [ 1318.296813][T25252] [ 1318.299164][T25252] ============================================ [ 1318.305299][T25252] WARNING: possible recursive locking detected [ 1318.311447][T25252] syzkaller #0 Tainted: G U [ 1318.317404][T25252] -------------------------------------------- [ 1318.323533][T25252] syz.2.3223/25252 is trying to acquire lock: [ 1318.329586][T25252] ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 1318.337491][T25252] [ 1318.337491][T25252] but task is already holding lock: [ 1318.344841][T25252] ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1318.353038][T25252] [ 1318.353038][T25252] other info that might help us debug this: [ 1318.361077][T25252] Possible unsafe locking scenario: [ 1318.361077][T25252] [ 1318.368513][T25252] CPU0 [ 1318.371787][T25252] ---- [ 1318.375049][T25252] lock(fw_lock); [ 1318.378754][T25252] lock(fw_lock); [ 1318.382455][T25252] [ 1318.382455][T25252] *** DEADLOCK *** [ 1318.382455][T25252] [ 1318.390578][T25252] May be due to missing lock nesting notation [ 1318.390578][T25252] [ 1318.398905][T25252] 5 locks held by syz.2.3223/25252: [ 1318.404085][T25252] #0: ffffffff8f3080e8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 1318.412514][T25252] #1: ffffffff8e484b88 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 1318.422852][T25252] #2: ffffffff8e4c4ff0 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 1318.434669][T25252] #3: ffffffff8f51dc68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 1318.443273][T25252] #4: ffffffff8f518668 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 1318.452565][T25252] [ 1318.452565][T25252] stack backtrace: [ 1318.458443][T25252] CPU: 1 UID: 0 PID: 25252 Comm: syz.2.3223 Tainted: G U syzkaller #0 PREEMPT(full) [ 1318.458465][T25252] Tainted: [U]=USER [ 1318.458470][T25252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1318.458478][T25252] Call Trace: [ 1318.458484][T25252] [ 1318.458489][T25252] dump_stack_lvl+0x116/0x1f0 [ 1318.458513][T25252] print_deadlock_bug+0x1e9/0x240 [ 1318.458531][T25252] __lock_acquire+0x1133/0x1ce0 [ 1318.458550][T25252] ? kasan_save_track+0x14/0x30 [ 1318.458568][T25252] lock_acquire+0x179/0x350 [ 1318.458585][T25252] ? assign_fw+0x4e/0x640 [ 1318.458603][T25252] ? __pfx___might_resched+0x10/0x10 [ 1318.458617][T25252] ? path_openat+0x1de4/0x2cb0 [ 1318.458633][T25252] ? do_filp_open+0x20b/0x470 [ 1318.458647][T25252] ? do_sys_openat2+0x11b/0x1d0 [ 1318.458668][T25252] ? assign_fw+0x4e/0x640 [ 1318.458687][T25252] __mutex_lock+0x193/0x1060 [ 1318.458708][T25252] ? assign_fw+0x4e/0x640 [ 1318.458727][T25252] ? __pfx___mutex_lock+0x10/0x10 [ 1318.458749][T25252] ? kasan_quarantine_put+0x10a/0x240 [ 1318.458764][T25252] ? lockdep_hardirqs_on+0x7c/0x110 [ 1318.458785][T25252] ? assign_fw+0x4e/0x640 [ 1318.458801][T25252] assign_fw+0x4e/0x640 [ 1318.458817][T25252] ? _request_firmware+0x957/0x1470 [ 1318.458836][T25252] _request_firmware+0x988/0x1470 [ 1318.458856][T25252] ? __pfx__request_firmware+0x10/0x10 [ 1318.458874][T25252] ? dump_stack_lvl+0x185/0x1f0 [ 1318.458893][T25252] ? lockdep_hardirqs_on+0x7c/0x110 [ 1318.458913][T25252] __async_dev_cache_fw_image+0xb1/0x340 [ 1318.458932][T25252] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1318.458951][T25252] ? mark_held_locks+0x49/0x80 [ 1318.458967][T25252] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1318.458986][T25252] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 1318.459005][T25252] async_schedule_node_domain+0xd4/0x120 [ 1318.459022][T25252] dev_cache_fw_image+0x38e/0x490 [ 1318.459040][T25252] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1318.459070][T25252] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 1318.459099][T25252] dpm_for_each_dev+0x5d/0xb0 [ 1318.459120][T25252] fw_pm_notify+0x81/0x150 [ 1318.459136][T25252] notifier_call_chain+0xb9/0x410 [ 1318.459153][T25252] ? __pfx_fw_pm_notify+0x10/0x10 [ 1318.459170][T25252] blocking_notifier_call_chain_robust+0xc8/0x160 [ 1318.459189][T25252] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 1318.459210][T25252] pm_notifier_call_chain_robust+0x27/0x60 [ 1318.459229][T25252] snapshot_open+0x218/0x2b0 [ 1318.459245][T25252] ? __pfx_snapshot_open+0x10/0x10 [ 1318.459261][T25252] misc_open+0x35a/0x420 [ 1318.459277][T25252] ? __pfx_misc_open+0x10/0x10 [ 1318.459293][T25252] chrdev_open+0x231/0x6a0 [ 1318.459310][T25252] ? __pfx_apparmor_file_open+0x10/0x10 [ 1318.459326][T25252] ? __pfx_chrdev_open+0x10/0x10 [ 1318.459343][T25252] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1318.459361][T25252] do_dentry_open+0x97f/0x1530 [ 1318.459377][T25252] ? __pfx_chrdev_open+0x10/0x10 [ 1318.459396][T25252] vfs_open+0x82/0x3f0 [ 1318.459415][T25252] path_openat+0x1de4/0x2cb0 [ 1318.459433][T25252] ? __pfx_path_openat+0x10/0x10 [ 1318.459456][T25252] do_filp_open+0x20b/0x470 [ 1318.459471][T25252] ? __pfx_do_filp_open+0x10/0x10 [ 1318.459492][T25252] ? alloc_fd+0x471/0x7d0 [ 1318.459509][T25252] do_sys_openat2+0x11b/0x1d0 [ 1318.459529][T25252] ? __pfx_do_sys_openat2+0x10/0x10 [ 1318.459551][T25252] __x64_sys_openat+0x174/0x210 [ 1318.459563][T25252] ? __pfx___x64_sys_openat+0x10/0x10 [ 1318.459578][T25252] do_syscall_64+0xcd/0x4c0 [ 1318.459599][T25252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.459613][T25252] RIP: 0033:0x7ff112b8eec9 [ 1318.459625][T25252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1318.459639][T25252] RSP: 002b:00007ff1139dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1318.459653][T25252] RAX: ffffffffffffffda RBX: 00007ff112de5fa0 RCX: 00007ff112b8eec9 [ 1318.459662][T25252] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1318.459671][T25252] RBP: 00007ff112c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1318.459679][T25252] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000 [ 1318.459689][T25252] R13: 00007ff112de6038 R14: 00007ff112de5fa0 R15: 00007fffb0d68348 [ 1318.459702][T25252]