last executing test programs: 3m29.63008555s ago: executing program 1 (id=2608): socket(0x1e, 0x800, 0x84) mmap$auto(0xfffffffffffffffc, 0x8, 0x1, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x77, 0x0, 0x0, 0xfffffffffffffffd, 0x5) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)=""/1, 0x5) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0x1d, 0x5, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/39, 0x1c) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r2, 0x0, r2, 0x0, 0x2, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x800000948b, 0x3, 0x95f4da2d, 0x10000c, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x3, 0x9, 0x1, 0x3, 0x400, 0x5, 0x1, 0x62, 0xc, 0x7, 0x3ff, 0x7fff, 0x2, 0x200000000000006]}, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r4, 0x5457, 0xd8) socket(0x1d, 0x2, 0x3) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/smaps_rollup\x00', 0x60002, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 3m27.904812159s ago: executing program 1 (id=2612): r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x2e4440, 0x0) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={0xffffffffffffffff, 0xdc8}) (async) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/syscall\x00', 0x440003, 0x0) msgctl$auto(0xe41, 0x7, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee00, 0x8, 0x6, 0xffffffff, 0x1}, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4, 0x1, 0x400, 0xfffffffffffffff3, 0x11, 0x5, 0x4081, 0x2, 0xe, @inferred=0x0, @raw}) ioprio_set$auto(0xffff8333, r3, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), r1) (async) r6 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/usb/usbmon/35s\x00', 0x4680, 0x0) sendmsg$auto_NETDEV_CMD_BIND_RX(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r6}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_IFINDEX={0x8}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x6}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffffffd}]}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x40004) (async) r7 = io_uring_setup$auto(0x6, &(0x7f0000000380)={0x4, 0x5, 0x1, 0x34, 0xffffe876, 0x10, r1, [0x6, 0x8, 0x800], {0x1, 0x800, 0x10000, 0xc279, 0x3, 0x7, 0xa4c, 0x6, 0x1}, {0xfffffffd, 0x6, 0x4, 0x10a, 0x9, 0x4, 0x2, 0x5, 0xa8f}}) ioperm$auto(0x6, 0x1, 0x7) (async) read$auto_dai_list_fops_(r1, &(0x7f0000000400)=""/181, 0xb5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x10080, 0x0) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/security/tomoyo/query\x00', 0x0, 0x0) r10 = pidfd_getfd$auto(r9, 0xffffffffffffffff, 0x7fff) r11 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000580), r7) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r10, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x104, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@typed={0x4, 0x102}]}, @TIPC_NLA_UNSPEC={0xe5, 0x0, "ae5029638e7a1763ef92901d70c370c06c82cc33178fe1a9ac95f39220a6a6ec502317fbc61bbb2a46acc62e2111606f9bd2ad99c3ab16fdb7e3c37050eb1bc65c05387841e1344616cf07884cf9efa608ceae31430e67336f7a4b9f441a93541ffd2cf733320fe7ddf0571701b2bfcb354564e4357e90fb6a1e7e66a110fdf35000db3538e4aee3fb383d589266c90a0a0737931a2417ffc81c11a2ebce66f6081e47d5e9eebe798d4a7ea964b0c111365566dd5f7f46d51342042945ec8576b044de923b2d80a28ae8cc010a23f15418ff5f99e49ce1dd757810c03ba375f06a"}]}, 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000780), 0x90400, 0x0) ioctl$auto_MEMERASE64(r8, 0x40104d14, &(0x7f00000007c0)={0x4, 0xd}) (async) r12 = bpf$auto(0x101, &(0x7f0000000800)=@enable_stats={0xc}, 0x10000) (async) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000900), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000002000)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000940)={0x1658, r13, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9}, @NL80211_ATTR_MAC_ADDRS={0x1634, 0xa6, 0x0, 0x1, [@generic="aee078004c631863f74a0de8ebb84145a2810d3ba08c2e19e5e6d4728fad17f07c6317a9ba1673ac348d4c0acb905a207368ceec8367355f6bd0b028686b351527fde7b43e111b88dff9ed6fab90b1006d4f0d1fd163c867768e21537f3edf831db426cf12fb73acafc3d519a07c70d235e3332049e0889ca5819b759858d4d7f622cde7f5d34d9d3a825018ce20d174545aacd93069388c27a8a0bad2cab8006ec20c5a34dcd538c9899ffc388daaa14d931805de884a87c2543f76a98445d38e985eeae1dd4f4dc96b21ffea195a9f78d96f69df56323c94d3a229be1616ef48bdbe424c48c091dc0ac0eb2e15f0f51c4d2087ca2e", @generic="98d9b7ff8fb12cb66efb0034d1cddbfe66704346802788388f14be171c6ba1aff039b4f1ba677289b1e940aa1ad8cd5dff7a29918dd90e23ae73ff87aa6e8aaee64d183f10f53f", @nested={0x1d6, 0x136, 0x0, 0x1, [@generic="a37968476a4d0babcbaf764f741a46c2f779b2c8441a92660de8ed746a5344f4175b9e86b56c0b739f5c5c791d106084e74ff5e24d31b52a08348be4b2e192071125dc37661224a37072dea04fa85d73a531cd7f6b59f13b894fa879f8c7cb1d9024b6bf1a6b179fda2b07fa4a2c46e8616831cc0e73cfefb2581061e84de00841f5e694b90582dc9d89900e3d48dfa67069760011f2c5ff7fa551782c88dba16bf3ddb35b0959aa9d85b22b19923d01092e3bf37b98024a1c6ee573bbdd3f5694cbba4b3dc5217db50efa2cc1", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0xffffffffffffa7c8}, @nested={0x4, 0xab}, @nested={0x4, 0xeb}, @generic="0cf82ec8d946be272faeafbaf86ac628cd06991607595127b684c4738f021984b52db6d008aeab5c6b5077a91556b600a1ae7069eb508292ba6f7d5bf15e64fad8e1828d667f4895cc1f35e2cdedba66100dec1710f086e81e9dcf0439dccf91e6b1d59fb3a90d015f88ded80402f1a7f03993e0ac0769e856a09acabd8adbd36ad171d62e48c098f874913beb546b9f9f30e9dedd9fd428957435acde221e16b3de7a5aeaf4a331393997d8dd410eb10729a4b86c360f1cb60019118edad5230c5f935e47", @typed={0x19, 0x109, 0x0, 0x0, @str='/dev/dma_heap/system\x00'}, @nested={0x4, 0xd4}, @nested={0x4, 0xda}]}, @typed={0xc, 0x2d, 0x0, 0x0, @u64=0xfff}, @generic="2059a4b8a19d4ec761c2acc8b91297856083231499698936f8db2069172d811cb069782172e365", @nested={0x1024, 0x2a, 0x0, 0x1, [@typed={0x4, 0xee}, @generic="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", @nested={0x4, 0xaa}, @nested={0x4, 0xf4}, @nested={0x4, 0xad}, @nested={0x4, 0x68}, @nested={0x4, 0x17}, @nested={0x4, 0x29}, @nested={0x4, 0x4b}]}, @nested={0x2c1, 0x14, 0x0, 0x1, [@generic="22d159f0224e2592a5f85be0062ead570f23bd0f3a0b273f3931e0612b619d064df4d665103f3f20512460da79743d950275ef1ed339d576d99ab31b9f075528a0e709a25af4fac661b99c7703546a56deaa8ff38d7d36df59293a754683548f7d83895f967367697aeeb57964b36e27639e9b0b359a129e5084ae2621f9820ce47a6852f71366e4ea23009fcd44f2558feafad502bf2a830474c72dea53f65f4e7191e9cc319bfc382a3de91a914df8056968aa44f9faba193cd4909c5db1d3f35e68d0b22374421417d376cfeda4720d45536451", @nested={0x4, 0xcd}, @generic="1b93c7e8d6dcc9e5fa87dea19403505edd65505fc98eb87bdc803bb301f4d121039b55e84a001b648e5eb3d538da4642704144c4f3695bacdea18ffe79dc65e2a128d5e5fd6f0c9c7f06825817cf8faa304f11b6954774faf26b8366094e2fc1deb9e01be84b37236676438f944491d3b1a0d75f46ad6648869f974b3ce65d5fe685e412cfed3c353a15a6cc0efb2f875089338ee71ddbde98e11555665c0f19a636c94803d246805d9204988c4fb477d028a11cf66a1a65768acc14db84d5b52bc7411565127f706e75deea8b26ab2a568277574fbb3b330706a6563dc7323273", @typed={0x8, 0xa, 0x0, 0x0, @uid=r3}, @generic="1fbb6663088d0bf48cd2bbdeb696285f81ab13b9d57a1247aca42efdde70220c07456ea038c9e1a087efb71617c985cb18009bcbbe989b28c840daf21eee72cfc854534ebdd1f80f67793e2b0fe45ef36771b3036466a19a61b2dd312b133cd1a46001de1fd466813c08a29d5d6850b413c2e1188a8c2d8d73d18b4bd40764b716eac3d3effcf1eca6c2288dcd45a34b0a1a6e21900c51081f1c97657744d25cef05ec60c872ae39423bb8115653ea68d1fe387a6f9ebedd6dfa9cfd9a59c12c37bd192a1d9be35724b6dd79df376bba2e65a9b84478f5be3cb9e5", @nested={0x4, 0x114}, @typed={0x8, 0xb2, 0x0, 0x0, @fd=r10}, @nested={0x4, 0x62}, @typed={0x8, 0x67, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x51, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, @NL80211_ATTR_ROAM_SUPPORT={0x4}]}, 0x1658}, 0x1, 0x0, 0x0, 0x4}, 0x48052) (async) fallocate$auto(r2, 0xa34, 0x3, 0x10) (async) r14 = ioctl$auto_TUNSETVNETBE2(r1, 0x400454de, &(0x7f0000002040)=0x1) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r14, 0x22, &(0x7f0000002080)="4d998464b88c4722082dac4343078e7c5ea59f2319be8e1362072054fe175eb9223334a73b785fa21a29b0b7189558eaf600d370df8c2f9e52ffe85df189644949a0ab5675c51b1ec81915ea8dcb146531f476cf8c81072ea990fabebe7bdefb9ca842d2c3c1", 0x50) (async) ioctl$auto_XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000002100)={0x7, 0x3, 0x2, 0x1000, 0xe, 0xffffbc79, 0x4, 0x1, 0x4, 0x9, 0x2, 0x400, "4b65de7b0ea3f0f37e83d0015981e8d1", 0x3, 0x8000, 0x6, 0x3, 0x8, 0x6, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) sendmsg$auto_NL80211_CMD_JOIN_MESH(r7, &(0x7f0000002780)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002740)={&(0x7f0000002200)={0x508, r13, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x323, 0x2d, 0x0, 0x1, [@generic="45e7f1e6b43dc3bc4ced7b50ef0cc93823bb696729e387367b9a1c1d844e8b", @nested={0x14e, 0x77, 0x0, 0x1, [@generic="29183dd861542917ac87428bf18674a6af78eeaa1044dca3f233dbba4c11ef93dc85155abd6560f666bfd6b7d5aa264b", @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@remote}, @generic="f904d7a32ce4a9481d6c57699992043ae73081345fed58a5da067b87d0ebda767df8f7c6f340aa0b4d3e649bcde4a3f4443eddc9ea847d7100fb5b2cb5c9274c6d49f2d99cf8e744941d438ec251bb31a01a66478e09a469454d53f5f3bfd14fab4b3ff14177d5118f13f1c6b8f3f86ac2a8143cd54b0c9f33600f0d7e5b9ce2ec12aa394c3ea40f45889139895b3c5c359ddd0fb4b4226200eceacd3b42c918310cd760f7cb4052c99ce03b69cb552f54c9e9747081c56bdd7194d626ca3e09167bc22372a59bd5e3b66b3e037b72e5ea4c4b727f9dcd88b9c6b1f2430a1ccc91a678c21aefd10b4144", @nested={0x4, 0x34}, @typed={0x8, 0x140, 0x0, 0x0, @u32=0x1}, @nested={0x4, 0x15}, @nested={0x4, 0x91}, @typed={0x8, 0xb2, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x6, 0xb3, 0x0, 0x0, @str='[\x00'}, @nested={0x1a5, 0xf9, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @pid=r4}, @generic="efce24c96298e3b250d27c4d997229499daf114f6d46792626df3793f3889a56912a4c81f84959519a64db215992646a9bdb645a305b87775ce620ac913e545bf88c740e5caf581265168697a45546f9d32f739c2e1153a5e6212290c124e41db0a567eb7586ce74e633f48c45f4c0d297369c7a743d774ef0c6e17721448341969d6fa3bcbb85aedfb2ef6d04e15fd6c2f2f682f680652b17a3", @typed={0x8, 0x5f, 0x0, 0x0, @uid=r3}, @generic="1cb883246d0e6d9f075250fc3517eae1483317a941b30c534c119225", @generic="485cc08c7d7c9647a8a8a26e8a564100a3ecd774be1d263f55d81f00c279ca954facfb6650c3f4507317b51f8f9911bfff88b7284a5994a97d8575f54aab994e735a2f48ca4340da1c3596dc13ac1c51e96e6a65bd007d78060c578d867837c271a5bee357b4bd517aa9feb81ff21d8217b817", @generic="3a9be3bda146e06a021b81a7beb15678d81c2b5789e7213a552109bd678f355e660d31845010b5746ad122b160f9dd2dd98399cf181fc7d603d07ad4848da3f02cd567e64182883ddfff859de0ec894f65cf21b1a05fd332ebc2d5947fe08d41a26fbe3fcc067814"]}]}, @NL80211_ATTR_CSA_IES={0x1b2, 0xb9, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @pid=r4}, @generic="6c5ca3de5f8e55c5e9abc20f9c39e6b23d2dc97224bdd14777f8a575de9d7db0b836194c1f17d3583a0eb624bb9291136a3ae4f63cd16045f307b2439e434fcc12d03dc8ddce4c2eac0562327bc15121ac8af316cce936486929bdb415aa3e257193458d4051fa2b083bf9c4d31fdeabc27e8dea2ee02e314bed6b5210813cab078d1a35d28cc50f4303e5ced17a3a", @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @typed={0xc, 0x137, 0x0, 0x0, @u64=0x7}, @generic="318a47d6baa53a342f80316073b691e4ec3812ebb467832ea5abc8f5e014fb02433e68bcb6a2714e65878d6ee534f1ed9b079f475a089a604f283f096c43920ed8dd9e35c8e87df1db70ecd1c531bcbeabfed0e660c947944dbb7aa05284d7bc6a10ed26400618a03602b80708fce3a69b16a30837d372788f96dcae4d74362c0d2ad2dc3eb6fe21d8d9ec488dcd955ddde9fa76b6ed90801f238ad970f4dfb3204dbef2083ecdb7f4339bb93b738c8969cda98b8a685c4cb1e81ead411473f69e8ba5bf3a6fa2a013f2a5a04e6fc8420bedf40a38cb9640b10a9fabc7d671a9917640fe19447d40c90737fca51a4652e06a3db2955a9f"]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4f3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x400}]}, 0x508}, 0x1, 0x0, 0x0, 0x4860}, 0x48000) (async) ioctl$auto_TIOCMGET(r1, 0x5415, &(0x7f00000027c0)="5729331995de53b223c36bd9a9c643572e544d6e9cbd309cb1d2ea18ac636f6d1aff25b7c37f40a56c07cd47bb10f442850d81111cd1fc3db716522dd9e502cc83c6e70f9c7d512dd9e10e4debcc1301ad618fbd0e7ee397d34f4659ec23fd83182f35dd8a752feaf7d9ba7cfb806758598b82eb852edfac46083a219265fe073580994f81acc24638504ddadc85092e76009362cff44e8b375905dd677d79e86ef7f682760bc4f1024f3af10833e0d42032ed8470109580e8f0bacb32e52e2d5eb57b3e51c3350488c04c2f6f657369c71b1f165c03cb59c49cf90e9a9006e4cb98b697237ace3f5a0a9cfaca5eaf9909ec1390cf1f6b7c") (async) ioctl$auto_I2C_SMBUS(r12, 0x720, &(0x7f00000028c0)="b2d21ea3d4a32b4b2026296cc8fda0082af8a3cae5e6325bd4cf1b51185618bd572c654e2efb27fa01e8fc5b0e781cad429d6328b9ff6fac23704498c0b1b37c01250c38c658f6e87a1c86f5c15fff285cb9e5c7de1e4e680c4fcaf89c97daa7a89d9ed59d07f2489a63562afdf15bb3fd396e60566f29869bd2e8e31a7bb3b12842ac55aab6c65cac7e9f85ee4f6fb3b67152bc4496f140b8efc44125e985fd8a07525862d7aaa3c4cab7f9411df2e53bcf990f94bf77ee3db9200a504c067c1a03db6f722871dddc68f43ef862ec42610a13b737e4612149f7d592903339c0a52fb1aca10960289abacc599e87dcc4d196ac3e243366") ioctl$auto_XFS_IOC_GETBMAPA(r8, 0xc020582c, &(0x7f00000029c0)={0x38000000000000, 0x0, 0x10, 0x4, 0x1}) 3m27.67920071s ago: executing program 1 (id=2613): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) (async) setsockopt$auto(0x3, 0x10f, 0x9f06, 0x0, 0x17) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = getsockopt$auto(r1, 0xa, 0x9, &(0x7f0000000000)='\'#%($,\x00', &(0x7f0000000180)=0xfffffff8) r3 = pipe2$auto(0x0, 0x80) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rxrpc/calls\x00', 0x20080, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) ioctl$auto(r3, 0x5761, 0x4) (async) ioctl$auto_BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000080)="d7a13be3c14e950bc86ac4250954b7f9b37dd9020413b9c0e0437b1770f1e60e3016321fb32f747b55a5dc9aa9c22b1dce04ad94fac29031234d3619f36b2b2872d09c5d4c1cfb73312afd29d4257a5df2dd59a775625a1e196dab0cb2e1b2d6541cf92b53ca962bcdda378470c44ab0a64c4b64c9b43e54f87ea6b5832db97dcf93a6d4b9b9dc59bd74fc71a5359a31c4f31c95a12fe985109d1d4f81144690b512f4214444131cedbd0214a12d") (async) write$auto(0xffffffffffffffff, &(0x7f0000000140)='/proc/self/net/rxrpc/calls\x00', 0x8) (async) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), r2) (async) capset$auto(&(0x7f0000000240)={0x4, 0x0}, &(0x7f0000000280)={0x0, 0xfc, 0x2}) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000002200)={0x17e4, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28d, 0x7, 0x0, 0x1, [@generic="a9f783a173894da628ec68f22dd1ece2868e6c318bc496f36f2e18bbd38e6a57d223a571885e8ffbe26de4e9d66fdb1c7c3d0d5b2679b0fb2e88392cab34e14f8c933a2cbe508b634025171e93f01a4a77953c690c81c930da2372d85096b8c21e7fc100eb8d75cd3dea5da94fe006d81c3eb6b877058119f31053168846c51f015df44b43189155edd5d7a9e3b27457d7e0c790107f69c160132e6a", @generic="dcec8ced028481a9c12129e052b44bd4440752a396eb3ed26d8cfc7cebd9374064653b5f7849b702363b52b81abbd2c314e62b4d1326a74969db199327d38bab7d8694ba2acacd918c6ca246f206103ec41a036cf2335134f981235fcecdee6e339dff3e96052db5a72b7464f9c8a4003a7e6967532b57167db773de4a79fe3dd1854a4a9c8f4381ec7f7cc01b7340166a7ccb1e712994bd1b47783cfca1f23da7f8e88f3d06b708f96111c56078be2261a76ec41de00626a1c759e5223876182418d4b673a0f5d7bcd420cc02c70812941c971b413ab40bdc7081b974cb2fcddf0ecb098744af90947876e8a9ea4b81186338b664", @nested={0xf5, 0x2a, 0x0, 0x1, [@generic="e4f945000604866f6b1bc1f66eacf2635a3ac2cd241e163356b8908553293ed9359e8318ec69797a6215c9a4f3ea6af6081dcc85c790e931e952602d324e8bcc41c9bc5d1d42c267783edff0043a0f125eb201bb5202c2deb410379677924624e84b9186fbee43fa9f287163f5e435c1ce38d5f0eb6436e3d580d1c9d5107cf41613f49d2ca2e7da33bcb5", @generic="eb04ad2b62199a20f264fa39758f7484ee6614ad16d4a10acf37d8a6b8b93da5ebd9500298f21e8dea092ee009f264c1405acb592a1038a72eac4f8e304c13f424599eb38506413737e847eaeddba091315fe5b8c209a49fc9afee49546b8fe4a64c491d1c", @generic="f4"]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_DEVICE_LIST={0x123a, 0x9, 0x0, 0x1, [@nested={0xc, 0x14a, 0x0, 0x1, [@nested={0x4, 0x13b}, @nested={0x4, 0x114}]}, @nested={0x8, 0x9e, 0x0, 0x1, [@nested={0x4, 0x126}]}, @generic="914d6d9dab83c78b6d49c30530ecfeeaa0033fd4ac84ffdef08a4bc2668b2b3bef", @nested={0x30, 0x132, 0x0, 0x1, [@nested={0x4, 0x11d}, @generic="38eb84a7d391da416107c3d3ec50b54c4fdcb85811688b41e58ce368b27fd19c80679684c3b38118"]}, @generic="b9fb0587872c141e7750402ff84b439235a34403bb08c17ad834c07e3c8fbdab64c26d7bc61232f6dfe9fe219585b92368c4ab084ee0a89bdcb0d63332385ce5f66686500c82224e4432ac592ee70aee0cd1e2111a52ff2d427c70bc457bdcefe5f717f30d5a8f3d42d730a94f015f8a8b695b90614e18f9d118f63dfd6cbd6f54f2fa890404010f25c27ddb803f82800be35c12ca78bbc7ed301c76d9823c2df8d50eb009ef70a7dde9229852f40c179f8982dcf5b5688a27c0b8c4225607023c906344b3899c9c29", @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x149, 0x0, 0x0, @pid=r6}, @generic="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", @generic="86767f68e1910ac2ac55f724f08a4fc34d762bd7186a3acdb5c5ef34428725359ad7da741a2e8c88ae4e77fd10cb769269f9caadf875b259034297bf04712be2584012f149c2d63a5bd791f2329bfb20fafcf68275f2837c93075ff46ea132eaf104c6e3ec10b53a8c1b6498240fa38c1a33dd73a35f85abb1205aa3228545b04cf7dcc35b85d6e7fe6bd883d0efb36b18bf67af5c8aed4182c769730b7215331de8b05b1bb20fd885ade4c8b506f224b935a18dc19cefae514b7777c31953946d73d5ee05411d788fc202904851cdbd5001e9a085ebe16df327ee8dd928d2d473863593f846f80979362d7e"]}, @NBD_ATTR_SOCKETS={0x2df, 0x7, 0x0, 0x1, [@typed={0x8, 0x12f, 0x0, 0x0, @u32=0x101}, @typed={0x8, 0xec, 0x0, 0x0, @u32=0x9ba}, @nested={0xa4, 0xe7, 0x0, 0x1, [@nested={0x9e, 0xc5, 0x0, 0x1, [@generic="2da368a81050eeedc514a729b1405750486f54af565ceacf241041ab8c28c2587de7987d4c2a715751c5dba2304c17cc04a248cca6a8c09615b338ad668ce908e1423497c02339d3de101bc20028f6cf04c686850b77e2efff13be4689c6e202dda1c9a3d49cf391d0435d4aaf19f85778c6dce6f83cbfa40ca1dafe616de42cb096c3e3ec469e664e1101d4f9c7", @nested={0x4, 0x13b}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x4}]}]}, @nested={0x1c7, 0x13a, 0x0, 0x1, [@generic="066c191337fcd88dccd1ec21246af06819a739", @typed={0xb8, 0x11a, 0x0, 0x0, @binary="5cdd541f8d3c47bd49f284783d0270358baf1fc3f6f75c7351dd24cae718f039ce15c346d35aaccb866c8da86373272b7e16442ae831b42df1c7de72e186eaa7757844fb2293aefdb193229addc71cacb9a85d896eab504a2c41e9acdd74ea429cbd86f0ef9513c9738c95902c27a0d95fc9aaf2272219732113982e2020ab56a52d24c8e15a6aea6523847077b639794351c93878e3a092107debe4cd7d7e23952f306cd2f7321c93c90957400063f40ee98966"}, @generic="e50c1cf60902f0fcde005947b3695abb903c0b3a2a47457f937fba6168d5e7ed3b1150b7fc757a96879c27915613ebef9b7ad0fa9b4e414bf2f0c1e7c9d71aefd495c00d74203db7f65f91f21aa12207cde601f306ba50dc45eaa450efc9d563fb8c6b7ccb2a309137a7f00a15d4c3910c1d162aab25dc13187e4f94d485ff47eac938201f8beeeb910a3c1b289317efe973f79aa9526b208193dcca2f8bae88c654d339ad13123ff96a0c90fa957dd99b1794e763f7137fcfa042efc35546e448da0b081685d176bdb84db6605c4a52bce73080ab36bf01be8617f9533b035b6182dd35268d6c3ddbce3c79", @typed={0x4, 0x82}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r6}]}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r1}, @nested={0x10, 0xa9, 0x0, 0x1, [@nested={0x8, 0xc, 0x0, 0x1, [@typed={0x4, 0xb3}]}, @nested={0x4, 0x10c}]}, @typed={0x8, 0xd9, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1a, 0x7e, 0x0, 0x1, [@nested={0x4, 0xb6}, @nested={0x4, 0x4a}, @generic="d28f7a0199584456fc072bf44d33"]}, @generic="fd6300937a6554db65bcf1be5b4a96b8909f1556038ea12f23e4db1785caa9d3ced652"]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, '\'#%($,\x00'}]}, 0x17e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x44020) r7 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto(0xc8, 0x400454de, 0x6f) (async) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r7, 0x300000000000) semtimedop$auto(0x40, 0x0, 0x6, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) (async) shutdown$auto(0x200000003, 0x2) 3m27.355529346s ago: executing program 1 (id=2615): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 3m27.161748634s ago: executing program 1 (id=2617): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = semctl$auto(0x8, 0x806, 0x13, 0x46) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r3, 0x80045438, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000002) tkill$auto(0x1, 0x7) r4 = socket(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d05, 0x400, 0x9}]}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0x300, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_GOV_NAME={0x4}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x10}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x139, 0x14, 0x0, 0x1, [@generic="54aa5bcba90e7a3a0e2757fdbdb5a763da4c0ce749b399d4829ff8de2672d15ccd5cc6b36b03f829d4a228edee51f5bba71d3d2be7090e51887b353a7132eb6b24ea32af6290a8044cbca08672c32665cde3de4aeab0f99dd9574e30919951a03e30c6b5193236674366f0f6387fd4d493533f74f64a8bfba8d373bd12137b8912248878198ffc63aff8f0b27a82f73e03df37f3f39f5a993fdb0891cbe98b8f143794b14b4e84fcc9b36a9191", @typed={0x88, 0x13e, 0x0, 0x0, @binary="e434cb8ef1402ae3196d4997d48ef05f4c3f301e9fd462dd53c6519890a8993eca71dcc601422873326e7da807325c8bf6b2fb50e90128396d115a8016e5d2bcb27040d807d1d8d437235c6bc892d55390930bc578383335d3860b050cf177d6360387138c3c0934bce4de2fbe4dc23a2bdf6fd427f0abb333c7cf331436ff8f8112d6b7"}]}, @THERMAL_GENL_ATTR_CDEV={0x19c, 0xe, 0x0, 0x1, [@nested={0x174, 0x1, 0x0, 0x1, [@nested={0x4, 0x14d}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xb2, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x4a}, @generic="89dc4d733ef9146389b68f779e5160833cdc0d0c026af8d9f0bece1a704ac188b7ba5f02c295ebbf4a158d6ed28296e2f13ce7610d2fe645653331ed153e42aef4ac22c278bae01ab91c54b2e909b17ecce0d91ce1413852385ebecbf42480f3732c7e8b7322201b39097bf66ab1243e24eefc45dc7f48920a23d74db31e4e2664688bd369b27e282b72688bd9c8d1313abb2383bea120ddd76ba5159ce6a2d48c3984ea875c3b288b4b0676d58a34c7db82fc5a10c2a7a3dda1d61bb18605636d", @generic="d8d49c4fd39f9ff76b0e215ee3371ae4fedbd1d9066860e47eb26113699fc37e24f4c6575636f7e183376063214965d6955b8b06834189256e9ae229f41157e1740004f4d2cf706dd64ed14529cd433e697779e8381c09cfec949beb7fe5b080ca147d746303e3579289dabeeb66b250b43d17e2fd4df4c561c522f17c3118eff2d81872d5796bc69e618d"]}, @typed={0x8, 