last executing test programs: 8.002118309s ago: executing program 2 (id=988): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(0xffffffffffffffff, 0x0, 0x8801) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x2c, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socketpair$auto(0x1, 0x0, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) recvmmsg$auto(0x3, 0x0, 0xfff, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 7.495236906s ago: executing program 0 (id=989): set_mempolicy$auto(0x6, &(0x7f0000000180)=0x3, 0x21) io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, &(0x7f0000000080)={0xfffffffffffffffc}) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x6, 0xffffffffffffffff, 0xee00, 0xc, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub2/xrun_injection\x00', 0x141503, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x82d) write$auto(r3, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x1, 0x2d, 0x7fffeffffffff784, 0x80020409b73, r3, 0x1000000008) madvise$auto(0x2, 0x5c61fa2c, 0xf) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x859, &(0x7f00000002c0)={0x5a, 0x1, 0x4, @raw=0xedbd}}) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 7.047091623s ago: executing program 3 (id=991): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0x1000000df, 0x9b72, 0x2, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) bind$auto(r0, &(0x7f0000000100)=@in={0x2, 0x4e22, @local}, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x26, 0xa, 0x0) getsockopt$auto(r1, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video8\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000001c0)=""/191, 0x1f8) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x27}, 0x3, 0x108) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) socket(0x2, 0xa, 0xa) mmap$auto(0x0, 0x4004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) socket(0x15, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ram13\x00', 0x14fe02, 0x0) pwritev2$auto(r4, 0x0, 0x8000000000000004, 0xffffffffffffffff, 0x4, 0x8) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x4, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 6.991467121s ago: executing program 2 (id=992): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f00000001c0)="cccc0597", 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x1) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x1, 0x0, 0x1e) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000080)={0x1, 0x351, 0x7000, @raw=0x6, &(0x7f0000000040)={@raw=0x6, 0xc9, 0x8001, 0xecbc, "cb57baff2bef86367754100c634faf1db0830132758ad072eac5c9be263fee480b32ca55503133eb2787f869", @inferred=0xffffffffffffffff}, "7203480efe1c89f1c08cdfc6d3580d79ceecdbc6baa8034b225b85b75724c3ce0b3a2a710e1b774b220a14cd8f825f95d8aa"}) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x94) (async) socket(0xa, 0x5, 0x94) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0xa, 0x1) (async) socket(0x2, 0xa, 0x1) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008012, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x26503, 0x84) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26503, 0x84) ioctl$auto_TCSBRKP2(r4, 0x5425, &(0x7f0000000500)) read$auto_fragmentation_threshold_ops_(r4, &(0x7f0000000200)=""/172, 0xac) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.495159253s ago: executing program 2 (id=995): mmap$auto(0x0, 0x400009, 0x4, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x2f, &(0x7f0000000180)=0x3, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0xb00, 0x0) pread64$auto(r1, 0x0, 0x594c, 0x9fffffffd) socket(0x11, 0xa, 0x300) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) unshare$auto(0x20000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x800, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 5.486689383s ago: executing program 0 (id=996): writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/net/tls_stat\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto(0x3, 0x4020565a, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x4020565b, 0x38) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250400000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="000000007e34224d29150585", @ANYRES32=r0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xaa6526e9665fec5d}, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 4.538415211s ago: executing program 3 (id=998): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) pwritev2$auto(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000007000016c97090000000000000000000000000800270003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="318827685e050328bd7000fbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) ioctl$auto(r2, 0x541c, r3) 4.260937862s ago: executing program 2 (id=1000): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000080)="8d9ec9e073", 0x5) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) r2 = socketpair$auto(0x4, 0x9, 0x80, &(0x7f0000000300)=0x4) getsockopt$auto_SO_RCVPRIORITY(r2, 0x6, 0x52, &(0x7f0000000380)='\x10!-\x00', &(0x7f00000003c0)=0x81) (async) getsockopt$auto_SO_RCVPRIORITY(r2, 0x6, 0x52, &(0x7f0000000380)='\x10!-\x00', &(0x7f00000003c0)=0x81) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket(0x28, 0x1, 0x0) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setxattr$auto(0x0, 0x0, 0x0, 0x800000, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) (async) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) ioctl$auto(r4, 0x92106411, 0xffffffffffffffff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) lseek$auto(r6, 0x8a05, 0x1) (async) lseek$auto(r6, 0x8a05, 0x1) 4.042663711s ago: executing program 3 (id=1002): ioctl$auto(0xc8, 0x800454cf, 0x200000000005c8d) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\x13\x12dQ\x01y\xeb', 0x7e) listen$auto(r0, 0x1f64b57d) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x6, 0x29, &(0x7f0000000000)='++{\x00', 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000180)={0x20007f3, 0x2}) unshare$auto(0xffffffffffffffff) ioctl$auto(0xc8, 0x800454cf, 0x200000000005c8d) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\x13\x12dQ\x01y\xeb', 0x7e) (async) listen$auto(r0, 0x1f64b57d) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) (async) setsockopt$auto_SO_WIFI_STATUS(0xffffffffffffffff, 0x6, 0x29, &(0x7f0000000000)='++{\x00', 0x0) (async) pwrite64$auto(r1, 0x0, 0x0, 0x2000000000040007) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) (async) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000180)={0x20007f3, 0x2}) (async) unshare$auto(0xffffffffffffffff) (async) 3.577009003s ago: executing program 3 (id=1003): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) open(0x0, 0x161342, 0x170) io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@nested={0x8, 0x5, 0x0, 0x1, [@nested={0x4, 0x23}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xa, 0x4b, 0x0, 0x1, [@generic="b69338fc3930"]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240400c0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000580)=@bpf_attr_3={0x1, 0xec2, 0x6, 0x7, 0x1a0000, 0x100, 0x100000001, 0x8, 0x8, "318006f400f091c8bdf9d01e7db3a141", 0x0, 0x7, 0xffffffffffffffff, 0x80000001, 0x8, 0xd0000000, 0x3, 0x7fffffff, 0x4, 0x2, @attach_prog_fd=r2, 0x3, 0x7, 0x5, 0x4, 0x0, r1, r1}, 0x5) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x0, 0x1, 0x0, 0x1e) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5523, 0xffffffffffffffff) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) r6 = open_tree$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="00020000", @ANYRES16=r7, @ANYBLOB="000427bda4ca8745f72c90afa9000500f60002000000d10175801e0166800400f3800800f100550800007e08001d00", @ANYRES32, @ANYBLOB="9f9befa1c5a81713fa0d5b46cbb8646281096b23b958f9f52ea73d6a98193034ecc15866102099596cced88d013d6cb872d98106ebbdab80aa3cb9301196904977dc8bd403b81e96ef8c757df7b7e175580002a2b2a1de6615657c403ef8575c3b24c8d866550aeb0fefe6a47bc49a1ec1c4b4fec0be8fdb1747bc576da0896c007b00cbbe0879f628cd45a481db45e6b74aaa0c0b9b6f84acce6c43a9165fc40e4badc9f7615cf80637839d3ddca3b769f0296c6d29d3b4a4af2a4b391af9e4bc1228d3a125f642dc17d942ebdf659b3f462649ef314ebd37d0fddf8ea9eb8d921aaf53db99ba9a9bb6da12622042aa2174a7ca5dfcaf4cb208002f007f00000104001d8000003077fff08b1eae69b106fb4563632712b9ac0f65dd029f0adf13b608f7d4c95c42a50c27b3c6254c8c52731c326930be184c9f8417573dcc52e17af31b8cf2f173b5bbed05c5bfb4124b1fc22608ad940a23fb91084d2883c359f4d588f1de152698a2eb6ecccc52d3f9fec284d7d831e6e95ba99895ba51d5522b11f1d4b73df9aa1d12207aabdede81874e858b8f692b60a687532d2b7d769e334f543ccab8554a10dfa7b418ac38865ee7db0000000800dc00020000000500290000000000"], 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) 3.097576391s ago: executing program 0 (id=1004): writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) (fail_nth: 21) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto(0x3, 0x4020565a, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x4020565b, 0x38) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250400000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="000000007e34224d29150585", @ANYRES32=r0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xaa6526e9665fec5d}, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 3.056572193s ago: executing program 1 (id=1005): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x13, 0x0, 0x25, 0x70bd25, 0x25dfdbfe, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r1) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r2, 0xab08, r2) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x18, 0x4, 0x2) write$auto(r3, 0x0, 0x1ff) io_uring_register$auto(0x2, 0x19, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x80803, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r7) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001200)={0x150c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x14f7, 0x3, 0x0, 0x1, [@generic="075495d38fbe8cdfb65409a4c2176dae6c74f7d16aea7ab759773ebe413d28c341cf5a86137ee4931a04cca26f701de1e74962491e7302ceac611b676276ddc2b7bdf03f4b928d32d542ee8c20cb11df3bcc59c871fb7bef39145a38951f8b4b58edc24080bceea1138b9bf5eea91a6367081f98ee612155eb398c9f5ceec63b7778899b02bac7aef1fcec26a97dd789f4cf5e38f52622b789ee6768027731672f9d4117d77a6204f195e9cbb2c0221229d07d513b630c6371d94507d5fe502f91f5f2bc17be11ea0fcd", @nested={0xc, 0x3, 0x0, 0x1, [@nested={0x4, 0x4e2}, @nested={0x4, 0xdd}]}, @nested={0x132c, 0x126, 0x0, 0x1, [@typed={0x9b, 0x54, 0x0, 0x0, @binary="4cad6d33f3b1d4d9381f13312e3b851813e9fadf72ebedbdda52cb11a4ccf5244dd718c2eb398428cb8df154e14dbc2d6ede573a51077634632e681af59dfc918be3dd0281fec839c54db5fa0c604fb839a6013fa39c99e46cbf0709229841606368da31ad70feaee2fccd9bb5a1d5320689ea8d43c42e40be6c78cab8ce7a7e09697322b37b223138bffb5b76aaf0e49fe7c9faf657d8"}, @typed={0x83, 0xec, 0x0, 0x0, @binary="426b7a629914652adb1044fe90dd178d59b6e562c9d441683f899e3d0abea2e57f49efd1b8f68e096d42b0d4d009afd69d515314a2118ff7e641e04239bbdee3ed21ab13649849eab820eb78ae2e10563e32bd081faeb40ce112fa0f9966fbfb9a8b65fa2d9c69f0423494cb827a409fdc7f9698da4efacdebf7647b59788c"}, @generic="9558e67dc7935695c90c07796ccdce00d22bcda37b878324d07020f6839c9d4f6c5151ebf92274406667e7a1caa4924119e28989caec2e6e8db0a601ba0a4750e0b6d9740c13f9b9daa79872ea98c2efb25754ae3385694c0a558cfdb3e2102808cec1e82cd1492b6a85da842958e5e8f5b03aa6093823bae2d5561ac269b8a6b15bff9ec745df2c196fe11562f6c5ba86d6a5aa98ffe5121c780c7c02d048c9d2f4da57a1abf328434b42416e102a48317f290b270a", @typed={0x8, 0x109, 0x0, 0x0, @uid=r7}, @generic="f8840cd47485693e5acb96702278f3ed9401f524b19896da4950353e9e58fbdc3b575b48045bb80b27b58edc90c2198bc326f2c3d55f46831fae1e4f68a249f82ca8e2aacc1b42c99c49a34bf183f008f33a533c18c8bf184aeee7d910e7", @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x400}, @typed={0x1004, 0x68, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@loopback}, @generic="1018aa8295f5014700629ce43244b964eb7e541b0b98e8eb4598b88d14a0520308a7d8cbaf8e173bc6d1722e5087a7dd2fd56678d23a15c853ed0aae64573e0a3ed0636d14bee25b3b66e04f352b4590c42c914d61f5255aa79e7d78910bcc6fd76afe327019686b17981110b5c16fb1ff124b9fb8936a856c3456c16e0d4e8a332006d51d36f095eb517747e55c1eed77ef7bec506d4639859d3d1e881e53dc1f87d0f07ed40b67aeeac5b4af9d2e0a49aa4673f8f1568bb033c72777e1beff354cc00281d8e4f153a9be5ec458161c"]}, @generic="a4601ebae90706a94d58d852b819d50493815cf82a675b73a7b116be9572d5063fd91ede8005c519e61bab9ffef96764816b43d9366af728898bf44e6aaeda36a0759ad087bba62797c1db2553d7e2a39bf2d069abf5a06f9cff71aecd8b124b653f2cf4c7786e859187f7003444c31c4f9d2037ba63af50a375e790d849c43544bb03d9f8c458db8a13ab6e5c28d2e8d319eff7bbcf725acfd3ee3367a835f74346e68d3022ad1f786f11a2308fe1d70ede20ab5075df3ddf5262c8b6476af955119cc4801d115b305cd52a689c2962e452687950e892c1602acc95b52f3c2c4e497336a9fe06522b14ab528f87e4d18a"]}]}, 0x150c}, 0x1, 0x0, 0x0, 0x4004084}, 0x1) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d00ddfffd8000"}, 0x1b) 2.857708627s ago: executing program 1 (id=1006): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r1 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) r2 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2000c, 0xe7, 0x100000eb1, r2, 0x2) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r3, 0x0, 0x7, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) ioctl$auto_MEMWRITE(0xffffffffffffffff, 0xc0304d18, 0x0) statmount$auto(0x0, &(0x7f0000000c40)={0x8, 0x1, 0x401bf, 0x7352, 0x33, 0x65f, 0x7fdfffff, 0x7, 0x3, 0x20000002, 0x7, 0x1, 0x6, 0x1, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd], "590a384d3d6cc23526e4d085f175ff8fb35bde055c066ac2414cd095d2d396"}, 0x5, 0xd) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5405001e", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf25310000000c008180050002000400000082048000d74be6813a90f1f8cf3c9599405ea9d26f113ee336ecbe691951b71203acb4428123d809f85a0e16e97dfe504cf3df7dd3646f423f8860c2285244afd0da06bcf772c5b44ed7d3364d1f7f22c32b848eb2459be1a08893a1faab34115656db967513fd39bbd05f573bee9f2a608dd8a6d58e40b52f668709b1db11c5733336a6f75e56d7750c1a932bced384630771c51f8bc45c3a493ad3c0b6f666783a746198fd0fa6313cf4f033bf7d80f66784fff25453430024fcba1a4902a06a0e075bb75d3f1489595b94860106ba3b08e01628d92fd876159cbe7c8a8432c2640061c157c0f160345378c5196be7900d658a9f8109adfea1b05787a19443e24c57d9d36700e549f86c34fb542af7c483a12c4eac04a588565279e75578b41577a8762cdeb486b7f84eef1ad1640d417ef72d2f06e2beac9cb7a3c09c2b11d4d1ca0b21ecc00102326982937e168865e9a0fa658df5b23def950d8148eeeaf505791d0949e8ec7f1376103077caf5add72ea93e093e53429e07cb49f8b8517336c860dae5253e3265e214843db0e9f688a520af4a66c092add117db766a2707a6ee537136cefcc81b94ebad09c643d9bc82a1e485618d7948178429084427b9dd730580bdbdb39fe8638469b324c3d217935338d3303650a7e1f614594afc12b12b54cf339159a311d6178b477575d1a258ff3c571782380499c443be337a98e45d8ff95231f909410e2d9f4e5448e14e0b74776575e1f76c4e9155c56d24a4452ac7e0951345b96d3483628286db48d5b3c7ae42c19ff46db7fd69a12129c4bc4c6bee84ed31ea63d52a3e5829c04e6cf5adba6dc75b3c0b74ff27de2731bcb92878454c0e30422ee8644a16e22f489fd7e92f472c1fd93e7d8f62e88acda1621ab0cd161237ad51b5f0484748054553b49bc54a2764c792270a67c8ed80c4fd459c9375ffb49765e31e365b982e528b34a1990d186f855cbd8f96e11a1c99b552f8b4e1bf1d5dd9a05373c832a4b591834894c172ec1926f2155f7a7997f709be8ab28eaba5436b3a0cc4e7ddad0384774be0938fcba3dee496cd82adedaf4503f1fc4cfd49be2df4cd84c13f2ae21de450e44c95321e06fb2977a2efbe57e8aac3d1b67afe3b5200d4935b80a82c845c52a00f6d8a5a552cb00ee6b448404836741f6f3322d448e67d17d588b2362947ececf731ebd29bbb5cccd29b0c0ca546c915ba521053a93f6f5451d6ecb45ee676244af1968694a7d0bac2caf8a6f11504c8e4cde318272d9761c6f6cb4b998f49b6b0d5bfd365f5758c74581dd70f5ed688854c29963015bb897e50526965f7ab2a89273da42d73646725458d33cca93dea81f99783fc6dee0661d7c8f4c85e9101f33401bb64a5e94b2b1aa6db7df15e2db9ffa552fc3a7652106470209d2a6dd5194e3d52148216822f0fe554f2d7e882ae9058e737c9919f93c587aa32e6e7775ed97791d6b11ed5c8e9f8075522640da1ff341b818a65dd9b66c2d6ea3be29701edcaa61c48152ddd57925958d92b853168119b306cb7f8835c85eb994873cc37f16c266e0c293c4b50219793b9403e1ef03b2de1c85baa201b7d5b1819bd2f8b9c497ca13a9435c1757a32de0000af00170004ba180952409e12cd5ab9c4468984c251d025973983efba8898047dcda3e1c023a99033ceb634a68accbd18434fe188350b303c99b1af0d0c92dd3cf838b96a6b8d91bd7a49548e2d0bb5d98517a1d3d5008ccfd6902f792a0e782ba8132ae2537154ee30943160f98f19b7a9541ec7377907a23e4090296d6639bde3d5cee6a33633b8711a5d6170899370f69a1e16b5a4c76073baaf5f3cfd2a9bc8367b3751312924e6086d9e8a8b9e00"], 0x554}}, 0x4004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0) r6 = socket(0x23, 0x800, 0x1) getsockopt$auto(r6, 0x65, 0x1, 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) 1.593046653s ago: executing program 2 (id=1007): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x8, 0x0, 0x4) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = memfd_secret$auto(0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r3 = semctl$auto_GETPID(0x6, 0x5, 0xb, 0x0) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf250a0000003c01028008001a00", @ANYRES32=r2, @ANYBLOB="38007b8008003800", @ANYRES32=r1, @ANYBLOB="080078002d2a92000c0007000500000000000000040087800c006400657468746f6f6c0008009400060000000800f100", @ANYRES32=r0, @ANYBLOB="080064000000000004004d00db003280e7cd00e43f01e9e33099608ad78e65fea79c049c85bd8afcf603d56b52b67e188115f941f0b6e5be9ec40816d4755f44e7c56cf92ba759e0cf41e5162354243f69ffb99ee70926373dfa4f75cb78cff052c3aa936fd8414c5425febfdae12adaef0e62c9ce1f36fccd3c04d6278c841485d6bf8a78a3325bc3d99c0758acc8460bee51ce0a199a417900245055c2f3e9f0758d136bbb821b8529c2c9e7debf447655a47719091642df52e809371116cdbf5f45af42dc2f70ae244d5f888035dc56690913a5d12bb2e9d53e3ceffd3523b5149888030735000800ae00", @ANYRES32=r3, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x41}, 0x8845) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2081, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) mremap$auto(0x0, 0x2, 0x3fd6, 0x0, 0x7fffffffb000) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x2aa00b6e) process_vm_readv$auto(r3, &(0x7f0000000180)={&(0x7f0000000540)="7978a7e53b2665834dd5333410bf4ff30c200f259fe524db06d519e74dfd0a8f7cebdbf73b315c35b353b44399aee1e4e11e8231dadab2c498d84d0800fc7b8fdbf8312c5d0269269d2366f8552d7e8ee0180d36998c6a4b792d56713c1d1cf970851fb18553bb53305d01b4085e3fa998e202b6639eeda0fcb95b663ad678200de4422395dbb079eade65f7b17eab22ef2b56ab0f84cd8bae9ecee6df883186c3786326ae0ecb9d5e46276d24b49eef98e0876722927a99b6e60bab7c75fc8172519f1848584bd6d1e930f191902c2e"}, 0x7ffffffd, &(0x7f00000001c0)={&(0x7f0000000800)="c218209805f63ed03f018c97d486aa2ba2ae6bd95964584faa339ba6aa4af0c457921c323cdedff609f751e49346c274c3d0b883afb8fc09e6c4c8fc180f64806d74416ca88f5b7c3c8de4197aeb12ffe7e0cdb8dad82d5ee670cd3b57bb781075adee6fd925179fb96cf67bba163f1b02b418435339d23db7fedce8e63e8f05b8a50662a62d3fbda235ea61524fe612f35a0fd361f4068e6c522800cc1ccdadcb6b63cd6b1283cb2d4e6c98a756e9bf482fd32fe897f3ece164fcf3f9e2a8563d9de74a396195bc060a5824b8", 0x2a20}, 0xfa, 0x7) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x1004, 0xffff}, 0x4, 0x100004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000007a80), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40) 1.500095058s ago: executing program 3 (id=1008): mmap$auto(0x4, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x28, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7ff, 0xe983, 0xdc, 0x12, 0x401, 0xff6d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000040)={0x1, '\x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8ce12f0638fe900"}) r3 = socket(0x13, 0x3, 0x1005) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r4 = getpid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0x7, 0x1, r4, 0x5, 0x80) close_range$auto(0x2, 0xa, 0x0) io_pgetevents$auto(0x8, 0x3, 0x4, &(0x7f00000002c0)={0x4, 0x10000, 0x7, 0x9}, &(0x7f0000000300)={0x0, 0x100001000}, &(0x7f0000000380)={&(0x7f0000000180)={0x8}}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x203883, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.408045875s ago: executing program 1 (id=1009): mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f42) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0x7}, 0x3) mmap$auto(0x1, 0x3, 0x2, 0xc9d0000000000010, 0x401, 0x8004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x1, 0x80000001, 0x800002e}, 0x6f4) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getpid() openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) close_range$auto(0x2, 0xa, 0x0) 1.237016243s ago: executing program 0 (id=1010): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) mmap$auto(0x7a, 0x5, 0x2, 0x42eb2, 0xffffffffffffffff, 0x8000300000000000) r0 = socket(0xa, 0x3, 0x3914) getsockopt$auto(r0, 0x3a, 0x1, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) epoll_create$auto(0x3e) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:480/min_ratio_fine\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) prctl$auto(0x16, 0x2, 0xffffffffffffffff, 0x4000000d, 0x100) stat$auto(0x0, &(0x7f0000000380)={0x4, 0xa7e, 0x6c, 0x2, 0xee00, 0x0, 0x0, 0x100, 0xffffffffffff340f, 0x8, 0x3, 0x3, 0x6a43, 0xfffffffffffffffe, 0xb4, 0x7, 0xd5}) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r5 = io_uring_setup$auto(0x1, 0x0) ioctl$auto(r4, 0xc0585604, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r6) r8 = ioctl$auto_TUNGETDEVNETNS(r5, 0x54e3, 0x0) fcntl$auto_F_OFD_SETLK(r8, 0x25, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010022bd700000dcdf800800080000010000"], 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x100) 954.483722ms ago: executing program 1 (id=1011): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyc2\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) ioctl$auto(r0, 0x541c, r1) 550.135174ms ago: executing program 1 (id=1012): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r1, 0x80085502, &(0x7f00000001c0)=ANY=[@ANYBLOB="10e6ffffff101600"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r4) r6 = socket(0x10, 0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0xfffffffffffffff9, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x8000000000000002, 0x5, 0x7fffffff, 0x7, 0x7, 0x0, 0x61, 0x40000103}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x4070bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x10, 0x70bd2b, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)={0x558, r3, 0x23, 0x70bd28, 0x25dfdbfc, {}, [@MACSEC_ATTR_OFFLOAD={0x6a, 0x9, 0x0, 0x1, [@typed={0xc, 0x131, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x103, 0x0, 0x0, @pid}, @generic="13b56f539c3d176b8d2bff66a4268be80e07494c6847b7de4d065c8565a0bc947a7a1a2c6a76d4772780f0b79bf0677eb5cc93e4c3ca9a21b1f3de9367b9442bdbeff6aa689b6550fb300cb718576d8866d5"]}, @MACSEC_ATTR_SA_CONFIG={0x2f5, 0x3, 0x0, 0x1, [@generic="a0140d1a118c", @nested={0x60, 0x119, 0x0, 0x1, [@generic="67bd5dfb4856d0a0c803ec329d5cae865626de00f72c9515ea0b1fca251709205ddc9a74d8ce0b3e1b3d071a542a193c874e6e3f0fb4476401247e84eacf75ee488891f4e85f19431b67d0aff9112c175dfa2baf30d9b4d43284b95e"]}, @typed={0x4, 0xe0, 0x0, 0x0, @binary}, @nested={0x8f, 0xf8, 0x0, 0x1, [@generic="ef3818c6f0893c28bc7c92cbc936ad7a976d37756823da478e0d7f792b08ecfec0bff6cd596a9585a58e38eec08f28a3d9be55259d2ce395bee4a58123b771ed9a554e3b55120903aab195efb93fa692636a4fd275bb26a41132958674130486b69898dd3a3bee071cb974c9fdf68ae820c04557d2f794c6afda9587e203f1d87600375522f7cd07442c2c"]}, @typed={0xe1, 0x50, 0x0, 0x0, @binary="c3cca1c297e03e7ed0b498b2110f337d63523f7041ecfb93cd9866437833f8da66ddd845ba121a5c261975947107f59150969b157533cc4a4c4fd58ba22e5068f3632931718901f33cb6d2ae5475d4c0325eea665321ac3c7da5b58ca9e0ab3e9d503895ab5d31ae0f10fecc00256b8df2b074fea34d36a3c6404c8b6c7663389bdf2d7e1f76b895ac6122175b1d955ab41b063be2ea6f51c1ed8a1afe843284c30175e23e78f0e5e0300ac6ad0399af1d908c56bc25c647995941500de3875b1bfa21475e74f790f6cbea03567e37e465a57b1fc8ea0c6157401e8956"}, @generic="d33340ad11ba4694cec195977dd3709f352e7b8255ea683823dfb0e75ce2966349f017f01b148dad69426e2289abf04bdf530ec6df441c4d09668a09563fdffbf8798c9ca6894c46abb9a7acdd7f2d59a2f48acaf81187646041dc4d3ae68b2427a16ebcf37a66d83b4b2e9d935af0d8831cbd5055e24a7e873bed25932f2b04ac4b4d4dbd5dda8d9b3253e14ac3ef704d1400c7f9a0d852344460c6b6", @generic="e74733eff09734dad9883f4d5a07bd54ed317c7ba0c741bc817aabb5912be960068a05f32366baf94a602fe093c7ed150a4d6da6c6d328196deb1345d476f62adaa115a289fed0f82808add4bf95cae636c8805ed010b9388607622786c0b82552d29593d2f9b242988e", @nested={0x4, 0x3c}, @typed={0x8, 0xf0, 0x0, 0x0, @uid=r7}]}, @MACSEC_ATTR_RXSC_CONFIG={0x1dd, 0x2, 0x0, 0x1, [@nested={0x1ad, 0x101, 0x0, 0x1, [@nested={0x152, 0x10c, 0x0, 0x1, [@nested={0x4, 0x38}, @typed={0xe0, 0xb4, 0x0, 0x0, @binary="025f6cd6de19d9b8837556b6ae2cb651b7dfba49e8826d6b252277e70430b4833a1b3c952fa4a66b026150f9740eabbe67a7b82500eb5431b0af2ff65dd2a6827f5a60553144c94a4d64ba846c31c24764b01569ac705c1c602203ccc05fabc99c030350a254a03b47900625e74e8faebb8be4c1447bcf673ee37e95ea1c09c5fc3f39e8e6511de1496a859afc5626e58ab87745373914b5e115c575604f2ca837d97ae453a0e6339cc04fe0fb2c74284cbfc096e263193740bada00b862a66f88f65589805183feefa1ffa5ba919e881dd0145c9aecb479fed9ef89"}, @typed={0x8, 0xad, 0x0, 0x0, @fd}, @generic, @generic="7f77ffa11cde8d29", @nested={0x4, 0x11}, @typed={0x14, 0xf7, 0x0, 0x0, @str='/dev/raw-gadget\x00'}, @generic="4fcb314c37473e904645c4b3f79558fc0f491a6696c331986b782c48330ff90f60031d3e24ac4e8b022a201c53e168cf59d6aeafbf6bc05cad704e9c3b8b266dde0a"]}, @typed={0x8, 0x16, 0x0, 0x0, @fd=r4}, @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @typed={0x6, 0xed, 0x0, 0x0, @str='-\x00'}, @generic="efc7edbd5e73f3c30ac303d2bb171674d9f33d51db254c74d1255d982a826bd5ebfc563ed384641bf51742a813f91c67d2"]}, @generic="012ba02884e08c227b1e3aa633a4179f54146062db3f21446a4bfd3d2aea0556b61f242330715c119b"]}]}, 0x558}, 0x1, 0x0, 0x0, 0x400880a}, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x14, 0x2, 0x0, 0x1, [@typed={0x8, 0x90, 0x0, 0x0, @ipv4=@remote}, @nested={0x8, 0xf9, 0x0, 0x1, [@nested={0x4, 0xfb}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000005) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) ioctl$auto(r10, 0x7, r10) mmap$auto(0x6265, 0xffff, 0x100002, 0x9000000eb1, 0xffffffffffffffff, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x800001ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r11 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r11, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) 387.449285ms ago: executing program 3 (id=1013): writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x54) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) ioctl$auto(0x3, 0x4020565a, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0x3, 0x4020565b, 0x38) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) r0 = bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x9, 0x92f1, 0x4000004}, 0xd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r0, 0x40008000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) 193.067878ms ago: executing program 1 (id=1014): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r0, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, r0, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r2, r2, 0x0, 0x5a) capset$auto(&(0x7f0000000080)={0x20080122}, 0x0) r4 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r4, 0x0, 0x0) r5 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r5, &(0x7f0000000140)={0x0, 0x6}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) write$auto(r4, &(0x7f00000000c0)='macvlan0\x00', 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r10 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000340)=@link_detach={r2}, 0x8) ioctl$auto_BLKPG2(r10, 0x1269, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, &(0x7f0000000240)="2c75a2fa8cd2657c150b751ae9139e957f6059646dba9546103839dc2b998760cfcfa3adf0c662edd78ed07e7af50b0f811eb107e579f38f1d7a3cb8942eb4b078adec77f4a0acc647e43dd67c1bba256632eab3f687f7ad26d4322ba0d19bbc83718196d9b377bf75fd942e12678a031c09ed697471830f5850e007a6c6ba20fa901959a9c20acfe7f6c875abe6f884e54dbfef0fa43c1d9381609a2d950e672bcc3acbbc7fde488fa16106841e0b90e63a6c6d1ed2b3280be7194ba02e21bfd47a837f44a446136396529d21982e270e59f3b0eda6fcee0713702555ae5d2f04f5bda62328aac479ad08c368") sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050328bd7000fbdbdf2506000000080032000000000008000300", @ANYRES32=r9, @ANYBLOB="14b1fb165c0296c20e96088fc14df5d6bce37ea020f3f01a8c856245c5a938bf24267cdfbc1c5c17582ae3608e6604b64f3de21f46f29bf5267a4cc6096263431c08f9f8c3cef3f036f7e5018cf8319cdceab70c9c2d46e76ab1c74479"], 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x0) 112.531152ms ago: executing program 0 (id=1015): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0) close_range$auto(0x2, 0x8, 0x0) fgetxattr$auto(r0, &(0x7f0000000040)='_\xf0\r\x80A\x87\xe9\x16\xe8\xad\x970\xf3X\xf4\xe0{q\xa9\"\xef\xfa\x86q\r\xce\xb5\xc2a\xa5#\x8e\xb3\x8f\xf3\x1cR2P\xa6\x84\x06\xee\xe2~\xc7 \xda7b\xc1\xa1\xef<\xf9^b#\xe1\b]\xc16c\xa73\x93\x05\x8c@\x97\xbc\x83\xed\xc3n\xcc\xc9(\xaa=\x94\xdf\xa8Q\x02\x9a\xe8\xd4N\xc3w\xe2\xb6\xf8\x052\xd4\xa2\\\xe1/\xcar\xce\xcf\xac\xcf\x02~ -\x9b\xef\xaf\r.\xe1\xb3:\xcc\xf6&#\xf78\x10\x870\xe7x1\x7f', 0x0, 0x3) 939.908µs ago: executing program 2 (id=1016): mmap$auto(0x0, 0xc, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/node/node0/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r3, r4, 0x0, 0x800048) (async) close_range$auto(r4, 0x8, 0x0) (async) mmap$auto(0x0, 0x0, 0xdd, 0x9b72, r2, 0x7fff) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x200048b0}, 0x800) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x6) r5 = socket(0x2, 0x1, 0x0) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) (async) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x2, 0x801, 0x100) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c83, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) (async) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 0s ago: executing program 0 (id=1017): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socketpair$auto(0x2, 0x4, 0x8, 0x0) r1 = timerfd_create$auto(0x4, 0x5) mmap$auto(0x2, 0x7, 0x2, 0x17, r1, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) r2 = socket(0x8, 0x4, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) mmap$auto(0x0, 0x2000c, 0xe7, 0x100000eb1, r2, 0x2) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) pwrite64$auto(r3, 0x0, 0x7, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000300000010000a800c000180080001000200000008000800", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0x10) ioctl$auto_MEMWRITE(0xffffffffffffffff, 0xc0304d18, 0x0) statmount$auto(0x0, &(0x7f0000000c40)={0x8, 0x1, 0x401bf, 0x7352, 0x33, 0x65f, 0x7fdfffff, 0x7, 0x3, 0x20000002, 0x7, 0x1, 0x6, 0x1, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd], "590a384d3d6cc23526e4d085f175ff8fb35bde055c066ac2414cd095d2d396"}, 0x5, 0xd) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5405001e", @ANYRES16=0x0, @ANYBLOB="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"], 0x554}}, 0x4004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0) r6 = socket(0x23, 0x800, 0x1) getsockopt$auto(r6, 0x65, 0x1, 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ed+0x10/0x10 [ 319.758823][ T9590] do_recvmmsg+0x2fe/0x750 [ 319.758850][ T9590] ? __pfx_do_recvmmsg+0x10/0x10 [ 319.758879][ T9590] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 319.758913][ T9590] ? __fget_files+0x20e/0x3c0 [ 319.758940][ T9590] __x64_sys_recvmmsg+0x22a/0x280 [ 319.758966][ T9590] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 319.759000][ T9590] do_syscall_64+0xcd/0xfa0 [ 319.759025][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.759046][ T9590] RIP: 0033:0x7f537518eec9 [ 319.759062][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.759081][ T9590] RSP: 002b:00007f53760a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 319.759100][ T9590] RAX: ffffffffffffffda RBX: 00007f53753e6090 RCX: 00007f537518eec9 [ 319.759114][ T9590] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 319.759126][ T9590] RBP: 00007f53760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 319.759138][ T9590] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 319.759160][ T9590] R13: 00007f53753e6128 R14: 00007f53753e6090 R15: 00007fffde53bf68 [ 319.759189][ T9590] [ 320.388673][ T9631] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 320.490861][ T9635] FAULT_INJECTION: forcing a failure. [ 320.490861][ T9635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.505377][ T9635] CPU: 1 UID: 0 PID: 9635 Comm: syz.1.664 Not tainted syzkaller #0 PREEMPT(full) [ 320.505407][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.505430][ T9635] Call Trace: [ 320.505437][ T9635] [ 320.505445][ T9635] dump_stack_lvl+0x16c/0x1f0 [ 320.505477][ T9635] should_fail_ex+0x512/0x640 [ 320.505509][ T9635] _copy_from_user+0x2e/0xd0 [ 320.505538][ T9635] copy_msghdr_from_user+0x98/0x160 [ 320.505565][ T9635] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 320.505595][ T9635] ? kfree+0x252/0x6d0 [ 320.505627][ T9635] ? __lock_acquire+0x62e/0x1ce0 [ 320.505665][ T9635] ___sys_recvmsg+0xdb/0x1a0 [ 320.505693][ T9635] ? __pfx____sys_recvmsg+0x10/0x10 [ 320.505740][ T9635] ? __pfx___might_resched+0x10/0x10 [ 320.505773][ T9635] do_recvmmsg+0x2fe/0x750 [ 320.505806][ T9635] ? __pfx_do_recvmmsg+0x10/0x10 [ 320.505841][ T9635] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 320.505881][ T9635] ? __fget_files+0x20e/0x3c0 [ 320.505913][ T9635] __x64_sys_recvmmsg+0x22a/0x280 [ 320.505953][ T9635] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 320.505993][ T9635] do_syscall_64+0xcd/0xfa0 [ 320.506020][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.506044][ T9635] RIP: 0033:0x7f537518eec9 [ 320.506063][ T9635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.506084][ T9635] RSP: 002b:00007f53760a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 320.506106][ T9635] RAX: ffffffffffffffda RBX: 00007f53753e6090 RCX: 00007f537518eec9 [ 320.506122][ T9635] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 320.506135][ T9635] RBP: 00007f53760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 320.506149][ T9635] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 320.506163][ T9635] R13: 00007f53753e6128 R14: 00007f53753e6090 R15: 00007fffde53bf68 [ 320.506197][ T9635] [ 322.346697][ T9723] netlink: 'syz.0.669': attribute type 6 has an invalid length. [ 322.360598][ T9723] netlink: 13 bytes leftover after parsing attributes in process `syz.0.669'. [ 323.968666][ T9814] FAULT_INJECTION: forcing a failure. [ 323.968666][ T9814] name failslab, interval 1, probability 0, space 0, times 0 [ 324.048679][ T9814] CPU: 1 UID: 0 PID: 9814 Comm: syz.0.677 Not tainted syzkaller #0 PREEMPT(full) [ 324.048700][ T9814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.048708][ T9814] Call Trace: [ 324.048713][ T9814] [ 324.048719][ T9814] dump_stack_lvl+0x16c/0x1f0 [ 324.048740][ T9814] should_fail_ex+0x512/0x640 [ 324.048756][ T9814] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 324.048772][ T9814] should_failslab+0xc2/0x120 [ 324.048790][ T9814] kmem_cache_alloc_noprof+0x75/0x6e0 [ 324.048804][ T9814] ? getname_flags.part.0+0x4c/0x550 [ 324.048827][ T9814] ? getname_flags.part.0+0x4c/0x550 [ 324.048844][ T9814] getname_flags.part.0+0x4c/0x550 [ 324.048871][ T9814] getname_flags+0x93/0xf0 [ 324.048885][ T9814] do_sys_openat2+0xb8/0x1d0 [ 324.048905][ T9814] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.048932][ T9814] __x64_sys_openat+0x174/0x210 [ 324.048952][ T9814] ? __pfx___x64_sys_openat+0x10/0x10 [ 324.048979][ T9814] do_syscall_64+0xcd/0xfa0 [ 324.048996][ T9814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.049011][ T9814] RIP: 0033:0x7f34e638eec9 [ 324.049022][ T9814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.049035][ T9814] RSP: 002b:00007f34e714c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.049048][ T9814] RAX: ffffffffffffffda RBX: 00007f34e65e6090 RCX: 00007f34e638eec9 [ 324.049057][ T9814] RDX: 0000000000648002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 324.049065][ T9814] RBP: 00007f34e6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 324.049073][ T9814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.049081][ T9814] R13: 00007f34e65e6128 R14: 00007f34e65e6090 R15: 00007fffc4ce0028 [ 324.049100][ T9814] [ 325.822383][ T9888] netlink: 'syz.3.683': attribute type 6 has an invalid length. [ 325.847988][ T9888] netlink: 13 bytes leftover after parsing attributes in process `syz.3.683'. [ 326.382290][ T9904] FAULT_INJECTION: forcing a failure. [ 326.382290][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 326.424148][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.2.686 Not tainted syzkaller #0 PREEMPT(full) [ 326.424178][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.424191][ T9904] Call Trace: [ 326.424198][ T9904] [ 326.424206][ T9904] dump_stack_lvl+0x16c/0x1f0 [ 326.424238][ T9904] should_fail_ex+0x512/0x640 [ 326.424266][ T9904] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 326.424292][ T9904] should_failslab+0xc2/0x120 [ 326.424319][ T9904] kmem_cache_alloc_noprof+0x75/0x6e0 [ 326.424338][ T9904] ? alloc_empty_file+0x55/0x1e0 [ 326.424373][ T9904] ? alloc_empty_file+0x55/0x1e0 [ 326.424403][ T9904] alloc_empty_file+0x55/0x1e0 [ 326.424435][ T9904] path_openat+0xda/0x2cb0 [ 326.424470][ T9904] ? __pfx_path_openat+0x10/0x10 [ 326.424506][ T9904] do_filp_open+0x20b/0x470 [ 326.424532][ T9904] ? __pfx_do_filp_open+0x10/0x10 [ 326.424592][ T9904] ? alloc_fd+0x471/0x7d0 [ 326.424626][ T9904] do_sys_openat2+0x11b/0x1d0 [ 326.424665][ T9904] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.424701][ T9904] ? __fget_files+0x20e/0x3c0 [ 326.424732][ T9904] __x64_sys_openat+0x174/0x210 [ 326.424766][ T9904] ? __pfx___x64_sys_openat+0x10/0x10 [ 326.424797][ T9904] ? ksys_write+0x1ac/0x250 [ 326.424836][ T9904] do_syscall_64+0xcd/0xfa0 [ 326.424865][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.424889][ T9904] RIP: 0033:0x7f0efc18eec9 [ 326.424909][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.424930][ T9904] RSP: 002b:00007f0efcfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 326.424953][ T9904] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa0 RCX: 00007f0efc18eec9 [ 326.424969][ T9904] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 326.424985][ T9904] RBP: 