0x12d, 0x0, 0x0, @pid=r2}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x8, 0x124, 0x0, 0x0, @fd=r3}]}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x2}]}, 0x300}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r9, r8, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe602}, 0xf) socket$nl_generic(0x10, 0x3, 0x10) 3m26.012201836s ago: executing program 1 (id=2620): mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c9, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) open(0x0, 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) write$auto(r0, 0x0, 0x6) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r1, 0x0, 0xfffffdef) 3m25.399588192s ago: executing program 32 (id=2620): mmap$auto(0x0, 0x400008, 0x9f, 0x9b72, 0xffffffffffffffff, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c9, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) open(0x0, 0x101840, 0x33903f3ada88772b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) write$auto(r0, 0x0, 0x6) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r1, 0x0, 0xfffffdef) 2m9.733945495s ago: executing program 2 (id=2871): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff, 0x8000}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x1, 0x1, 0xfffffffffffffff8, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(r1, 0x0, 0x800000000e, 0xfc, 0x0, 0xfffffffffffffffd) (async) recvfrom$auto(r1, 0x0, 0x800000000e, 0xfc, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) (async) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x60d80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) unshare$auto(0x200) (async) unshare$auto(0x200) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000002c0)={r3, &(0x7f0000000440)="9275ceac07117f662b60e5becaf883f176605db71c7bd7caa7a2d6810db328109c171cc155b112909ce634cdbd3704001e52e47fbe2f2293be1a18f0770a489348175bf2084a0b5f829678061b33ffa0d7c0d351d0758e4cea07027a539dc1267aad31c42e6d6f53c2946980fca56b92468b27d2aa06dae0b3b91c7ea405b972bd7689da225904328569b3b59914a91688b6a4e204c9a83403b382018eb7e19014ea4555de364500ceaf322d2f0897658b5948bbc6f87c45f1fd8987e96086ffcc4d1f6e5da5ac73dcd3ac8a3e8d9666cb991a5748eed960ee31452e7b", 0x7, 0x0, 0x6, &(0x7f0000000200)="eb2cbf355668ad148ef23e702d7489c05d6d4b141d95d46060935ca06b93e8aa77ff044458f3919372d3d5018439673e423108c692999cbf54934b6651f797f7c4dfdf177b5810ebbfdeac4006fe24551b050000", &(0x7f0000000280)=0xffff}) (async) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f00000002c0)={r3, &(0x7f0000000440)="9275ceac07117f662b60e5becaf883f176605db71c7bd7caa7a2d6810db328109c171cc155b112909ce634cdbd3704001e52e47fbe2f2293be1a18f0770a489348175bf2084a0b5f829678061b33ffa0d7c0d351d0758e4cea07027a539dc1267aad31c42e6d6f53c2946980fca56b92468b27d2aa06dae0b3b91c7ea405b972bd7689da225904328569b3b59914a91688b6a4e204c9a83403b382018eb7e19014ea4555de364500ceaf322d2f0897658b5948bbc6f87c45f1fd8987e96086ffcc4d1f6e5da5ac73dcd3ac8a3e8d9666cb991a5748eed960ee31452e7b", 0x7, 0x0, 0x6, &(0x7f0000000200)="eb2cbf355668ad148ef23e702d7489c05d6d4b141d95d46060935ca06b93e8aa77ff044458f3919372d3d5018439673e423108c692999cbf54934b6651f797f7c4dfdf177b5810ebbfdeac4006fe24551b050000", &(0x7f0000000280)=0xffff}) ioctl$auto_NS_GET_MNTNS_ID(r4, 0x8008b705, &(0x7f0000000000)=0xca6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) fchown$auto(r5, 0xffffffffffffffff, 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r6, 0x0, 0x20) 2m8.252151848s ago: executing program 2 (id=2875): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) execve$auto(0x0, 0x0, 0x0) (async) execve$auto(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x200000008000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x200000008000) io_uring_setup$auto(0x6, 0x0) (async) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x1, &(0x7f00000000c0), 0x3) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRESHEX=r1], 0x24}, 0x1, 0x0, 0x0, 0xc4040}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/clear_refs\x00', 0x20001, 0x0) (async) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/clear_refs\x00', 0x20001, 0x0) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000000000000001) (async) ioctl$auto_FIDEDUPERANGE(r3, 0xc0189436, 0x8000000000000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x6, 0x4, 0xfffffff7) mlockall$auto(0x800000000000005) r4 = mq_open$auto(0x0, 0x62, 0xfffc, 0x0) mq_timedsend$auto(r4, 0x0, 0x80, 0x9, 0x0) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r6, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c002000954b44d74a38f70ec8052e94809399f713cf9975f747b20c0000f27ecf7c715864a75ada", @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf250a000000080003006d040000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) setuid$auto(0xe) (async) setuid$auto(0xe) sendfile$auto(r8, r5, 0x0, 0x1e53) madvise$auto(0x0, 0x200007, 0x19) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) (async) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyp5\x00', 0x4000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyp5\x00', 0x4000, 0x0) 2m7.219510779s ago: executing program 2 (id=2877): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.2/usb3/bConfigurationValue\x00', 0x2101, 0x0) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) seccomp$auto(0x401, 0x10, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) madvise$auto(0x0, 0x1, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) semctl$auto(0x1ff, 0x2, 0x13, 0x4) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x7fff, 0xeb1, 0x401, 0x9000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x7d, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m5.488143981s ago: executing program 2 (id=2881): r0 = socket(0x10, 0x1, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c840}, 0x20000000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x1, 0x84) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) timerfd_settime$auto(r3, 0x9ec, &(0x7f0000000240)={{0xfffffffffffffff9, 0x2}, {0x0, 0x8000000000000001}}, &(0x7f0000000280)={{0x7, 0x8}, {0x2, 0x1c}}) read$auto(r5, 0x0, 0x100) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/pcm0c/sub0/status\x00', 0x100, 0x0) pread64$auto(r6, 0x0, 0x40000000f42c, 0x80002) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000380), r4) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 2m4.731649238s ago: executing program 2 (id=2884): socket(0x2, 0x3, 0xa) open(&(0x7f0000000800)='./file0\x00', 0x20042, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x420440, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/if_inet6\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x10001, 0x830) write$auto(r1, 0x0, 0x30fe) 2m4.373356923s ago: executing program 2 (id=2886): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ptyuf\x00', 0x200000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0xf7, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) write$auto(0x3, 0x0, 0x81) (async) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) (async) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) setpgid$auto(0x0, 0x0) (async) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) (async) bpf$auto(0x7, &(0x7f0000000000)=@token_create={0x10}, 0xa3) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/hwflags\x00', 0x240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) timerfd_create$auto(0x6, 0x40ffcb) 1m49.141876957s ago: executing program 33 (id=2886): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ptyuf\x00', 0x200000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0xf7, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) write$auto(0x3, 0x0, 0x81) (async) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) fsopen$auto(0x0, 0x1) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) (async) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) setpgid$auto(0x0, 0x0) (async) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) (async) bpf$auto(0x7, &(0x7f0000000000)=@token_create={0x10}, 0xa3) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy15/hwflags\x00', 0x240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) timerfd_create$auto(0x6, 0x40ffcb) 4.263608804s ago: executing program 0 (id=3395): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x1) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) 4.117500351s ago: executing program 0 (id=3396): mmap$auto(0x4, 0x9, 0x6, 0x8011, 0x403, 0x8000) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff05"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x0, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0x8]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) (async) pread64$auto(r2, 0x0, 0x7, 0x9fffffffc) (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) fdatasync$auto(r2) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r7, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000008eb8d7547ad4646be1a8f0bf74fd1accb089ef5740a73993ad9c54b39dbe9e89c4c013438de88518985f964824d0df03e07e4ae73cc013d8f3fd0cc85c97f53985215c05bc05cde8ce6aa078f01e9e9d6f22728f9918961e23dc7836be96a6a3a24dbd15fbb0e2986b0c305ec9f80960d12e5967ac80c3f74f07", @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r8, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r9 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) 3.879241038s ago: executing program 0 (id=3398): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r0, 0xa432, 0x40000000000000a, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x0) execveat$auto(r2, 0x0, 0x0, 0x0, 0x11000) ioctl$auto_SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000100)="d6ed362b75b48a09425a5a0ed8625279f9d075372dd32fa8ca2a1b7689552703be0272fd6efce39000da1cf23142ac36f3da62496cf3a0112557976d94c1dfb0ac3013dc3ba3cd6eeaf655335de6881902070410c866c73ff82ebda106") mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000280)="000000000000cf0100007e5f879ea9652e057bff32c8acbdda265f124af9ec651ccb34cd5e93997aafbdd8a9306fb77401073dfa1c9f3c40dc71b8f41cc669df8c2da4fa1896e63228126d7d67a70995392e0da9b9023a66c9f84c5c5d16") r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x40000421}, 0x4044011) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x5) ioctl$auto_EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) 3.749188782s ago: executing program 3 (id=3399): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyt1\x00', 0x3, 0x0) ioctl$auto_TIOCSPGRP2(r0, 0x5410, &(0x7f0000000180)="4eea0a7e06caf7b5732ac86b2099b00288f494761b783787c4156606b65bce4c644a62af544b923e3fd7878b41d84a45f285e7c528bc6a0e4f0e5edc73b37c009de40f8756f1f094c8717a99405bae6c61ffb514ee4f587f016e7e9083f01b3d4a77003997517784aa3488118aab5a19b74a720bedc448b4a3db48a36fbecab6a80ef4f888078cfcaf5f0f303a8f04ca54b6e6bc814f66bd3b5c3682a6131644745c3c6bd8e7d4f6859e0f7a6b") setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited\x00', 0xa000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)="33aa0d7191af", 0x6) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) 3.256639449s ago: executing program 5 (id=3400): ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) msgctl$auto_MSG_STAT(0x91b, 0xb, &(0x7f0000000140)={{0x8, 0x0, 0xee01, 0x8, 0x38a2, 0x40, 0x7}, &(0x7f0000000080)=0x7f, &(0x7f00000001c0)=0x8, 0x0, 0x0, 0x80000000, 0x8, 0x7fffffff, 0xd, 0x400, 0x3, @raw=0x2}) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) set_tid_address$auto(&(0x7f0000000300)=0x3) mmap$auto(0x0, 0x6, 0x100000004000de, 0x9b72, 0x2, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x4980, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) 3.185311852s ago: executing program 3 (id=3401): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/btrfs/features/supported_rescue_options\x00', 0x422840, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRESHEX=r1, @ANYRES8=r2], 0x20}}, 0x18800) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x141240, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000080)={0x6, 0x5, {0x6, 0x81c6, 0x1ff, {0x2, 0xb}, {0x5, 0x1}, @condition=[{0x4, 0x6, 0x800, 0x5, 0x200}, {0x6, 0xff, 0x7fff, 0x7, 0xb, 0x9}]}, {0x7df, 0x2, 0x0, {0xf}, {0x0, 0x2}, @rumble={0x2, 0xdc}}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb5, 0x1272, 0x8002) sysfs$auto(0x2, 0x1e, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x80002, 0x0) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x2, 0x2020006, 0x3, 0xeb1, r4, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0) read$auto(r3, 0x0, 0x4) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r6, &(0x7f00000002c0)={0x0, 0x17}, 0x3) mmap$auto(0x0, 0x402000b, 0x80000001, 0xeb1, r5, 0x401) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r7, 0x0, 0x20) mq_open$auto(0x0, 0x83, 0x9, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x80802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) 3.143219275s ago: executing program 0 (id=3402): setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x300) 3.016402113s ago: executing program 0 (id=3404): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (fail_nth: 5) 2.98935506s ago: executing program 3 (id=3405): close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x20003}, 0x6f3) (rerun: 32) r0 = socket(0xa, 0x2, 0x88) (async) io_getevents$auto(0xc23, 0xff, 0x100, &(0x7f0000000000)={0x85, 0x8, 0x8, 0x4}, &(0x7f0000000040)={0x8000, 0x3}) setsockopt$auto(r0, 0x1ff, 0x7, 0x0, 0x1) 2.889202206s ago: executing program 4 (id=3406): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_TCP_DATA_SPLIT={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x80000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) (async) mmap$auto(0x3, 0x40000b, 0xdf, 0x10010, 0xffffffffffffffff, 0x80) (async) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x200, 0x0) ioctl$auto_IOC_PR_RESERVE(r5, 0x401070c9, 0x0) (async) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r8) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r9, 0xb11, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) (async) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xa}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xf7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x80000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) ioctl$auto_IMADDTIMER(r4, 0x80044940, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) (async) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 1.76342625s ago: executing program 3 (id=3407): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x2000, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/aoe/flush/uevent\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001240)=""/4091, 0xff1) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto_proc_pagemap_operations_internal(r1, &(0x7f0000000000)=""/217, 0xd9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) madvise$auto(0x0, 0x2, 0x9) connect$auto(0x4, 0x0, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001180)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271b, 0xfffffffffffffffc, 0x0) rt_sigpending$auto(&(0x7f0000001140)={0x8}, 0x8) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) r5 = gettid() sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) rt_sigqueueinfo$auto(r5, 0x1, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x830) write$auto(r2, 0x0, 0x4009) 1.452537814s ago: executing program 4 (id=3408): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x101000, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x6) 1.194289849s ago: executing program 5 (id=3409): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) (async) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x4) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) (async) readv$auto(0xffffffffffffffff, 0x0, 0x8) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x12bc00, 0x0) (async) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.2/usb13/power/connected_duration\x00', 0x14501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)="34ae", 0x2) (async) write$auto(0xffffffffffffffff, 0x0, 0x1ff) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r1) sendmsg$auto_NFC_CMD_VENDOR(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="00082bbd7000fddbdf251d000000b615f94626907c03d0c16ea91f86153209f7d53797f8871ee8bc91253ac004490b90f2d831f80870cc97b98b3cf0bc311d7c2b907a690ea3fc05ede446eb56e6e870068d77d0f4ac82bddf14cf07a80b2fc37aa3c11361ff5057be3f6db8c3ae89f2b46004a09c994d85221996f4600b86dfecc0f2835542f5e25e64e9"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, 0xfffffffffffffffd) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r8, 0x0, 0x20) (async) writev$auto(r0, &(0x7f00000001c0)={0x0, 0x45}, 0x1) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) 783.552888ms ago: executing program 5 (id=3410): setrlimit$auto(0x10000007, &(0x7f0000000040)={0x0, 0x6}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x800, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x2, "7cbc697000", "05db3d47", "01030100", "2ff43123", ["f5404de9641f8bf1bad22a9f", "a1679d340ad98fad2453f86d", "b06f8ca10c66eebcbd6f17c8", "5fe10eedab2c4b353c392a92"]}) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) pipe2$auto(0x0, 0x80) msgctl$auto_MSG_STAT_ANY(0x2, 0xd, &(0x7f0000000180)={{0x5, 0x0, 0x0, 0x8, 0x6, 0x2, 0x5}, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x2, 0x3, 0x8, 0xb937, 0x3, 0xffffffff80000001, 0x5, 0xdde, 0x7, @raw=0x7f, @inferred=0xffffffffffffffff}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, r1, 0x8) socket(0x2, 0x3, 0xa) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x8, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x3, 0x68cf, 0x9}, 0x9, 0x0) 778.033758ms ago: executing program 5 (id=3411): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r0, 0xa432, 0x40000000000000a, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x0) execveat$auto(r2, 0x0, 0x0, 0x0, 0x11000) ioctl$auto_SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000100)="d6ed362b75b48a09425a5a0ed8625279f9d075372dd32fa8ca2a1b7689552703be0272fd6efce39000da1cf23142ac36f3da62496cf3a0112557976d94c1dfb0ac3013dc3ba3cd6eeaf655335de6881902070410c866c73ff82ebda106") mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x8, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000280)="000000000000cf0100007e5f879ea9652e057bff32c8acbdda265f124af9ec651ccb34cd5e93997aafbdd8a9306fb77401073dfa1c9f3c40dc71b8f41cc669df8c2da4fa1896e63228126d7d67a70995392e0da9b9023a66c9f84c5c5d16") r7 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYRES64=r7, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x40000421}, 0x4044011) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x5) ioctl$auto_EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) 763.956818ms ago: executing program 0 (id=3412): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) bpf$auto_BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=@enable_stats={0x6}, 0x7569) memfd_secret$auto(0x7) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x200442, 0x0) ioctl$auto_TIOCGSID2(r0, 0x5429, &(0x7f0000000240)="c5714f10441c2b7b79aa451b378d8852aff252e61746fd7e132725431c98bf588e539623c641fa919151214ea7d39c0752e935a2eea6df47777a324d68c464977630da267ae1473528a42662c819c7eac66c2722b018aac895657bc5d4ff6ea92d04a8f6d840eedb5bc809e5d367e7466bb61daf06391e0a2ed4a65e74cd8d265eb48b5607fe") write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) rt_sigqueueinfo$auto(0x0, 0x7, &(0x7f00000001c0)={@_si_pad}) write$auto(r1, &(0x7f0000000040)='/sys/kernel/security/integrity/ima/policy\x00', 0xc6) ioctl$auto(0xffffffffffffffff, 0x5608, 0x7) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010031bd7000fddbdf250c00000014000380100003800c007a0001000000000000001800018014000200776c61693000"/58], 0x40}}, 0x24048084) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)=@prog_bind_map={0xffffffffffffffff, r1, 0xffffffff}, 0x5) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xc8, 0x0, 0x40f6) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xae, 0x1, 0x948b, 0x3, 0x15f4da0d, 0x3, 0x3, 0x262, 0x8000001c, 0x7, 0x6d3e, 0xc, 0x2, 0x5]}, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) 583.659849ms ago: executing program 5 (id=3413): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop2\x00', 0x14b602, 0x0) r0 = prctl$auto(0x23, 0x8000000000007, 0xffffffffffffffff, 0x0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r1) brk$auto(0x7fffffffafff) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x202000d, 0x1, 0xeb1, 0xfffffffffffffffa, 0x6) mmap$auto(0x0, 0x810004, 0xff7, 0x8000000008011, 0x3, 0x8000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, 0x0, 0x0) getrandom$auto(0x0, 0xfffffffe, 0x3) mbind$auto(0x0, 0x2091d2, 0x80004, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x3, 0x0, 0xb76) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000080), 0x2202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) brk$auto(0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/interval\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001680)=""/58, 0x3a) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7fffffff, 0x10, 0x9, 0x4, 0xd}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000000)={0x8, 0x5, 0x5}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_drm_connector_fops_drm_debugfs(r0, &(0x7f00000001c0)="13ee6285caf0d38cce56c7f93d3ec007200a49c933a3a92f2cb43ad2a48f323410e8f2a9a707887ff4bd69643819bafe7c7e3135f9885ca23c8a8075d3c5a8eb50e14f9d7420e713962354d58f82595fafc712e1ddcccc0a1d8ef2b9f463687b8237eb71a660948116c91133fe492f82b982c68df6c6002832049ae693c6dac5bc21e3e8519f33f86883104d733272d95249dac5b55926e779cbe5e14ac1e1ebe531d9800801338fb2da358c931c9e5de212305a14bb55a0d26e87b19a4ceb1504b454b1", 0xc4) getrandom$auto(0x0, 0x6000000, 0x3) 518.935057ms ago: executing program 4 (id=3414): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x300, 0x9}, 0x7}, 0x3, 0x0) 435.828021ms ago: executing program 4 (id=3415): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x4c0043, 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x400100, 0x0) read$auto(r1, 0x0, 0xe8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x40086602, 0x0) lstat$auto(0x0, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/veth1_to_team/delay_first_probe_time\x00', 0x40b00, 0x0) read$auto(r3, 0x0, 0x1ff) socket(0x2, 0x2, 0x1) sendto$auto(0x3, 0x0, 0x8, 0xf950, 0x0, 0x1e) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp\x00', 0xc0880, 0x0) pread64$auto(r4, 0x0, 0x1ffffffffffe, 0xd59f) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_XFS_IOC_ALLOCSP(r2, 0x4030580a, &(0x7f00000000c0)={0x81, 0x5, 0xffffffff, 0x6, 0x782c, 0xffffffffffffffff}) process_vm_readv$auto(r5, &(0x7f0000000180)={&(0x7f0000000140)="f5e92c1fd3b37ee3954ba1072ec6cf4b5a8f5007638a1a796e60ab3a5c7866a5189fe463aeed71da36eb6c78920dd6f290"}, 0x6, &(0x7f0000000240)={&(0x7f00000001c0)="1f15130e4ace777f7bf78f3187f9bf972cbdfcfba560502e5fa7b24c4961ace827e6015b9fb0b13442b440f8319be680645496dc487908ac94a22f5de0967dc9713f41d38e54e4cda46522f33c551a600db236b0881a7f5f", 0x2}, 0xffffffff, 0x6ca3) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0x0) 328.777256ms ago: executing program 3 (id=3416): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) 287.98217ms ago: executing program 4 (id=3417): socket(0x2, 0x1, 0x105) getsockopt$auto(0x3, 0x6, 0x1f, &(0x7f0000000200)=':\x00', &(0x7f0000000240)=0x9) 207.148436ms ago: executing program 5 (id=3418): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/nfsfs/volumes\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x200000000006, 0x20fe) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) r3 = io_uring_setup$auto(0x6, 0x0) wait4$auto(r2, 0x0, 0x80000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xd5) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/anycast_delay\x00', 0x331282, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/bond_slave_0/stable_secret\x00', 0x40a000, 0x0) sendfile$auto(r5, r4, 0x0, 0x48) 155.995995ms ago: executing program 3 (id=3419): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x163340, 0x6a) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@isdn={0x22, 0x9, 0x4, 0x52, 0x7b}, 0x7f) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) r2 = io_uring_setup$auto(0x9e6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) mmap$auto(0x100, 0x6c6, 0x8, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) mmap$auto(0x0, 0x40009, 0xdc, 0x9b72, 0x7, 0x28000) bpf$auto(0x2, &(0x7f0000000040)=@task_fd_query={0x2, r0, 0x6, 0x0, 0x8, 0x7, 0xffffffffffffffff, 0x5, 0x2}, 0x101) msgsnd$auto(0x4, &(0x7f0000000000)={0x1, 0x5}, 0xfffffffffffffff7, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getpgrp(0x0) r3 = fcntl$getown(r2, 0x9) r4 = prctl$auto(0x1000000003b, 0xfffd, r3, 0x45, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_ADD_UEID(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8da0991", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250a000000050001005b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x8092) madvise$auto(0x2, 0xffffffffffff0001, 0x1a) pwritev$auto(r4, 0x0, 0xffffffffffffffae, 0x90, 0xfffffffffffffb84) 0s ago: executing program 4 (id=3420): r0 = socket(0xa, 0x3, 0x87) setsockopt$auto(r0, 0x29, 0x1ff, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x40000000028000) madvise$auto_MADV_DOFORK(0xb, 0x3, 0xb) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x100, 0xb, 0x4000000000, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) bind$auto(0x3, 0x0, 0x6a) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r2, 0xae03, 0xaf) ioctl$auto_SG_SCSI_RESET(r1, 0x2284, &(0x7f00000001c0)) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xe, 0x20000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/swaps\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000010c0)=""/4082, 0xff2) r4 = fcntl$auto_F_WRLCK(r3, 0x7, 0x1) read$auto_proc_tid_children_operations_internal(r4, &(0x7f0000000000)=""/255, 0xff) kernel console output (not intermixed with test programs): handle_mm_fault+0x589/0xd10 [ 772.890658][T12455] __get_user_pages+0x551/0x34a0 [ 772.890683][T12455] ? down_read_killable+0x220/0x4b0 [ 772.890704][T12455] ? __lock_acquire+0x62e/0x1ce0 [ 772.890721][T12455] ? __pfx___get_user_pages+0x10/0x10 [ 772.890746][T12455] __gup_longterm_locked+0xa92/0x17e0 [ 772.890771][T12455] ? try_get_folio+0x1d2/0x730 [ 772.890789][T12455] ? __pfx___gup_longterm_locked+0x10/0x10 [ 772.890811][T12455] ? try_get_folio+0x255/0x730 [ 772.890830][T12455] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 772.890854][T12455] gup_fast_fallback+0xf78/0x23f0 [ 772.890882][T12455] ? __pfx_stack_trace_save+0x10/0x10 [ 772.890905][T12455] ? blkdev_write_iter+0x703/0xe00 [ 772.890922][T12455] ? __pfx_gup_fast_fallback+0x10/0x10 [ 772.890941][T12455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.890965][T12455] pin_user_pages_fast+0xa7/0xf0 [ 772.890986][T12455] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 772.891008][T12455] ? iov_iter_advance+0x7d/0x6c0 [ 772.891032][T12455] iov_iter_extract_pages+0x3a2/0x1ed0 [ 772.891048][T12455] ? find_held_lock+0x2b/0x80 [ 772.891062][T12455] ? pfn_valid+0x26a/0x4d0 [ 772.891080][T12455] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 772.891095][T12455] ? pfn_valid+0x6f/0x4d0 [ 772.891113][T12455] ? bvec_try_merge_page+0x1c5/0x280 [ 772.891135][T12455] ? bio_add_page+0x16f/0x790 [ 772.891152][T12455] ? iov_iter_revert+0x27/0x5a0 [ 772.891175][T12455] bio_iov_iter_get_pages+0x384/0x10d0 [ 772.891206][T12455] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 772.891228][T12455] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 772.891252][T12455] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 772.891272][T12455] ? rcu_is_watching+0x12/0xc0 [ 772.891287][T12455] ? iov_iter_is_aligned+0xf2/0x5a0 [ 772.891305][T12455] ? set_normalized_timespec64+0x69/0xc0 [ 772.891324][T12455] blkdev_direct_IO+0x1401/0x1fe0 [ 772.891349][T12455] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 772.891369][T12455] ? filemap_check_errors+0xa9/0x160 [ 772.891396][T12455] blkdev_write_iter+0x703/0xe00 [ 772.891417][T12455] vfs_write+0x7d0/0x11d0 [ 772.891434][T12455] ? __pfx_blkdev_write_iter+0x10/0x10 [ 772.891452][T12455] ? __pfx_vfs_write+0x10/0x10 [ 772.891467][T12455] ? find_held_lock+0x2b/0x80 [ 772.891492][T12455] ksys_write+0x12a/0x250 [ 772.891508][T12455] ? __pfx_ksys_write+0x10/0x10 [ 772.891529][T12455] do_syscall_64+0xcd/0x490 [ 772.891550][T12455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.891563][T12455] RIP: 0033:0x7f369cb8ebe9 [ 772.891576][T12455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.891590][T12455] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.891603][T12455] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 772.891613][T12455] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 772.891622][T12455] RBP: 00007f369d950090 R08: 0000000000000000 R09: 0000000000000000 [ 772.891630][T12455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.891639][T12455] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 772.891657][T12455] [ 772.893252][ T7484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.744039][ T7484] bond0 (unregistering): Released all slaves [ 774.036146][T12469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 774.902093][ T6817] Bluetooth: hci0: command tx timeout [ 776.302967][ T7484] hsr_slave_0: left promiscuous mode [ 776.329015][ T7484] hsr_slave_1: left promiscuous mode [ 776.361950][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.381557][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.412868][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.431016][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.471350][ T7484] veth1_macvtap: left promiscuous mode [ 776.488953][ T7484] veth0_macvtap: left promiscuous mode [ 776.499051][ T7484] veth1_vlan: left promiscuous mode [ 776.523525][ T7484] veth0_vlan: left promiscuous mode [ 776.597438][T12507] FAULT_INJECTION: forcing a failure. [ 776.597438][T12507] name failslab, interval 1, probability 0, space 0, times 0 [ 776.719847][T12507] CPU: 0 UID: 0 PID: 12507 Comm: syz.0.2958 Tainted: G U syzkaller #0 PREEMPT(full) [ 776.719874][T12507] Tainted: [U]=USER [ 776.719879][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.719888][T12507] Call Trace: [ 776.719894][T12507] [ 776.719901][T12507] dump_stack_lvl+0x16c/0x1f0 [ 776.719923][T12507] should_fail_ex+0x512/0x640 [ 776.719944][T12507] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 776.719971][T12507] should_failslab+0xc2/0x120 [ 776.719990][T12507] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 776.720006][T12507] ? __lock_acquire+0x62e/0x1ce0 [ 776.720025][T12507] ? ptlock_alloc+0x1f/0x70 [ 776.720043][T12507] ptlock_alloc+0x1f/0x70 [ 776.720056][T12507] pte_alloc_one+0x82/0x3a0 [ 776.720073][T12507] do_huge_pmd_anonymous_page+0x8c9/0x2080 [ 776.720090][T12507] ? find_held_lock+0x2b/0x80 [ 776.720106][T12507] __handle_mm_fault+0x1ccd/0x2a50 [ 776.720126][T12507] ? __pfx___handle_mm_fault+0x10/0x10 [ 776.720157][T12507] handle_mm_fault+0x589/0xd10 [ 776.720175][T12507] __get_user_pages+0x551/0x34a0 [ 776.720201][T12507] ? down_read_killable+0x220/0x4b0 [ 776.720221][T12507] ? __lock_acquire+0x62e/0x1ce0 [ 776.720238][T12507] ? __pfx___get_user_pages+0x10/0x10 [ 776.720264][T12507] __gup_longterm_locked+0xa92/0x17e0 [ 776.720289][T12507] ? try_get_folio+0x1d2/0x730 [ 776.720307][T12507] ? __pfx___gup_longterm_locked+0x10/0x10 [ 776.720331][T12507] ? try_get_folio+0x255/0x730 [ 776.720350][T12507] ? sanity_check_pinned_pages+0x58a/0x11d0 [ 776.720374][T12507] gup_fast_fallback+0xf78/0x23f0 [ 776.720399][T12507] ? __pfx_stack_trace_save+0x10/0x10 [ 776.720423][T12507] ? blkdev_write_iter+0x703/0xe00 [ 776.720440][T12507] ? __pfx_gup_fast_fallback+0x10/0x10 [ 776.720460][T12507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.720484][T12507] pin_user_pages_fast+0xa7/0xf0 [ 776.720505][T12507] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 776.720526][T12507] ? iov_iter_advance+0x7d/0x6c0 [ 776.720550][T12507] iov_iter_extract_pages+0x3a2/0x1ed0 [ 776.720566][T12507] ? find_held_lock+0x2b/0x80 [ 776.720580][T12507] ? pfn_valid+0x26a/0x4d0 [ 776.720599][T12507] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 776.720614][T12507] ? pfn_valid+0x6f/0x4d0 [ 776.720632][T12507] ? bvec_try_merge_page+0x1c5/0x280 [ 776.720653][T12507] ? bio_add_page+0x16f/0x790 [ 776.720671][T12507] ? iov_iter_revert+0x27/0x5a0 [ 776.720694][T12507] bio_iov_iter_get_pages+0x384/0x10d0 [ 776.720725][T12507] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 776.720747][T12507] ? __pfx_bio_alloc_bioset+0x10/0x10 [ 776.720766][T12507] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 776.720786][T12507] ? rcu_is_watching+0x12/0xc0 [ 776.720801][T12507] ? iov_iter_is_aligned+0xf2/0x5a0 [ 776.720819][T12507] ? set_normalized_timespec64+0x69/0xc0 [ 776.720838][T12507] blkdev_direct_IO+0x1401/0x1fe0 [ 776.720863][T12507] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 776.720886][T12507] ? filemap_check_errors+0xa9/0x160 [ 776.720914][T12507] blkdev_write_iter+0x703/0xe00 [ 776.720935][T12507] vfs_write+0x7d0/0x11d0 [ 776.720957][T12507] ? __pfx_blkdev_write_iter+0x10/0x10 [ 776.720976][T12507] ? __pfx_vfs_write+0x10/0x10 [ 776.720991][T12507] ? find_held_lock+0x2b/0x80 [ 776.721016][T12507] ksys_write+0x12a/0x250 [ 776.721032][T12507] ? __pfx_ksys_write+0x10/0x10 [ 776.721053][T12507] do_syscall_64+0xcd/0x490 [ 776.721074][T12507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.721088][T12507] RIP: 0033:0x7f369cb8ebe9 [ 776.721100][T12507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.721114][T12507] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 776.721128][T12507] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 776.721138][T12507] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 776.721146][T12507] RBP: 00007f369d950090 R08: 0000000000000000 R09: 0000000000000000 [ 776.721155][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.721163][T12507] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 776.721181][T12507] [ 777.267391][ T6817] Bluetooth: hci0: command tx timeout [ 777.463008][T12511] FAULT_INJECTION: forcing a failure. [ 777.463008][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 777.475683][T12511] CPU: 0 UID: 0 PID: 12511 Comm: syz.3.2959 Tainted: G U syzkaller #0 PREEMPT(full) [ 777.475707][T12511] Tainted: [U]=USER [ 777.475712][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.475722][T12511] Call Trace: [ 777.475728][T12511] [ 777.475734][T12511] dump_stack_lvl+0x16c/0x1f0 [ 777.475759][T12511] should_fail_ex+0x512/0x640 [ 777.475780][T12511] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 777.475801][T12511] should_failslab+0xc2/0x120 [ 777.475820][T12511] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 777.475836][T12511] ? mark_held_locks+0x49/0x80 [ 777.475854][T12511] ? key_alloc+0x3e0/0x1330 [ 777.475875][T12511] key_alloc+0x3e0/0x1330 [ 777.475900][T12511] ? __pfx_key_alloc+0x10/0x10 [ 777.475924][T12511] ? __pfx_key_default_cmp+0x10/0x10 [ 777.475945][T12511] ? __pfx_keyring_search_iterator+0x10/0x10 [ 777.475970][T12511] keyring_alloc+0x44/0xc0 [ 777.475993][T12511] look_up_user_keyrings+0x510/0x760 [ 777.476014][T12511] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 777.476039][T12511] lookup_user_key+0x1a3/0x1300 [ 777.476059][T12511] ? __pfx_lookup_user_key+0x10/0x10 [ 777.476075][T12511] ? do_futex+0x122/0x350 [ 777.476097][T12511] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 777.476119][T12511] ? fput+0x9b/0xd0 [ 777.476142][T12511] keyctl_keyring_clear+0x24/0x1a0 [ 777.476157][T12511] __do_sys_keyctl+0x355/0x590 [ 777.476174][T12511] do_syscall_64+0xcd/0x490 [ 777.476195][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.476211][T12511] RIP: 0033:0x7f583918ebe9 [ 777.476224][T12511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.476238][T12511] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 777.476253][T12511] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 777.476263][T12511] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 777.476272][T12511] RBP: 00007f5839211e19 R08: 0000000000000008 R09: 0000000000000000 [ 777.476281][T12511] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 777.476290][T12511] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 777.476309][T12511] [ 778.546585][T12526] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 778.589805][T12526] ep_00: uevent: failed to send synthetic uevent: -22 [ 778.769880][ T7484] team0 (unregistering): Port device team_slave_1 removed [ 778.900360][ T7484] team0 (unregistering): Port device team_slave_0 removed [ 779.666881][T12535] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.110810][T12385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 780.149222][T12539] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input65 [ 780.270487][T12385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 780.396648][T12385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.554438][T12385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 781.043949][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'. [ 781.731970][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.000310][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.042305][T12591] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 782.108523][T12591] ep_00: uevent: failed to send synthetic uevent: -22 [ 782.217363][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.224500][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.315623][T12596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2974'. [ 782.374603][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.381693][ T7479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.419373][T12600] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2974'. [ 782.669264][T12608] blktrace: Concurrent blktraces are not allowed on ram4 [ 782.755970][T12385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 782.879870][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2976'. [ 783.141173][T12611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.227704][T12611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.275467][T12611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.311887][T12616] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 783.323004][T12611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.646350][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.343259][T12385] veth0_vlan: entered promiscuous mode [ 784.369488][T12385] veth1_vlan: entered promiscuous mode [ 784.422074][T12385] veth0_macvtap: entered promiscuous mode [ 784.442032][T12385] veth1_macvtap: entered promiscuous mode [ 784.486668][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 784.519502][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.549194][ T6813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.565003][ T6813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.592697][ T6813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.630132][ T6813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.828285][ T7487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.870805][ T7487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.989599][ T7484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.038485][ T7484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.070415][T12660] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 785.242940][T12654] FAULT_INJECTION: forcing a failure. [ 785.242940][T12654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.356906][T12655] could not allocate digest TFM handle [ 785.522153][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.4.2983 Tainted: G U syzkaller #0 PREEMPT(full) [ 785.522179][T12654] Tainted: [U]=USER [ 785.522183][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 785.522192][T12654] Call Trace: [ 785.522198][T12654] [ 785.522204][T12654] dump_stack_lvl+0x16c/0x1f0 [ 785.522227][T12654] should_fail_ex+0x512/0x640 [ 785.522249][T12654] _copy_from_user+0x2e/0xd0 [ 785.522271][T12654] get_timespec64+0x8b/0x1b0 [ 785.522289][T12654] ? __pfx_get_timespec64+0x10/0x10 [ 785.522305][T12654] ? ktime_get+0x200/0x310 [ 785.522325][T12654] __x64_sys_futex+0x288/0x4c0 [ 785.522345][T12654] ? __pfx___x64_sys_futex+0x10/0x10 [ 785.522370][T12654] ? xfd_validate_state+0x61/0x180 [ 785.522397][T12654] do_syscall_64+0xcd/0x490 [ 785.522417][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.522431][T12654] RIP: 0033:0x7f853b58ebe9 [ 785.522443][T12654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.522457][T12654] RSP: 002b:00007fff2e907b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 785.522471][T12654] RAX: ffffffffffffffda RBX: 00000000000bfafb RCX: 00007f853b58ebe9 [ 785.522480][T12654] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f853b7b618c [ 785.522489][T12654] RBP: 0000000000000032 R08: 00007f853c374000 R09: 0000001c2e907e1f [ 785.522498][T12654] R10: 00007fff2e907c20 R11: 0000000000000246 R12: 00007f853b7b618c [ 785.522506][T12654] R13: 00007fff2e907c20 R14: 00000000000bfb2d R15: 00007fff2e907c40 [ 785.522524][T12654] [ 786.691239][T12679] blktrace: Concurrent blktraces are not allowed on ram4 [ 786.829530][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2986'. [ 786.858736][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.867745][T12684] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 786.885519][T12679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.914573][T12679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.927939][T12679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.167245][T12686] FAULT_INJECTION: forcing a failure. [ 787.167245][T12686] name failslab, interval 1, probability 0, space 0, times 0 [ 787.262562][T12686] CPU: 0 UID: 0 PID: 12686 Comm: syz.0.2988 Tainted: G U syzkaller #0 PREEMPT(full) [ 787.262587][T12686] Tainted: [U]=USER [ 787.262593][T12686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.262602][T12686] Call Trace: [ 787.262607][T12686] [ 787.262614][T12686] dump_stack_lvl+0x16c/0x1f0 [ 787.262638][T12686] should_fail_ex+0x512/0x640 [ 787.262658][T12686] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 787.262678][T12686] should_failslab+0xc2/0x120 [ 787.262698][T12686] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 787.262714][T12686] ? d_instantiate+0x77/0x90 [ 787.262732][T12686] ? alloc_empty_file+0x55/0x1e0 [ 787.262755][T12686] alloc_empty_file+0x55/0x1e0 [ 787.262776][T12686] alloc_file_pseudo+0x13a/0x230 [ 787.262798][T12686] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 787.262821][T12686] ? do_raw_spin_unlock+0x172/0x230 [ 787.262845][T12686] __anon_inode_getfile+0xe8/0x280 [ 787.262865][T12686] anon_inode_getfile_fmode+0x37/0xa0 [ 787.262883][T12686] do_eventfd+0x19b/0x2c0 [ 787.262906][T12686] ? rcu_is_watching+0x12/0xc0 [ 787.262922][T12686] __x64_sys_eventfd+0x32/0x50 [ 787.262943][T12686] do_syscall_64+0xcd/0x490 [ 787.262964][T12686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.262979][T12686] RIP: 0033:0x7f369cb8ebe9 [ 787.262992][T12686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.263006][T12686] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 787.263021][T12686] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 787.263031][T12686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 787.263040][T12686] RBP: 00007f369cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 