00007f0efcfec090 R08: 0000000000000000 R09: 0000000000000000 [ 326.424999][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.425012][ T9904] R13: 00007f0efc3e6038 R14: 00007f0efc3e5fa0 R15: 00007fffbb1e08e8 [ 326.425044][ T9904] [ 327.050223][ T9982] netlink: 342 bytes leftover after parsing attributes in process `syz.0.689'. [ 327.598830][T10021] FAULT_INJECTION: forcing a failure. [ 327.598830][T10021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.650585][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.2.693 Not tainted syzkaller #0 PREEMPT(full) [ 327.650617][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.650630][T10021] Call Trace: [ 327.650638][T10021] [ 327.650647][T10021] dump_stack_lvl+0x16c/0x1f0 [ 327.650680][T10021] should_fail_ex+0x512/0x640 [ 327.650711][T10021] _copy_from_user+0x2e/0xd0 [ 327.650741][T10021] copy_msghdr_from_user+0x98/0x160 [ 327.650768][T10021] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 327.650800][T10021] ? kfree+0x252/0x6d0 [ 327.650832][T10021] ? __lock_acquire+0x62e/0x1ce0 [ 327.650871][T10021] ___sys_recvmsg+0xdb/0x1a0 [ 327.650898][T10021] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.650944][T10021] ? __pfx___might_resched+0x10/0x10 [ 327.650975][T10021] do_recvmmsg+0x2fe/0x750 [ 327.651006][T10021] ? __pfx_do_recvmmsg+0x10/0x10 [ 327.651038][T10021] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 327.651074][T10021] ? __fget_files+0x20e/0x3c0 [ 327.651093][T10021] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 327.651129][T10021] __x64_sys_recvmmsg+0x22a/0x280 [ 327.651160][T10021] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.651207][T10021] do_syscall_64+0xcd/0xfa0 [ 327.651236][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.651259][T10021] RIP: 0033:0x7f0efc18eec9 [ 327.651278][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.651298][T10021] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.651324][T10021] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 327.651340][T10021] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 327.651353][T10021] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 327.651367][T10021] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 327.651380][T10021] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 327.651415][T10021] [ 328.619320][T10092] FAULT_INJECTION: forcing a failure. [ 328.619320][T10092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.651886][T10092] CPU: 0 UID: 0 PID: 10092 Comm: syz.2.697 Not tainted syzkaller #0 PREEMPT(full) [ 328.651918][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 328.651930][T10092] Call Trace: [ 328.651937][T10092] [ 328.651946][T10092] dump_stack_lvl+0x16c/0x1f0 [ 328.651978][T10092] should_fail_ex+0x512/0x640 [ 328.652008][T10092] _copy_from_user+0x2e/0xd0 [ 328.652037][T10092] copy_msghdr_from_user+0x98/0x160 [ 328.652064][T10092] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 328.652098][T10092] ? kfree+0x252/0x6d0 [ 328.652147][T10092] ___sys_recvmsg+0xdb/0x1a0 [ 328.652166][T10092] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.652193][T10092] ? __pfx___might_resched+0x10/0x10 [ 328.652215][T10092] do_recvmmsg+0x2fe/0x750 [ 328.652233][T10092] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.652253][T10092] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 328.652276][T10092] ? __fget_files+0x20e/0x3c0 [ 328.652295][T10092] __x64_sys_recvmmsg+0x22a/0x280 [ 328.652312][T10092] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.652335][T10092] do_syscall_64+0xcd/0xfa0 [ 328.652352][T10092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.652366][T10092] RIP: 0033:0x7f0efc18eec9 [ 328.652380][T10092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.652392][T10092] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.652406][T10092] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 328.652415][T10092] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 328.652422][T10092] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 328.652430][T10092] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 328.652438][T10092] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 328.652457][T10092] [ 330.299949][T10157] FAULT_INJECTION: forcing a failure. [ 330.299949][T10157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.336613][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.3.704 Not tainted syzkaller #0 PREEMPT(full) [ 330.336644][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.336656][T10157] Call Trace: [ 330.336664][T10157] [ 330.336671][T10157] dump_stack_lvl+0x16c/0x1f0 [ 330.336701][T10157] should_fail_ex+0x512/0x640 [ 330.336731][T10157] _copy_from_iter+0x29f/0x1720 [ 330.336769][T10157] ? __alloc_skb+0x200/0x380 [ 330.336793][T10157] ? __pfx__copy_from_iter+0x10/0x10 [ 330.336821][T10157] ? __pfx___might_resched+0x10/0x10 [ 330.336844][T10157] ? __lock_acquire+0xb97/0x1ce0 [ 330.336879][T10157] netlink_sendmsg+0x820/0xdd0 [ 330.336911][T10157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.336946][T10157] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 330.336981][T10157] ____sys_sendmsg+0xa98/0xc70 [ 330.337011][T10157] ? copy_msghdr_from_user+0x10a/0x160 [ 330.337036][T10157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.337071][T10157] ? kfree+0x252/0x6d0 [ 330.337101][T10157] ? __pfx__kstrtoull+0x10/0x10 [ 330.337142][T10157] ___sys_sendmsg+0x134/0x1d0 [ 330.337170][T10157] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.337230][T10157] ? __pfx___might_resched+0x10/0x10 [ 330.337261][T10157] __sys_sendmmsg+0x200/0x420 [ 330.337292][T10157] ? __pfx___sys_sendmmsg+0x10/0x10 [ 330.337331][T10157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 330.337373][T10157] ? fput+0x9b/0xd0 [ 330.337400][T10157] ? ksys_write+0x1ac/0x250 [ 330.337422][T10157] ? __pfx_ksys_write+0x10/0x10 [ 330.337450][T10157] __x64_sys_sendmmsg+0x9c/0x100 [ 330.337476][T10157] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.337502][T10157] do_syscall_64+0xcd/0xfa0 [ 330.337531][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.337554][T10157] RIP: 0033:0x7f56ca38eec9 [ 330.337574][T10157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.337595][T10157] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.337617][T10157] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 330.337630][T10157] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 330.337643][T10157] RBP: 00007f56cb2f3090 R08: 0000000000000000 R09: 0000000000000000 [ 330.337657][T10157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.337671][T10157] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 330.337705][T10157] [ 330.357627][T10166] FAULT_INJECTION: forcing a failure. [ 330.357627][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 330.628816][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.1.703 Not tainted syzkaller #0 PREEMPT(full) [ 330.628851][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 330.628864][T10166] Call Trace: [ 330.628872][T10166] [ 330.628882][T10166] dump_stack_lvl+0x16c/0x1f0 [ 330.628919][T10166] should_fail_ex+0x512/0x640 [ 330.628961][T10166] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 330.628989][T10166] should_failslab+0xc2/0x120 [ 330.629021][T10166] kmem_cache_alloc_noprof+0x75/0x6e0 [ 330.629045][T10166] ? security_file_alloc+0x34/0x2b0 [ 330.629075][T10166] ? security_file_alloc+0x34/0x2b0 [ 330.629096][T10166] security_file_alloc+0x34/0x2b0 [ 330.629120][T10166] init_file+0x93/0x4c0 [ 330.629157][T10166] alloc_empty_file+0x73/0x1e0 [ 330.629191][T10166] path_openat+0xda/0x2cb0 [ 330.629228][T10166] ? __pfx_path_openat+0x10/0x10 [ 330.629263][T10166] do_filp_open+0x20b/0x470 [ 330.629290][T10166] ? __pfx_do_filp_open+0x10/0x10 [ 330.629342][T10166] ? alloc_fd+0x471/0x7d0 [ 330.629376][T10166] do_sys_openat2+0x11b/0x1d0 [ 330.629409][T10166] ? __pfx_do_sys_openat2+0x10/0x10 [ 330.629447][T10166] ? __fget_files+0x20e/0x3c0 [ 330.629477][T10166] __x64_sys_openat+0x174/0x210 [ 330.629511][T10166] ? __pfx___x64_sys_openat+0x10/0x10 [ 330.629543][T10166] ? ksys_write+0x1ac/0x250 [ 330.629581][T10166] do_syscall_64+0xcd/0xfa0 [ 330.629611][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.629643][T10166] RIP: 0033:0x7f537518eec9 [ 330.629663][T10166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.629685][T10166] RSP: 002b:00007f5376087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 330.629708][T10166] RAX: ffffffffffffffda RBX: 00007f53753e6180 RCX: 00007f537518eec9 [ 330.629724][T10166] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 330.629739][T10166] RBP: 00007f5376087090 R08: 0000000000000000 R09: 0000000000000000 [ 330.629753][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.629767][T10166] R13: 00007f53753e6218 R14: 00007f53753e6180 R15: 00007fffde53bf68 [ 330.629803][T10166] [ 332.432283][T10222] syz.0.711 uses obsolete (PF_INET,SOCK_PACKET) [ 334.310367][T10311] capability: warning: `syz.2.718' uses deprecated v2 capabilities in a way that may be insecure [ 334.333259][T10305] FAULT_INJECTION: forcing a failure. [ 334.333259][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 334.345996][T10305] CPU: 1 UID: 0 PID: 10305 Comm: syz.2.718 Not tainted syzkaller #0 PREEMPT(full) [ 334.346030][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 334.346045][T10305] Call Trace: [ 334.346053][T10305] [ 334.346068][T10305] dump_stack_lvl+0x16c/0x1f0 [ 334.346112][T10305] should_fail_ex+0x512/0x640 [ 334.346144][T10305] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 334.346176][T10305] should_failslab+0xc2/0x120 [ 334.346211][T10305] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 334.346239][T10305] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 334.346267][T10305] ? sock_alloc_inode+0x25/0x1c0 [ 334.346307][T10305] ? __pfx_sock_alloc_inode+0x10/0x10 [ 334.346343][T10305] ? sock_alloc_inode+0x25/0x1c0 [ 334.346378][T10305] sock_alloc_inode+0x25/0x1c0 [ 334.346415][T10305] alloc_inode+0x61/0x240 [ 334.346457][T10305] sock_alloc+0x40/0x280 [ 334.346493][T10305] __sock_create+0xc1/0x8d0 [ 334.346539][T10305] smc_create_clcsk+0x37/0xd0 [ 334.346566][T10305] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 334.346601][T10305] inet6_create+0xb30/0x12b0 [ 334.346635][T10305] ? inet6_create+0x7f/0x12b0 [ 334.346670][T10305] __sock_create+0x338/0x8d0 [ 334.346714][T10305] __sys_socket+0x14d/0x260 [ 334.346754][T10305] ? __pfx___sys_socket+0x10/0x10 [ 334.346792][T10305] ? xfd_validate_state+0x61/0x180 [ 334.346828][T10305] ? __pfx___do_sys_prctl+0x10/0x10 [ 334.346875][T10305] __x64_sys_socket+0x72/0xb0 [ 334.346912][T10305] ? lockdep_hardirqs_on+0x7c/0x110 [ 334.346941][T10305] do_syscall_64+0xcd/0xfa0 [ 334.346973][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.347000][T10305] RIP: 0033:0x7f0efc18eec9 [ 334.347021][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.347044][T10305] RSP: 002b:00007f0efcfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 334.347069][T10305] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa0 RCX: 00007f0efc18eec9 [ 334.347085][T10305] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 334.347100][T10305] RBP: 00007f0efc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 334.347115][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.347130][T10305] R13: 00007f0efc3e6038 R14: 00007f0efc3e5fa0 R15: 00007fffbb1e08e8 [ 334.347166][T10305] [ 334.347180][T10305] socket: no more sockets [ 334.930156][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 334.942304][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 335.649234][T10378] netlink: 78 bytes leftover after parsing attributes in process `syz.3.724'. [ 336.442536][T10414] FAULT_INJECTION: forcing a failure. [ 336.442536][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.456027][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.1.727 Not tainted syzkaller #0 PREEMPT(full) [ 336.456047][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.456055][T10414] Call Trace: [ 336.456060][T10414] [ 336.456065][T10414] dump_stack_lvl+0x16c/0x1f0 [ 336.456087][T10414] should_fail_ex+0x512/0x640 [ 336.456107][T10414] _copy_from_user+0x2e/0xd0 [ 336.456125][T10414] copy_msghdr_from_user+0x98/0x160 [ 336.456142][T10414] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 336.456161][T10414] ? kfree+0x252/0x6d0 [ 336.456181][T10414] ? __lock_acquire+0x62e/0x1ce0 [ 336.456203][T10414] ___sys_recvmsg+0xdb/0x1a0 [ 336.456219][T10414] ? __pfx____sys_recvmsg+0x10/0x10 [ 336.456248][T10414] ? __pfx___might_resched+0x10/0x10 [ 336.456267][T10414] do_recvmmsg+0x2fe/0x750 [ 336.456285][T10414] ? __pfx_do_recvmmsg+0x10/0x10 [ 336.456305][T10414] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 336.456328][T10414] ? __fget_files+0x20e/0x3c0 [ 336.456346][T10414] __x64_sys_recvmmsg+0x22a/0x280 [ 336.456366][T10414] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 336.456404][T10414] do_syscall_64+0xcd/0xfa0 [ 336.456432][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.456455][T10414] RIP: 0033:0x7f537518eec9 [ 336.456480][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.456500][T10414] RSP: 002b:00007f53760a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 336.456523][T10414] RAX: ffffffffffffffda RBX: 00007f53753e6090 RCX: 00007f537518eec9 [ 336.456538][T10414] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 336.456552][T10414] RBP: 00007f53760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 336.456566][T10414] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 336.456579][T10414] R13: 00007f53753e6128 R14: 00007f53753e6090 R15: 00007fffde53bf68 [ 336.456614][T10414] [ 336.906973][T10418] FAULT_INJECTION: forcing a failure. [ 336.906973][T10418] name failslab, interval 1, probability 0, space 0, times 0 [ 336.986706][T10418] CPU: 1 UID: 0 PID: 10418 Comm: syz.2.728 Not tainted syzkaller #0 PREEMPT(full) [ 336.986742][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.986757][T10418] Call Trace: [ 336.986767][T10418] [ 336.986777][T10418] dump_stack_lvl+0x16c/0x1f0 [ 336.986804][T10418] should_fail_ex+0x512/0x640 [ 336.986822][T10418] ? fs_reclaim_acquire+0xae/0x150 [ 336.986851][T10418] should_failslab+0xc2/0x120 [ 336.986870][T10418] __kmalloc_noprof+0xdd/0x880 [ 336.986891][T10418] ? lockdep_init_map_type+0x5c/0x280 [ 336.986911][T10418] ? tomoyo_open_control+0x51f/0xa30 [ 336.986931][T10418] ? tomoyo_open_control+0x51f/0xa30 [ 336.986947][T10418] tomoyo_open_control+0x51f/0xa30 [ 336.986967][T10418] do_dentry_open+0x982/0x1530 [ 336.986984][T10418] ? __pfx_tomoyo_open+0x10/0x10 [ 336.987002][T10418] vfs_open+0x82/0x3f0 [ 336.987039][T10418] path_openat+0x1de4/0x2cb0 [ 336.987062][T10418] ? __pfx_path_openat+0x10/0x10 [ 336.987082][T10418] do_filp_open+0x20b/0x470 [ 336.987097][T10418] ? __pfx_do_filp_open+0x10/0x10 [ 336.987125][T10418] ? alloc_fd+0x471/0x7d0 [ 336.987144][T10418] do_sys_openat2+0x11b/0x1d0 [ 336.987164][T10418] ? __pfx_do_sys_openat2+0x10/0x10 [ 336.987191][T10418] __x64_sys_openat+0x174/0x210 [ 336.987217][T10418] ? __pfx___x64_sys_openat+0x10/0x10 [ 336.987245][T10418] do_syscall_64+0xcd/0xfa0 [ 336.987262][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.987277][T10418] RIP: 0033:0x7f0efc18eec9 [ 336.987289][T10418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.987302][T10418] RSP: 002b:00007f0efcfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 336.987315][T10418] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa0 RCX: 00007f0efc18eec9 [ 336.987325][T10418] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 336.987333][T10418] RBP: 00007f0efc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.987342][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.987355][T10418] R13: 00007f0efc3e6038 R14: 00007f0efc3e5fa0 R15: 00007fffbb1e08e8 [ 336.987374][T10418] [ 337.947133][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 337.999133][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 338.937620][T10477] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 339.458416][T10518] FAULT_INJECTION: forcing a failure. [ 339.458416][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 339.471825][T10518] CPU: 1 UID: 0 PID: 10518 Comm: syz.0.741 Not tainted syzkaller #0 PREEMPT(full) [ 339.471856][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.471869][T10518] Call Trace: [ 339.471877][T10518] [ 339.471885][T10518] dump_stack_lvl+0x16c/0x1f0 [ 339.471926][T10518] should_fail_ex+0x512/0x640 [ 339.471961][T10518] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 339.471989][T10518] should_failslab+0xc2/0x120 [ 339.472019][T10518] kmem_cache_alloc_node_noprof+0x78/0x770 [ 339.472043][T10518] ? __alloc_skb+0x2b2/0x380 [ 339.472076][T10518] ? __alloc_skb+0x2b2/0x380 [ 339.472098][T10518] __alloc_skb+0x2b2/0x380 [ 339.472123][T10518] ? __pfx___alloc_skb+0x10/0x10 [ 339.472146][T10518] ? __pfx___mutex_trylock_common+0x10/0x10 [ 339.472182][T10518] ? __pfx___might_resched+0x10/0x10 [ 339.472212][T10518] netlink_dump+0x19b/0xd30 [ 339.472239][T10518] ? __netlink_lookup+0x654/0x900 [ 339.472265][T10518] ? __pfx_netlink_dump+0x10/0x10 [ 339.472312][T10518] __netlink_dump_start+0x6d6/0x990 [ 339.472343][T10518] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 339.472369][T10518] rtnetlink_rcv_msg+0xb3e/0xe90 [ 339.472399][T10518] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 339.472427][T10518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.472451][T10518] ? __pfx_rtnl_dumpit+0x10/0x10 [ 339.472480][T10518] ? __pfx_rtnl_bridge_getlink+0x10/0x10 [ 339.472518][T10518] ? ref_tracker_free+0x37c/0x830 [ 339.472550][T10518] netlink_rcv_skb+0x158/0x420 [ 339.472577][T10518] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 339.472606][T10518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.472647][T10518] ? netlink_deliver_tap+0x1ae/0xd30 [ 339.472678][T10518] netlink_unicast+0x5a7/0x870 [ 339.472708][T10518] ? __pfx_netlink_unicast+0x10/0x10 [ 339.472744][T10518] ? __pfx___might_resched+0x10/0x10 [ 339.472767][T10518] ? __lock_acquire+0xb97/0x1ce0 [ 339.472807][T10518] netlink_sendmsg+0x8c8/0xdd0 [ 339.472838][T10518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.472868][T10518] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 339.472914][T10518] ____sys_sendmsg+0xa98/0xc70 [ 339.472949][T10518] ? copy_msghdr_from_user+0x10a/0x160 [ 339.472975][T10518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.473010][T10518] ? kfree+0x252/0x6d0 [ 339.473041][T10518] ? __pfx__kstrtoull+0x10/0x10 [ 339.473084][T10518] ___sys_sendmsg+0x134/0x1d0 [ 339.473113][T10518] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.473174][T10518] ? __pfx___might_resched+0x10/0x10 [ 339.473205][T10518] __sys_sendmmsg+0x200/0x420 [ 339.473238][T10518] ? __pfx___sys_sendmmsg+0x10/0x10 [ 339.473286][T10518] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 339.473331][T10518] ? fput+0x9b/0xd0 [ 339.473362][T10518] ? ksys_write+0x1ac/0x250 [ 339.473385][T10518] ? __pfx_ksys_write+0x10/0x10 [ 339.473415][T10518] __x64_sys_sendmmsg+0x9c/0x100 [ 339.473440][T10518] ? lockdep_hardirqs_on+0x7c/0x110 [ 339.473462][T10518] do_syscall_64+0xcd/0xfa0 [ 339.473489][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.473514][T10518] RIP: 0033:0x7f34e638eec9 [ 339.473533][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.473554][T10518] RSP: 002b:00007f34e716d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.473577][T10518] RAX: ffffffffffffffda RBX: 00007f34e65e5fa0 RCX: 00007f34e638eec9 [ 339.473592][T10518] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 339.473606][T10518] RBP: 00007f34e716d090 R08: 0000000000000000 R09: 0000000000000000 [ 339.473620][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.473634][T10518] R13: 00007f34e65e6038 R14: 00007f34e65e5fa0 R15: 00007fffc4ce0028 [ 339.473669][T10518] [ 340.258238][T10521] netlink: 78 bytes leftover after parsing attributes in process `syz.2.740'. [ 341.046428][T10550] FAULT_INJECTION: forcing a failure. [ 341.046428][T10550] name fail_futex, interval 1, probability 0, space 0, times 1 [ 341.073904][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.2.745 Not tainted syzkaller #0 PREEMPT(full) [ 341.073936][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.073949][T10550] Call Trace: [ 341.073958][T10550] [ 341.073967][T10550] dump_stack_lvl+0x16c/0x1f0 [ 341.074007][T10550] should_fail_ex+0x512/0x640 [ 341.074041][T10550] get_futex_key+0x1d0/0x1560 [ 341.074075][T10550] ? __pfx_get_futex_key+0x10/0x10 [ 341.074107][T10550] ? __destroy_inode+0x2e4/0x730 [ 341.074136][T10550] ? __pfx_sock_free_inode+0x10/0x10 [ 341.074173][T10550] futex_wake+0xea/0x530 [ 341.074208][T10550] ? __pfx_evict+0x10/0x10 [ 341.074236][T10550] ? __pfx_futex_wake+0x10/0x10 [ 341.074288][T10550] do_futex+0x1e3/0x350 [ 341.074319][T10550] ? __pfx_do_futex+0x10/0x10 [ 341.074346][T10550] ? iput+0x35/0x40 [ 341.074371][T10550] ? __sock_release+0x20b/0x270 [ 341.074408][T10550] __x64_sys_futex+0x1e0/0x4c0 [ 341.074440][T10550] ? __sys_socket+0xac/0x260 [ 341.074474][T10550] ? __pfx___x64_sys_futex+0x10/0x10 [ 341.074505][T10550] ? xfd_validate_state+0x61/0x180 [ 341.074536][T10550] ? __pfx_ksys_write+0x10/0x10 [ 341.074573][T10550] do_syscall_64+0xcd/0xfa0 [ 341.074602][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.074626][T10550] RIP: 0033:0x7f0efc18eec9 [ 341.074646][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.074667][T10550] RSP: 002b:00007f0efcfec0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 341.074690][T10550] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa8 RCX: 00007f0efc18eec9 [ 341.074706][T10550] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0efc3e5fac [ 341.074721][T10550] RBP: 00007f0efc3e5fa0 R08: 00007f0efcfed000 R09: 0000000000000000 [ 341.074735][T10550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 341.074749][T10550] R13: 00007f0efc3e6038 R14: 00007fffbb1e0800 R15: 00007fffbb1e08e8 [ 341.074785][T10550] [ 341.847513][T10576] FAULT_INJECTION: forcing a failure. [ 341.847513][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 341.963228][T10576] CPU: 0 UID: 0 PID: 10576 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(full) [ 341.963254][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.963261][T10576] Call Trace: [ 341.963266][T10576] [ 341.963272][T10576] dump_stack_lvl+0x16c/0x1f0 [ 341.963294][T10576] should_fail_ex+0x512/0x640 [ 341.963311][T10576] ? fs_reclaim_acquire+0xae/0x150 [ 341.963330][T10576] should_failslab+0xc2/0x120 [ 341.963348][T10576] __kmalloc_noprof+0xdd/0x880 [ 341.963370][T10576] ? tomoyo_encode2+0x100/0x3e0 [ 341.963388][T10576] ? tomoyo_encode2+0x100/0x3e0 [ 341.963400][T10576] tomoyo_encode2+0x100/0x3e0 [ 341.963416][T10576] tomoyo_encode+0x29/0x50 [ 341.963429][T10576] tomoyo_realpath_from_path+0x18f/0x6e0 [ 341.963449][T10576] tomoyo_check_open_permission+0x2ab/0x3c0 [ 341.963471][T10576] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 341.963512][T10576] ? do_raw_spin_lock+0x12c/0x2b0 [ 341.963539][T10576] tomoyo_file_open+0x6b/0x90 [ 341.963557][T10576] security_file_open+0x84/0x1e0 [ 341.963571][T10576] do_dentry_open+0x596/0x1530 [ 341.963593][T10576] vfs_open+0x82/0x3f0 [ 341.963618][T10576] path_openat+0x1de4/0x2cb0 [ 341.963649][T10576] ? __pfx_path_openat+0x10/0x10 [ 341.963677][T10576] do_filp_open+0x20b/0x470 [ 341.963698][T10576] ? __pfx_do_filp_open+0x10/0x10 [ 341.963729][T10576] ? alloc_fd+0x471/0x7d0 [ 341.963748][T10576] do_sys_openat2+0x11b/0x1d0 [ 341.963767][T10576] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.963788][T10576] ? __fget_files+0x20e/0x3c0 [ 341.963805][T10576] __x64_sys_openat+0x174/0x210 [ 341.963824][T10576] ? __pfx___x64_sys_openat+0x10/0x10 [ 341.963843][T10576] ? ksys_write+0x1ac/0x250 [ 341.963871][T10576] do_syscall_64+0xcd/0xfa0 [ 341.963889][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.963903][T10576] RIP: 0033:0x7f56ca38eec9 [ 341.963915][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.963927][T10576] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 341.963941][T10576] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 341.963950][T10576] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 341.963958][T10576] RBP: 00007f56cb2f3090 R08: 0000000000000000 R09: 0000000000000000 [ 341.963966][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.963973][T10576] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 341.963993][T10576] [ 341.964011][T10576] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.500174][T10661] input: f¬ as /devices/virtual/input/input10 [ 345.109681][T10738] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:0 is already present [ 346.253126][T10780] capability: warning: `syz.1.761' uses 32-bit capabilities (legacy support in use) [ 346.432741][ T30] audit: type=1800 audit(4294968463.956:8): pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.762" name=03 dev="tmpfs" ino=1026 res=0 errno=0 [ 347.300825][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 347.746353][T10881] FAULT_INJECTION: forcing a failure. [ 347.746353][T10881] name failslab, interval 1, probability 0, space 0, times 0 [ 347.793948][T10881] CPU: 0 UID: 0 PID: 10881 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT(full) [ 347.793979][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.793992][T10881] Call Trace: [ 347.794000][T10881] [ 347.794009][T10881] dump_stack_lvl+0x16c/0x1f0 [ 347.794041][T10881] should_fail_ex+0x512/0x640 [ 347.794078][T10881] ? __kmalloc_cache_noprof+0x5f/0x780 [ 347.794116][T10881] should_failslab+0xc2/0x120 [ 347.794145][T10881] __kmalloc_cache_noprof+0x72/0x780 [ 347.794181][T10881] ? vicodec_open+0xe7/0xf70 [ 347.794213][T10881] ? vicodec_open+0xe7/0xf70 [ 347.794240][T10881] vicodec_open+0xe7/0xf70 [ 347.794266][T10881] ? kobject_get_unless_zero+0x156/0x1e0 [ 347.794300][T10881] v4l2_open+0x1d2/0x5e0 [ 347.794332][T10881] ? __pfx_v4l2_open+0x10/0x10 [ 347.794361][T10881] chrdev_open+0x234/0x6a0 [ 347.794387][T10881] ? __pfx_apparmor_file_open+0x10/0x10 [ 347.794418][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 347.794444][T10881] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 347.794474][T10881] do_dentry_open+0x982/0x1530 [ 347.794501][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 347.794536][T10881] vfs_open+0x82/0x3f0 [ 347.794572][T10881] path_openat+0x1de4/0x2cb0 [ 347.794609][T10881] ? __pfx_path_openat+0x10/0x10 [ 347.794644][T10881] do_filp_open+0x20b/0x470 [ 347.794669][T10881] ? __pfx_do_filp_open+0x10/0x10 [ 347.794722][T10881] ? alloc_fd+0x471/0x7d0 [ 347.794756][T10881] do_sys_openat2+0x11b/0x1d0 [ 347.794788][T10881] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.794825][T10881] ? __fget_files+0x20e/0x3c0 [ 347.794854][T10881] __x64_sys_openat+0x174/0x210 [ 347.794887][T10881] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.794914][T10881] ? ksys_write+0x1ac/0x250 [ 347.794947][T10881] do_syscall_64+0xcd/0xfa0 [ 347.794969][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.794989][T10881] RIP: 0033:0x7f56ca38eec9 [ 347.795008][T10881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.795029][T10881] RSP: 002b:00007f56cb2b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.795058][T10881] RAX: ffffffffffffffda RBX: 00007f56ca5e6180 RCX: 00007f56ca38eec9 [ 347.795074][T10881] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 347.795088][T10881] RBP: 00007f56cb2b1090 R08: 0000000000000000 R09: 0000000000000000 [ 347.795103][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.795116][T10881] R13: 00007f56ca5e6218 R14: 00007f56ca5e6180 R15: 00007fff8dd8d6e8 [ 347.795152][T10881] [ 347.836883][T10885] FAULT_INJECTION: forcing a failure. [ 347.836883][T10885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.089067][T10885] CPU: 1 UID: 0 PID: 10885 Comm: syz.2.770 Not tainted syzkaller #0 PREEMPT(full) [ 348.089097][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.089108][T10885] Call Trace: [ 348.089116][T10885] [ 348.089125][T10885] dump_stack_lvl+0x16c/0x1f0 [ 348.089157][T10885] should_fail_ex+0x512/0x640 [ 348.089189][T10885] _copy_from_user+0x2e/0xd0 [ 348.089227][T10885] copy_msghdr_from_user+0x98/0x160 [ 348.089256][T10885] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 348.089288][T10885] ? kfree+0x252/0x6d0 [ 348.089319][T10885] ? __lock_acquire+0x62e/0x1ce0 [ 348.089350][T10885] ___sys_recvmsg+0xdb/0x1a0 [ 348.089374][T10885] ? __pfx____sys_recvmsg+0x10/0x10 [ 348.089411][T10885] ? __pfx___might_resched+0x10/0x10 [ 348.089443][T10885] do_recvmmsg+0x2fe/0x750 [ 348.089470][T10885] ? __pfx_do_recvmmsg+0x10/0x10 [ 348.089504][T10885] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 348.089541][T10885] ? __fget_files+0x20e/0x3c0 [ 348.089573][T10885] __x64_sys_recvmmsg+0x22a/0x280 [ 348.089603][T10885] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 348.089643][T10885] do_syscall_64+0xcd/0xfa0 [ 348.089672][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.089697][T10885] RIP: 0033:0x7f0efc18eec9 [ 348.089716][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.089738][T10885] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 348.089761][T10885] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 348.089777][T10885] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 348.089791][T10885] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 348.089806][T10885] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 348.089820][T10885] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 348.089855][T10885] [ 349.498755][T10980] FAULT_INJECTION: forcing a failure. [ 349.498755][T10980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.521418][T10980] CPU: 1 UID: 0 PID: 10980 Comm: syz.0.774 Not tainted syzkaller #0 PREEMPT(full) [ 349.521443][T10980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.521451][T10980] Call Trace: [ 349.521457][T10980] [ 349.521462][T10980] dump_stack_lvl+0x16c/0x1f0 [ 349.521483][T10980] should_fail_ex+0x512/0x640 [ 349.521504][T10980] _copy_from_user+0x2e/0xd0 [ 349.521523][T10980] copy_msghdr_from_user+0x98/0x160 [ 349.521540][T10980] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 349.521559][T10980] ? kfree+0x252/0x6d0 [ 349.521579][T10980] ? __lock_acquire+0x62e/0x1ce0 [ 349.521601][T10980] ___sys_recvmsg+0xdb/0x1a0 [ 349.521617][T10980] ? __pfx____sys_recvmsg+0x10/0x10 [ 349.521643][T10980] ? __pfx___might_resched+0x10/0x10 [ 349.521663][T10980] do_recvmmsg+0x2fe/0x750 [ 349.521681][T10980] ? __pfx_do_recvmmsg+0x10/0x10 [ 349.521701][T10980] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 349.521724][T10980] ? __fget_files+0x20e/0x3c0 [ 349.521743][T10980] __x64_sys_recvmmsg+0x22a/0x280 [ 349.521761][T10980] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 349.521783][T10980] do_syscall_64+0xcd/0xfa0 [ 349.521800][T10980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.521814][T10980] RIP: 0033:0x7f34e638eec9 [ 349.521825][T10980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.521838][T10980] RSP: 002b:00007f34e714c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 349.521851][T10980] RAX: ffffffffffffffda RBX: 00007f34e65e6090 RCX: 00007f34e638eec9 [ 349.521860][T10980] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 349.521868][T10980] RBP: 00007f34e714c090 R08: 0000000000000000 R09: 0000000000000000 [ 349.521882][T10980] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 349.521889][T10980] R13: 00007f34e65e6128 R14: 00007f34e65e6090 R15: 00007fffc4ce0028 [ 349.521909][T10980] [ 350.140688][T10991] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:0 is already present [ 350.351311][T10994] process 'syz.0.777' launched '/dev/fd/5/./file0' with NULL argv: empty string added [ 353.217895][T11140] random: crng reseeded on system resumption [ 354.016042][T11161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 354.336201][T11192] FAULT_INJECTION: forcing a failure. [ 354.336201][T11192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.354832][T11192] CPU: 1 UID: 0 PID: 11192 Comm: syz.1.792 Not tainted syzkaller #0 PREEMPT(full) [ 354.354861][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.354874][T11192] Call Trace: [ 354.354882][T11192] [ 354.354891][T11192] dump_stack_lvl+0x16c/0x1f0 [ 354.354921][T11192] should_fail_ex+0x512/0x640 [ 354.354942][T11192] _copy_from_user+0x2e/0xd0 [ 354.354960][T11192] copy_msghdr_from_user+0x98/0x160 [ 354.354978][T11192] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 354.354997][T11192] ? kfree+0x252/0x6d0 [ 354.355017][T11192] ? __lock_acquire+0x62e/0x1ce0 [ 354.355039][T11192] ___sys_recvmsg+0xdb/0x1a0 [ 354.355055][T11192] ? __pfx____sys_recvmsg+0x10/0x10 [ 354.355082][T11192] ? __pfx___might_resched+0x10/0x10 [ 354.355101][T11192] do_recvmmsg+0x2fe/0x750 [ 354.355119][T11192] ? __pfx_do_recvmmsg+0x10/0x10 [ 354.355139][T11192] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 354.355163][T11192] ? __fget_files+0x20e/0x3c0 [ 354.355181][T11192] __x64_sys_recvmmsg+0x22a/0x280 [ 354.355199][T11192] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 354.355221][T11192] do_syscall_64+0xcd/0xfa0 [ 354.355238][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.355252][T11192] RIP: 0033:0x7f537518eec9 [ 354.355264][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.355276][T11192] RSP: 002b:00007f5376087038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 354.355290][T11192] RAX: ffffffffffffffda RBX: 00007f53753e6180 RCX: 00007f537518eec9 [ 354.355299][T11192] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 354.355306][T11192] RBP: 00007f5376087090 R08: 0000000000000000 R09: 0000000000000000 [ 354.355314][T11192] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 354.355322][T11192] R13: 00007f53753e6218 R14: 00007f53753e6180 R15: 00007fffde53bf68 [ 354.355348][T11192] [ 354.360461][T11182] FAULT_INJECTION: forcing a failure. [ 354.360461][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 354.572880][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.2.793 Not tainted syzkaller #0 PREEMPT(full) [ 354.572911][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.572923][T11182] Call Trace: [ 354.572930][T11182] [ 354.572938][T11182] dump_stack_lvl+0x16c/0x1f0 [ 354.572968][T11182] should_fail_ex+0x512/0x640 [ 354.573030][T11182] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 354.573063][T11182] should_failslab+0xc2/0x120 [ 354.573095][T11182] __kvmalloc_node_noprof+0x141/0x9c0 [ 354.573126][T11182] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 354.573170][T11182] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 354.573204][T11182] ? v4l2_ctrl_handler_init_class+0x113/0x350 [ 354.573238][T11182] v4l2_ctrl_handler_init_class+0x201/0x350 [ 354.573278][T11182] vicodec_open+0x18b/0xf70 [ 354.573314][T11182] ? kobject_get_unless_zero+0x156/0x1e0 [ 354.573352][T11182] v4l2_open+0x1d2/0x5e0 [ 354.573385][T11182] ? __pfx_v4l2_open+0x10/0x10 [ 354.573416][T11182] chrdev_open+0x234/0x6a0 [ 354.573444][T11182] ? __pfx_apparmor_file_open+0x10/0x10 [ 354.573477][T11182] ? __pfx_chrdev_open+0x10/0x10 [ 354.573508][T11182] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 354.573544][T11182] do_dentry_open+0x982/0x1530 [ 354.573572][T11182] ? __pfx_chrdev_open+0x10/0x10 [ 354.573608][T11182] vfs_open+0x82/0x3f0 [ 354.573645][T11182] path_openat+0x1de4/0x2cb0 [ 354.573683][T11182] ? __pfx_path_openat+0x10/0x10 [ 354.573720][T11182] do_filp_open+0x20b/0x470 [ 354.573747][T11182] ? __pfx_do_filp_open+0x10/0x10 [ 354.573800][T11182] ? alloc_fd+0x471/0x7d0 [ 354.573835][T11182] do_sys_openat2+0x11b/0x1d0 [ 354.573868][T11182] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.573904][T11182] ? __fget_files+0x20e/0x3c0 [ 354.573933][T11182] __x64_sys_openat+0x174/0x210 [ 354.573967][T11182] ? __pfx___x64_sys_openat+0x10/0x10 [ 354.573999][T11182] ? ksys_write+0x1ac/0x250 [ 354.574038][T11182] do_syscall_64+0xcd/0xfa0 [ 354.574068][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.574093][T11182] RIP: 0033:0x7f0efc18eec9 [ 354.574113][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.574144][T11182] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.574167][T11182] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 354.574183][T11182] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 354.574199][T11182] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 354.574214][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.574228][T11182] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 354.574262][T11182] [ 360.443842][T11528] FAULT_INJECTION: forcing a failure. [ 360.443842][T11528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.462235][T11528] CPU: 0 UID: 0 PID: 11528 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(full) [ 360.462265][T11528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.462279][T11528] Call Trace: [ 360.462286][T11528] [ 360.462294][T11528] dump_stack_lvl+0x16c/0x1f0 [ 360.462325][T11528] should_fail_ex+0x512/0x640 [ 360.462358][T11528] _copy_from_user+0x2e/0xd0 [ 360.462385][T11528] copy_msghdr_from_user+0x98/0x160 [ 360.462412][T11528] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 360.462445][T11528] ? kfree+0x252/0x6d0 [ 360.462475][T11528] ? __lock_acquire+0x62e/0x1ce0 [ 360.462509][T11528] ___sys_recvmsg+0xdb/0x1a0 [ 360.462535][T11528] ? __pfx____sys_recvmsg+0x10/0x10 [ 360.462581][T11528] ? __pfx___might_resched+0x10/0x10 [ 360.462611][T11528] do_recvmmsg+0x2fe/0x750 [ 360.462644][T11528] ? __pfx_do_recvmmsg+0x10/0x10 [ 360.462677][T11528] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 360.462724][T11528] ? __fget_files+0x20e/0x3c0 [ 360.462755][T11528] __x64_sys_recvmmsg+0x22a/0x280 [ 360.462783][T11528] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 360.462820][T11528] do_syscall_64+0xcd/0xfa0 [ 360.462846][T11528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.462861][T11528] RIP: 0033:0x7f56ca38eec9 [ 360.462872][T11528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.462885][T11528] RSP: 002b:00007f56cb2b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 360.462898][T11528] RAX: ffffffffffffffda RBX: 00007f56ca5e6180 RCX: 00007f56ca38eec9 [ 360.462907][T11528] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 