787.263049][T12686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.263058][T12686] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 787.263077][T12686] [ 787.764254][T12698] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 787.805452][T12698] ep_00: uevent: failed to send synthetic uevent: -22 [ 787.939754][T12702] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 788.073708][T12705] Invalid ELF header magic: != ELF [ 788.349763][T12709] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 789.287134][T12732] FAULT_INJECTION: forcing a failure. [ 789.287134][T12732] name failslab, interval 1, probability 0, space 0, times 0 [ 789.373546][T12732] CPU: 0 UID: 0 PID: 12732 Comm: syz.0.3000 Tainted: G U syzkaller #0 PREEMPT(full) [ 789.373572][T12732] Tainted: [U]=USER [ 789.373577][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 789.373586][T12732] Call Trace: [ 789.373593][T12732] [ 789.373599][T12732] dump_stack_lvl+0x16c/0x1f0 [ 789.373622][T12732] should_fail_ex+0x512/0x640 [ 789.373643][T12732] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 789.373664][T12732] should_failslab+0xc2/0x120 [ 789.373683][T12732] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 789.373700][T12732] ? getname_flags.part.0+0x4c/0x550 [ 789.373724][T12732] getname_flags.part.0+0x4c/0x550 [ 789.373748][T12732] getname_flags+0x93/0xf0 [ 789.373764][T12732] do_sys_openat2+0xb8/0x1d0 [ 789.373785][T12732] ? __pfx_do_sys_openat2+0x10/0x10 [ 789.373807][T12732] ? __pfx___might_resched+0x10/0x10 [ 789.373827][T12732] __x64_sys_openat+0x174/0x210 [ 789.373849][T12732] ? __pfx___x64_sys_openat+0x10/0x10 [ 789.373877][T12732] do_syscall_64+0xcd/0x490 [ 789.373897][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.373913][T12732] RIP: 0033:0x7f369cb8ebe9 [ 789.373925][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.373939][T12732] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 789.373954][T12732] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 789.373963][T12732] RDX: 0000000000040400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 789.373973][T12732] RBP: 00007f369cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 789.373981][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.373990][T12732] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 789.374008][T12732] [ 792.195666][T12752] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 792.220611][T12752] ep_00: uevent: failed to send synthetic uevent: -22 [ 792.615332][T12761] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 792.721456][T12728] kexec: Could not allocate control_code_buffer [ 793.592433][T12773] openvswitch: netlink: Flow actions attr not present in new flow. [ 793.650865][T12773] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 793.658858][T12774] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input67 [ 794.034540][T12774] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 794.140925][T12789] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 794.920776][T12808] vivid-007: ================= START STATUS ================= [ 795.137463][T12808] vivid-007: Generate PTS: true [ 795.227545][T12808] vivid-007: Generate SCR: true [ 795.255805][T12817] can: request_module (can-proto-3) failed. [ 795.372143][T12808] tpg source WxH: 320x240 (Y'CbCr) [ 795.475788][T12808] tpg field: 1 [ 795.577818][T12808] tpg crop: (0,0)/320x240 [ 795.614332][T12808] tpg compose: (0,0)/320x240 [ 795.676615][T12808] tpg colorspace: 8 [ 795.708592][T12808] tpg transfer function: 0/0 [ 795.729235][T12840] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3019'. [ 795.742968][T12808] tpg Y'CbCr encoding: 0/0 [ 795.747386][T12808] tpg quantization: 0/0 [ 795.782010][T12840] mac80211_hwsim hwsim27 ›: renamed from wlan0 (while UP) [ 795.798354][T12808] tpg RGB range: 0/2 [ 795.811171][T12808] vivid-007: ================== END STATUS ================== [ 795.924100][T12845] ptrace attach of "./syz-executor exec"[12846] was attempted by "./syz-executor exec"[12845] [ 796.143206][T12852] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 797.542565][T12861] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 798.212237][T12905] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 798.646968][T12912] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input69 [ 799.044784][T12938] phram: parameter too long [ 799.780529][T12965] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 800.278014][T12977] random: crng reseeded on system resumption [ 801.364029][T12992] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 802.698841][ T6817] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 802.730670][T13041] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 803.333618][T13069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 803.501569][T13077] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.542955][T13083] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 803.649009][T13073] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 805.298131][T13114] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 805.790135][T13129] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 805.866338][T13129] ep_00: uevent: failed to send synthetic uevent: -22 [ 806.217786][T13130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 806.487170][T13153] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3069'. [ 806.595871][T13153] mac80211_hwsim hwsim39 ›: renamed from wlan0 (while UP) [ 806.615833][T13159] random: crng reseeded on system resumption [ 807.500587][T13170] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 808.225629][T13199] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 808.282156][T13199] ep_00: uevent: failed to send synthetic uevent: -22 [ 808.373169][T13201] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 808.432471][T13206] FAULT_INJECTION: forcing a failure. [ 808.432471][T13206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.464859][T13201] ep_00: uevent: failed to send synthetic uevent: -22 [ 808.546016][T13206] CPU: 0 UID: 0 PID: 13206 Comm: syz.3.3078 Tainted: G U syzkaller #0 PREEMPT(full) [ 808.546043][T13206] Tainted: [U]=USER [ 808.546048][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.546057][T13206] Call Trace: [ 808.546063][T13206] [ 808.546069][T13206] dump_stack_lvl+0x16c/0x1f0 [ 808.546092][T13206] should_fail_ex+0x512/0x640 [ 808.546115][T13206] _copy_from_user+0x2e/0xd0 [ 808.546138][T13206] cache_do_downcall+0x66/0x160 [ 808.546156][T13206] cache_write_procfs+0xf0/0x160 [ 808.546172][T13206] ? __pfx_cache_write_procfs+0x10/0x10 [ 808.546189][T13206] proc_reg_write+0x240/0x330 [ 808.546210][T13206] ? __pfx_proc_reg_write+0x10/0x10 [ 808.546228][T13206] vfs_write+0x2a0/0x11d0 [ 808.546248][T13206] ? __pfx___mutex_lock+0x10/0x10 [ 808.546267][T13206] ? __pfx_vfs_write+0x10/0x10 [ 808.546288][T13206] ? __fget_files+0x20e/0x3c0 [ 808.546309][T13206] ksys_write+0x12a/0x250 [ 808.546325][T13206] ? __pfx_ksys_write+0x10/0x10 [ 808.546347][T13206] do_syscall_64+0xcd/0x490 [ 808.546367][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.546383][T13206] RIP: 0033:0x7f583918ebe9 [ 808.546395][T13206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.546409][T13206] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 808.546422][T13206] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 808.546432][T13206] RDX: 00000000000030fe RSI: 0000000000000000 RDI: 0000000000000003 [ 808.546440][T13206] RBP: 00007f5839fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 808.546449][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.546457][T13206] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 808.546476][T13206] [ 808.818585][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.824904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.205111][T13235] FAULT_INJECTION: forcing a failure. [ 809.205111][T13235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.394262][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.3.3083 Tainted: G U syzkaller #0 PREEMPT(full) [ 809.394289][T13235] Tainted: [U]=USER [ 809.394294][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.394303][T13235] Call Trace: [ 809.394309][T13235] [ 809.394316][T13235] dump_stack_lvl+0x16c/0x1f0 [ 809.394340][T13235] should_fail_ex+0x512/0x640 [ 809.394364][T13235] should_fail_alloc_page+0xe7/0x130 [ 809.394385][T13235] prepare_alloc_pages+0x3c2/0x610 [ 809.394410][T13235] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 809.394433][T13235] ? __lock_acquire+0x62e/0x1ce0 [ 809.394455][T13235] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 809.394484][T13235] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 809.394507][T13235] ? policy_nodemask+0xea/0x4e0 [ 809.394527][T13235] alloc_pages_mpol+0x1fb/0x550 [ 809.394547][T13235] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 809.394571][T13235] ? blk_cgroup_congested+0x140/0x270 [ 809.394593][T13235] alloc_pages_noprof+0x131/0x390 [ 809.394613][T13235] pte_alloc_one+0x1c/0x3a0 [ 809.394629][T13235] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 809.394650][T13235] __handle_mm_fault+0x1ccd/0x2a50 [ 809.394678][T13235] ? __pfx___handle_mm_fault+0x10/0x10 [ 809.394696][T13235] ? __lock_acquire+0xb97/0x1ce0 [ 809.394727][T13235] handle_mm_fault+0x589/0xd10 [ 809.394746][T13235] __get_user_pages+0x551/0x34a0 [ 809.394776][T13235] ? __pfx___get_user_pages+0x10/0x10 [ 809.394802][T13235] populate_vma_page_range+0x267/0x3f0 [ 809.394826][T13235] ? __pfx_populate_vma_page_range+0x10/0x10 [ 809.394847][T13235] ? __pfx_find_vma_intersection+0x10/0x10 [ 809.394869][T13235] ? do_mmap+0x69c/0x1210 [ 809.394891][T13235] __mm_populate+0x1d8/0x380 [ 809.394913][T13235] ? __pfx___mm_populate+0x10/0x10 [ 809.394936][T13235] ? up_write+0x1b2/0x520 [ 809.394959][T13235] vm_mmap_pgoff+0x37f/0x470 [ 809.394981][T13235] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 809.395005][T13235] ? __x64_sys_futex+0x1e0/0x4c0 [ 809.395023][T13235] ? __x64_sys_futex+0x1e9/0x4c0 [ 809.395043][T13235] ksys_mmap_pgoff+0x7d/0x5c0 [ 809.395062][T13235] ? xfd_validate_state+0x61/0x180 [ 809.395082][T13235] ? __pfx_do_writev+0x10/0x10 [ 809.395099][T13235] __x64_sys_mmap+0x125/0x190 [ 809.395123][T13235] do_syscall_64+0xcd/0x490 [ 809.395145][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.395160][T13235] RIP: 0033:0x7f583918ebe9 [ 809.395172][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.395187][T13235] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 809.395201][T13235] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 809.395211][T13235] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 809.395220][T13235] RBP: 00007f5839211e19 R08: 0000000000000002 R09: 0000000000008000 [ 809.395230][T13235] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 809.395238][T13235] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 809.395258][T13235] [ 810.864929][T13270] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 811.054944][T13277] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 811.300266][T13278] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 811.713121][T13291] netlink: 'syz.5.3092': attribute type 1 has an invalid length. [ 811.947708][T13294] FAULT_INJECTION: forcing a failure. [ 811.947708][T13294] name failslab, interval 1, probability 0, space 0, times 0 [ 812.006146][T13294] CPU: 0 UID: 0 PID: 13294 Comm: syz.5.3093 Tainted: G U syzkaller #0 PREEMPT(full) [ 812.006171][T13294] Tainted: [U]=USER [ 812.006177][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.006186][T13294] Call Trace: [ 812.006192][T13294] [ 812.006198][T13294] dump_stack_lvl+0x16c/0x1f0 [ 812.006222][T13294] should_fail_ex+0x512/0x640 [ 812.006242][T13294] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 812.006260][T13294] should_failslab+0xc2/0x120 [ 812.006280][T13294] __kmalloc_cache_noprof+0x6a/0x3e0 [ 812.006294][T13294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.006315][T13294] ? kvm_set_irq_routing+0x24f/0x970 [ 812.006337][T13294] kvm_set_irq_routing+0x24f/0x970 [ 812.006362][T13294] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 812.006380][T13294] ? register_lock_class+0x41/0x4c0 [ 812.006399][T13294] ? find_held_lock+0x2b/0x80 [ 812.006414][T13294] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 812.006445][T13294] ? __lock_acquire+0x62e/0x1ce0 [ 812.006468][T13294] ? __lock_acquire+0x62e/0x1ce0 [ 812.006491][T13294] ? __lock_acquire+0x62e/0x1ce0 [ 812.006514][T13294] ? __lock_acquire+0x62e/0x1ce0 [ 812.006544][T13294] ? is_bpf_text_address+0x8a/0x1a0 [ 812.006563][T13294] ? bpf_ksym_find+0x124/0x1c0 [ 812.006578][T13294] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.006595][T13294] ? is_bpf_text_address+0x94/0x1a0 [ 812.006613][T13294] ? kernel_text_address+0x8d/0x100 [ 812.006626][T13294] ? __kernel_text_address+0xd/0x40 [ 812.006639][T13294] ? unwind_get_return_address+0x59/0xa0 [ 812.006654][T13294] ? arch_stack_walk+0xa6/0x100 [ 812.006677][T13294] ? stack_trace_save+0x8e/0xc0 [ 812.006692][T13294] ? __pfx_stack_trace_save+0x10/0x10 [ 812.006708][T13294] ? stack_depot_save_flags+0x29/0x9c0 [ 812.006728][T13294] ? __lock_acquire+0xb97/0x1ce0 [ 812.006748][T13294] ? kasan_save_stack+0x42/0x60 [ 812.006764][T13294] ? kasan_save_stack+0x33/0x60 [ 812.006778][T13294] ? kasan_save_track+0x14/0x30 [ 812.006793][T13294] ? kasan_save_free_info+0x3b/0x60 [ 812.006814][T13294] ? __kasan_slab_free+0x60/0x70 [ 812.006830][T13294] ? kfree+0x2b4/0x4d0 [ 812.006844][T13294] kvm_vm_ioctl+0x1a91/0x4000 [ 812.006866][T13294] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 812.006892][T13294] ? kasan_quarantine_put+0x10a/0x240 [ 812.006907][T13294] ? lockdep_hardirqs_on+0x7c/0x110 [ 812.006928][T13294] ? find_held_lock+0x2b/0x80 [ 812.006942][T13294] ? tomoyo_path_number_perm+0x295/0x580 [ 812.006963][T13294] ? tomoyo_path_number_perm+0x18d/0x580 [ 812.006982][T13294] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.006999][T13294] ? futex_wake+0x1ad/0x530 [ 812.007024][T13294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 812.007047][T13294] ? do_vfs_ioctl+0x128/0x14f0 [ 812.007069][T13294] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 812.007096][T13294] ? find_held_lock+0x2b/0x80 [ 812.007109][T13294] ? hook_file_ioctl_common+0x145/0x410 [ 812.007133][T13294] ? __fget_files+0x20e/0x3c0 [ 812.007151][T13294] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 812.007166][T13294] __x64_sys_ioctl+0x18e/0x210 [ 812.007189][T13294] do_syscall_64+0xcd/0x490 [ 812.007209][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.007224][T13294] RIP: 0033:0x7fc1ee38ebe9 [ 812.007236][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.007250][T13294] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.007264][T13294] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 812.007274][T13294] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 812.007284][T13294] RBP: 00007fc1ee411e19 R08: 0000000000000000 R09: 0000000000000000 [ 812.007293][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 812.007302][T13294] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 812.007321][T13294] [ 813.554845][T13311] FAULT_INJECTION: forcing a failure. [ 813.554845][T13311] name failslab, interval 1, probability 0, space 0, times 0 [ 813.639985][T13311] CPU: 0 UID: 0 PID: 13311 Comm: syz.3.3097 Tainted: G U syzkaller #0 PREEMPT(full) [ 813.640013][T13311] Tainted: [U]=USER [ 813.640018][T13311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.640028][T13311] Call Trace: [ 813.640034][T13311] [ 813.640040][T13311] dump_stack_lvl+0x16c/0x1f0 [ 813.640065][T13311] should_fail_ex+0x512/0x640 [ 813.640086][T13311] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 813.640107][T13311] should_failslab+0xc2/0x120 [ 813.640127][T13311] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 813.640144][T13311] ? blk_cgroup_congested+0x140/0x270 [ 813.640160][T13311] ? ptlock_alloc+0x1f/0x70 [ 813.640178][T13311] ptlock_alloc+0x1f/0x70 [ 813.640192][T13311] pte_alloc_one+0x82/0x3a0 [ 813.640208][T13311] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 813.640228][T13311] __handle_mm_fault+0x1ccd/0x2a50 [ 813.640248][T13311] ? __pfx___handle_mm_fault+0x10/0x10 [ 813.640266][T13311] ? __lock_acquire+0xb97/0x1ce0 [ 813.640296][T13311] handle_mm_fault+0x589/0xd10 [ 813.640315][T13311] __get_user_pages+0x551/0x34a0 [ 813.640344][T13311] ? __pfx___get_user_pages+0x10/0x10 [ 813.640370][T13311] populate_vma_page_range+0x267/0x3f0 [ 813.640393][T13311] ? __pfx_populate_vma_page_range+0x10/0x10 [ 813.640420][T13311] ? __pfx_find_vma_intersection+0x10/0x10 [ 813.640442][T13311] ? do_mmap+0x69c/0x1210 [ 813.640464][T13311] __mm_populate+0x1d8/0x380 [ 813.640488][T13311] ? __pfx___mm_populate+0x10/0x10 [ 813.640512][T13311] ? up_write+0x1b2/0x520 [ 813.640535][T13311] vm_mmap_pgoff+0x37f/0x470 [ 813.640558][T13311] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 813.640582][T13311] ? __x64_sys_futex+0x1e0/0x4c0 [ 813.640600][T13311] ? __x64_sys_futex+0x1e9/0x4c0 [ 813.640620][T13311] ksys_mmap_pgoff+0x7d/0x5c0 [ 813.640639][T13311] ? xfd_validate_state+0x61/0x180 [ 813.640659][T13311] ? __pfx_do_writev+0x10/0x10 [ 813.640677][T13311] __x64_sys_mmap+0x125/0x190 [ 813.640701][T13311] do_syscall_64+0xcd/0x490 [ 813.640722][T13311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.640737][T13311] RIP: 0033:0x7f583918ebe9 [ 813.640750][T13311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.640765][T13311] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 813.640780][T13311] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 813.640790][T13311] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 813.640799][T13311] RBP: 00007f5839211e19 R08: 0000000000000002 R09: 0000000000008000 [ 813.640808][T13311] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 813.640817][T13311] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 813.640837][T13311] [ 815.078596][T13333] netlink: 'syz.3.3102': attribute type 1 has an invalid length. [ 815.236998][T13335] FAULT_INJECTION: forcing a failure. [ 815.236998][T13335] name failslab, interval 1, probability 0, space 0, times 0 [ 815.316475][T13335] CPU: 0 UID: 0 PID: 13335 Comm: syz.5.3110 Tainted: G U syzkaller #0 PREEMPT(full) [ 815.316503][T13335] Tainted: [U]=USER [ 815.316508][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 815.316518][T13335] Call Trace: [ 815.316524][T13335] [ 815.316530][T13335] dump_stack_lvl+0x16c/0x1f0 [ 815.316554][T13335] should_fail_ex+0x512/0x640 [ 815.316575][T13335] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 815.316595][T13335] should_failslab+0xc2/0x120 [ 815.316614][T13335] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 815.316631][T13335] ? blk_cgroup_congested+0x140/0x270 [ 815.316647][T13335] ? ptlock_alloc+0x1f/0x70 [ 815.316664][T13335] ptlock_alloc+0x1f/0x70 [ 815.316677][T13335] pte_alloc_one+0x82/0x3a0 [ 815.316693][T13335] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 815.316713][T13335] __handle_mm_fault+0x1ccd/0x2a50 [ 815.316734][T13335] ? __pfx___handle_mm_fault+0x10/0x10 [ 815.316752][T13335] ? __lock_acquire+0xb97/0x1ce0 [ 815.316785][T13335] handle_mm_fault+0x589/0xd10 [ 815.316804][T13335] __get_user_pages+0x551/0x34a0 [ 815.316833][T13335] ? __pfx___get_user_pages+0x10/0x10 [ 815.316859][T13335] populate_vma_page_range+0x267/0x3f0 [ 815.316883][T13335] ? __pfx_populate_vma_page_range+0x10/0x10 [ 815.316905][T13335] ? __pfx_find_vma_intersection+0x10/0x10 [ 815.316926][T13335] ? do_mmap+0x69c/0x1210 [ 815.316948][T13335] __mm_populate+0x1d8/0x380 [ 815.316970][T13335] ? __pfx___mm_populate+0x10/0x10 [ 815.316993][T13335] ? up_write+0x1b2/0x520 [ 815.317015][T13335] vm_mmap_pgoff+0x37f/0x470 [ 815.317038][T13335] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 815.317061][T13335] ? __x64_sys_futex+0x1e0/0x4c0 [ 815.317079][T13335] ? __x64_sys_futex+0x1e9/0x4c0 [ 815.317099][T13335] ksys_mmap_pgoff+0x7d/0x5c0 [ 815.317118][T13335] ? xfd_validate_state+0x61/0x180 [ 815.317138][T13335] ? __pfx_do_writev+0x10/0x10 [ 815.317155][T13335] __x64_sys_mmap+0x125/0x190 [ 815.317179][T13335] do_syscall_64+0xcd/0x490 [ 815.317243][T13335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.317260][T13335] RIP: 0033:0x7fc1ee38ebe9 [ 815.317272][T13335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.317287][T13335] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 815.317301][T13335] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 815.317311][T13335] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 815.317321][T13335] RBP: 00007fc1ee411e19 R08: 0000000000000002 R09: 0000000000008000 [ 815.317331][T13335] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 815.317340][T13335] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 815.317359][T13335] [ 815.998105][T13339] FAULT_INJECTION: forcing a failure. [ 815.998105][T13339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.025095][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.0.3104 Tainted: G U syzkaller #0 PREEMPT(full) [ 816.025121][T13339] Tainted: [U]=USER [ 816.025126][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 816.025135][T13339] Call Trace: [ 816.025141][T13339] [ 816.025147][T13339] dump_stack_lvl+0x16c/0x1f0 [ 816.025178][T13339] should_fail_ex+0x512/0x640 [ 816.025202][T13339] _copy_to_user+0x32/0xd0 [ 816.025218][T13339] simple_read_from_buffer+0xcb/0x170 [ 816.025235][T13339] proc_fail_nth_read+0x197/0x240 [ 816.025251][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.025268][T13339] ? rw_verify_area+0xcf/0x6c0 [ 816.025282][T13339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.025298][T13339] vfs_read+0x1e4/0xcf0 [ 816.025316][T13339] ? __pfx___mutex_lock+0x10/0x10 [ 816.025335][T13339] ? __pfx_vfs_read+0x10/0x10 [ 816.025355][T13339] ? __fget_files+0x20e/0x3c0 [ 816.025376][T13339] ksys_read+0x12a/0x250 [ 816.025391][T13339] ? __pfx_ksys_read+0x10/0x10 [ 816.025413][T13339] do_syscall_64+0xcd/0x490 [ 816.025433][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.025447][T13339] RIP: 0033:0x7f369cb8d5fc [ 816.025460][T13339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 816.025474][T13339] RSP: 002b:00007f369d950030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.025488][T13339] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8d5fc [ 816.025498][T13339] RDX: 000000000000000f RSI: 00007f369d9500a0 RDI: 0000000000000005 [ 816.025506][T13339] RBP: 00007f369d950090 R08: 0000000000000000 R09: 0000000000000000 [ 816.025515][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.025523][T13339] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 816.025542][T13339] [ 816.242583][T13342] random: crng reseeded on system resumption [ 816.251398][T13342] FAULT_INJECTION: forcing a failure. [ 816.251398][T13342] name failslab, interval 1, probability 0, space 0, times 0 [ 816.264787][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.5.3105 Tainted: G U syzkaller #0 PREEMPT(full) [ 816.264811][T13342] Tainted: [U]=USER [ 816.264817][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 816.264826][T13342] Call Trace: [ 816.264832][T13342] [ 816.264838][T13342] dump_stack_lvl+0x16c/0x1f0 [ 816.264862][T13342] should_fail_ex+0x512/0x640 [ 816.264882][T13342] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 816.264901][T13342] should_failslab+0xc2/0x120 [ 816.264922][T13342] __kmalloc_cache_noprof+0x6a/0x3e0 [ 816.264945][T13342] ? create_basic_memory_bitmaps+0xeb/0x320 [ 816.264966][T13342] create_basic_memory_bitmaps+0xeb/0x320 [ 816.264987][T13342] snapshot_open+0x235/0x2b0 [ 816.265004][T13342] ? __pfx_snapshot_open+0x10/0x10 [ 816.265022][T13342] misc_open+0x35d/0x420 [ 816.265038][T13342] ? __pfx_misc_open+0x10/0x10 [ 816.265052][T13342] chrdev_open+0x234/0x6a0 [ 816.265070][T13342] ? __pfx_apparmor_file_open+0x10/0x10 [ 816.265087][T13342] ? __pfx_chrdev_open+0x10/0x10 [ 816.265106][T13342] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 816.265133][T13342] do_dentry_open+0x982/0x1530 [ 816.265153][T13342] ? __pfx_chrdev_open+0x10/0x10 [ 816.265175][T13342] vfs_open+0x82/0x3f0 [ 816.265198][T13342] path_openat+0x1de4/0x2cb0 [ 816.265223][T13342] ? __pfx_path_openat+0x10/0x10 [ 816.265246][T13342] do_filp_open+0x20b/0x470 [ 816.265262][T13342] ? __pfx_do_filp_open+0x10/0x10 [ 816.265293][T13342] ? alloc_fd+0x471/0x7d0 [ 816.265314][T13342] do_sys_openat2+0x11b/0x1d0 [ 816.265335][T13342] ? __pfx_do_sys_openat2+0x10/0x10 [ 816.265363][T13342] __x64_sys_openat+0x174/0x210 [ 816.265385][T13342] ? __pfx___x64_sys_openat+0x10/0x10 [ 816.265414][T13342] do_syscall_64+0xcd/0x490 [ 816.265435][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.265450][T13342] RIP: 0033:0x7fc1ee38ebe9 [ 816.265463][T13342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.265477][T13342] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 816.265492][T13342] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 816.265502][T13342] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 816.265512][T13342] RBP: 00007fc1ee411e19 R08: 0000000000000000 R09: 0000000000000000 [ 816.265521][T13342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.265530][T13342] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 816.265550][T13342] [ 817.302931][T13359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 817.365306][T13361] FAULT_INJECTION: forcing a failure. [ 817.365306][T13361] name failslab, interval 1, probability 0, space 0, times 0 [ 817.447403][T13361] CPU: 0 UID: 0 PID: 13361 Comm: syz.0.3111 Tainted: G U syzkaller #0 PREEMPT(full) [ 817.447430][T13361] Tainted: [U]=USER [ 817.447435][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 817.447446][T13361] Call Trace: [ 817.447452][T13361] [ 817.447458][T13361] dump_stack_lvl+0x16c/0x1f0 [ 817.447482][T13361] should_fail_ex+0x512/0x640 [ 817.447503][T13361] ? fs_reclaim_acquire+0xae/0x150 [ 817.447528][T13361] should_failslab+0xc2/0x120 [ 817.447547][T13361] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 817.447565][T13361] ? security_inode_alloc+0x3b/0x2b0 [ 817.447585][T13361] security_inode_alloc+0x3b/0x2b0 [ 817.447602][T13361] inode_init_always_gfp+0xce4/0x1030 [ 817.447622][T13361] alloc_inode+0x86/0x240 [ 817.447643][T13361] new_inode+0x22/0x1c0 [ 817.447661][T13361] ? trace_cap_capable+0x18d/0x200 [ 817.447678][T13361] shmem_get_inode+0x19a/0xfb0 [ 817.447701][T13361] ? __vm_enough_memory+0x184/0x3f0 [ 817.447722][T13361] __shmem_file_setup+0x279/0x330 [ 817.447739][T13361] shmem_zero_setup+0x93/0x1a0 [ 817.447757][T13361] __mmap_region+0x2081/0x27b0 [ 817.447776][T13361] ? lock_acquire+0x179/0x350 [ 817.447794][T13361] ? __pfx___mmap_region+0x10/0x10 [ 817.447816][T13361] ? lockdep_hardirqs_on+0x7c/0x110 [ 817.447833][T13361] ? finish_task_switch.isra.0+0x221/0xc10 [ 817.447849][T13361] ? rcu_is_watching+0x12/0xc0 [ 817.447864][T13361] ? trace_sched_exit_tp+0xd1/0x120 [ 817.447885][T13361] ? __schedule+0x11a3/0x5de0 [ 817.447932][T13361] ? trace_cap_capable+0x18d/0x200 [ 817.447953][T13361] mmap_region+0x1ab/0x3f0 [ 817.447969][T13361] ? __get_unmapped_area+0x267/0x440 [ 817.447991][T13361] do_mmap+0xa3e/0x1210 [ 817.448015][T13361] ? __pfx_do_mmap+0x10/0x10 [ 817.448035][T13361] ? __pfx_down_write_killable+0x10/0x10 [ 817.448059][T13361] vm_mmap_pgoff+0x29e/0x470 [ 817.448082][T13361] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 817.448107][T13361] ? __x64_sys_futex+0x1e0/0x4c0 [ 817.448124][T13361] ? __x64_sys_futex+0x1e9/0x4c0 [ 817.448151][T13361] ksys_mmap_pgoff+0x7d/0x5c0 [ 817.448171][T13361] ? xfd_validate_state+0x61/0x180 [ 817.448193][T13361] ? __pfx_ksys_write+0x10/0x10 [ 817.448213][T13361] __x64_sys_mmap+0x125/0x190 [ 817.448238][T13361] do_syscall_64+0xcd/0x490 [ 817.448259][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.448274][T13361] RIP: 0033:0x7f369cb8ebe9 [ 817.448286][T13361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.448301][T13361] RSP: 002b:00007f369d90e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 817.448316][T13361] RAX: ffffffffffffffda RBX: 00007f369cdb6180 RCX: 00007f369cb8ebe9 [ 817.448326][T13361] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 817.448335][T13361] RBP: 00007f369cc11e19 R08: fffffffffffffffa R09: 0000000000008000 [ 817.448345][T13361] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 817.448353][T13361] R13: 00007f369cdb6218 R14: 00007f369cdb6180 R15: 00007ffd3dc8a0a8 [ 817.448373][T13361] [ 819.157992][T13378] netlink: 61 bytes leftover after parsing attributes in process `syz.4.3114'. [ 820.100302][T13396] FAULT_INJECTION: forcing a failure. [ 820.100302][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 820.178675][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.3.3119 Tainted: G U syzkaller #0 PREEMPT(full) [ 820.178702][T13396] Tainted: [U]=USER [ 820.178707][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.178719][T13396] Call Trace: [ 820.178727][T13396] [ 820.178733][T13396] dump_stack_lvl+0x16c/0x1f0 [ 820.178757][T13396] should_fail_ex+0x512/0x640 [ 820.178778][T13396] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 820.178798][T13396] should_failslab+0xc2/0x120 [ 820.178818][T13396] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 820.178835][T13396] ? __d_alloc+0x32/0xae0 [ 820.178864][T13396] __d_alloc+0x32/0xae0 [ 820.178884][T13396] d_alloc_parallel+0x111/0x1480 [ 820.178914][T13396] ? __pfx_d_alloc_parallel+0x10/0x10 [ 820.178938][T13396] ? lockdep_init_map_type+0x5c/0x280 [ 820.178959][T13396] ? lockdep_init_map_type+0x5c/0x280 [ 820.178982][T13396] __lookup_slow+0x193/0x460 [ 820.179004][T13396] ? __pfx___lookup_slow+0x10/0x10 [ 820.179028][T13396] ? perf_trace_mm_compaction_suitable_template+0x410/0x5e0 [ 820.179054][T13396] ? perf_trace_mm_compaction_suitable_template+0x410/0x5e0 [ 820.179076][T13396] ? d_lookup+0xe7/0x190 [ 820.179100][T13396] lookup_noperm+0xe1/0x110 [ 820.179122][T13396] simple_start_creating+0xd1/0x1b0 [ 820.179139][T13396] start_creating.part.0+0x82/0x190 [ 820.179157][T13396] __debugfs_create_file+0xa7/0x6b0 [ 820.179176][T13396] debugfs_create_file_full+0x41/0x60 [ 820.179194][T13396] ? __pfx_do_setup+0x10/0x10 [ 820.179214][T13396] ref_tracker_dir_debugfs+0x19d/0x290 [ 820.179236][T13396] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 820.179271][T13396] ? __kvmalloc_node_noprof+0x298/0x620 [ 820.179286][T13396] ? trace_kmalloc+0x2b/0xd0 [ 820.179307][T13396] ? lockdep_init_map_type+0x5c/0x280 [ 820.179329][T13396] alloc_netdev_mqs+0x30f/0x1530 [ 820.179354][T13396] internal_dev_create+0x8a/0x520 [ 820.179376][T13396] ovs_vport_add+0x144/0x4d0 [ 820.179396][T13396] new_vport+0x16/0x1d0 [ 820.179412][T13396] ovs_dp_cmd_new+0x6ba/0xe60 [ 820.179434][T13396] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 820.179456][T13396] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 820.179480][T13396] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 820.179506][T13396] genl_family_rcv_msg_doit+0x206/0x2f0 [ 820.179530][T13396] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 820.179559][T13396] ? bpf_lsm_capable+0x9/0x10 [ 820.179572][T13396] ? security_capable+0x7e/0x260 [ 820.179588][T13396] ? ns_capable+0xd7/0x110 [ 820.179606][T13396] genl_rcv_msg+0x55c/0x800 [ 820.179630][T13396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.179652][T13396] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 820.179677][T13396] netlink_rcv_skb+0x155/0x420 [ 820.179696][T13396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.179719][T13396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 820.179746][T13396] ? netlink_deliver_tap+0x1ae/0xd30 [ 820.179768][T13396] genl_rcv+0x28/0x40 [ 820.179788][T13396] netlink_unicast+0x5aa/0x870 [ 820.179811][T13396] ? __pfx_netlink_unicast+0x10/0x10 [ 820.179831][T13396] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 820.179855][T13396] ? __lock_acquire+0xb97/0x1ce0 [ 820.179880][T13396] netlink_sendmsg+0x8d1/0xdd0 [ 820.179904][T13396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.179927][T13396] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 820.179947][T13396] ____sys_sendmsg+0xa95/0xc70 [ 820.179963][T13396] ? copy_msghdr_from_user+0x10a/0x160 [ 820.179982][T13396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.180005][T13396] ___sys_sendmsg+0x134/0x1d0 [ 820.180026][T13396] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.180069][T13396] __sys_sendmsg+0x16d/0x220 [ 820.180089][T13396] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.180107][T13396] ? __x64_sys_futex+0x1e0/0x4c0 [ 820.180138][T13396] do_syscall_64+0xcd/0x490 [ 820.180159][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.180173][T13396] RIP: 0033:0x7f583918ebe9 [ 820.180186][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.180200][T13396] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.180214][T13396] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 820.180224][T13396] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 820.180233][T13396] RBP: 00007f5839211e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.180242][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.180251][T13396] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 820.180271][T13396] [ 821.088869][T13396] HfR: entered promiscuous mode [ 821.435770][T13402] openvswitch: netlink: Multiple metadata blocks provided [ 821.494708][T13401] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 821.521075][T13402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3121'. [ 821.734288][T13408] svc: failed to register nfsdv3 RPC service (errno 111). [ 821.817655][T13408] svc: failed to register nfsaclv3 RPC service (errno 111). [ 822.747548][T13436] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 822.839398][T13436] ep_00: uevent: failed to send synthetic uevent: -22 [ 823.166214][T13454] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 823.720174][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3136'. [ 824.979291][T13502] FAULT_INJECTION: forcing a failure. [ 824.979291][T13502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.069810][T13502] CPU: 0 UID: 0 PID: 13502 Comm: syz.5.3142 Tainted: G U syzkaller #0 PREEMPT(full) [ 825.069838][T13502] Tainted: [U]=USER [ 825.069843][T13502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 825.069853][T13502] Call Trace: [ 825.069858][T13502] [ 825.069865][T13502] dump_stack_lvl+0x16c/0x1f0 [ 825.069889][T13502] should_fail_ex+0x512/0x640 [ 825.069913][T13502] should_fail_alloc_page+0xe7/0x130 [ 825.069934][T13502] prepare_alloc_pages+0x3c2/0x610 [ 825.069959][T13502] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 825.069982][T13502] ? __lock_acquire+0x62e/0x1ce0 [ 825.070003][T13502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.070032][T13502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 825.070054][T13502] ? policy_nodemask+0xea/0x4e0 [ 825.070075][T13502] alloc_pages_mpol+0x1fb/0x550 [ 825.070094][T13502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 825.070114][T13502] ? blk_cgroup_congested+0x140/0x270 [ 825.070134][T13502] alloc_pages_noprof+0x131/0x390 [ 825.070153][T13502] pte_alloc_one+0x1c/0x3a0 [ 825.070169][T13502] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 825.070189][T13502] __handle_mm_fault+0x1ccd/0x2a50 [ 825.070210][T13502] ? __pfx___handle_mm_fault+0x10/0x10 [ 825.070229][T13502] ? __lock_acquire+0xb97/0x1ce0 [ 825.070260][T13502] handle_mm_fault+0x589/0xd10 [ 825.070279][T13502] __get_user_pages+0x551/0x34a0 [ 825.070308][T13502] ? __pfx___get_user_pages+0x10/0x10 [ 825.070334][T13502] populate_vma_page_range+0x267/0x3f0 [ 825.070358][T13502] ? __pfx_populate_vma_page_range+0x10/0x10 [ 825.070379][T13502] ? __pfx_find_vma_intersection+0x10/0x10 [ 825.070400][T13502] ? do_mmap+0x69c/0x1210 [ 825.070422][T13502] __mm_populate+0x1d8/0x380 [ 825.070445][T13502] ? __pfx___mm_populate+0x10/0x10 [ 825.070468][T13502] ? up_write+0x1b2/0x520 [ 825.070498][T13502] vm_mmap_pgoff+0x37f/0x470 [ 825.070522][T13502] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 825.070548][T13502] ? __x64_sys_futex+0x1e0/0x4c0 [ 825.070566][T13502] ? __x64_sys_futex+0x1e9/0x4c0 [ 825.070587][T13502] ksys_mmap_pgoff+0x7d/0x5c0 [ 825.070606][T13502] ? xfd_validate_state+0x61/0x180 [ 825.070626][T13502] ? __pfx_do_writev+0x10/0x10 [ 825.070644][T13502] __x64_sys_mmap+0x125/0x190 [ 825.070668][T13502] do_syscall_64+0xcd/0x490 [ 825.070688][T13502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.070704][T13502] RIP: 0033:0x7fc1ee38ebe9 [ 825.070717][T13502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.070731][T13502] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 825.070745][T13502] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 825.070755][T13502] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 825.070765][T13502] RBP: 00007fc1ee411e19 R08: 0000000000000002 R09: 0000000000008000 [ 825.070774][T13502] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 825.070783][T13502] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 825.070803][T13502] [ 825.587626][T13512] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 825.966423][T13521] capability: warning: `syz.5.3147' uses deprecated v2 capabilities in a way that may be insecure [ 826.073170][T13525] FAULT_INJECTION: forcing a failure. [ 826.073170][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 826.111213][T13525] CPU: 0 UID: 0 PID: 13525 Comm: syz.3.3148 Tainted: G U syzkaller #0 PREEMPT(full) [ 826.111240][T13525] Tainted: [U]=USER [ 826.111245][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.111255][T13525] Call Trace: [ 826.111261][T13525] [ 826.111268][T13525] dump_stack_lvl+0x16c/0x1f0 [ 826.111292][T13525] should_fail_ex+0x512/0x640 [ 826.111314][T13525] ? __kmalloc_noprof+0xbf/0x510 [ 826.111334][T13525] ? ring_buffer_read_start+0x1b9/0x500 [ 826.111353][T13525] should_failslab+0xc2/0x120 [ 826.111372][T13525] __kmalloc_noprof+0xd2/0x510 [ 826.111393][T13525] ring_buffer_read_start+0x1b9/0x500 [ 826.111413][T13525] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 826.111439][T13525] ? lockdep_init_map_type+0x5c/0x280 [ 826.111460][T13525] ? ring_buffer_overruns+0x195/0x1f0 [ 826.111479][T13525] tracing_open+0xad9/0xdf0 [ 826.111499][T13525] do_dentry_open+0x982/0x1530 [ 826.111518][T13525] ? __pfx_tracing_open+0x10/0x10 [ 826.111537][T13525] vfs_open+0x82/0x3f0 [ 826.111560][T13525] path_openat+0x1de4/0x2cb0 [ 826.111583][T13525] ? __pfx_path_openat+0x10/0x10 [ 826.111605][T13525] do_filp_open+0x20b/0x470 [ 826.111622][T13525] ? __pfx_do_filp_open+0x10/0x10 [ 826.111653][T13525] ? alloc_fd+0x471/0x7d0 [ 826.111673][T13525] do_sys_openat2+0x11b/0x1d0 [ 826.111694][T13525] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.111723][T13525] __x64_sys_openat+0x174/0x210 [ 826.111745][T13525] ? __pfx___x64_sys_openat+0x10/0x10 [ 826.111774][T13525] do_syscall_64+0xcd/0x490 [ 826.111794][T13525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.111809][T13525] RIP: 0033:0x7f583918ebe9 [ 826.111822][T13525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.111837][T13525] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 826.111852][T13525] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 826.111861][T13525] RDX: 0000000000020c00 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 826.111871][T13525] RBP: 00007f5839211e19 R08: 0000000000000000 R09: 0000000000000000 [ 826.111880][T13525] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000000 [ 826.111888][T13525] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 826.111907][T13525] [ 826.474842][T13537] ICMPv6: process `syz.3.3151' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 827.102857][T13560] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 827.125773][T13558] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 827.656865][T13575] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 827.708016][T13575] ep_00: uevent: failed to send synthetic uevent: -22 [ 828.021357][T13579] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 828.857783][T13597] svc: failed to register nfsdv3 RPC service (errno 111). [ 828.898543][T13597] svc: failed to register nfsaclv3 RPC service (errno 111). [ 828.906319][T13600] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 829.805589][T13619] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 829.840786][T13619] ep_00: uevent: failed to send synthetic uevent: -22 [ 830.174772][T13630] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input76 [ 831.384002][T13667] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 831.437962][T13667] ep_00: uevent: failed to send synthetic uevent: -22 [ 832.514022][T13677] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 832.736939][T13693] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 833.301261][T13701] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 834.162933][T13717] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 834.200521][T13717] ep_00: uevent: failed to send synthetic uevent: -22 [ 834.242642][T13714] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 834.908870][T13742] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 835.345278][T13753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3202'. [ 836.366826][T13758] Invalid ELF header magic: != ELF [ 836.992734][T13781] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.164663][T13810] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 838.399532][T13813] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 838.454184][T13813] ep_00: uevent: failed to send synthetic uevent: -22 [ 838.840920][ T30] audit: type=1800 audit(2147483770.098:26): pid=13819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3218" name="trace_pipe" dev="tracefs" ino=1064 res=0 errno=0 [ 838.968643][T13830] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3220'. [ 839.010896][T13829] netlink: 93 bytes leftover after parsing attributes in process `syz.0.3220'. [ 839.533216][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 839.642281][T13852] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 839.712525][T13852] ep_00: uevent: failed to send synthetic uevent: -22 [ 841.135408][T13876] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 841.226297][T13881] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 841.893653][T13902] random: crng reseeded on system resumption [ 842.833754][T13910] FAULT_INJECTION: forcing a failure. [ 842.833754][T13910] name fail_futex, interval 1, probability 0, space 0, times 0 [ 842.864776][T13912] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 842.965764][T13910] CPU: 0 UID: 0 PID: 13910 Comm: syz.5.3239 Tainted: G U syzkaller #0 PREEMPT(full) [ 842.965791][T13910] Tainted: [U]=USER [ 842.965797][T13910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 842.965806][T13910] Call Trace: [ 842.965812][T13910] [ 842.965818][T13910] dump_stack_lvl+0x16c/0x1f0 [ 842.965842][T13910] should_fail_ex+0x512/0x640 [ 842.965867][T13910] get_futex_key+0x1d0/0x1560 [ 842.965888][T13910] ? __pfx_get_futex_key+0x10/0x10 [ 842.965904][T13910] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 842.965926][T13910] ? lockdep_hardirqs_on+0x7c/0x110 [ 842.965945][T13910] ? __destroy_inode+0x2e4/0x730 [ 842.965964][T13910] ? __pfx_sock_free_inode+0x10/0x10 [ 842.965988][T13910] futex_wake+0xea/0x530 [ 842.966009][T13910] ? __pfx_evict+0x10/0x10 [ 842.966027][T13910] ? __pfx_futex_wake+0x10/0x10 [ 842.966049][T13910] ? iput+0x519/0x880 [ 842.966071][T13910] do_futex+0x1e3/0x350 [ 