360.462915][T11528] RBP: 00007f56cb2b1090 R08: 0000000000000000 R09: 0000000000000000 [ 360.462923][T11528] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 360.462930][T11528] R13: 00007f56ca5e6218 R14: 00007f56ca5e6180 R15: 00007fff8dd8d6e8 [ 360.462952][T11528] [ 360.856267][T11539] random: crng reseeded on system resumption [ 361.125341][ T30] audit: type=1800 audit(4294968478.649:9): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.821" name=03 dev="tmpfs" ino=1157 res=0 errno=0 [ 361.886110][T11613] FAULT_INJECTION: forcing a failure. [ 361.886110][T11613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.899533][T11613] CPU: 0 UID: 0 PID: 11613 Comm: syz.2.823 Not tainted syzkaller #0 PREEMPT(full) [ 361.899563][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.899575][T11613] Call Trace: [ 361.899582][T11613] [ 361.899590][T11613] dump_stack_lvl+0x16c/0x1f0 [ 361.899622][T11613] should_fail_ex+0x512/0x640 [ 361.899654][T11613] _copy_from_user+0x2e/0xd0 [ 361.899688][T11613] copy_msghdr_from_user+0x98/0x160 [ 361.899717][T11613] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.899750][T11613] ? kfree+0x252/0x6d0 [ 361.899782][T11613] ? __lock_acquire+0x62e/0x1ce0 [ 361.899820][T11613] ___sys_recvmsg+0xdb/0x1a0 [ 361.899847][T11613] ? __pfx____sys_recvmsg+0x10/0x10 [ 361.899894][T11613] ? __pfx___might_resched+0x10/0x10 [ 361.899927][T11613] do_recvmmsg+0x2fe/0x750 [ 361.899959][T11613] ? __pfx_do_recvmmsg+0x10/0x10 [ 361.899994][T11613] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 361.900033][T11613] ? __fget_files+0x20e/0x3c0 [ 361.900065][T11613] __x64_sys_recvmmsg+0x22a/0x280 [ 361.900095][T11613] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 361.900135][T11613] do_syscall_64+0xcd/0xfa0 [ 361.900164][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.900188][T11613] RIP: 0033:0x7f0efc18eec9 [ 361.900207][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.900228][T11613] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 361.900251][T11613] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 361.900267][T11613] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 361.900280][T11613] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 361.900294][T11613] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 361.900308][T11613] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 361.900342][T11613] [ 363.277432][ T30] audit: type=1804 audit(4294968480.798:10): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.828" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 365.696107][ T30] audit: type=1804 audit(4294968483.206:11): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.835" name="/newroot/206/file0" dev="tmpfs" ino=1122 res=1 errno=0 [ 365.767776][ T30] audit: type=1804 audit(4294968483.206:12): pid=11699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.835" name="/newroot/206/file0" dev="tmpfs" ino=1122 res=1 errno=0 [ 366.282616][T11730] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 366.321162][ T30] audit: type=1804 audit(4294969506.826:13): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.837" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 366.365837][T11725] netlink: 78 bytes leftover after parsing attributes in process `syz.3.836'. [ 366.375176][T11725] FAULT_INJECTION: forcing a failure. [ 366.375176][T11725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.393771][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043ace800: rx timeout, send abort [ 366.403477][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043acc000: rx timeout, send abort [ 366.412236][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888043ace800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 366.423556][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT(full) [ 366.423589][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.423602][T11725] Call Trace: [ 366.423610][T11725] [ 366.423619][T11725] dump_stack_lvl+0x16c/0x1f0 [ 366.423652][T11725] should_fail_ex+0x512/0x640 [ 366.423684][T11725] _copy_from_user+0x2e/0xd0 [ 366.423714][T11725] move_addr_to_kernel+0x65/0x170 [ 366.423751][T11725] __copy_msghdr+0x386/0x470 [ 366.423778][T11725] copy_msghdr_from_user+0xc1/0x160 [ 366.423804][T11725] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 366.423836][T11725] ? kfree+0x252/0x6d0 [ 366.423866][T11725] ? __pfx__kstrtoull+0x10/0x10 [ 366.423924][T11725] ___sys_sendmsg+0xfe/0x1d0 [ 366.423953][T11725] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.424010][T11725] ? __pfx___might_resched+0x10/0x10 [ 366.424042][T11725] __sys_sendmmsg+0x200/0x420 [ 366.424073][T11725] ? __pfx___sys_sendmmsg+0x10/0x10 [ 366.424111][T11725] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 366.424152][T11725] ? fput+0x9b/0xd0 [ 366.424181][T11725] ? ksys_write+0x1ac/0x250 [ 366.424205][T11725] ? __pfx_ksys_write+0x10/0x10 [ 366.424235][T11725] __x64_sys_sendmmsg+0x9c/0x100 [ 366.424261][T11725] ? lockdep_hardirqs_on+0x7c/0x110 [ 366.424286][T11725] do_syscall_64+0xcd/0xfa0 [ 366.424319][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.424343][T11725] RIP: 0033:0x7f56ca38eec9 [ 366.424361][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.424383][T11725] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.424405][T11725] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 366.424420][T11725] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 366.424434][T11725] RBP: 00007f56cb2f3090 R08: 0000000000000000 R09: 0000000000000000 [ 366.424448][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.424461][T11725] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 366.424494][T11725] [ 366.546551][ T30] audit: type=1804 audit(4294969506.836:14): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.837" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 366.551772][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888043acc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 367.437378][ T30] audit: type=1800 audit(4294969507.955:15): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.842" name=03 dev="tmpfs" ino=1129 res=0 errno=0 [ 367.626729][T11754] FAULT_INJECTION: forcing a failure. [ 367.626729][T11754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.747880][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.1.840 Not tainted syzkaller #0 PREEMPT(full) [ 367.747911][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.747924][T11754] Call Trace: [ 367.747931][T11754] [ 367.747940][T11754] dump_stack_lvl+0x16c/0x1f0 [ 367.747970][T11754] should_fail_ex+0x512/0x640 [ 367.747999][T11754] _copy_from_user+0x2e/0xd0 [ 367.748026][T11754] copy_msghdr_from_user+0x98/0x160 [ 367.748056][T11754] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 367.748089][T11754] ? kfree+0x252/0x6d0 [ 367.748121][T11754] ? __lock_acquire+0x62e/0x1ce0 [ 367.748165][T11754] ___sys_recvmsg+0xdb/0x1a0 [ 367.748195][T11754] ? __pfx____sys_recvmsg+0x10/0x10 [ 367.748242][T11754] ? __pfx___might_resched+0x10/0x10 [ 367.748275][T11754] do_recvmmsg+0x2fe/0x750 [ 367.748308][T11754] ? __pfx_do_recvmmsg+0x10/0x10 [ 367.748343][T11754] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 367.748385][T11754] ? __fget_files+0x20e/0x3c0 [ 367.748412][T11754] __x64_sys_recvmmsg+0x22a/0x280 [ 367.748438][T11754] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 367.748475][T11754] do_syscall_64+0xcd/0xfa0 [ 367.748503][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.748528][T11754] RIP: 0033:0x7f537518eec9 [ 367.748547][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.748570][T11754] RSP: 002b:00007f53760a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 367.748592][T11754] RAX: ffffffffffffffda RBX: 00007f53753e6090 RCX: 00007f537518eec9 [ 367.748609][T11754] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 367.748623][T11754] RBP: 00007f53760a8090 R08: 0000000000000000 R09: 0000000000000000 [ 367.748637][T11754] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 367.748651][T11754] R13: 00007f53753e6128 R14: 00007f53753e6090 R15: 00007fffde53bf68 [ 367.748682][T11754] [ 369.177882][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 369.670116][ T30] audit: type=1804 audit(4294969510.184:16): pid=11802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.848" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 370.004491][ T30] audit: type=1800 audit(4294969510.514:17): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.849" name="lu_gp_id" dev="configfs" ino=30841 res=0 errno=0 [ 372.907911][T11930] netlink: 25 bytes leftover after parsing attributes in process `syz.2.858'. [ 373.457382][T11972] FAULT_INJECTION: forcing a failure. [ 373.457382][T11972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.471268][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.2.862 Not tainted syzkaller #0 PREEMPT(full) [ 373.471297][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.471310][T11972] Call Trace: [ 373.471319][T11972] [ 373.471327][T11972] dump_stack_lvl+0x16c/0x1f0 [ 373.471357][T11972] should_fail_ex+0x512/0x640 [ 373.471387][T11972] _copy_from_user+0x2e/0xd0 [ 373.471413][T11972] copy_msghdr_from_user+0x98/0x160 [ 373.471438][T11972] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 373.471470][T11972] ? kfree+0x252/0x6d0 [ 373.471501][T11972] ? __lock_acquire+0x62e/0x1ce0 [ 373.471540][T11972] ___sys_recvmsg+0xdb/0x1a0 [ 373.471568][T11972] ? __pfx____sys_recvmsg+0x10/0x10 [ 373.471614][T11972] ? __pfx___might_resched+0x10/0x10 [ 373.471646][T11972] do_recvmmsg+0x2fe/0x750 [ 373.471679][T11972] ? __pfx_do_recvmmsg+0x10/0x10 [ 373.471715][T11972] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 373.471754][T11972] ? __fget_files+0x20e/0x3c0 [ 373.471786][T11972] __x64_sys_recvmmsg+0x22a/0x280 [ 373.471817][T11972] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 373.471856][T11972] do_syscall_64+0xcd/0xfa0 [ 373.471885][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.471910][T11972] RIP: 0033:0x7f0efc18eec9 [ 373.471929][T11972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.471951][T11972] RSP: 002b:00007f0efcfcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 373.471975][T11972] RAX: ffffffffffffffda RBX: 00007f0efc3e6090 RCX: 00007f0efc18eec9 [ 373.471991][T11972] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 373.472005][T11972] RBP: 00007f0efcfcb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.472019][T11972] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 373.472033][T11972] R13: 00007f0efc3e6128 R14: 00007f0efc3e6090 R15: 00007fffbb1e08e8 [ 373.472067][T11972] [ 375.746286][T12029] usb usb37: usbfs: process 12029 (syz.1.866) did not claim interface 0 before use [ 377.010295][T12103] FAULT_INJECTION: forcing a failure. [ 377.010295][T12103] name failslab, interval 1, probability 0, space 0, times 0 [ 377.028219][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.1.872 Not tainted syzkaller #0 PREEMPT(full) [ 377.028250][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.028263][T12103] Call Trace: [ 377.028270][T12103] [ 377.028281][T12103] dump_stack_lvl+0x16c/0x1f0 [ 377.028312][T12103] should_fail_ex+0x512/0x640 [ 377.028337][T12103] ? __kmalloc_noprof+0xca/0x880 [ 377.028374][T12103] should_failslab+0xc2/0x120 [ 377.028402][T12103] __kmalloc_noprof+0xdd/0x880 [ 377.028436][T12103] ? handler_new_ref+0x1b0/0xc60 [ 377.028476][T12103] ? handler_new_ref+0x1b0/0xc60 [ 377.028508][T12103] ? handler_new_ref+0x827/0xc60 [ 377.028540][T12103] handler_new_ref+0x1b0/0xc60 [ 377.028584][T12103] v4l2_ctrl_new+0x196c/0x2190 [ 377.028634][T12103] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 377.028681][T12103] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.028740][T12103] v4l2_ctrl_new_std+0x1be/0x290 [ 377.028787][T12103] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 377.028823][T12103] ? rcu_is_watching+0x12/0xc0 [ 377.028848][T12103] ? trace_kmalloc+0x2b/0xd0 [ 377.028874][T12103] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 377.028903][T12103] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 377.028944][T12103] ? media_request_object_init+0x100/0x180 [ 377.028980][T12103] vicodec_open+0x1b2/0xf70 [ 377.029007][T12103] ? kobject_get_unless_zero+0x156/0x1e0 [ 377.029043][T12103] v4l2_open+0x1d2/0x5e0 [ 377.029074][T12103] ? __pfx_v4l2_open+0x10/0x10 [ 377.029105][T12103] chrdev_open+0x234/0x6a0 [ 377.029132][T12103] ? __pfx_apparmor_file_open+0x10/0x10 [ 377.029175][T12103] ? __pfx_chrdev_open+0x10/0x10 [ 377.029205][T12103] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 377.029238][T12103] do_dentry_open+0x982/0x1530 [ 377.029266][T12103] ? __pfx_chrdev_open+0x10/0x10 [ 377.029301][T12103] vfs_open+0x82/0x3f0 [ 377.029336][T12103] path_openat+0x1de4/0x2cb0 [ 377.029374][T12103] ? __pfx_path_openat+0x10/0x10 [ 377.029411][T12103] do_filp_open+0x20b/0x470 [ 377.029433][T12103] ? __pfx_do_filp_open+0x10/0x10 [ 377.029478][T12103] ? alloc_fd+0x471/0x7d0 [ 377.029513][T12103] do_sys_openat2+0x11b/0x1d0 [ 377.029546][T12103] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.029579][T12103] ? __fget_files+0x20e/0x3c0 [ 377.029610][T12103] __x64_sys_openat+0x174/0x210 [ 377.029643][T12103] ? __pfx___x64_sys_openat+0x10/0x10 [ 377.029675][T12103] ? ksys_write+0x1ac/0x250 [ 377.029713][T12103] do_syscall_64+0xcd/0xfa0 [ 377.029741][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.029764][T12103] RIP: 0033:0x7f537518eec9 [ 377.029782][T12103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.029801][T12103] RSP: 002b:00007f5376087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 377.029819][T12103] RAX: ffffffffffffffda RBX: 00007f53753e6180 RCX: 00007f537518eec9 [ 377.029832][T12103] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 377.029845][T12103] RBP: 00007f5376087090 R08: 0000000000000000 R09: 0000000000000000 [ 377.029859][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.029872][T12103] R13: 00007f53753e6218 R14: 00007f53753e6180 R15: 00007fffde53bf68 [ 377.029904][T12103] [ 378.786086][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.793476][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.923870][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz.0.875'. [ 379.338585][T12217] FAULT_INJECTION: forcing a failure. [ 379.338585][T12217] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 379.338637][T12217] CPU: 1 UID: 0 PID: 12217 Comm: syz.1.877 Not tainted syzkaller #0 PREEMPT(full) [ 379.338670][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.338687][T12217] Call Trace: [ 379.338695][T12217] [ 379.338705][T12217] dump_stack_lvl+0x16c/0x1f0 [ 379.338741][T12217] should_fail_ex+0x512/0x640 [ 379.338776][T12217] should_fail_alloc_page+0xe7/0x130 [ 379.338813][T12217] prepare_alloc_pages+0x3c2/0x610 [ 379.338852][T12217] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 379.338882][T12217] ? unwind_get_return_address+0x59/0xa0 [ 379.338920][T12217] ? arch_stack_walk+0xa6/0x100 [ 379.338958][T12217] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.338986][T12217] ? stack_trace_save+0x8e/0xc0 [ 379.339021][T12217] ? __lock_acquire+0xb97/0x1ce0 [ 379.339056][T12217] ? fb_var_to_videomode+0x4c9/0x690 [ 379.339084][T12217] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.339124][T12217] ? policy_nodemask+0xea/0x4e0 [ 379.339160][T12217] alloc_pages_mpol+0x1fb/0x550 [ 379.339192][T12217] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.339223][T12217] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 379.339255][T12217] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.339289][T12217] ___kmalloc_large_node+0xed/0x160 [ 379.339325][T12217] __kmalloc_large_node_noprof+0x1c/0x70 [ 379.339363][T12217] __kmalloc_noprof.cold+0xc/0x62 [ 379.339397][T12217] ? vc_allocate+0x489/0x880 [ 379.339435][T12217] ? vc_allocate+0x489/0x880 [ 379.339467][T12217] vc_allocate+0x489/0x880 [ 379.339502][T12217] ? __pfx_vc_allocate+0x10/0x10 [ 379.339546][T12217] con_install+0xa1/0x600 [ 379.339582][T12217] ? __pfx_con_install+0x10/0x10 [ 379.339621][T12217] ? __pfx_con_install+0x10/0x10 [ 379.339656][T12217] tty_init_dev.part.0+0x9c/0x500 [ 379.339697][T12217] tty_open+0xa4f/0xf90 [ 379.339742][T12217] ? __pfx_tty_open+0x10/0x10 [ 379.339780][T12217] ? chrdev_open+0x58c/0x6a0 [ 379.339816][T12217] ? __pfx_tty_open+0x10/0x10 [ 379.339853][T12217] chrdev_open+0x234/0x6a0 [ 379.339883][T12217] ? __pfx_chrdev_open+0x10/0x10 [ 379.339924][T12217] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 379.339959][T12217] do_dentry_open+0x982/0x1530 [ 379.339987][T12217] ? __pfx_chrdev_open+0x10/0x10 [ 379.340022][T12217] vfs_open+0x82/0x3f0 [ 379.340059][T12217] path_openat+0x1de4/0x2cb0 [ 379.340098][T12217] ? __pfx_path_openat+0x10/0x10 [ 379.340137][T12217] do_filp_open+0x20b/0x470 [ 379.340167][T12217] ? __pfx_do_filp_open+0x10/0x10 [ 379.340224][T12217] ? alloc_fd+0x471/0x7d0 [ 379.340261][T12217] do_sys_openat2+0x11b/0x1d0 [ 379.340297][T12217] ? __pfx_do_sys_openat2+0x10/0x10 [ 379.340348][T12217] __x64_sys_openat+0x174/0x210 [ 379.340381][T12217] ? __pfx___x64_sys_openat+0x10/0x10 [ 379.340409][T12217] do_syscall_64+0xcd/0xfa0 [ 379.340429][T12217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.340443][T12217] RIP: 0033:0x7f537518eec9 [ 379.340456][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.340469][T12217] RSP: 002b:00007f53760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 379.340483][T12217] RAX: ffffffffffffffda RBX: 00007f53753e5fa0 RCX: 00007f537518eec9 [ 379.340493][T12217] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 379.340502][T12217] RBP: 00007f5375211f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.340510][T12217] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 379.340519][T12217] R13: 00007f53753e6038 R14: 00007f53753e5fa0 R15: 00007fffde53bf68 [ 379.340540][T12217] [ 380.921761][T12331] FAULT_INJECTION: forcing a failure. [ 380.921761][T12331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.936140][T12331] CPU: 1 UID: 0 PID: 12331 Comm: syz.2.883 Not tainted syzkaller #0 PREEMPT(full) [ 380.936172][T12331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 380.936186][T12331] Call Trace: [ 380.936194][T12331] [ 380.936203][T12331] dump_stack_lvl+0x16c/0x1f0 [ 380.936236][T12331] should_fail_ex+0x512/0x640 [ 380.936271][T12331] _copy_from_user+0x2e/0xd0 [ 380.936303][T12331] copy_msghdr_from_user+0x98/0x160 [ 380.936332][T12331] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 380.936366][T12331] ? kfree+0x252/0x6d0 [ 380.936403][T12331] ? __lock_acquire+0x62e/0x1ce0 [ 380.936442][T12331] ___sys_recvmsg+0xdb/0x1a0 [ 380.936471][T12331] ? __pfx____sys_recvmsg+0x10/0x10 [ 380.936518][T12331] ? __pfx___might_resched+0x10/0x10 [ 380.936552][T12331] do_recvmmsg+0x2fe/0x750 [ 380.936585][T12331] ? __pfx_do_recvmmsg+0x10/0x10 [ 380.936621][T12331] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 380.936662][T12331] ? __fget_files+0x20e/0x3c0 [ 380.936695][T12331] __x64_sys_recvmmsg+0x22a/0x280 [ 380.936733][T12331] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 