842.966090][T13910] ? __pfx_do_futex+0x10/0x10 [ 842.966107][T13910] ? __sock_release+0x20b/0x270 [ 842.966131][T13910] __x64_sys_futex+0x1e0/0x4c0 [ 842.966150][T13910] ? __sys_socket+0xac/0x260 [ 842.966164][T13910] ? __pfx___x64_sys_futex+0x10/0x10 [ 842.966182][T13910] ? xfd_validate_state+0x61/0x180 [ 842.966218][T13910] do_syscall_64+0xcd/0x490 [ 842.966240][T13910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.966256][T13910] RIP: 0033:0x7fc1ee38ebe9 [ 842.966269][T13910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.966283][T13910] RSP: 002b:00007fc1ef12d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 842.966297][T13910] RAX: ffffffffffffffda RBX: 00007fc1ee5b6188 RCX: 00007fc1ee38ebe9 [ 842.966307][T13910] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc1ee5b618c [ 842.966316][T13910] RBP: 00007fc1ee5b6180 R08: 00007fc1ef170000 R09: 0000000000000000 [ 842.966325][T13910] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 842.966334][T13910] R13: 00007fc1ee5b6218 R14: 00007ffd20e1b540 R15: 00007ffd20e1b628 [ 842.966353][T13910] [ 843.185880][ C0] vkms_vblank_simulate: vblank timer overrun [ 843.665123][T13922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3242'. [ 843.707092][T13925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3242'. [ 844.066459][T13928] svc: failed to register nfsdv3 RPC service (errno 111). [ 844.202366][T13928] svc: failed to register nfsaclv3 RPC service (errno 111). [ 845.310089][ T30] audit: type=1800 audit(2147483776.565:27): pid=13957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3248" name="members" dev="configfs" ino=88913 res=0 errno=0 [ 845.383348][T13973] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 845.512664][T13976] FAULT_INJECTION: forcing a failure. [ 845.512664][T13976] name failslab, interval 1, probability 0, space 0, times 0 [ 845.548455][T13973] ep_00: uevent: failed to send synthetic uevent: -22 [ 845.609712][T13976] CPU: 0 UID: 0 PID: 13976 Comm: syz.0.3251 Tainted: G U syzkaller #0 PREEMPT(full) [ 845.609737][T13976] Tainted: [U]=USER [ 845.609742][T13976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 845.609752][T13976] Call Trace: [ 845.609758][T13976] [ 845.609765][T13976] dump_stack_lvl+0x16c/0x1f0 [ 845.609790][T13976] should_fail_ex+0x512/0x640 [ 845.609811][T13976] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 845.609834][T13976] should_failslab+0xc2/0x120 [ 845.609853][T13976] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 845.609872][T13976] ? __kthread_create_on_node+0x186/0x3f0 [ 845.609895][T13976] kvasprintf+0xbc/0x160 [ 845.609909][T13976] ? __pfx_kvasprintf+0x10/0x10 [ 845.609930][T13976] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 845.609950][T13976] __kthread_create_on_node+0x186/0x3f0 [ 845.609970][T13976] ? __pfx___kthread_create_on_node+0x10/0x10 [ 845.610003][T13976] ? __lock_acquire+0xb97/0x1ce0 [ 845.610025][T13976] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 845.610046][T13976] kthread_create_on_node+0xc7/0x100 [ 845.610066][T13976] ? __pfx_kthread_create_on_node+0x10/0x10 [ 845.610089][T13976] ? mark_held_locks+0x49/0x80 [ 845.610107][T13976] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 845.610124][T13976] ? lockdep_hardirqs_on+0x7c/0x110 [ 845.610146][T13976] dvb_frontend_open+0xf47/0x1730 [ 845.610170][T13976] ? __pfx_dvb_frontend_open+0x10/0x10 [ 845.610190][T13976] dvb_device_open+0x270/0x3b0 [ 845.610211][T13976] ? __pfx_dvb_device_open+0x10/0x10 [ 845.610231][T13976] chrdev_open+0x234/0x6a0 [ 845.610249][T13976] ? __pfx_apparmor_file_open+0x10/0x10 [ 845.610266][T13976] ? __pfx_chrdev_open+0x10/0x10 [ 845.610285][T13976] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 845.610305][T13976] do_dentry_open+0x982/0x1530 [ 845.610324][T13976] ? __pfx_chrdev_open+0x10/0x10 [ 845.610346][T13976] vfs_open+0x82/0x3f0 [ 845.610369][T13976] path_openat+0x1de4/0x2cb0 [ 845.610392][T13976] ? __pfx_path_openat+0x10/0x10 [ 845.610415][T13976] do_filp_open+0x20b/0x470 [ 845.610432][T13976] ? __pfx_do_filp_open+0x10/0x10 [ 845.610463][T13976] ? alloc_fd+0x471/0x7d0 [ 845.610484][T13976] do_sys_openat2+0x11b/0x1d0 [ 845.610505][T13976] ? __pfx_do_sys_openat2+0x10/0x10 [ 845.610534][T13976] __x64_sys_openat+0x174/0x210 [ 845.610556][T13976] ? __pfx___x64_sys_openat+0x10/0x10 [ 845.610585][T13976] do_syscall_64+0xcd/0x490 [ 845.610605][T13976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.610620][T13976] RIP: 0033:0x7f369cb8ebe9 [ 845.610633][T13976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.610647][T13976] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 845.610661][T13976] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 845.610671][T13976] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 845.610681][T13976] RBP: 00007f369cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 845.610689][T13976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.610698][T13976] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 845.610718][T13976] [ 845.610741][T13976] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 847.111346][T14012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3257'. [ 847.185921][T14012] nbd: must specify an index to disconnect [ 847.652706][T14024] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 847.886783][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3262'. [ 848.339396][T14035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input77 [ 848.800933][T14037] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input78 [ 849.015174][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3268'. [ 849.600125][T14064] FAULT_INJECTION: forcing a failure. [ 849.600125][T14064] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.681017][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.0.3271 Tainted: G U syzkaller #0 PREEMPT(full) [ 849.681046][T14064] Tainted: [U]=USER [ 849.681052][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 849.681061][T14064] Call Trace: [ 849.681067][T14064] [ 849.681073][T14064] dump_stack_lvl+0x16c/0x1f0 [ 849.681099][T14064] should_fail_ex+0x512/0x640 [ 849.681123][T14064] should_fail_alloc_page+0xe7/0x130 [ 849.681145][T14064] prepare_alloc_pages+0x3c2/0x610 [ 849.681172][T14064] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 849.681197][T14064] ? __lock_acquire+0x62e/0x1ce0 [ 849.681220][T14064] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 849.681251][T14064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 849.681274][T14064] ? policy_nodemask+0xea/0x4e0 [ 849.681295][T14064] alloc_pages_mpol+0x1fb/0x550 [ 849.681316][T14064] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 849.681337][T14064] ? blk_cgroup_congested+0x140/0x270 [ 849.681358][T14064] alloc_pages_noprof+0x131/0x390 [ 849.681379][T14064] pte_alloc_one+0x1c/0x3a0 [ 849.681395][T14064] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 849.681417][T14064] __handle_mm_fault+0x1ccd/0x2a50 [ 849.681438][T14064] ? __pfx___handle_mm_fault+0x10/0x10 [ 849.681457][T14064] ? __lock_acquire+0xb97/0x1ce0 [ 849.681488][T14064] handle_mm_fault+0x589/0xd10 [ 849.681507][T14064] __get_user_pages+0x551/0x34a0 [ 849.681538][T14064] ? __pfx___get_user_pages+0x10/0x10 [ 849.681566][T14064] populate_vma_page_range+0x267/0x3f0 [ 849.681591][T14064] ? __pfx_populate_vma_page_range+0x10/0x10 [ 849.681614][T14064] ? __pfx_find_vma_intersection+0x10/0x10 [ 849.681636][T14064] ? do_mmap+0x69c/0x1210 [ 849.681658][T14064] __mm_populate+0x1d8/0x380 [ 849.681682][T14064] ? __pfx___mm_populate+0x10/0x10 [ 849.681706][T14064] ? up_write+0x1b2/0x520 [ 849.681739][T14064] vm_mmap_pgoff+0x37f/0x470 [ 849.681766][T14064] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 849.681793][T14064] ? __x64_sys_futex+0x1e0/0x4c0 [ 849.681811][T14064] ? __x64_sys_futex+0x1e9/0x4c0 [ 849.681832][T14064] ksys_mmap_pgoff+0x7d/0x5c0 [ 849.681852][T14064] ? xfd_validate_state+0x61/0x180 [ 849.681873][T14064] ? __pfx_do_writev+0x10/0x10 [ 849.681892][T14064] __x64_sys_mmap+0x125/0x190 [ 849.681917][T14064] do_syscall_64+0xcd/0x490 [ 849.681939][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.681955][T14064] RIP: 0033:0x7f369cb8ebe9 [ 849.681969][T14064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.681983][T14064] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 849.681999][T14064] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 849.682009][T14064] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 849.682022][T14064] RBP: 00007f369cc11e19 R08: 0000000000000002 R09: 0000000000008000 [ 849.682031][T14064] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 849.682041][T14064] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 849.682063][T14064] [ 850.042354][T14066] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 850.489471][T14076] FAULT_INJECTION: forcing a failure. [ 850.489471][T14076] name failslab, interval 1, probability 0, space 0, times 0 [ 850.566827][T14076] CPU: 0 UID: 0 PID: 14076 Comm: syz.0.3275 Tainted: G U syzkaller #0 PREEMPT(full) [ 850.566855][T14076] Tainted: [U]=USER [ 850.566861][T14076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.566870][T14076] Call Trace: [ 850.566876][T14076] [ 850.566882][T14076] dump_stack_lvl+0x16c/0x1f0 [ 850.566906][T14076] should_fail_ex+0x512/0x640 [ 850.566926][T14076] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 850.566946][T14076] should_failslab+0xc2/0x120 [ 850.566967][T14076] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 850.566984][T14076] ? lockdep_init_map_type+0x5c/0x280 [ 850.567004][T14076] ? __d_alloc+0x32/0xae0 [ 850.567024][T14076] __d_alloc+0x32/0xae0 [ 850.567044][T14076] d_alloc_pseudo+0x1c/0xc0 [ 850.567065][T14076] alloc_file_pseudo+0xcf/0x230 [ 850.567087][T14076] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 850.567108][T14076] ? alloc_fd+0x471/0x7d0 [ 850.567126][T14076] sock_alloc_file+0x50/0x210 [ 850.567148][T14076] __sys_socket+0x1c0/0x260 [ 850.567163][T14076] ? __pfx___sys_socket+0x10/0x10 [ 850.567179][T14076] ? do_user_addr_fault+0x843/0x1370 [ 850.567204][T14076] __x64_sys_socket+0x72/0xb0 [ 850.567218][T14076] ? lockdep_hardirqs_on+0x7c/0x110 [ 850.567236][T14076] do_syscall_64+0xcd/0x490 [ 850.567256][T14076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.567270][T14076] RIP: 0033:0x7f369cb90b07 [ 850.567283][T14076] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.567297][T14076] RSP: 002b:00007f369d94efa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 850.567312][T14076] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb90b07 [ 850.567322][T14076] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 850.567330][T14076] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 850.567339][T14076] R10: 0000200000002340 R11: 0000000000000286 R12: 0000000000000000 [ 850.567348][T14076] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 850.567366][T14076] [ 850.957221][ T30] audit: type=1806 audit(2147483781.782:28): xattr="E" res=-22 [ 851.213387][T14076] zswap: compressor not available [ 851.820901][T14095] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 852.795357][T14118] blktrace: Concurrent blktraces are not allowed on ram4 [ 852.902408][T14118] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3283'. [ 852.987411][T14120] netlink: 'syz.4.3283': attribute type 2 has an invalid length. [ 853.082760][T14120] netlink: 'syz.4.3283': attribute type 3 has an invalid length. [ 853.147118][T14120] netlink: 218 bytes leftover after parsing attributes in process `syz.4.3283'. [ 853.357757][T14124] could not allocate digest TFM handle [ 853.399027][T14127] could not allocate digest TFM handle [ 853.912917][T14153] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input79 [ 854.116686][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3291'. [ 854.133624][T14160] FAULT_INJECTION: forcing a failure. [ 854.133624][T14160] name failslab, interval 1, probability 0, space 0, times 0 [ 854.265280][T14160] CPU: 0 UID: 0 PID: 14160 Comm: syz.0.3299 Tainted: G U syzkaller #0 PREEMPT(full) [ 854.265332][T14160] Tainted: [U]=USER [ 854.265343][T14160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.265364][T14160] Call Trace: [ 854.265376][T14160] [ 854.265388][T14160] dump_stack_lvl+0x16c/0x1f0 [ 854.265423][T14160] should_fail_ex+0x512/0x640 [ 854.265445][T14160] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 854.265465][T14160] should_failslab+0xc2/0x120 [ 854.265486][T14160] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 854.265505][T14160] ? security_file_alloc+0x34/0x2b0 [ 854.265529][T14160] security_file_alloc+0x34/0x2b0 [ 854.265548][T14160] init_file+0x93/0x4c0 [ 854.265569][T14160] alloc_empty_file+0x73/0x1e0 [ 854.265591][T14160] path_openat+0xda/0x2cb0 [ 854.265612][T14160] ? rcu_is_watching+0x12/0xc0 [ 854.265629][T14160] ? trace_kmem_cache_alloc+0x28/0xc0 [ 854.265650][T14160] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 854.265668][T14160] ? __pfx_path_openat+0x10/0x10 [ 854.265686][T14160] ? __asan_memcpy+0x3c/0x60 [ 854.265704][T14160] do_file_open_root+0x322/0x610 [ 854.265721][T14160] ? stack_trace_save+0x8e/0xc0 [ 854.265740][T14160] ? __pfx_do_file_open_root+0x10/0x10 [ 854.265775][T14160] ? vsnprintf+0x318/0x1160 [ 854.265796][T14160] file_open_root+0x2a7/0x450 [ 854.265815][T14160] ? __pfx_file_open_root+0x10/0x10 [ 854.265832][T14160] ? find_held_lock+0x2b/0x80 [ 854.265848][T14160] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 854.265875][T14160] kernel_read_file_from_path_initns+0x189/0x260 [ 854.265899][T14160] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 854.265921][T14160] ? trace_kmem_cache_alloc+0x28/0xc0 [ 854.265943][T14160] ? _request_firmware+0x503/0x1470 [ 854.265965][T14160] _request_firmware+0x744/0x1470 [ 854.265989][T14160] ? __pfx__request_firmware+0x10/0x10 [ 854.266007][T14160] ? __pfx_netdev_run_todo+0x10/0x10 [ 854.266028][T14160] ? __pfx___mutex_lock+0x10/0x10 [ 854.266054][T14160] request_firmware+0x35/0x50 [ 854.266072][T14160] reg_reload_regdb+0x85/0x460 [ 854.266095][T14160] ? __pfx_reg_reload_regdb+0x10/0x10 [ 854.266116][T14160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 854.266132][T14160] ? nl80211_pre_doit+0x1b0/0xb10 [ 854.266150][T14160] genl_family_rcv_msg_doit+0x206/0x2f0 [ 854.266176][T14160] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 854.266198][T14160] ? rcu_is_watching+0x12/0xc0 [ 854.266220][T14160] ? bpf_lsm_capable+0x9/0x10 [ 854.266234][T14160] ? security_capable+0x7e/0x260 [ 854.266252][T14160] genl_rcv_msg+0x55c/0x800 [ 854.266277][T14160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.266299][T14160] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 854.266318][T14160] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 854.266337][T14160] ? __pfx_nl80211_post_doit+0x10/0x10 [ 854.266364][T14160] netlink_rcv_skb+0x155/0x420 [ 854.266385][T14160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.266416][T14160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 854.266445][T14160] ? netlink_deliver_tap+0x1ae/0xd30 [ 854.266467][T14160] genl_rcv+0x28/0x40 [ 854.266488][T14160] netlink_unicast+0x5aa/0x870 [ 854.266512][T14160] ? __pfx_netlink_unicast+0x10/0x10 [ 854.266533][T14160] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 854.266552][T14160] ? __lock_acquire+0xb97/0x1ce0 [ 854.266575][T14160] netlink_sendmsg+0x8d1/0xdd0 [ 854.266599][T14160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.266621][T14160] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 854.266641][T14160] ____sys_sendmsg+0xa95/0xc70 [ 854.266656][T14160] ? copy_msghdr_from_user+0x10a/0x160 [ 854.266676][T14160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.266695][T14160] ? __pfx_futex_wake_mark+0x10/0x10 [ 854.266719][T14160] ___sys_sendmsg+0x134/0x1d0 [ 854.266740][T14160] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.266783][T14160] __sys_sendmsg+0x16d/0x220 [ 854.266803][T14160] ? __pfx___sys_sendmsg+0x10/0x10 [ 854.266822][T14160] ? __x64_sys_futex+0x1e0/0x4c0 [ 854.266852][T14160] do_syscall_64+0xcd/0x490 [ 854.266873][T14160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.266888][T14160] RIP: 0033:0x7f369cb8ebe9 [ 854.266902][T14160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.266917][T14160] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.266933][T14160] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 854.266943][T14160] RDX: 1400000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 854.266954][T14160] RBP: 00007f369cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 854.266964][T14160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.266974][T14160] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 854.266994][T14160] [ 854.754014][T14160] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -12 [ 856.240437][T14190] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 856.356570][T14193] FAULT_INJECTION: forcing a failure. [ 856.356570][T14193] name failslab, interval 1, probability 0, space 0, times 0 [ 856.471618][T14193] CPU: 0 UID: 0 PID: 14193 Comm: syz.4.3298 Tainted: G U syzkaller #0 PREEMPT(full) [ 856.471646][T14193] Tainted: [U]=USER [ 856.471652][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 856.471661][T14193] Call Trace: [ 856.471667][T14193] [ 856.471674][T14193] dump_stack_lvl+0x16c/0x1f0 [ 856.471699][T14193] should_fail_ex+0x512/0x640 [ 856.471720][T14193] ? __kmalloc_noprof+0xbf/0x510 [ 856.471739][T14193] ? acpi_ns_get_normalized_pathname+0x75/0xd0 [ 856.471761][T14193] should_failslab+0xc2/0x120 [ 856.471780][T14193] __kmalloc_noprof+0xd2/0x510 [ 856.471802][T14193] acpi_ns_get_normalized_pathname+0x75/0xd0 [ 856.471825][T14193] acpi_ex_start_trace_method+0x30/0x480 [ 856.471842][T14193] acpi_ds_begin_method_execution+0x3c/0x980 [ 856.471859][T14193] ? acpi_tb_check_dsdt_header+0x187/0x3e0 [ 856.471877][T14193] acpi_ps_execute_method+0x94/0xb30 [ 856.471898][T14193] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 856.471921][T14193] acpi_ns_evaluate+0x76c/0xca0 [ 856.471943][T14193] ? kasan_save_track+0x14/0x30 [ 856.471961][T14193] acpi_evaluate_object+0x1fa/0xa90 [ 856.471980][T14193] ? do_syscall_64+0xcd/0x490 [ 856.471997][T14193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.472013][T14193] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 856.472030][T14193] ? __mutex_trylock_common+0xe9/0x250 [ 856.472053][T14193] acpi_evaluate_integer+0xdd/0x200 [ 856.472069][T14193] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 856.472091][T14193] ? __pfx_status_show+0x10/0x10 [ 856.472108][T14193] status_show+0xa0/0x120 [ 856.472125][T14193] ? __pfx_status_show+0x10/0x10 [ 856.472147][T14193] dev_attr_show+0x53/0xe0 [ 856.472170][T14193] ? __pfx_dev_attr_show+0x10/0x10 [ 856.472190][T14193] sysfs_kf_seq_show+0x216/0x3e0 [ 856.472211][T14193] seq_read_iter+0x509/0x12c0 [ 856.472235][T14193] ? __mutex_trylock_common+0xe9/0x250 [ 856.472262][T14193] kernfs_fop_read_iter+0x40f/0x5a0 [ 856.472276][T14193] ? rw_verify_area+0xcf/0x6c0 [ 856.472294][T14193] vfs_read+0x8bc/0xcf0 [ 856.472313][T14193] ? __pfx___mutex_lock+0x10/0x10 [ 856.472332][T14193] ? __pfx_vfs_read+0x10/0x10 [ 856.472361][T14193] ksys_read+0x12a/0x250 [ 856.472377][T14193] ? __pfx_ksys_read+0x10/0x10 [ 856.472399][T14193] do_syscall_64+0xcd/0x490 [ 856.472419][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.472434][T14193] RIP: 0033:0x7f853b58ebe9 [ 856.472447][T14193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.472461][T14193] RSP: 002b:00007f853c331038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 856.472475][T14193] RAX: ffffffffffffffda RBX: 00007f853b7b6180 RCX: 00007f853b58ebe9 [ 856.472486][T14193] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000003 [ 856.472495][T14193] RBP: 00007f853b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 856.472504][T14193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.472513][T14193] R13: 00007f853b7b6218 R14: 00007f853b7b6180 R15: 00007fff2e9079c8 [ 856.472534][T14193] [ 856.472554][T14193] ACPI Error: [ 856.879034][T14199] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 856.931790][T14199] ep_00: uevent: failed to send synthetic uevent: -22 [ 857.083331][T14202] FAULT_INJECTION: forcing a failure. [ 857.083331][T14202] name failslab, interval 1, probability 0, space 0, times 0 [ 857.221867][T14202] CPU: 0 UID: 0 PID: 14202 Comm: syz.3.3302 Tainted: G U syzkaller #0 PREEMPT(full) [ 857.221893][T14202] Tainted: [U]=USER [ 857.221898][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.221907][T14202] Call Trace: [ 857.221913][T14202] [ 857.221919][T14202] dump_stack_lvl+0x16c/0x1f0 [ 857.221943][T14202] should_fail_ex+0x512/0x640 [ 857.221962][T14202] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 857.221982][T14202] should_failslab+0xc2/0x120 [ 857.222000][T14202] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 857.222017][T14202] ? vma_merge_new_range+0x3ae/0xa50 [ 857.222032][T14202] ? vm_area_alloc+0x1f/0x160 [ 857.222049][T14202] vm_area_alloc+0x1f/0x160 [ 857.222063][T14202] __mmap_region+0xf90/0x27b0 [ 857.222081][T14202] ? __pfx___mmap_region+0x10/0x10 [ 857.222102][T14202] ? is_bpf_text_address+0x8a/0x1a0 [ 857.222120][T14202] ? bpf_ksym_find+0x124/0x1c0 [ 857.222134][T14202] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 857.222151][T14202] ? is_bpf_text_address+0x94/0x1a0 [ 857.222173][T14202] ? kernel_text_address+0x8d/0x100 [ 857.222187][T14202] ? __kernel_text_address+0xd/0x40 [ 857.222229][T14202] ? trace_cap_capable+0x18d/0x200 [ 857.222252][T14202] mmap_region+0x1ab/0x3f0 [ 857.222268][T14202] ? __get_unmapped_area+0x267/0x440 [ 857.222290][T14202] do_mmap+0xa3e/0x1210 [ 857.222313][T14202] ? __pfx_do_mmap+0x10/0x10 [ 857.222336][T14202] ? __pfx_down_write_killable+0x10/0x10 [ 