380.936774][T12331] do_syscall_64+0xcd/0xfa0 [ 380.936804][T12331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.936828][T12331] RIP: 0033:0x7f0efc18eec9 [ 380.936848][T12331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.936871][T12331] RSP: 002b:00007f0efcfaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 380.936895][T12331] RAX: ffffffffffffffda RBX: 00007f0efc3e6180 RCX: 00007f0efc18eec9 [ 380.936911][T12331] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 380.936926][T12331] RBP: 00007f0efcfaa090 R08: 0000000000000000 R09: 0000000000000000 [ 380.936940][T12331] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 380.936955][T12331] R13: 00007f0efc3e6218 R14: 00007f0efc3e6180 R15: 00007fffbb1e08e8 [ 380.936990][T12331] [ 383.635657][T12482] FAULT_INJECTION: forcing a failure. [ 383.635657][T12482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.682314][T12482] CPU: 1 UID: 0 PID: 12482 Comm: syz.1.893 Not tainted syzkaller #0 PREEMPT(full) [ 383.682347][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 383.682361][T12482] Call Trace: [ 383.682369][T12482] [ 383.682378][T12482] dump_stack_lvl+0x16c/0x1f0 [ 383.682410][T12482] should_fail_ex+0x512/0x640 [ 383.682445][T12482] _copy_from_user+0x2e/0xd0 [ 383.682464][T12482] copy_msghdr_from_user+0x98/0x160 [ 383.682482][T12482] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 383.682501][T12482] ? kfree+0x252/0x6d0 [ 383.682521][T12482] ? __lock_acquire+0x62e/0x1ce0 [ 383.682544][T12482] ___sys_recvmsg+0xdb/0x1a0 [ 383.682560][T12482] ? __pfx____sys_recvmsg+0x10/0x10 [ 383.682587][T12482] ? __pfx___might_resched+0x10/0x10 [ 383.682606][T12482] do_recvmmsg+0x2fe/0x750 [ 383.682625][T12482] ? __pfx_do_recvmmsg+0x10/0x10 [ 383.682645][T12482] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 383.682668][T12482] ? __fget_files+0x20e/0x3c0 [ 383.682686][T12482] __x64_sys_recvmmsg+0x22a/0x280 [ 383.682704][T12482] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 383.682727][T12482] do_syscall_64+0xcd/0xfa0 [ 383.682744][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.682759][T12482] RIP: 0033:0x7f537518eec9 [ 383.682770][T12482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.682783][T12482] RSP: 002b:00007f5376087038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 383.682797][T12482] RAX: ffffffffffffffda RBX: 00007f53753e6180 RCX: 00007f537518eec9 [ 383.682806][T12482] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 383.682814][T12482] RBP: 00007f5376087090 R08: 0000000000000000 R09: 0000000000000000 [ 383.682822][T12482] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 383.682830][T12482] R13: 00007f53753e6218 R14: 00007f53753e6180 R15: 00007fffde53bf68 [ 383.682849][T12482] [ 385.512621][T12600] FAULT_INJECTION: forcing a failure. [ 385.512621][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.533391][T12600] CPU: 0 UID: 0 PID: 12600 Comm: syz.0.904 Not tainted syzkaller #0 PREEMPT(full) [ 385.533412][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.533421][T12600] Call Trace: [ 385.533425][T12600] [ 385.533431][T12600] dump_stack_lvl+0x16c/0x1f0 [ 385.533452][T12600] should_fail_ex+0x512/0x640 [ 385.533472][T12600] _copy_from_user+0x2e/0xd0 [ 385.533491][T12600] copy_msghdr_from_user+0x98/0x160 [ 385.533508][T12600] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 385.533527][T12600] ? kfree+0x252/0x6d0 [ 385.533547][T12600] ? __lock_acquire+0x62e/0x1ce0 [ 385.533570][T12600] ___sys_recvmsg+0xdb/0x1a0 [ 385.533586][T12600] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.533612][T12600] ? __pfx___might_resched+0x10/0x10 [ 385.533631][T12600] do_recvmmsg+0x2fe/0x750 [ 385.533650][T12600] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.533670][T12600] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 385.533694][T12600] ? __fget_files+0x20e/0x3c0 [ 385.533712][T12600] __x64_sys_recvmmsg+0x22a/0x280 [ 385.533730][T12600] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.533752][T12600] do_syscall_64+0xcd/0xfa0 [ 385.533769][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.533783][T12600] RIP: 0033:0x7f34e638eec9 [ 385.533795][T12600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.533808][T12600] RSP: 002b:00007f34e45f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.533821][T12600] RAX: ffffffffffffffda RBX: 00007f34e65e6180 RCX: 00007f34e638eec9 [ 385.533830][T12600] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 385.533839][T12600] RBP: 00007f34e45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 385.533847][T12600] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 385.533855][T12600] R13: 00007f34e65e6218 R14: 00007f34e65e6180 R15: 00007fffc4ce0028 [ 385.533874][T12600] [ 386.505377][T12659] FAULT_INJECTION: forcing a failure. [ 386.505377][T12659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.531363][T12659] CPU: 1 UID: 0 PID: 12659 Comm: syz.0.909 Not tainted syzkaller #0 PREEMPT(full) [ 386.531396][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.531408][T12659] Call Trace: [ 386.531417][T12659] [ 386.531426][T12659] dump_stack_lvl+0x16c/0x1f0 [ 386.531455][T12659] should_fail_ex+0x512/0x640 [ 386.531487][T12659] _copy_from_user+0x2e/0xd0 [ 386.531517][T12659] copy_msghdr_from_user+0x98/0x160 [ 386.531546][T12659] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 386.531580][T12659] ? kfree+0x252/0x6d0 [ 386.531613][T12659] ? __lock_acquire+0x62e/0x1ce0 [ 386.531651][T12659] ___sys_recvmsg+0xdb/0x1a0 [ 386.531680][T12659] ? __pfx____sys_recvmsg+0x10/0x10 [ 386.531728][T12659] ? __pfx___might_resched+0x10/0x10 [ 386.531761][T12659] do_recvmmsg+0x2fe/0x750 [ 386.531795][T12659] ? __pfx_do_recvmmsg+0x10/0x10 [ 386.531831][T12659] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 386.531871][T12659] ? __fget_files+0x20e/0x3c0 [ 386.531954][T12659] __x64_sys_recvmmsg+0x22a/0x280 [ 386.531986][T12659] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 386.532025][T12659] do_syscall_64+0xcd/0xfa0 [ 386.532069][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.532094][T12659] RIP: 0033:0x7f34e638eec9 [ 386.532113][T12659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.532135][T12659] RSP: 002b:00007f34e714c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 386.532164][T12659] RAX: ffffffffffffffda RBX: 00007f34e65e6090 RCX: 00007f34e638eec9 [ 386.532181][T12659] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 386.532253][T12659] RBP: 00007f34e714c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.532267][T12659] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 386.532281][T12659] R13: 00007f34e65e6128 R14: 00007f34e65e6090 R15: 00007fffc4ce0028 [ 386.532317][T12659] [ 387.217192][T12666] netlink: 78 bytes leftover after parsing attributes in process `syz.1.901'. [ 387.320926][T12671] bond0: option lp_interval: invalid value (0) [ 387.330616][T12671] bond0: option lp_interval: allowed values 1 - 2147483647 [ 387.343693][T12671] netlink: 78 bytes leftover after parsing attributes in process `syz.0.903'. [ 387.441155][T12676] random: crng reseeded on system resumption [ 387.650795][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 389.125086][T12771] program syz.1.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.655663][T12777] FAULT_INJECTION: forcing a failure. [ 389.655663][T12777] name failslab, interval 1, probability 0, space 0, times 0 [ 389.682470][T12777] CPU: 1 UID: 0 PID: 12777 Comm: syz.3.911 Not tainted syzkaller #0 PREEMPT(full) [ 389.682498][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.682509][T12777] Call Trace: [ 389.682516][T12777] [ 389.682523][T12777] dump_stack_lvl+0x16c/0x1f0 [ 389.682550][T12777] should_fail_ex+0x512/0x640 [ 389.682571][T12777] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 389.682595][T12777] should_failslab+0xc2/0x120 [ 389.682619][T12777] __kvmalloc_node_noprof+0x141/0x9c0 [ 389.682641][T12777] ? v4l2_ctrl_new+0x982/0x2190 [ 389.682668][T12777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.682702][T12777] ? v4l2_ctrl_new+0x982/0x2190 [ 389.682727][T12777] v4l2_ctrl_new+0x982/0x2190 [ 389.682765][T12777] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 389.682798][T12777] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 389.682833][T12777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.682862][T12777] v4l2_ctrl_new_std+0x1be/0x290 [ 389.682900][T12777] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 389.682927][T12777] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 389.682967][T12777] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 389.683001][T12777] ? media_request_object_init+0x100/0x180 [ 389.683030][T12777] vicodec_open+0x200/0xf70 [ 389.683054][T12777] ? kobject_get_unless_zero+0x156/0x1e0 [ 389.683081][T12777] v4l2_open+0x1d2/0x5e0 [ 389.683106][T12777] ? __pfx_v4l2_open+0x10/0x10 [ 389.683131][T12777] chrdev_open+0x234/0x6a0 [ 389.683153][T12777] ? __pfx_apparmor_file_open+0x10/0x10 [ 389.683180][T12777] ? __pfx_chrdev_open+0x10/0x10 [ 389.683202][T12777] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 389.683234][T12777] do_dentry_open+0x982/0x1530 [ 389.683259][T12777] ? __pfx_chrdev_open+0x10/0x10 [ 389.683290][T12777] vfs_open+0x82/0x3f0 [ 389.683324][T12777] path_openat+0x1de4/0x2cb0 [ 389.683358][T12777] ? __pfx_path_openat+0x10/0x10 [ 389.683390][T12777] do_filp_open+0x20b/0x470 [ 389.683417][T12777] ? __pfx_do_filp_open+0x10/0x10 [ 389.683450][T12777] ? alloc_fd+0x471/0x7d0 [ 389.683470][T12777] do_sys_openat2+0x11b/0x1d0 [ 389.683490][T12777] ? __pfx_do_sys_openat2+0x10/0x10 [ 389.683511][T12777] ? __fget_files+0x20e/0x3c0 [ 389.683531][T12777] __x64_sys_openat+0x174/0x210 [ 389.683552][T12777] ? __pfx___x64_sys_openat+0x10/0x10 [ 389.683571][T12777] ? ksys_write+0x1ac/0x250 [ 389.683592][T12777] do_syscall_64+0xcd/0xfa0 [ 389.683610][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.683626][T12777] RIP: 0033:0x7f56ca38eec9 [ 389.683638][T12777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.683690][T12777] RSP: 002b:00007f56cb2d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 389.683705][T12777] RAX: ffffffffffffffda RBX: 00007f56ca5e6090 RCX: 00007f56ca38eec9 [ 389.683714][T12777] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 389.683722][T12777] RBP: 00007f56cb2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 389.683731][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.683739][T12777] R13: 00007f56ca5e6128 R14: 00007f56ca5e6090 R15: 00007fff8dd8d6e8 [ 389.683759][T12777] [ 391.225664][T12853] FAULT_INJECTION: forcing a failure. [ 391.225664][T12853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.318149][T12853] CPU: 0 UID: 0 PID: 12853 Comm: syz.3.915 Not tainted syzkaller #0 PREEMPT(full) [ 391.318184][T12853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.318198][T12853] Call Trace: [ 391.318207][T12853] [ 391.318216][T12853] dump_stack_lvl+0x16c/0x1f0 [ 391.318250][T12853] should_fail_ex+0x512/0x640 [ 391.318285][T12853] _copy_from_user+0x2e/0xd0 [ 391.318317][T12853] copy_msghdr_from_user+0x98/0x160 [ 391.318347][T12853] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 391.318378][T12853] ? kfree+0x252/0x6d0 [ 391.318412][T12853] ___sys_recvmsg+0xdb/0x1a0 [ 391.318430][T12853] ? __pfx____sys_recvmsg+0x10/0x10 [ 391.318458][T12853] ? __pfx___might_resched+0x10/0x10 [ 391.318478][T12853] do_recvmmsg+0x2fe/0x750 [ 391.318497][T12853] ? __pfx_do_recvmmsg+0x10/0x10 [ 391.318517][T12853] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 391.318540][T12853] ? __fget_files+0x20e/0x3c0 [ 391.318559][T12853] __x64_sys_recvmmsg+0x22a/0x280 [ 391.318577][T12853] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 391.318599][T12853] do_syscall_64+0xcd/0xfa0 [ 391.318616][T12853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.318630][T12853] RIP: 0033:0x7f56ca38eec9 [ 391.318642][T12853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.318655][T12853] RSP: 002b:00007f56cb2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 391.318669][T12853] RAX: ffffffffffffffda RBX: 00007f56ca5e6090 RCX: 00007f56ca38eec9 [ 391.318686][T12853] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 391.318694][T12853] RBP: 00007f56cb2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 391.318702][T12853] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 391.318710][T12853] R13: 00007f56ca5e6128 R14: 00007f56ca5e6090 R15: 00007fff8dd8d6e8 [ 391.318729][T12853] [ 393.250963][T12919] FAULT_INJECTION: forcing a failure. [ 393.250963][T12919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.264713][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz.2.920 Not tainted syzkaller #0 PREEMPT(full) [ 393.264746][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.264760][T12919] Call Trace: [ 393.264768][T12919] [ 393.264778][T12919] dump_stack_lvl+0x16c/0x1f0 [ 393.264811][T12919] should_fail_ex+0x512/0x640 [ 393.264846][T12919] _copy_from_user+0x2e/0xd0 [ 393.264878][T12919] copy_msghdr_from_user+0x98/0x160 [ 393.264908][T12919] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 393.264942][T12919] ? kfree+0x252/0x6d0 [ 393.264987][T12919] ? __lock_acquire+0x62e/0x1ce0 [ 393.265026][T12919] ___sys_recvmsg+0xdb/0x1a0 [ 393.265054][T12919] ? __pfx____sys_recvmsg+0x10/0x10 [ 393.265101][T12919] ? __pfx___might_resched+0x10/0x10 [ 393.265134][T12919] do_recvmmsg+0x2fe/0x750 [ 393.265168][T12919] ? __pfx_do_recvmmsg+0x10/0x10 [ 393.265202][T12919] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 393.265241][T12919] ? __fget_files+0x20e/0x3c0 [ 393.265275][T12919] __x64_sys_recvmmsg+0x22a/0x280 [ 393.265306][T12919] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 393.265345][T12919] do_syscall_64+0xcd/0xfa0 [ 393.265375][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.265400][T12919] RIP: 0033:0x7f0efc18eec9 [ 393.265420][T12919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.265451][T12919] RSP: 002b:00007f0efcfaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 393.265475][T12919] RAX: ffffffffffffffda RBX: 00007f0efc3e6180 RCX: 00007f0efc18eec9 [ 393.265492][T12919] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 393.265506][T12919] RBP: 00007f0efcfaa090 R08: 0000000000000000 R09: 0000000000000000 [ 393.265521][T12919] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 393.265534][T12919] R13: 00007f0efc3e6218 R14: 00007f0efc3e6180 R15: 00007fffbb1e08e8 [ 393.265570][T12919] [ 393.475235][T12914] netlink: ct family unspecified [ 394.038014][T12963] FAULT_INJECTION: forcing a failure. [ 394.038014][T12963] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.038041][T12963] CPU: 0 UID: 0 PID: 12963 Comm: syz.2.922 Not tainted syzkaller #0 PREEMPT(full) [ 394.038059][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.038068][T12963] Call Trace: [ 394.038073][T12963] [ 394.038078][T12963] dump_stack_lvl+0x16c/0x1f0 [ 394.038099][T12963] should_fail_ex+0x512/0x640 [ 394.038121][T12963] should_fail_alloc_page+0xe7/0x130 [ 394.038142][T12963] prepare_alloc_pages+0x3c2/0x610 [ 394.038172][T12963] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 394.038190][T12963] ? unwind_get_return_address+0x59/0xa0 [ 394.038206][T12963] ? arch_stack_walk+0xa6/0x100 [ 394.038227][T12963] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 394.038242][T12963] ? stack_trace_save+0x8e/0xc0 [ 394.038265][T12963] ? __lock_acquire+0xb97/0x1ce0 [ 394.038288][T12963] ? fb_var_to_videomode+0x4c9/0x690 [ 394.038305][T12963] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 394.038329][T12963] ? policy_nodemask+0xea/0x4e0 [ 394.038349][T12963] alloc_pages_mpol+0x1fb/0x550 [ 394.038368][T12963] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 394.038386][T12963] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 394.038408][T12963] ? lockdep_hardirqs_on+0x7c/0x110 [ 394.038440][T12963] ___kmalloc_large_node+0xed/0x160 [ 394.038477][T12963] __kmalloc_large_node_noprof+0x1c/0x70 [ 394.038511][T12963] __kmalloc_noprof.cold+0xc/0x62 [ 394.038545][T12963] ? vc_allocate+0x489/0x880 [ 394.038584][T12963] ? vc_allocate+0x489/0x880 [ 394.038616][T12963] vc_allocate+0x489/0x880 [ 394.038652][T12963] ? __pfx_vc_allocate+0x10/0x10 [ 394.038697][T12963] con_install+0xa1/0x600 [ 394.038733][T12963] ? __pfx_con_install+0x10/0x10 [ 394.038773][T12963] ? __pfx_con_install+0x10/0x10 [ 394.038808][T12963] tty_init_dev.part.0+0x9c/0x500 [ 394.038847][T12963] tty_open+0xa4f/0xf90 [ 394.038890][T12963] ? __pfx_tty_open+0x10/0x10 [ 394.038926][T12963] ? chrdev_open+0x10b/0x6a0 [ 394.038959][T12963] ? __pfx_tty_open+0x10/0x10 [ 394.038994][T12963] chrdev_open+0x234/0x6a0 [ 394.039022][T12963] ? __pfx_apparmor_file_open+0x10/0x10 [ 394.039055][T12963] ? __pfx_chrdev_open+0x10/0x10 [ 394.039085][T12963] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 394.039118][T12963] do_dentry_open+0x982/0x1530 [ 394.039157][T12963] ? __pfx_chrdev_open+0x10/0x10 [ 394.039194][T12963] vfs_open+0x82/0x3f0 [ 394.039233][T12963] path_openat+0x1de4/0x2cb0 [ 394.039272][T12963] ? __pfx_path_openat+0x10/0x10 [ 394.039309][T12963] do_filp_open+0x20b/0x470 [ 394.039336][T12963] ? __pfx_do_filp_open+0x10/0x10 [ 394.039390][T12963] ? alloc_fd+0x471/0x7d0 [ 394.039425][T12963] do_sys_openat2+0x11b/0x1d0 [ 394.039459][T12963] ? __pfx_do_sys_openat2+0x10/0x10 [ 394.039508][T12963] __x64_sys_openat+0x174/0x210 [ 394.039543][T12963] ? __pfx___x64_sys_openat+0x10/0x10 [ 394.039593][T12963] do_syscall_64+0xcd/0xfa0 [ 394.039625][T12963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.039650][T12963] RIP: 0033:0x7f0efc18eec9 [ 394.039670][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.039694][T12963] RSP: 002b:00007f0efcfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 394.039718][T12963] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa0 RCX: 00007f0efc18eec9 [ 394.039736][T12963] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 394.039753][T12963] RBP: 00007f0efc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.039768][T12963] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 394.039784][T12963] R13: 00007f0efc3e6038 R14: 00007f0efc3e5fa0 R15: 00007fffbb1e08e8 [ 394.039821][T12963] [ 395.300727][T13014] FAULT_INJECTION: forcing a failure. [ 395.300727][T13014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.351572][T13014] CPU: 1 UID: 0 PID: 13014 Comm: syz.3.926 Not tainted syzkaller #0 PREEMPT(full) [ 395.351606][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 395.351620][T13014] Call Trace: [ 395.351628][T13014] [ 395.351637][T13014] dump_stack_lvl+0x16c/0x1f0 [ 395.351669][T13014] should_fail_ex+0x512/0x640 [ 395.351700][T13014] _copy_from_user+0x2e/0xd0 [ 395.351732][T13014] copy_msghdr_from_user+0x98/0x160 [ 395.351761][T13014] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 395.351794][T13014] ? kfree+0x252/0x6d0 [ 395.351825][T13014] ? __lock_acquire+0x62e/0x1ce0 [ 395.351863][T13014] ___sys_recvmsg+0xdb/0x1a0 [ 395.351892][T13014] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.351939][T13014] ? __pfx___might_resched+0x10/0x10 [ 395.351980][T13014] do_recvmmsg+0x2fe/0x750 [ 395.352013][T13014] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.352048][T13014] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 395.352089][T13014] ? __fget_files+0x20e/0x3c0 [ 395.352121][T13014] __x64_sys_recvmmsg+0x22a/0x280 [ 395.352156][T13014] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.352195][T13014] do_syscall_64+0xcd/0xfa0 [ 395.352225][T13014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.352249][T13014] RIP: 0033:0x7f56ca38eec9 [ 395.352269][T13014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.352291][T13014] RSP: 002b:00007f56cb2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.352315][T13014] RAX: ffffffffffffffda RBX: 00007f56ca5e6090 RCX: 00007f56ca38eec9 [ 395.352332][T13014] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 395.352346][T13014] RBP: 00007f56cb2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 395.352360][T13014] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 395.352374][T13014] R13: 00007f56ca5e6128 R14: 00007f56ca5e6090 R15: 00007fff8dd8d6e8 [ 395.352409][T13014] [ 395.697731][T13020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.927'. [ 396.177026][T13026] FAULT_INJECTION: forcing a failure. [ 396.177026][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 396.202756][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.3.929 Not tainted syzkaller #0 PREEMPT(full) [ 396.202794][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.202810][T13026] Call Trace: [ 396.202818][T13026] [ 396.202829][T13026] dump_stack_lvl+0x16c/0x1f0 [ 396.202875][T13026] should_fail_ex+0x512/0x640 [ 396.202906][T13026] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 396.202935][T13026] should_failslab+0xc2/0x120 [ 396.202968][T13026] kmem_cache_alloc_noprof+0x75/0x6e0 [ 396.202993][T13026] ? security_file_alloc+0x34/0x2b0 [ 396.203025][T13026] ? security_file_alloc+0x34/0x2b0 [ 396.203049][T13026] security_file_alloc+0x34/0x2b0 [ 396.203074][T13026] init_file+0x93/0x4c0 [ 396.203108][T13026] alloc_empty_file+0x73/0x1e0 [ 396.203144][T13026] dentry_open+0x46/0xd0 [ 396.203181][T13026] vfs_open_tree+0x711/0x910 [ 396.203210][T13026] ? __pfx_vfs_open_tree+0x10/0x10 [ 396.203238][T13026] ? xfd_validate_state+0x61/0x180 [ 396.203271][T13026] ? __pfx_do_writev+0x10/0x10 [ 396.203299][T13026] __x64_sys_open_tree+0x84/0x130 [ 396.203330][T13026] do_syscall_64+0xcd/0xfa0 [ 396.203362][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.203388][T13026] RIP: 0033:0x7f56ca38eec9 [ 396.203409][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.203436][T13026] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 396.203461][T13026] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 396.203478][T13026] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 396.203495][T13026] RBP: 00007f56ca411f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.203511][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.203525][T13026] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 396.203562][T13026] [ 396.220504][T13026] FAULT_INJECTION: forcing a failure. [ 396.220504][T13026] name failslab, interval 1, probability 0, space 0, times 0 [ 396.463973][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.3.929 Not tainted syzkaller #0 PREEMPT(full) [ 396.464003][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 396.464015][T13026] Call Trace: [ 396.464022][T13026] [ 396.464030][T13026] dump_stack_lvl+0x16c/0x1f0 [ 396.464060][T13026] should_fail_ex+0x512/0x640 [ 396.464084][T13026] ? __kmalloc_noprof+0xca/0x880 [ 396.464119][T13026] should_failslab+0xc2/0x120 [ 396.464146][T13026] __kmalloc_noprof+0xdd/0x880 [ 396.464176][T13026] ? __asan_memcpy+0x3c/0x60 [ 396.464194][T13026] ? handler_new_ref+0x1b0/0xc60 [ 396.464230][T13026] ? handler_new_ref+0x1b0/0xc60 [ 396.464258][T13026] handler_new_ref+0x1b0/0xc60 [ 396.464296][T13026] v4l2_ctrl_new+0x196c/0x2190 [ 396.464339][T13026] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 396.464367][T13026] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 396.464406][T13026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.464442][T13026] v4l2_ctrl_new_std+0x1be/0x290 [ 396.464483][T13026] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 396.464512][T13026] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 396.464547][T13026] ? trace_kmalloc+0x2b/0xd0 [ 396.464575][T13026] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 396.464611][T13026] ? media_request_object_init+0x100/0x180 [ 396.464642][T13026] vicodec_open+0x1d9/0xf70 [ 396.464679][T13026] ? kobject_get_unless_zero+0x156/0x1e0 [ 396.464712][T13026] v4l2_open+0x1d2/0x5e0 [ 396.464741][T13026] ? __pfx_v4l2_open+0x10/0x10 [ 396.464767][T13026] chrdev_open+0x234/0x6a0 [ 396.464791][T13026] ? __pfx_apparmor_file_open+0x10/0x10 [ 396.464820][T13026] ? __pfx_chrdev_open+0x10/0x10 [ 396.464846][T13026] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 396.464883][T13026] do_dentry_open+0x982/0x1530 [ 396.464907][T13026] ? __pfx_chrdev_open+0x10/0x10 [ 396.464938][T13026] vfs_open+0x82/0x3f0 [ 396.464970][T13026] path_openat+0x1de4/0x2cb0 [ 396.465004][T13026] ? __pfx_path_openat+0x10/0x10 [ 396.465035][T13026] do_filp_open+0x20b/0x470 [ 396.465059][T13026] ? __pfx_do_filp_open+0x10/0x10 [ 396.465105][T13026] ? alloc_fd+0x471/0x7d0 [ 396.465136][T13026] do_sys_openat2+0x11b/0x1d0 [ 396.465165][T13026] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.465206][T13026] __x64_sys_openat+0x174/0x210 [ 396.465235][T13026] ? __pfx___x64_sys_openat+0x10/0x10 [ 396.465276][T13026] do_syscall_64+0xcd/0xfa0 [ 396.465302][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.465324][T13026] RIP: 0033:0x7f56ca38eec9 [ 396.465343][T13026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.465363][T13026] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.465383][T13026] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 396.465398][T13026] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 396.465411][T13026] RBP: 00007f56ca411f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.465424][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.465436][T13026] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 396.465468][T13026] [ 398.161469][T13091] FAULT_INJECTION: forcing a failure. [ 398.161469][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 398.182839][T13091] CPU: 1 UID: 0 PID: 13091 Comm: syz.2.935 Not tainted syzkaller #0 PREEMPT(full) [ 398.182872][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.182895][T13091] Call Trace: [ 398.182904][T13091] [ 398.182913][T13091] dump_stack_lvl+0x16c/0x1f0 [ 398.182945][T13091] should_fail_ex+0x512/0x640 [ 398.182971][T13091] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 398.183000][T13091] should_failslab+0xc2/0x120 [ 398.183028][T13091] __kvmalloc_node_noprof+0x141/0x9c0 [ 398.183054][T13091] ? v4l2_ctrl_new+0x982/0x2190 [ 398.183085][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.183123][T13091] ? v4l2_ctrl_new+0x982/0x2190 [ 398.183152][T13091] v4l2_ctrl_new+0x982/0x2190 [ 398.183194][T13091] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 398.183232][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.183263][T13091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 398.183299][T13091] v4l2_ctrl_new_std+0x1be/0x290 [ 398.183339][T13091] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 398.183379][T13091] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 398.183415][T13091] ? media_request_object_init+0x100/0x180 [ 398.183445][T13091] vicodec_open+0x2a6/0xf70 [ 398.183470][T13091] ? kobject_get_unless_zero+0x60/0x1e0 [ 398.183502][T13091] v4l2_open+0x1d2/0x5e0 [ 398.183529][T13091] ? __pfx_v4l2_open+0x10/0x10 [ 398.183556][T13091] chrdev_open+0x234/0x6a0 [ 398.183580][T13091] ? __pfx_apparmor_file_open+0x10/0x10 [ 398.183608][T13091] ? __pfx_chrdev_open+0x10/0x10 [ 398.183633][T13091] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 398.183662][T13091] do_dentry_open+0x982/0x1530 [ 398.183685][T13091] ? __pfx_chrdev_open+0x10/0x10 [ 398.183715][T13091] vfs_open+0x82/0x3f0 [ 398.183746][T13091] path_openat+0x1de4/0x2cb0 [ 398.183778][T13091] ? __pfx_path_openat+0x10/0x10 [ 398.183808][T13091] do_filp_open+0x20b/0x470 [ 398.183831][T13091] ? __pfx_do_filp_open+0x10/0x10 [ 398.183874][T13091] ? alloc_fd+0x471/0x7d0 [ 398.183907][T13091] do_sys_openat2+0x11b/0x1d0 [ 398.183936][T13091] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.183967][T13091] ? __fget_files+0x20e/0x3c0 [ 398.183993][T13091] __x64_sys_openat+0x174/0x210 [ 398.184022][T13091] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.184050][T13091] ? ksys_write+0x1ac/0x250 [ 398.184082][T13091] do_syscall_64+0xcd/0xfa0 [ 398.184108][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.184129][T13091] RIP: 0033:0x7f0efc18eec9 [ 398.184181][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.184201][T13091] RSP: 002b:00007f0efcfaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.184221][T13091] RAX: ffffffffffffffda RBX: 00007f0efc3e6180 RCX: 00007f0efc18eec9 [ 398.184235][T13091] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 398.184248][T13091] RBP: 00007f0efcfaa090 R08: 0000000000000000 R09: 0000000000000000 [ 398.184261][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.184273][T13091] R13: 00007f0efc3e6218 R14: 00007f0efc3e6180 R15: 00007fffbb1e08e8 [ 398.184303][T13091] [ 399.399611][T13147] FAULT_INJECTION: forcing a failure. [ 399.399611][T13147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.427172][T13147] CPU: 1 UID: 0 PID: 13147 Comm: syz.3.938 Not tainted syzkaller #0 PREEMPT(full) [ 399.427204][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 399.427216][T13147] Call Trace: [ 399.427224][T13147] [ 399.427233][T13147] dump_stack_lvl+0x16c/0x1f0 [ 399.427265][T13147] should_fail_ex+0x512/0x640 [ 399.427297][T13147] _copy_from_user+0x2e/0xd0 [ 399.427327][T13147] copy_msghdr_from_user+0x98/0x160 [ 399.427356][T13147] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 399.427386][T13147] ? kfree+0x252/0x6d0 [ 399.427418][T13147] ? __lock_acquire+0x62e/0x1ce0 [ 399.427459][T13147] ___sys_recvmsg+0xdb/0x1a0 [ 399.427487][T13147] ? __pfx____sys_recvmsg+0x10/0x10 [ 399.427535][T13147] ? __pfx___might_resched+0x10/0x10 [ 399.427568][T13147] do_recvmmsg+0x2fe/0x750 [ 399.427608][T13147] ? __pfx_do_recvmmsg+0x10/0x10 [ 399.427644][T13147] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 399.427685][T13147] ? __fget_files+0x20e/0x3c0 [ 399.427718][T13147] __x64_sys_recvmmsg+0x22a/0x280 [ 399.427749][T13147] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 399.427789][T13147] do_syscall_64+0xcd/0xfa0 [ 399.427819][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.427843][T13147] RIP: 0033:0x7f56ca38eec9 [ 399.427864][T13147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.427886][T13147] RSP: 002b:00007f56cb2d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 399.427910][T13147] RAX: ffffffffffffffda RBX: 00007f56ca5e6090 RCX: 00007f56ca38eec9 [ 399.427926][T13147] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 399.427939][T13147] RBP: 00007f56cb2d2090 R08: 0000000000000000 R09: 0000000000000000 [ 399.427954][T13147] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 399.427969][T13147] R13: 00007f56ca5e6128 R14: 00007f56ca5e6090 R15: 00007fff8dd8d6e8 [ 399.428002][T13147] [ 399.937190][T13167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 399.961271][T13169] netlink: 78 bytes leftover after parsing attributes in process `syz.1.940'. [ 401.422969][T13221] netlink: 78 bytes leftover after parsing attributes in process `syz.0.948'. [ 402.415577][T13309] [U]  [ 403.030571][T13326] netlink: 78 bytes leftover after parsing attributes in process `syz.2.954'. [ 403.184391][T13286] [U] [ 403.615933][T13340] FAULT_INJECTION: forcing a failure. [ 403.615933][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 403.716568][T13340] CPU: 1 UID: 0 PID: 13340 Comm: syz.2.956 Not tainted syzkaller #0 PREEMPT(full) [ 403.716602][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.716616][T13340] Call Trace: [ 403.716624][T13340] [ 403.716634][T13340] dump_stack_lvl+0x16c/0x1f0 [ 403.716668][T13340] should_fail_ex+0x512/0x640 [ 403.716696][T13340] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 403.716729][T13340] should_failslab+0xc2/0x120 [ 403.716759][T13340] __kvmalloc_node_noprof+0x141/0x9c0 [ 403.716791][T13340] ? v4l2_ctrl_new+0x982/0x2190 [ 403.716823][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.716868][T13340] ? v4l2_ctrl_new+0x982/0x2190 [ 403.716900][T13340] v4l2_ctrl_new+0x982/0x2190 [ 403.716944][T13340] ? kasan_save_track+0x14/0x30 [ 403.716971][T13340] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 403.717003][T13340] ? v4l2_ctrl_new_std+0x1be/0x290 [ 403.717040][T13340] ? __mutex_trylock_common+0xe9/0x250 [ 403.717074][T13340] ? __pfx___mutex_trylock_common+0x10/0x10 [ 403.717106][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.717146][T13340] v4l2_ctrl_new_std+0x1be/0x290 [ 403.717194][T13340] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 403.717235][T13340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.717266][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.717306][T13340] ? __asan_memcpy+0x3c/0x60 [ 403.717329][T13340] ? find_ref+0x20b/0x420 [ 403.717364][T13340] handler_new_ref+0x827/0xc60 [ 403.717410][T13340] v4l2_ctrl_new+0x196c/0x2190 [ 403.717460][T13340] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 403.717504][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.717540][T13340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 403.717580][T13340] v4l2_ctrl_new_std+0x1be/0x290 [ 403.717628][T13340] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 403.717674][T13340] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 403.717712][T13340] ? media_request_object_init+0x100/0x180 [ 403.717746][T13340] vicodec_open+0x2a6/0xf70 [ 403.717773][T13340] ? kobject_get_unless_zero+0x60/0x1e0 [ 403.717807][T13340] v4l2_open+0x1d2/0x5e0 [ 403.717840][T13340] ? __pfx_v4l2_open+0x10/0x10 [ 403.717870][T13340] chrdev_open+0x234/0x6a0 [ 403.717898][T13340] ? __pfx_apparmor_file_open+0x10/0x10 [ 403.717930][T13340] ? __pfx_chrdev_open+0x10/0x10 [ 403.717960][T13340] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 403.717993][T13340] do_dentry_open+0x982/0x1530 [ 403.718021][T13340] ? __pfx_chrdev_open+0x10/0x10 [ 403.718055][T13340] vfs_open+0x82/0x3f0 [ 403.718092][T13340] path_openat+0x1de4/0x2cb0 [ 403.718130][T13340] ? __pfx_path_openat+0x10/0x10 [ 403.718166][T13340] do_filp_open+0x20b/0x470 [ 403.718189][T13340] ? __pfx_do_filp_open+0x10/0x10 [ 403.718242][T13340] ? alloc_fd+0x471/0x7d0 [ 403.718276][T13340] do_sys_openat2+0x11b/0x1d0 [ 403.718315][T13340] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.718352][T13340] ? __fget_files+0x20e/0x3c0 [ 403.718382][T13340] __x64_sys_openat+0x174/0x210 [ 403.718416][T13340] ? __pfx___x64_sys_openat+0x10/0x10 [ 403.718448][T13340] ? ksys_write+0x1ac/0x250 [ 403.718486][T13340] do_syscall_64+0xcd/0xfa0 [ 403.718517][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.718542][T13340] RIP: 0033:0x7f0efc18eec9 [ 403.718562][T13340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.718585][T13340] RSP: 002b:00007f0efcfec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.718608][T13340] RAX: ffffffffffffffda RBX: 00007f0efc3e5fa0 RCX: 00007f0efc18eec9 [ 403.718624][T13340] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 403.718640][T13340] RBP: 00007f0efcfec090 R08: 0000000000000000 R09: 0000000000000000 [ 403.718655][T13340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.718669][T13340] R13: 00007f0efc3e6038 R14: 00007f0efc3e5fa0 R15: 00007fffbb1e08e8 [ 403.718705][T13340] [ 405.129695][T13462] netlink: 78 bytes leftover after parsing attributes in process `syz.1.959'. [ 406.617163][T13513] netlink: 78 bytes leftover after parsing attributes in process `syz.3.965'. [ 407.464601][T13568] FAULT_INJECTION: forcing a failure. [ 407.464601][T13568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 407.509606][T13568] CPU: 0 UID: 0 PID: 13568 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 407.509644][T13568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.509660][T13568] Call Trace: [ 407.509669][T13568] [ 407.509679][T13568] dump_stack_lvl+0x16c/0x1f0 [ 407.509715][T13568] should_fail_ex+0x512/0x640 [ 407.509752][T13568] should_fail_alloc_page+0xe7/0x130 [ 407.509789][T13568] prepare_alloc_pages+0x3c2/0x610 [ 407.509821][T13568] ? rcu_is_watching+0x12/0xc0 [ 407.509851][T13568] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 407.509877][T13568] ? kasan_save_stack+0x33/0x60 [ 407.509906][T13568] ? css_rstat_updated+0x1c2/0x510 [ 407.509944][T13568] ? __pfx_css_rstat_updated+0x10/0x10 [ 407.509978][T13568] ? __lock_acquire+0x62e/0x1ce0 [ 407.510018][T13568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 407.510059][T13568] ? __lock_acquire+0x62e/0x1ce0 [ 407.510095][T13568] ? __lock_acquire+0x62e/0x1ce0 [ 407.510125][T13568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.510167][T13568] ? policy_nodemask+0xea/0x4e0 [ 407.510201][T13568] alloc_pages_mpol+0x1fb/0x550 [ 407.510234][T13568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 407.510269][T13568] ? __lock_acquire+0x62e/0x1ce0 [ 407.510305][T13568] folio_alloc_mpol_noprof+0x36/0x2f0 [ 407.510342][T13568] vma_alloc_folio_noprof+0xed/0x1e0 [ 407.510379][T13568] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 407.510425][T13568] do_pte_missing+0x2202/0x3ba0 [ 407.510462][T13568] ? find_held_lock+0x2b/0x80 [ 407.510497][T13568] __handle_mm_fault+0x1556/0x2aa0 [ 407.510544][T13568] ? __pfx___handle_mm_fault+0x10/0x10 [ 407.510583][T13568] ? __pte_offset_map_lock+0x174/0x310 [ 407.510613][T13568] ? find_held_lock+0x2b/0x80 [ 407.510649][T13568] ? follow_page_pte+0x5cf/0x1390 [ 407.510688][T13568] handle_mm_fault+0x589/0xd10 [ 407.510733][T13568] __get_user_pages+0x54e/0x3530 [ 407.510780][T13568] ? __pfx___get_user_pages+0x10/0x10 [ 407.510824][T13568] populate_vma_page_range+0x267/0x3f0 [ 407.510862][T13568] ? __pfx_populate_vma_page_range+0x10/0x10 [ 407.510894][T13568] ? __pfx_find_vma_intersection+0x10/0x10 [ 407.510935][T13568] ? do_mmap+0x69c/0x1210 [ 407.510970][T13568] __mm_populate+0x1d8/0x380 [ 407.511006][T13568] ? __pfx___mm_populate+0x10/0x10 [ 407.511043][T13568] ? up_write+0x1b2/0x520 [ 407.511081][T13568] vm_mmap_pgoff+0x37f/0x470 [ 407.511116][T13568] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 407.511146][T13568] ? __do_sys_statmount+0xf0/0x1fd0 [ 407.511188][T13568] ? __x64_sys_futex+0x1e0/0x4c0 [ 407.511219][T13568] ? __x64_sys_futex+0x1e9/0x4c0 [ 407.511255][T13568] ksys_mmap_pgoff+0x7d/0x5c0 [ 407.511284][T13568] ? xfd_validate_state+0x61/0x180 [ 407.511323][T13568] __x64_sys_mmap+0x125/0x190 [ 407.511363][T13568] do_syscall_64+0xcd/0xfa0 [ 407.511395][T13568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.511421][T13568] RIP: 0033:0x7f537518eec9 [ 407.511449][T13568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.511476][T13568] RSP: 002b:00007f53760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 