857.222360][T14202] vm_mmap_pgoff+0x29e/0x470 [ 857.222385][T14202] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 857.222405][T14202] ? __fget_files+0x20e/0x3c0 [ 857.222430][T14202] ksys_mmap_pgoff+0x7d/0x5c0 [ 857.222450][T14202] ? __pfx_ksys_write+0x10/0x10 [ 857.222468][T14202] __x64_sys_mmap+0x125/0x190 [ 857.222492][T14202] do_syscall_64+0xcd/0x490 [ 857.222512][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.222527][T14202] RIP: 0033:0x7f583918ebe9 [ 857.222539][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.222553][T14202] RSP: 002b:00007f5839fe0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 857.222568][T14202] RAX: ffffffffffffffda RBX: 00007f58393b5fa0 RCX: 00007f583918ebe9 [ 857.222579][T14202] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 857.222587][T14202] RBP: 00007f5839fe0090 R08: 0000000000000002 R09: 0000000000008000 [ 857.222596][T14202] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 857.222604][T14202] R13: 00007f58393b6038 R14: 00007f58393b5fa0 R15: 00007fff5c144028 [ 857.222623][T14202] [ 858.083313][T14193] Could not allocate 15 bytes (20250404/nsnames-308) [ 858.327632][T14220] FAULT_INJECTION: forcing a failure. [ 858.327632][T14220] name failslab, interval 1, probability 0, space 0, times 0 [ 858.381051][T14220] CPU: 0 UID: 0 PID: 14220 Comm: syz.4.3305 Tainted: G U syzkaller #0 PREEMPT(full) [ 858.381077][T14220] Tainted: [U]=USER [ 858.381082][T14220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 858.381091][T14220] Call Trace: [ 858.381103][T14220] [ 858.381109][T14220] dump_stack_lvl+0x16c/0x1f0 [ 858.381134][T14220] should_fail_ex+0x512/0x640 [ 858.381154][T14220] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 858.381177][T14220] should_failslab+0xc2/0x120 [ 858.381197][T14220] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 858.381217][T14220] ? __kthread_create_on_node+0x186/0x3f0 [ 858.381239][T14220] kvasprintf+0xbc/0x160 [ 858.381253][T14220] ? __pfx_kvasprintf+0x10/0x10 [ 858.381275][T14220] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 858.381295][T14220] __kthread_create_on_node+0x186/0x3f0 [ 858.381315][T14220] ? __pfx___kthread_create_on_node+0x10/0x10 [ 858.381341][T14220] ? __lock_acquire+0xb97/0x1ce0 [ 858.381362][T14220] ? __pfx_dvb_frontend_thread+0x10/0x10 [ 858.381383][T14220] kthread_create_on_node+0xc7/0x100 [ 858.381402][T14220] ? __pfx_kthread_create_on_node+0x10/0x10 [ 858.381424][T14220] ? mark_held_locks+0x49/0x80 [ 858.381442][T14220] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 858.381459][T14220] ? lockdep_hardirqs_on+0x7c/0x110 [ 858.381481][T14220] dvb_frontend_open+0xf47/0x1730 [ 858.381505][T14220] ? __pfx_dvb_frontend_open+0x10/0x10 [ 858.381526][T14220] dvb_device_open+0x270/0x3b0 [ 858.381546][T14220] ? __pfx_dvb_device_open+0x10/0x10 [ 858.381566][T14220] chrdev_open+0x234/0x6a0 [ 858.381585][T14220] ? __pfx_apparmor_file_open+0x10/0x10 [ 858.381602][T14220] ? __pfx_chrdev_open+0x10/0x10 [ 858.381621][T14220] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 858.381641][T14220] do_dentry_open+0x982/0x1530 [ 858.381659][T14220] ? __pfx_chrdev_open+0x10/0x10 [ 858.381681][T14220] vfs_open+0x82/0x3f0 [ 858.381704][T14220] path_openat+0x1de4/0x2cb0 [ 858.381728][T14220] ? __pfx_path_openat+0x10/0x10 [ 858.381750][T14220] do_filp_open+0x20b/0x470 [ 858.381768][T14220] ? __pfx_do_filp_open+0x10/0x10 [ 858.381799][T14220] ? alloc_fd+0x471/0x7d0 [ 858.381819][T14220] do_sys_openat2+0x11b/0x1d0 [ 858.381840][T14220] ? __pfx_do_sys_openat2+0x10/0x10 [ 858.381868][T14220] __x64_sys_openat+0x174/0x210 [ 858.381890][T14220] ? __pfx___x64_sys_openat+0x10/0x10 [ 858.381919][T14220] do_syscall_64+0xcd/0x490 [ 858.381940][T14220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.381955][T14220] RIP: 0033:0x7f853b58ebe9 [ 858.381968][T14220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.381982][T14220] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 858.381996][T14220] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 858.382006][T14220] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 858.382015][T14220] RBP: 00007f853b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 858.382024][T14220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.382033][T14220] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 858.382053][T14220] [ 858.382077][T14220] i2c i2c-0: dvb_frontend_start: failed to start kthread (-12) [ 858.822452][T14226] FAULT_INJECTION: forcing a failure. [ 858.822452][T14226] name failslab, interval 1, probability 0, space 0, times 0 [ 858.822489][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.3.3306 Tainted: G U syzkaller #0 PREEMPT(full) [ 858.822510][T14226] Tainted: [U]=USER [ 858.822515][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 858.822524][T14226] Call Trace: [ 858.822529][T14226] [ 858.822535][T14226] dump_stack_lvl+0x16c/0x1f0 [ 858.822562][T14226] should_fail_ex+0x512/0x640 [ 858.822581][T14226] ? fs_reclaim_acquire+0xae/0x150 [ 858.822603][T14226] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 858.822624][T14226] should_failslab+0xc2/0x120 [ 858.822642][T14226] __kmalloc_noprof+0xd2/0x510 [ 858.822663][T14226] tomoyo_realpath_from_path+0xc2/0x6e0 [ 858.822685][T14226] ? tomoyo_profile+0x47/0x60 [ 858.822699][T14226] tomoyo_path_number_perm+0x245/0x580 [ 858.822715][T14226] ? tomoyo_path_number_perm+0x237/0x580 [ 858.822734][T14226] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 858.822752][T14226] ? find_held_lock+0x2b/0x80 [ 858.822783][T14226] ? find_held_lock+0x2b/0x80 [ 858.822796][T14226] ? hook_file_ioctl_common+0x145/0x410 [ 858.822819][T14226] ? __fget_files+0x20e/0x3c0 [ 858.822838][T14226] security_file_ioctl+0x9b/0x240 [ 858.822857][T14226] __x64_sys_ioctl+0xb7/0x210 [ 858.822880][T14226] do_syscall_64+0xcd/0x490 [ 858.822901][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.822915][T14226] RIP: 0033:0x7f583918ebe9 [ 858.822927][T14226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.822941][T14226] RSP: 002b:00007f5839fbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.822955][T14226] RAX: ffffffffffffffda RBX: 00007f58393b6090 RCX: 00007f583918ebe9 [ 858.822965][T14226] RDX: 0000000000000004 RSI: 0000000000005600 RDI: 0000000000000003 [ 858.822973][T14226] RBP: 00007f5839fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 858.822982][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.822991][T14226] R13: 00007f58393b6128 R14: 00007f58393b6090 R15: 00007fff5c144028 [ 858.823009][T14226] [ 858.887920][T14226] ERROR: Out of memory at tomoyo_realpath_from_path. [ 859.332350][T14234] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input80 [ 860.023013][T14248] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 860.222814][T14252] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 860.273917][T14252] ep_00: uevent: failed to send synthetic uevent: -22 [ 860.577117][T14263] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 860.625696][T14267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 860.822138][T14268] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 860.918144][T14275] blktrace: Concurrent blktraces are not allowed on ram4 [ 861.011176][T14275] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3320'. [ 861.074318][T14281] netlink: 'syz.0.3320': attribute type 2 has an invalid length. [ 861.082045][T14281] netlink: 'syz.0.3320': attribute type 3 has an invalid length. [ 861.179187][T14281] netlink: 218 bytes leftover after parsing attributes in process `syz.0.3320'. [ 861.474770][T14295] FAULT_INJECTION: forcing a failure. [ 861.474770][T14295] name failslab, interval 1, probability 0, space 0, times 0 [ 861.539420][T14295] CPU: 0 UID: 0 PID: 14295 Comm: syz.4.3326 Tainted: G U syzkaller #0 PREEMPT(full) [ 861.539446][T14295] Tainted: [U]=USER [ 861.539451][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 861.539461][T14295] Call Trace: [ 861.539466][T14295] [ 861.539473][T14295] dump_stack_lvl+0x16c/0x1f0 [ 861.539498][T14295] should_fail_ex+0x512/0x640 [ 861.539519][T14295] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 861.539540][T14295] should_failslab+0xc2/0x120 [ 861.539559][T14295] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 861.539576][T14295] ? blk_cgroup_congested+0x140/0x270 [ 861.539593][T14295] ? ptlock_alloc+0x1f/0x70 [ 861.539610][T14295] ptlock_alloc+0x1f/0x70 [ 861.539623][T14295] pte_alloc_one+0x82/0x3a0 [ 861.539640][T14295] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 861.539660][T14295] __handle_mm_fault+0x1ccd/0x2a50 [ 861.539680][T14295] ? __pfx___handle_mm_fault+0x10/0x10 [ 861.539698][T14295] ? __lock_acquire+0xb97/0x1ce0 [ 861.539741][T14295] handle_mm_fault+0x589/0xd10 [ 861.539762][T14295] __get_user_pages+0x551/0x34a0 [ 861.539791][T14295] ? __pfx___get_user_pages+0x10/0x10 [ 861.539819][T14295] populate_vma_page_range+0x267/0x3f0 [ 861.539843][T14295] ? __pfx_populate_vma_page_range+0x10/0x10 [ 861.539864][T14295] ? __pfx_find_vma_intersection+0x10/0x10 [ 861.539893][T14295] ? do_mmap+0x69c/0x1210 [ 861.539915][T14295] __mm_populate+0x1d8/0x380 [ 861.539938][T14295] ? __pfx___mm_populate+0x10/0x10 [ 861.539963][T14295] ? up_write+0x1b2/0x520 [ 861.539986][T14295] vm_mmap_pgoff+0x37f/0x470 [ 861.540008][T14295] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 861.540032][T14295] ? __x64_sys_futex+0x1e0/0x4c0 [ 861.540049][T14295] ? __x64_sys_futex+0x1e9/0x4c0 [ 861.540069][T14295] ksys_mmap_pgoff+0x7d/0x5c0 [ 861.540089][T14295] ? xfd_validate_state+0x61/0x180 [ 861.540109][T14295] ? __pfx_do_writev+0x10/0x10 [ 861.540126][T14295] __x64_sys_mmap+0x125/0x190 [ 861.540150][T14295] do_syscall_64+0xcd/0x490 [ 861.540171][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.540187][T14295] RIP: 0033:0x7f853b58ebe9 [ 861.540200][T14295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.540214][T14295] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 861.540229][T14295] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 861.540239][T14295] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 861.540248][T14295] RBP: 00007f853b611e19 R08: 0000000000000002 R09: 0000000000008000 [ 861.540257][T14295] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 861.540266][T14295] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 861.540285][T14295] [ 861.912209][T14303] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.954307][T14305] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 861.975330][T14305] netlink: 268 bytes leftover after parsing attributes in process `syz.3.3328'. [ 862.469869][T14285] FAULT_INJECTION: forcing a failure. [ 862.469869][T14285] name failslab, interval 1, probability 0, space 0, times 0 [ 862.574933][T14285] CPU: 0 UID: 0 PID: 14285 Comm: syz.5.3323 Tainted: G U syzkaller #0 PREEMPT(full) [ 862.574959][T14285] Tainted: [U]=USER [ 862.574965][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 862.574974][T14285] Call Trace: [ 862.574980][T14285] [ 862.574986][T14285] dump_stack_lvl+0x16c/0x1f0 [ 862.575011][T14285] should_fail_ex+0x512/0x640 [ 862.575031][T14285] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 862.575051][T14285] should_failslab+0xc2/0x120 [ 862.575071][T14285] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 862.575089][T14285] ? __kernfs_new_node+0xd2/0x8e0 [ 862.575110][T14285] __kernfs_new_node+0xd2/0x8e0 [ 862.575130][T14285] ? __pfx___kernfs_new_node+0x10/0x10 [ 862.575153][T14285] ? find_held_lock+0x2b/0x80 [ 862.575169][T14285] ? kernfs_root+0xee/0x2a0 [ 862.575190][T14285] kernfs_new_node+0x13c/0x1e0 [ 862.575214][T14285] __kernfs_create_file+0x53/0x350 [ 862.575231][T14285] sysfs_add_file_mode_ns+0x207/0x3c0 [ 862.575253][T14285] sysfs_merge_group+0x1aa/0x340 [ 862.575272][T14285] ? __pfx_sysfs_merge_group+0x10/0x10 [ 862.575294][T14285] ? __pfx_dev_add_physical_location+0x10/0x10 [ 862.575316][T14285] ? bus_to_subsys+0x131/0x160 [ 862.575334][T14285] dpm_sysfs_add+0x237/0x280 [ 862.575356][T14285] device_add+0x9a6/0x1aa0 [ 862.575372][T14285] ? __pfx_device_add+0x10/0x10 [ 862.575392][T14285] nfc_register_device+0x41/0x3c0 [ 862.575414][T14285] nci_register_device+0x7f1/0xb80 [ 862.575431][T14285] ? __pfx_nci_register_device+0x10/0x10 [ 862.575450][T14285] ? lockdep_init_map_type+0x5c/0x280 [ 862.575472][T14285] virtual_ncidev_open+0x141/0x220 [ 862.575489][T14285] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 862.575505][T14285] misc_open+0x35d/0x420 [ 862.575520][T14285] ? __pfx_misc_open+0x10/0x10 [ 862.575535][T14285] chrdev_open+0x234/0x6a0 [ 862.575553][T14285] ? __pfx_apparmor_file_open+0x10/0x10 [ 862.575570][T14285] ? __pfx_chrdev_open+0x10/0x10 [ 862.575589][T14285] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 862.575609][T14285] do_dentry_open+0x982/0x1530 [ 862.575627][T14285] ? __pfx_chrdev_open+0x10/0x10 [ 862.575649][T14285] vfs_open+0x82/0x3f0 [ 862.575672][T14285] path_openat+0x1de4/0x2cb0 [ 862.575696][T14285] ? __pfx_path_openat+0x10/0x10 [ 862.575718][T14285] do_filp_open+0x20b/0x470 [ 862.575735][T14285] ? __pfx_do_filp_open+0x10/0x10 [ 862.575766][T14285] ? alloc_fd+0x471/0x7d0 [ 862.575787][T14285] do_sys_openat2+0x11b/0x1d0 [ 862.575818][T14285] ? __pfx_do_sys_openat2+0x10/0x10 [ 862.575848][T14285] __x64_sys_openat+0x174/0x210 [ 862.575870][T14285] ? __pfx___x64_sys_openat+0x10/0x10 [ 862.575900][T14285] do_syscall_64+0xcd/0x490 [ 862.575921][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.575936][T14285] RIP: 0033:0x7fc1ee38ebe9 [ 862.575949][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.575964][T14285] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 862.575979][T14285] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 862.575989][T14285] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 862.575999][T14285] RBP: 00007fc1ee411e19 R08: 0000000000000000 R09: 0000000000000000 [ 862.576008][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.576017][T14285] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 862.576037][T14285] [ 864.011706][T14284] delete_channel: no stack [ 864.888838][T14366] netlink: 'syz.0.3349': attribute type 3 has an invalid length. [ 864.888855][T14366] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3349'. [ 865.007328][T14369] FAULT_INJECTION: forcing a failure. [ 865.007328][T14369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.007355][T14369] CPU: 0 UID: 0 PID: 14369 Comm: syz.0.3350 Tainted: G U syzkaller #0 PREEMPT(full) [ 865.007374][T14369] Tainted: [U]=USER [ 865.007379][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 865.007388][T14369] Call Trace: [ 865.007393][T14369] [ 865.007399][T14369] dump_stack_lvl+0x16c/0x1f0 [ 865.007421][T14369] should_fail_ex+0x512/0x640 [ 865.007444][T14369] _copy_from_user+0x2e/0xd0 [ 865.007467][T14369] copy_msghdr_from_user+0x98/0x160 [ 865.007487][T14369] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 865.007509][T14369] ? __pfx__kstrtoull+0x10/0x10 [ 865.007529][T14369] ___sys_sendmsg+0xfe/0x1d0 [ 865.007548][T14369] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.007575][T14369] ? find_held_lock+0x2b/0x80 [ 865.007601][T14369] __sys_sendmmsg+0x200/0x420 [ 865.007622][T14369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 865.007646][T14369] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 865.007672][T14369] ? fput+0x9b/0xd0 [ 865.007691][T14369] ? ksys_write+0x1ac/0x250 [ 865.007707][T14369] ? __pfx_ksys_write+0x10/0x10 [ 865.007726][T14369] __x64_sys_sendmmsg+0x9c/0x100 [ 865.007744][T14369] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.007761][T14369] do_syscall_64+0xcd/0x490 [ 865.007781][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.007795][T14369] RIP: 0033:0x7f369cb8ebe9 [ 865.007807][T14369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.007821][T14369] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 865.007835][T14369] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 865.007844][T14369] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 865.007853][T14369] RBP: 00007f369d950090 R08: 0000000000000000 R09: 0000000000000000 [ 865.007873][T14369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.007881][T14369] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 865.007899][T14369] [ 865.169812][T14379] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 865.169863][T14379] ep_00: uevent: failed to send synthetic uevent: -22 [ 866.013725][T14393] ptrace attach of "./syz-executor exec"[14396] was attempted by "./syz-executor exec"[14393] [ 866.511184][T14412] netlink: 'syz.5.3359': attribute type 3 has an invalid length. [ 866.551338][T14412] netlink: 306 bytes leftover after parsing attributes in process `syz.5.3359'. [ 866.693877][T14420] FAULT_INJECTION: forcing a failure. [ 866.693877][T14420] name failslab, interval 1, probability 0, space 0, times 0 [ 866.753164][T14423] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 866.799689][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.4.3361 Tainted: G U syzkaller #0 PREEMPT(full) [ 866.799713][T14420] Tainted: [U]=USER [ 866.799718][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 866.799727][T14420] Call Trace: [ 866.799732][T14420] [ 866.799738][T14420] dump_stack_lvl+0x16c/0x1f0 [ 866.799761][T14420] should_fail_ex+0x512/0x640 [ 866.799781][T14420] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 866.799801][T14420] should_failslab+0xc2/0x120 [ 866.799819][T14420] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 866.799836][T14420] ? __alloc_skb+0x2b2/0x380 [ 866.799857][T14420] __alloc_skb+0x2b2/0x380 [ 866.799874][T14420] ? __pfx___alloc_skb+0x10/0x10 [ 866.799893][T14420] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 866.799912][T14420] ? __lock_acquire+0xb97/0x1ce0 [ 866.799933][T14420] netlink_alloc_large_skb+0x69/0x130 [ 866.799954][T14420] netlink_sendmsg+0x6a1/0xdd0 [ 866.799975][T14420] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.799996][T14420] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 866.800015][T14420] ____sys_sendmsg+0xa95/0xc70 [ 866.800029][T14420] ? copy_msghdr_from_user+0x10a/0x160 [ 866.800048][T14420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.800065][T14420] ? __pfx__kstrtoull+0x10/0x10 [ 866.800085][T14420] ___sys_sendmsg+0x134/0x1d0 [ 866.800104][T14420] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.800132][T14420] ? find_held_lock+0x2b/0x80 [ 866.800157][T14420] __sys_sendmmsg+0x200/0x420 [ 866.800178][T14420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 866.800202][T14420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 866.800229][T14420] ? fput+0x9b/0xd0 [ 866.800248][T14420] ? ksys_write+0x1ac/0x250 [ 866.800264][T14420] ? __pfx_ksys_write+0x10/0x10 [ 866.800283][T14420] __x64_sys_sendmmsg+0x9c/0x100 [ 866.800301][T14420] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.800319][T14420] do_syscall_64+0xcd/0x490 [ 866.800339][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.800354][T14420] RIP: 0033:0x7f853b58ebe9 [ 866.800366][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.800380][T14420] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 866.800394][T14420] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 866.800404][T14420] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 866.800412][T14420] RBP: 00007f853c373090 R08: 0000000000000000 R09: 0000000000000000 [ 866.800421][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.800429][T14420] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 866.800447][T14420] [ 866.803856][T14423] ep_00: uevent: failed to send synthetic uevent: -22 [ 867.298837][T14427] FAULT_INJECTION: forcing a failure. [ 867.298837][T14427] name failslab, interval 1, probability 0, space 0, times 0 [ 867.323509][T14427] CPU: 0 UID: 0 PID: 14427 Comm: syz.4.3363 Tainted: G U syzkaller #0 PREEMPT(full) [ 867.323535][T14427] Tainted: [U]=USER [ 867.323540][T14427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 867.323550][T14427] Call Trace: [ 867.323556][T14427] [ 867.323562][T14427] dump_stack_lvl+0x16c/0x1f0 [ 867.323586][T14427] should_fail_ex+0x512/0x640 [ 867.323607][T14427] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 867.323626][T14427] should_failslab+0xc2/0x120 [ 867.323646][T14427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 867.323663][T14427] ? security_file_alloc+0x34/0x2b0 [ 867.323686][T14427] security_file_alloc+0x34/0x2b0 [ 867.323705][T14427] init_file+0x93/0x4c0 [ 867.323725][T14427] alloc_empty_file+0x73/0x1e0 [ 867.323746][T14427] path_openat+0xda/0x2cb0 [ 867.323762][T14427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.323783][T14427] ? __pfx_path_openat+0x10/0x10 [ 867.323801][T14427] ? __lock_acquire+0xb97/0x1ce0 [ 867.323822][T14427] do_filp_open+0x20b/0x470 [ 867.323839][T14427] ? __pfx_do_filp_open+0x10/0x10 [ 867.323868][T14427] ? _raw_spin_unlock+0x28/0x50 [ 867.323884][T14427] ? alloc_fd+0x471/0x7d0 [ 867.323904][T14427] do_sys_openat2+0x11b/0x1d0 [ 867.323925][T14427] ? __pfx_do_sys_openat2+0x10/0x10 [ 867.323953][T14427] __x64_sys_open+0x153/0x1e0 [ 867.323977][T14427] ? __pfx___x64_sys_open+0x10/0x10 [ 867.324002][T14427] ? rcu_is_watching+0x12/0xc0 [ 867.324018][T14427] do_syscall_64+0xcd/0x490 [ 867.324039][T14427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.324053][T14427] RIP: 0033:0x7f853b58ebe9 [ 867.324065][T14427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.324080][T14427] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 867.324093][T14427] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 867.324103][T14427] RDX: 0000000000000084 RSI: 00000000000261c2 RDI: 0000200000000000 [ 867.324112][T14427] RBP: 00007f853b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 867.324122][T14427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.324130][T14427] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 867.324149][T14427] [ 867.601062][T14433] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 868.901367][T14470] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input82 [ 870.143564][T14507] lo: entered allmulticast mode [ 870.152465][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.158799][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.187816][T14507] lo: left allmulticast mode [ 871.687446][T14543] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 871.778452][T14542] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input83 [ 871.933478][T14549] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 872.004090][T14549] ep_00: uevent: failed to send synthetic uevent: -22 [ 872.215839][T14555] FAULT_INJECTION: forcing a failure. [ 872.215839][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 872.281729][T14555] CPU: 0 UID: 0 PID: 14555 Comm: syz.5.3389 Tainted: G U syzkaller #0 PREEMPT(full) [ 872.281757][T14555] Tainted: [U]=USER [ 872.281762][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 872.281771][T14555] Call Trace: [ 872.281778][T14555] [ 872.281784][T14555] dump_stack_lvl+0x16c/0x1f0 [ 872.281809][T14555] should_fail_ex+0x512/0x640 [ 872.281830][T14555] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 872.281850][T14555] should_failslab+0xc2/0x120 [ 872.281870][T14555] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 872.281887][T14555] ? blk_cgroup_congested+0x140/0x270 [ 872.281903][T14555] ? ptlock_alloc+0x1f/0x70 [ 872.281921][T14555] ptlock_alloc+0x1f/0x70 [ 872.281934][T14555] pte_alloc_one+0x82/0x3a0 [ 872.281951][T14555] do_huge_pmd_anonymous_page+0x2bb/0x2080 [ 872.281971][T14555] __handle_mm_fault+0x1ccd/0x2a50 [ 872.281991][T14555] ? __pfx___handle_mm_fault+0x10/0x10 [ 872.282009][T14555] ? __lock_acquire+0xb97/0x1ce0 [ 872.282039][T14555] handle_mm_fault+0x589/0xd10 [ 872.282058][T14555] __get_user_pages+0x551/0x34a0 [ 872.282087][T14555] ? __pfx___get_user_pages+0x10/0x10 [ 872.282113][T14555] populate_vma_page_range+0x267/0x3f0 [ 872.282136][T14555] ? __pfx_populate_vma_page_range+0x10/0x10 [ 872.282158][T14555] ? __pfx_find_vma_intersection+0x10/0x10 [ 872.282179][T14555] ? do_mmap+0x69c/0x1210 [ 872.282201][T14555] __mm_populate+0x1d8/0x380 [ 872.282223][T14555] ? __pfx___mm_populate+0x10/0x10 [ 872.282246][T14555] ? up_write+0x1b2/0x520 [ 872.282268][T14555] vm_mmap_pgoff+0x37f/0x470 [ 872.282294][T14555] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 872.282319][T14555] ? __x64_sys_futex+0x1e0/0x4c0 [ 872.282346][T14555] ? __x64_sys_futex+0x1e9/0x4c0 [ 872.282367][T14555] ksys_mmap_pgoff+0x7d/0x5c0 [ 872.282388][T14555] ? xfd_validate_state+0x61/0x180 [ 872.282408][T14555] ? __pfx_do_writev+0x10/0x10 [ 872.282426][T14555] __x64_sys_mmap+0x125/0x190 [ 872.282450][T14555] do_syscall_64+0xcd/0x490 [ 872.282472][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.282486][T14555] RIP: 0033:0x7fc1ee38ebe9 [ 872.282499][T14555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.282514][T14555] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 872.282528][T14555] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 872.282539][T14555] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 872.282548][T14555] RBP: 00007fc1ee411e19 R08: 0000000000000002 R09: 0000000000008000 [ 872.282557][T14555] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 872.282566][T14555] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 872.282585][T14555] [ 873.122540][T14592] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 873.517701][T14554] tty tty38: ldisc open failed (-12), clearing slot 37 [ 873.865130][T14604] FAULT_INJECTION: forcing a failure. [ 873.865130][T14604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 873.939714][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.0.3404 Tainted: G U syzkaller #0 PREEMPT(full) [ 873.939738][T14604] Tainted: [U]=USER [ 873.939743][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 873.939752][T14604] Call Trace: [ 873.939757][T14604] [ 873.939763][T14604] dump_stack_lvl+0x16c/0x1f0 [ 873.939787][T14604] should_fail_ex+0x512/0x640 [ 873.939810][T14604] should_fail_alloc_page+0xe7/0x130 [ 873.939831][T14604] prepare_alloc_pages+0x3c2/0x610 [ 873.939855][T14604] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 873.939875][T14604] ? __lock_acquire+0x62e/0x1ce0 [ 873.939899][T14604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 873.939929][T14604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 873.939953][T14604] ? policy_nodemask+0xea/0x4e0 [ 873.939982][T14604] alloc_pages_mpol+0x1fb/0x550 [ 873.940001][T14604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 873.940025][T14604] alloc_pages_noprof+0x131/0x390 [ 873.940043][T14604] __pmd_alloc+0x3b/0x930 [ 873.940066][T14604] __handle_mm_fault+0xa06/0x2a50 [ 873.940084][T14604] ? mt_find+0x3ef/0xa30 [ 873.940107][T14604] ? __pfx___handle_mm_fault+0x10/0x10 [ 873.940120][T14604] ? __pfx_mt_find+0x10/0x10 [ 873.940149][T14604] ? find_vma+0xbf/0x140 [ 873.940167][T14604] ? __pfx_find_vma+0x10/0x10 [ 873.940187][T14604] handle_mm_fault+0x589/0xd10 [ 873.940202][T14604] ? __bpf_trace_exceptions+0x1/0x40 [ 873.940225][T14604] do_user_addr_fault+0x7a6/0x1370 [ 873.940248][T14604] ? rcu_is_watching+0x12/0xc0 [ 873.940265][T14604] exc_page_fault+0x5c/0xb0 [ 873.940283][T14604] asm_exc_page_fault+0x26/0x30 [ 873.940298][T14604] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 873.940313][T14604] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 873.940327][T14604] RSP: 0018:ffffc9000ea577d0 EFLAGS: 00050206 [ 873.940340][T14604] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 873.940349][T14604] RDX: ffffed100bfedbc1 RSI: 0000000000000000 RDI: ffff88805ff6dd40 [ 873.940358][T14604] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100bfedbc0 [ 873.940367][T14604] R10: ffff88805ff6de03 R11: 0000000000000000 R12: ffffc9000ea57d60 [ 873.940376][T14604] R13: 00000000000000c4 R14: ffff88805ff6dd40 R15: 00007ffffffff000 [ 873.940395][T14604] _copy_from_iter+0x383/0x1720 [ 873.940420][T14604] ? __alloc_skb+0x200/0x380 [ 873.940438][T14604] ? __pfx__copy_from_iter+0x10/0x10 [ 873.940461][T14604] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 873.940481][T14604] ? __lock_acquire+0xb97/0x1ce0 [ 873.940503][T14604] netlink_sendmsg+0x829/0xdd0 [ 873.940525][T14604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.940547][T14604] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 873.940566][T14604] ____sys_sendmsg+0xa95/0xc70 [ 873.940580][T14604] ? copy_msghdr_from_user+0x10a/0x160 [ 873.940599][T14604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.940616][T14604] ? __pfx__kstrtoull+0x10/0x10 [ 873.940636][T14604] ___sys_sendmsg+0x134/0x1d0 [ 873.940656][T14604] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.940683][T14604] ? find_held_lock+0x2b/0x80 [ 873.940708][T14604] __sys_sendmmsg+0x200/0x420 [ 873.940729][T14604] ? __pfx___sys_sendmmsg+0x10/0x10 [ 873.940753][T14604] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 873.940780][T14604] ? fput+0x9b/0xd0 [ 873.940799][T14604] ? ksys_write+0x1ac/0x250 [ 873.940815][T14604] ? __pfx_ksys_write+0x10/0x10 [ 873.940834][T14604] __x64_sys_sendmmsg+0x9c/0x100 [ 873.940852][T14604] ? lockdep_hardirqs_on+0x7c/0x110 [ 873.940869][T14604] do_syscall_64+0xcd/0x490 [ 873.940893][T14604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.940906][T14604] RIP: 0033:0x7f369cb8ebe9 [ 873.940918][T14604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.940931][T14604] RSP: 002b:00007f369d950038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 873.940943][T14604] RAX: ffffffffffffffda RBX: 00007f369cdb5fa0 RCX: 00007f369cb8ebe9 [ 873.940953][T14604] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 873.940961][T14604] RBP: 00007f369d950090 R08: 0000000000000000 R09: 0000000000000000 [ 873.940977][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.940986][T14604] R13: 00007f369cdb6038 R14: 00007f369cdb5fa0 R15: 00007ffd3dc8a0a8 [ 873.941004][T14604] [ 874.420033][T14611] sd 0:0:1:0: PR command failed: 1026 [ 874.425496][T14611] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 874.432209][T14611] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 874.444420][T14606] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 875.643136][T14632] FAULT_INJECTION: forcing a failure. [ 875.643136][T14632] name failslab, interval 1, probability 0, space 0, times 0 [ 875.671376][T14632] CPU: 0 UID: 0 PID: 14632 Comm: syz.5.3409 Tainted: G U syzkaller #0 PREEMPT(full) [ 875.671402][T14632] Tainted: [U]=USER [ 875.671407][T14632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.671416][T14632] Call Trace: [ 875.671421][T14632] [ 875.671427][T14632] dump_stack_lvl+0x16c/0x1f0 [ 875.671452][T14632] should_fail_ex+0x512/0x640 [ 875.671473][T14632] ? fs_reclaim_acquire+0xae/0x150 [ 875.671496][T14632] should_failslab+0xc2/0x120 [ 875.671515][T14632] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 875.671533][T14632] ? __kernfs_new_node+0xd2/0x8e0 [ 875.671553][T14632] __kernfs_new_node+0xd2/0x8e0 [ 875.671573][T14632] ? __pfx___kernfs_new_node+0x10/0x10 [ 875.671595][T14632] ? find_held_lock+0x2b/0x80 [ 875.671611][T14632] ? kernfs_root+0xee/0x2a0 [ 875.671632][T14632] kernfs_new_node+0x13c/0x1e0 [ 875.671655][T14632] __kernfs_create_file+0x53/0x350 [ 875.671671][T14632] sysfs_add_file_mode_ns+0x207/0x3c0 [ 875.671693][T14632] internal_create_group+0x578/0xf30 [ 875.671716][T14632] ? __pfx_internal_create_group+0x10/0x10 [ 875.671737][T14632] ? kernfs_create_link+0x1bd/0x240 [ 875.671754][T14632] internal_create_groups+0x9d/0x150 [ 875.671775][T14632] device_add+0x731/0x1aa0 [ 875.671791][T14632] ? __pfx_device_add+0x10/0x10 [ 875.671803][T14632] ? __pfx___might_resched+0x10/0x10 [ 875.671816][T14632] ? lockdep_hardirqs_on+0x7c/0x110 [ 875.671841][T14632] __add_disk+0x457/0xf00 [ 875.671864][T14632] add_disk_fwnode+0x13f/0x5d0 [ 875.671884][T14632] loop_add+0x903/0xb70 [ 875.671900][T14632] ? __pfx_loop_add+0x10/0x10 [ 875.671933][T14632] ? find_held_lock+0x2b/0x80 [ 875.671949][T14632] loop_control_ioctl+0x13e/0x630 [ 875.671965][T14632] ? __pfx_loop_control_ioctl+0x10/0x10 [ 875.671983][T14632] ? __pfx_loop_control_ioctl+0x10/0x10 [ 875.672000][T14632] __x64_sys_ioctl+0x18e/0x210 [ 875.672023][T14632] do_syscall_64+0xcd/0x490 [ 875.672043][T14632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.672058][T14632] RIP: 0033:0x7fc1ee38ebe9 [ 875.672071][T14632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.672085][T14632] RSP: 002b:00007fc1ef16f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 875.672099][T14632] RAX: ffffffffffffffda RBX: 00007fc1ee5b5fa0 RCX: 00007fc1ee38ebe9 [ 875.672108][T14632] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 875.672117][T14632] RBP: 00007fc1ee411e19 R08: 0000000000000000 R09: 0000000000000000 [ 875.672126][T14632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.672134][T14632] R13: 00007fc1ee5b6038 R14: 00007fc1ee5b5fa0 R15: 00007ffd20e1b628 [ 875.672152][T14632] [ 876.077502][T14638] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 876.081551][T14638] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 876.125724][T14640] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 876.859289][T14662] ================================================================== [ 876.867364][T14662] BUG: KASAN: slab-use-after-free in dvb_device_open+0x36a/0x3b0 [ 876.875071][T14662] Read of size 8 at addr ffff888141693418 by task syz.4.3420/14662 [ 876.882938][T14662] [ 876.885243][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.4.3420 Tainted: G U syzkaller #0 PREEMPT(full) [ 876.885265][T14662] Tainted: [U]=USER [ 876.885271][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.885280][T14662] Call Trace: [ 876.885287][T14662] [ 876.885294][T14662] dump_stack_lvl+0x116/0x1f0 [ 876.885316][T14662] print_report+0xcd/0x630 [ 876.885336][T14662] ? __virt_addr_valid+0x81/0x610 [ 876.885354][T14662] ? __phys_addr+0xe8/0x180 [ 876.885372][T14662] ? dvb_device_open+0x36a/0x3b0 [ 876.885392][T14662] kasan_report+0xe0/0x110 [ 876.885410][T14662] ? dvb_device_open+0x36a/0x3b0 [ 876.885431][T14662] ? __pfx_dvb_device_open+0x10/0x10 [ 876.885450][T14662] dvb_device_open+0x36a/0x3b0 [ 876.885469][T14662] ? __pfx_dvb_device_open+0x10/0x10 [ 876.885489][T14662] chrdev_open+0x234/0x6a0 [ 876.885506][T14662] ? __pfx_apparmor_file_open+0x10/0x10 [ 876.885522][T14662] ? __pfx_chrdev_open+0x10/0x10 [ 876.885540][T14662] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 876.885558][T14662] do_dentry_open+0x982/0x1530 [ 876.885576][T14662] ? __pfx_chrdev_open+0x10/0x10 [ 876.885595][T14662] vfs_open+0x82/0x3f0 [ 876.885616][T14662] path_openat+0x1de4/0x2cb0 [ 876.885635][T14662] ? __pfx_path_openat+0x10/0x10 [ 876.885654][T14662] do_filp_open+0x20b/0x470 [ 876.885669][T14662] ? __pfx_do_filp_open+0x10/0x10 [ 876.885692][T14662] ? alloc_fd+0x471/0x7d0 [ 876.885708][T14662] do_sys_openat2+0x11b/0x1d0 [ 876.885729][T14662] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.885749][T14662] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.885773][T14662] __x64_sys_openat+0x174/0x210 [ 876.885794][T14662] ? __pfx___x64_sys_openat+0x10/0x10 [ 876.885819][T14662] do_syscall_64+0xcd/0x490 [ 876.885838][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.885859][T14662] RIP: 0033:0x7f853b58ebe9 [ 876.885873][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.885888][T14662] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 876.885902][T14662] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 876.885913][T14662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 876.885922][T14662] RBP: 00007f853b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 876.885932][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.885941][T14662] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 876.885956][T14662] [ 876.885962][T14662] [ 877.135420][T14662] Allocated by task 14521: [ 877.139810][T14662] kasan_save_stack+0x33/0x60 [ 877.144472][T14662] kasan_save_track+0x14/0x30 [ 877.149130][T14662] __kasan_kmalloc+0xaa/0xb0 [ 877.153696][T14662] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 877.160089][T14662] kmemdup_noprof+0x29/0x60 [ 877.164570][T14662] xfrm_sysctl_init+0x10a/0x2d0 [ 877.169404][T14662] xfrm_net_init+0x842/0xcc0 [ 877.173974][T14662] ops_init+0x1e2/0x5f0 [ 877.178110][T14662] setup_net+0x10f/0x380 [ 877.182334][T14662] copy_net_ns+0x2a6/0x5f0 [ 877.186733][T14662] create_new_namespaces+0x3ea/0xa90 [ 877.192010][T14662] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 877.197635][T14662] ksys_unshare+0x45b/0xa40 [ 877.202123][T14662] __x64_sys_unshare+0x31/0x40 [ 877.206869][T14662] do_syscall_64+0xcd/0x490 [ 877.211359][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.217236][T14662] [ 877.219545][T14662] Freed by task 14521: [ 877.223589][T14662] kasan_save_stack+0x33/0x60 [ 877.228247][T14662] kasan_save_track+0x14/0x30 [ 877.232904][T14662] kasan_save_free_info+0x3b/0x60 [ 877.237913][T14662] __kasan_slab_free+0x60/0x70 [ 877.242658][T14662] kfree+0x2b4/0x4d0 [ 877.246540][T14662] xfrm_net_exit+0x1d/0x70 [ 877.250948][T14662] ops_undo_list+0x2ee/0xab0 [ 877.255523][T14662] setup_net+0x1f1/0x380 [ 877.259748][T14662] copy_net_ns+0x2a6/0x5f0 [ 877.264153][T14662] create_new_namespaces+0x3ea/0xa90 [ 877.269425][T14662] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 877.275037][T14662] ksys_unshare+0x45b/0xa40 [ 877.279524][T14662] __x64_sys_unshare+0x31/0x40 [ 877.284272][T14662] do_syscall_64+0xcd/0x490 [ 877.288754][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.294626][T14662] [ 877.296934][T14662] The buggy address belongs to the object at ffff888141693400 [ 877.296934][T14662] which belongs to the cache kmalloc-256 of size 256 [ 877.310979][T14662] The buggy address is located 24 bytes inside of [ 877.310979][T14662] freed 256-byte region [ffff888141693400, ffff888141693500) [ 877.324670][T14662] [ 877.326974][T14662] The buggy address belongs to the physical page: [ 877.333358][T14662] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141692 [ 877.342180][T14662] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 877.350655][T14662] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 877.358265][T14662] page_type: f5(slab) [ 877.362226][T14662] raw: 057ff00000000040 ffff88801b841b40 ffffea000119ae00 0000000000000004 [ 877.370783][T14662] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 877.379346][T14662] head: 057ff00000000040 ffff88801b841b40 ffffea000119ae00 0000000000000004 [ 877.388002][T14662] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 877.396647][T14662] head: 057ff00000000001 ffffea000505a481 00000000ffffffff 00000000ffffffff [ 877.405292][T14662] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 877.413931][T14662] page dumped because: kasan: bad access detected [ 877.420315][T14662] page_owner tracks the page as allocated [ 877.426013][T14662] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17841103597, free_ts 0 [ 877.445710][T14662] post_alloc_hook+0x1c0/0x230 [ 877.450467][T14662] get_page_from_freelist+0x132b/0x38e0 [ 877.455992][T14662] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 877.461864][T14662] alloc_pages_mpol+0x1fb/0x550 [ 877.466695][T14662] new_slab+0x247/0x330 [ 877.470825][T14662] ___slab_alloc+0xcf2/0x1740 [ 877.475912][T14662] __slab_alloc.constprop.0+0x56/0xb0 [ 877.481263][T14662] __kmalloc_cache_noprof+0xfb/0x3e0 [ 877.486523][T14662] bus_add_driver+0x92/0x690 [ 877.491093][T14662] driver_register+0x15c/0x4b0 [ 877.495852][T14662] usb_register_driver+0x216/0x4d0 [ 877.500947][T14662] do_one_initcall+0x120/0x6e0 [ 877.505689][T14662] kernel_init_freeable+0x5c2/0x910 [ 877.510863][T14662] kernel_init+0x1c/0x2b0 [ 877.515169][T14662] ret_from_fork+0x5d4/0x6f0 [ 877.519747][T14662] ret_from_fork_asm+0x1a/0x30 [ 877.524501][T14662] page_owner free stack trace missing [ 877.529841][T14662] [ 877.532142][T14662] Memory state around the buggy address: [ 877.537749][T14662] ffff888141693300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 877.545784][T14662] ffff888141693380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 877.553819][T14662] >ffff888141693400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.561852][T14662] ^ [ 877.566672][T14662] ffff888141693480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 877.574707][T14662] ffff888141693500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 877.582745][T14662] ================================================================== [ 878.074732][T14637] ima: policy update failed [ 878.202744][ T30] audit: type=1802 audit(2147483809.318:29): pid=14637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.3412" res=0 errno=0 [ 878.786370][T14662] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 878.793578][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.4.3420 Tainted: G U syzkaller #0 PREEMPT(full) [ 878.804489][T14662] Tainted: [U]=USER [ 878.808268][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.818297][T14662] Call Trace: [ 878.821558][T14662] [ 878.824465][T14662] dump_stack_lvl+0x3d/0x1f0 [ 878.829040][T14662] vpanic+0x6e8/0x7a0 [ 878.833006][T14662] ? __pfx_vpanic+0x10/0x10 [ 878.837490][T14662] ? __pfx_vprintk_emit+0x10/0x10 [ 878.842492][T14662] ? dvb_device_open+0x36a/0x3b0 [ 878.847412][T14662] panic+0xca/0xd0 [ 878.851115][T14662] ? __pfx_panic+0x10/0x10 [ 878.855512][T14662] ? dvb_device_open+0x36a/0x3b0 [ 878.860431][T14662] ? preempt_schedule_common+0x44/0xc0 [ 878.865868][T14662] ? preempt_schedule_thunk+0x16/0x30 [ 878.871226][T14662] check_panic_on_warn+0xab/0xb0 [ 878.876148][T14662] end_report+0x107/0x170 [ 878.880458][T14662] kasan_report+0xee/0x110 [ 878.884856][T14662] ? dvb_device_open+0x36a/0x3b0 [ 878.889777][T14662] ? __pfx_dvb_device_open+0x10/0x10 [ 878.895046][T14662] dvb_device_open+0x36a/0x3b0 [ 878.899792][T14662] ? __pfx_dvb_device_open+0x10/0x10 [ 878.905057][T14662] chrdev_open+0x234/0x6a0 [ 878.909454][T14662] ? __pfx_apparmor_file_open+0x10/0x10 [ 878.914977][T14662] ? __pfx_chrdev_open+0x10/0x10 [ 878.919896][T14662] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 878.926201][T14662] do_dentry_open+0x982/0x1530 [ 878.930944][T14662] ? __pfx_chrdev_open+0x10/0x10 [ 878.935863][T14662] vfs_open+0x82/0x3f0 [ 878.939913][T14662] path_openat+0x1de4/0x2cb0 [ 878.944487][T14662] ? __pfx_path_openat+0x10/0x10 [ 878.949406][T14662] do_filp_open+0x20b/0x470 [ 878.953889][T14662] ? __pfx_do_filp_open+0x10/0x10 [ 878.958905][T14662] ? alloc_fd+0x471/0x7d0 [ 878.963222][T14662] do_sys_openat2+0x11b/0x1d0 [ 878.967886][T14662] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.973068][T14662] ? __pfx_do_sys_openat2+0x10/0x10 [ 878.978250][T14662] __x64_sys_openat+0x174/0x210 [ 878.983085][T14662] ? __pfx___x64_sys_openat+0x10/0x10 [ 878.988445][T14662] do_syscall_64+0xcd/0x490 [ 878.992932][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.998803][T14662] RIP: 0033:0x7f853b58ebe9 [ 879.003197][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.022785][T14662] RSP: 002b:00007f853c373038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 879.031179][T14662] RAX: ffffffffffffffda RBX: 00007f853b7b5fa0 RCX: 00007f853b58ebe9 [ 879.039126][T14662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 879.047077][T14662] RBP: 00007f853b611e19 R08: 0000000000000000 R09: 0000000000000000 [ 879.055030][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.062977][T14662] R13: 00007f853b7b6038 R14: 00007f853b7b5fa0 R15: 00007fff2e9079c8 [ 879.070933][T14662] [ 879.073989][T14662] Kernel Offset: disabled [ 879.078297][T14662] Rebooting in 86400 seconds..