407.511501][T13568] RAX: ffffffffffffffda RBX: 00007f53753e5fa0 RCX: 00007f537518eec9 [ 407.511519][T13568] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 407.511535][T13568] RBP: 00007f5375211f91 R08: 0000000000000007 R09: 0000000000028000 [ 407.511551][T13568] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 407.511571][T13568] R13: 00007f53753e6038 R14: 00007f53753e5fa0 R15: 00007fffde53bf68 [ 407.511608][T13568] [ 408.504211][T13578] FAULT_INJECTION: forcing a failure. [ 408.504211][T13578] name failslab, interval 1, probability 0, space 0, times 0 [ 408.539988][T13578] CPU: 1 UID: 0 PID: 13578 Comm: syz.0.970 Not tainted syzkaller #0 PREEMPT(full) [ 408.540017][T13578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 408.540029][T13578] Call Trace: [ 408.540036][T13578] [ 408.540044][T13578] dump_stack_lvl+0x16c/0x1f0 [ 408.540076][T13578] should_fail_ex+0x512/0x640 [ 408.540100][T13578] ? __kmalloc_noprof+0xca/0x880 [ 408.540137][T13578] should_failslab+0xc2/0x120 [ 408.540168][T13578] __kmalloc_noprof+0xdd/0x880 [ 408.540202][T13578] ? __asan_memcpy+0x3c/0x60 [ 408.540222][T13578] ? handler_new_ref+0x1b0/0xc60 [ 408.540262][T13578] ? handler_new_ref+0x1b0/0xc60 [ 408.540292][T13578] handler_new_ref+0x1b0/0xc60 [ 408.540334][T13578] v4l2_ctrl_new+0x196c/0x2190 [ 408.540381][T13578] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 408.540414][T13578] ? v4l2_ctrl_new_std+0x1be/0x290 [ 408.540451][T13578] ? __mutex_trylock_common+0xe9/0x250 [ 408.540486][T13578] ? __pfx___mutex_trylock_common+0x10/0x10 [ 408.540519][T13578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.540562][T13578] v4l2_ctrl_new_std+0x1be/0x290 [ 408.540604][T13578] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 408.540648][T13578] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.540681][T13578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.540719][T13578] ? __asan_memcpy+0x3c/0x60 [ 408.540743][T13578] ? find_ref+0x20b/0x420 [ 408.540777][T13578] handler_new_ref+0x827/0xc60 [ 408.540820][T13578] v4l2_ctrl_new+0x196c/0x2190 [ 408.540878][T13578] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 408.540922][T13578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.540958][T13578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 408.541000][T13578] v4l2_ctrl_new_std+0x1be/0x290 [ 408.541048][T13578] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 408.541095][T13578] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 408.541136][T13578] ? media_request_object_init+0x100/0x180 [ 408.541173][T13578] vicodec_open+0x2a6/0xf70 [ 408.541202][T13578] ? kobject_get_unless_zero+0x60/0x1e0 [ 408.541240][T13578] v4l2_open+0x1d2/0x5e0 [ 408.541272][T13578] ? __pfx_v4l2_open+0x10/0x10 [ 408.541303][T13578] chrdev_open+0x234/0x6a0 [ 408.541331][T13578] ? __pfx_apparmor_file_open+0x10/0x10 [ 408.541364][T13578] ? __pfx_chrdev_open+0x10/0x10 [ 408.541394][T13578] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 408.541428][T13578] do_dentry_open+0x982/0x1530 [ 408.541455][T13578] ? __pfx_chrdev_open+0x10/0x10 [ 408.541490][T13578] vfs_open+0x82/0x3f0 [ 408.541527][T13578] path_openat+0x1de4/0x2cb0 [ 408.541565][T13578] ? __pfx_path_openat+0x10/0x10 [ 408.541600][T13578] do_filp_open+0x20b/0x470 [ 408.541627][T13578] ? __pfx_do_filp_open+0x10/0x10 [ 408.541674][T13578] ? alloc_fd+0x471/0x7d0 [ 408.541708][T13578] do_sys_openat2+0x11b/0x1d0 [ 408.541741][T13578] ? __pfx_do_sys_openat2+0x10/0x10 [ 408.541778][T13578] ? __fget_files+0x20e/0x3c0 [ 408.541808][T13578] __x64_sys_openat+0x174/0x210 [ 408.541846][T13578] ? __pfx___x64_sys_openat+0x10/0x10 [ 408.541876][T13578] ? ksys_write+0x1ac/0x250 [ 408.541915][T13578] do_syscall_64+0xcd/0xfa0 [ 408.541946][T13578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.541970][T13578] RIP: 0033:0x7f34e638eec9 [ 408.541991][T13578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.542014][T13578] RSP: 002b:00007f34e714c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 408.542038][T13578] RAX: ffffffffffffffda RBX: 00007f34e65e6090 RCX: 00007f34e638eec9 [ 408.542054][T13578] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 408.542069][T13578] RBP: 00007f34e714c090 R08: 0000000000000000 R09: 0000000000000000 [ 408.542084][T13578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.542098][T13578] R13: 00007f34e65e6128 R14: 00007f34e65e6090 R15: 00007fffc4ce0028 [ 408.542134][T13578] syzkaller syzkaller login: [ 410.035428][T13693] binder: 13692:13693 ioctl c018620c 0 returned -14 [ 410.171011][T13693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 412.940028][T13781] binder: 13779:13781 ioctl c018620c 0 returned -14 [ 413.035221][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.990'. [ 413.396500][T13818] random: crng reseeded on system resumption [ 413.730229][T13821] Unrecognized hibernate image header format! [ 413.755030][T13821] PM: hibernation: Image mismatch: architecture specific data [ 415.127114][T13894] [U]  [ 415.857844][T13897] [U] [ 416.002800][T13929] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 416.018049][ T5898] Process accounting resumed [ 416.262730][T13963] FAULT_INJECTION: forcing a failure. [ 416.262730][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 416.279042][T13963] CPU: 0 UID: 0 PID: 13963 Comm: syz.3.1002 Not tainted syzkaller #0 PREEMPT(full) [ 416.279073][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 416.279087][T13963] Call Trace: [ 416.279094][T13963] [ 416.279103][T13963] dump_stack_lvl+0x16c/0x1f0 [ 416.279134][T13963] should_fail_ex+0x512/0x640 [ 416.279162][T13963] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 416.279190][T13963] should_failslab+0xc2/0x120 [ 416.279220][T13963] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 416.279245][T13963] ? __d_alloc+0x32/0xae0 [ 416.279277][T13963] ? __d_alloc+0x32/0xae0 [ 416.279300][T13963] __d_alloc+0x32/0xae0 [ 416.279324][T13963] ? stack_trace_save+0x8e/0xc0 [ 416.279355][T13963] d_alloc_parallel+0x111/0x1480 [ 416.279404][T13963] ? __pfx_d_alloc_parallel+0x10/0x10 [ 416.279441][T13963] ? lockdep_init_map_type+0x5c/0x280 [ 416.279475][T13963] ? lockdep_init_map_type+0x5c/0x280 [ 416.279513][T13963] __lookup_slow+0x193/0x460 [ 416.279547][T13963] ? __pfx___lookup_slow+0x10/0x10 [ 416.279603][T13963] ? lookup_fast+0x156/0x610 [ 416.279636][T13963] ? _raw_spin_unlock+0x28/0x50 [ 416.279664][T13963] walk_component+0x353/0x5b0 [ 416.279690][T13963] link_path_walk+0x627/0xe20 [ 416.279725][T13963] path_openat+0x1b0/0x2cb0 [ 416.279762][T13963] ? __pfx_path_openat+0x10/0x10 [ 416.279799][T13963] do_filp_open+0x20b/0x470 [ 416.279825][T13963] ? __pfx_do_filp_open+0x10/0x10 [ 416.279878][T13963] ? alloc_fd+0x471/0x7d0 [ 416.279912][T13963] do_sys_openat2+0x11b/0x1d0 [ 416.279952][T13963] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.279999][T13963] __x64_sys_openat+0x174/0x210 [ 416.280032][T13963] ? __pfx___x64_sys_openat+0x10/0x10 [ 416.280080][T13963] do_syscall_64+0xcd/0xfa0 [ 416.280110][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.280134][T13963] RIP: 0033:0x7f56ca38eec9 [ 416.280154][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.280177][T13963] RSP: 002b:00007f56cb2f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.280200][T13963] RAX: ffffffffffffffda RBX: 00007f56ca5e5fa0 RCX: 00007f56ca38eec9 [ 416.280216][T13963] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 416.280231][T13963] RBP: 00007f56ca411f91 R08: 0000000000000000 R09: 0000000000000000 [ 416.280246][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.280260][T13963] R13: 00007f56ca5e6038 R14: 00007f56ca5e5fa0 R15: 00007fff8dd8d6e8 [ 416.280296][T13963] [ 416.527955][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.665511][T13978] warning: `syz.3.1003' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 416.686089][T14006] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 417.223847][T14034] block nbd8: NBD_DISCONNECT [ 417.630690][T14025] FAULT_INJECTION: forcing a failure. [ 417.630690][T14025] name failslab, interval 1, probability 0, space 0, times 0 [ 417.655997][T14025] CPU: 1 UID: 0 PID: 14025 Comm: syz.0.1004 Not tainted syzkaller #0 PREEMPT(full) [ 417.656017][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 417.656026][T14025] Call Trace: [ 417.656031][T14025] [ 417.656036][T14025] dump_stack_lvl+0x16c/0x1f0 [ 417.656058][T14025] should_fail_ex+0x512/0x640 [ 417.656075][T14025] ? __kmalloc_cache_noprof+0x5f/0x780 [ 417.656100][T14025] should_failslab+0xc2/0x120 [ 417.656118][T14025] __kmalloc_cache_noprof+0x72/0x780 [ 417.656139][T14025] ? __pfx_vicodec_s_ctrl+0x10/0x10 [ 417.656155][T14025] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 417.656177][T14025] ? __pfx_queue_init+0x10/0x10 [ 417.656193][T14025] ? v4l2_m2m_ctx_init+0x4d/0x380 [ 417.656211][T14025] v4l2_m2m_ctx_init+0x4d/0x380 [ 417.656232][T14025] vicodec_open+0xcc0/0xf70 [ 417.656253][T14025] v4l2_open+0x1d2/0x5e0 [ 417.656272][T14025] ? __pfx_v4l2_open+0x10/0x10 [ 417.656290][T14025] chrdev_open+0x234/0x6a0 [ 417.656306][T14025] ? __pfx_apparmor_file_open+0x10/0x10 [ 417.656325][T14025] ? __pfx_chrdev_open+0x10/0x10 [ 417.656342][T14025] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 417.656361][T14025] do_dentry_open+0x982/0x1530 [ 417.656377][T14025] ? __pfx_chrdev_open+0x10/0x10 [ 417.656397][T14025] vfs_open+0x82/0x3f0 [ 417.656419][T14025] path_openat+0x1de4/0x2cb0 [ 417.656440][T14025] ? __pfx_path_openat+0x10/0x10 [ 417.656461][T14025] do_filp_open+0x20b/0x470 [ 417.656476][T14025] ? __pfx_do_filp_open+0x10/0x10 [ 417.656505][T14025] ? alloc_fd+0x471/0x7d0 [ 417.656525][T14025] do_sys_openat2+0x11b/0x1d0 [ 417.656545][T14025] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.656566][T14025] ? __fget_files+0x20e/0x3c0 [ 417.656583][T14025] __x64_sys_openat+0x174/0x210 [ 417.656608][T14025] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.656627][T14025] ? ksys_write+0x1ac/0x250 [ 417.656648][T14025] do_syscall_64+0xcd/0xfa0 [ 417.656666][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.656680][T14025] RIP: 0033:0x7f34e638eec9 [ 417.656692][T14025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.656705][T14025] RSP: 002b:00007f34e716d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.656719][T14025] RAX: ffffffffffffffda RBX: 00007f34e65e5fa0 RCX: 00007f34e638eec9 [ 417.656729][T14025] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 417.656738][T14025] RBP: 00007f34e716d090 R08: 0000000000000000 R09: 0000000000000000 [ 417.656746][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.656754][T14025] R13: 00007f34e65e6038 R14: 00007f34e65e5fa0 R15: 00007fffc4ce0028 [ 417.656774][T14025] [ 418.855163][T14171] FAULT_INJECTION: forcing a failure. [ 418.855163][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 418.925595][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.1.1009 Not tainted syzkaller #0 PREEMPT(full) [ 418.925630][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.925645][T14171] Call Trace: [ 418.925654][T14171] [ 418.925664][T14171] dump_stack_lvl+0x16c/0x1f0 [ 418.925699][T14171] should_fail_ex+0x512/0x640 [ 418.925730][T14171] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 418.925760][T14171] should_failslab+0xc2/0x120 [ 418.925790][T14171] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 418.925813][T14171] ? __pfx___might_resched+0x10/0x10 [ 418.925840][T14171] ? sock_alloc_inode+0x25/0x1c0 [ 418.925881][T14171] ? __pfx_sock_alloc_inode+0x10/0x10 [ 418.925912][T14171] ? sock_alloc_inode+0x25/0x1c0 [ 418.925944][T14171] sock_alloc_inode+0x25/0x1c0 [ 418.925976][T14171] alloc_inode+0x61/0x240 [ 418.926008][T14171] sock_alloc+0x40/0x280 [ 418.926041][T14171] __sock_create+0xc1/0x8d0 [ 418.926083][T14171] __sys_socket+0x14d/0x260 [ 418.926121][T14171] ? __pfx___sys_socket+0x10/0x10 [ 418.926158][T14171] ? xfd_validate_state+0x61/0x180 [ 418.926192][T14171] ? __pfx___do_sys_close_range+0x10/0x10 [ 418.926227][T14171] __x64_sys_socket+0x72/0xb0 [ 418.926262][T14171] ? lockdep_hardirqs_on+0x7c/0x110 [ 418.926290][T14171] do_syscall_64+0xcd/0xfa0 [ 418.926320][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.926346][T14171] RIP: 0033:0x7f537518eec9 [ 418.926367][T14171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.926391][T14171] RSP: 002b:00007f53760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 418.926417][T14171] RAX: ffffffffffffffda RBX: 00007f53753e5fa0 RCX: 00007f537518eec9 [ 418.926435][T14171] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 418.926451][T14171] RBP: 00007f5375211f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.926467][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.926482][T14171] R13: 00007f53753e6038 R14: 00007f53753e5fa0 R15: 00007fffde53bf68 [ 418.926533][T14171] [ 419.137820][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.144369][T14171] socket: no more sockets [ 419.362534][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'. [ 419.880713][T14211] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1012'. [ 420.415394][T14235] ------------[ cut here ]------------ [ 420.421057][T14235] memcpy: detected field-spanning write (size 6) of single field "&entry->id" at kernel/trace/trace.c:7458 (size 4) [ 420.433458][T14235] WARNING: CPU: 0 PID: 14235 at kernel/trace/trace.c:7458 write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.444627][T14235] Modules linked in: [ 420.448627][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.1.1014 Not tainted syzkaller #0 PREEMPT(full) [ 420.458072][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.468287][T14235] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.475558][T14235] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 420.495937][T14235] RSP: 0018:ffffc90017df7b98 EFLAGS: 00010286 [ 420.502404][T14235] RAX: 0000000000000000 RBX: ffff88807fd17014 RCX: ffffc9000c9db000 [ 420.510526][T14235] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 420.518562][T14235] RBP: ffff88807fd17010 R08: 0000000000000001 R09: 0000000000000000 [ 420.526640][T14235] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 420.534675][T14235] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 420.542643][T14235] FS: 00007f53760c96c0(0000) GS:ffff8881249e6000(0000) knlGS:0000000000000000 [ 420.551718][T14235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.558399][T14235] CR2: 0000000000000000 CR3: 000000007fa56000 CR4: 00000000003526f0 [ 420.566483][T14235] Call Trace: [ 420.569776][T14235] [ 420.572703][T14235] tracing_mark_raw_write+0x2da/0x4a0 [ 420.578184][T14235] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 420.584318][T14235] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 420.591022][T14235] vfs_writev+0x5dc/0xde0 [ 420.596128][T14235] ? __pfx_vfs_writev+0x10/0x10 [ 420.601054][T14235] ? kmem_cache_free+0x2d4/0x6c0 [ 420.606115][T14235] ? putname+0x154/0x1a0 [ 420.610412][T14235] ? __fget_files+0x20e/0x3c0 [ 420.615232][T14235] ? do_writev+0x28c/0x340 [ 420.619708][T14235] do_writev+0x28c/0x340 [ 420.624038][T14235] ? __pfx_do_writev+0x10/0x10 [ 420.628808][T14235] do_syscall_64+0xcd/0xfa0 [ 420.633338][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.639276][T14235] RIP: 0033:0x7f537518eec9 [ 420.643843][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.663519][T14235] RSP: 002b:00007f53760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 420.671956][T14235] RAX: ffffffffffffffda RBX: 00007f53753e5fa0 RCX: 00007f537518eec9 [ 420.680003][T14235] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 420.688045][T14235] RBP: 00007f5375211f91 R08: 0000000000000000 R09: 0000000000000000 [ 420.696499][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.704935][T14235] R13: 00007f53753e6038 R14: 00007f53753e5fa0 R15: 00007fffde53bf68 [ 420.712944][T14235] [ 420.716028][T14235] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 420.723301][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.1.1014 Not tainted syzkaller #0 PREEMPT(full) [ 420.732661][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.742703][T14235] Call Trace: [ 420.745976][T14235] [ 420.748894][T14235] dump_stack_lvl+0x3d/0x1f0 [ 420.753484][T14235] vpanic+0x640/0x6f0 [ 420.757475][T14235] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.764003][T14235] panic+0xca/0xd0 [ 420.767720][T14235] ? __pfx_panic+0x10/0x10 [ 420.772142][T14235] check_panic_on_warn+0xab/0xb0 [ 420.777076][T14235] __warn+0xf6/0x3c0 [ 420.780968][T14235] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.787466][T14235] report_bug+0x3c3/0x580 [ 420.791800][T14235] ? write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.798294][T14235] handle_bug+0x184/0x210 [ 420.802622][T14235] exc_invalid_op+0x17/0x50 [ 420.807122][T14235] asm_exc_invalid_op+0x1a/0x20 [ 420.811961][T14235] RIP: 0010:write_raw_marker_to_buffer.isra.0+0x2d4/0x330 [ 420.819081][T14235] Code: ff e8 30 74 fa ff c6 05 b4 7e aa 0e 01 90 b9 04 00 00 00 48 c7 c2 e0 1e 93 8b 4c 89 e6 48 c7 c7 40 1f 93 8b e8 6d fc b8 ff 90 <0f> 0b 90 90 e9 d7 fe ff ff e8 6e 04 62 00 e9 da fd ff ff e8 64 04 [ 420.838681][T14235] RSP: 0018:ffffc90017df7b98 EFLAGS: 00010286 [ 420.844739][T14235] RAX: 0000000000000000 RBX: ffff88807fd17014 RCX: ffffc9000c9db000 [ 420.852692][T14235] RDX: 0000000000080000 RSI: ffffffff817a5e65 RDI: 0000000000000001 [ 420.860647][T14235] RBP: ffff88807fd17010 R08: 0000000000000001 R09: 0000000000000000 [ 420.868605][T14235] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000006 [ 420.876564][T14235] R13: ffff88813ff18c00 R14: 0000000000000000 R15: 0000000000000000 [ 420.884530][T14235] ? __warn_printk+0x1a5/0x350 [ 420.889293][T14235] ? write_raw_marker_to_buffer.isra.0+0x2d3/0x330 [ 420.895797][T14235] tracing_mark_raw_write+0x2da/0x4a0 [ 420.901177][T14235] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 420.907071][T14235] ? __pfx_tracing_mark_raw_write+0x10/0x10 [ 420.912955][T14235] vfs_writev+0x5dc/0xde0 [ 420.917281][T14235] ? __pfx_vfs_writev+0x10/0x10 [ 420.922113][T14235] ? kmem_cache_free+0x2d4/0x6c0 [ 420.927032][T14235] ? putname+0x154/0x1a0 [ 420.931273][T14235] ? __fget_files+0x20e/0x3c0 [ 420.935939][T14235] ? do_writev+0x28c/0x340 [ 420.940334][T14235] do_writev+0x28c/0x340 [ 420.944559][T14235] ? __pfx_do_writev+0x10/0x10 [ 420.949317][T14235] do_syscall_64+0xcd/0xfa0 [ 420.953808][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.959684][T14235] RIP: 0033:0x7f537518eec9 [ 420.964081][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.983669][T14235] RSP: 002b:00007f53760c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 420.992063][T14235] RAX: ffffffffffffffda RBX: 00007f53753e5fa0 RCX: 00007f537518eec9 [ 421.000017][T14235] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 421.007990][T14235] RBP: 00007f5375211f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.015942][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.023894][T14235] R13: 00007f53753e6038 R14: 00007f53753e5fa0 R15: 00007fffde53bf68 [ 421.031862][T14235] [ 421.035126][T14235] Kernel Offset: disabled [ 421.039445][T14235] Rebooting in 86400 seconds..