last executing test programs: 6m7.341961374s ago: executing program 1 (id=1612): prctl$auto(0x7, 0x4, 0xffffffffffffffff, 0xfff, 0x8) (async) r0 = prctl$auto(0x7, 0x4, 0xffffffffffffffff, 0xfff, 0x8) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000000)="7d7de36dc9d5e2f345bc557e383211d32a6875aeb7f3d68d5bd442dada9d5ad276268941893d5ffdf2ccad0fd5b3082f2cc5220c7c9e2e569ee727608528", 0x5, &(0x7f0000000080)={&(0x7f0000000040)="f46348ee6e356fff4a5a073f65a71e45e37e4f2971cc74766e68e399813287471f5abe", 0x5}, 0x6, &(0x7f00000000c0)="32997d6bcc77696181607b6d9fded915f77871ea31612a48a44687ad64a9e5fd374c70c09321c3ad569dc3c01e2988354a59bdf88f6c29673e389606e2584d270888969d697f531ba5b9f7eec1262da39739708c66c29c8876b4310133b41957325ce4bd65acf459799db4cd962fa499b78deced36497b4300b6ad046322a3dc8c5686d927d4260f032838e9b659986e96af644af7a0bcf2299e3d22f12050778a21cb547bec86d7", 0x0, 0x5d2ecb30}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_MODE={0x8, 0x9, 0x9}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x84091) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10808080}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x1a}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xfffffff8}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x2}, @NL80211_ATTR_PMK={0x3e, 0xfe, "1c8a073c0633823803a20f7a465c07c9d97ce2dcc134602a6c676d4525243d196b66955371ab832efa5ce9fd292aa0343b1bc1ecb39dc465e61b"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}]}, 0x7c}}, 0x40000) ioctl$auto_EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000400)=[0x9, 0x7]) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000480), r0) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000480), r0) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x1}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x7}, @HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000000) (async) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x1}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x7}, @HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20000000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'ip6erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x98, r4, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x400}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xa1}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x3}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x98}}, 0x4000890) select$auto(0xff, &(0x7f0000000780)={[0x8, 0x603, 0x0, 0xffff, 0x5, 0x1, 0x7, 0x7fff, 0x4, 0x65, 0x8000, 0x2bf0, 0xffffffffffffff7f, 0x7, 0x5, 0x8]}, &(0x7f0000000800)={[0x6, 0x3, 0x0, 0x8000000000000001, 0x9, 0xd3f8, 0xffffffff, 0x4, 0x9, 0xffffffff, 0x6, 0xc9f8, 0xc, 0x5, 0x7, 0xffffffffffffffff]}, &(0x7f0000000880)={[0x5, 0x7f, 0x4, 0x1, 0x3, 0xf48, 0xd9, 0xa, 0x3, 0xa, 0xb184, 0x5, 0x5, 0x2, 0x0, 0x4c97]}, &(0x7f0000000900)={0x2, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r1) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r7, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010091}, 0x20040000) ioctl$auto_EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000a80)=0x5) (async) ioctl$auto_EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000a80)=0x5) fanotify_mark$auto(r0, 0x800, 0x8, r0, &(0x7f0000000ac0)='./file0\x00') r8 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000b00), 0x102, 0x0) setsockopt$auto(r8, 0x4, 0x3, &(0x7f0000000b40)='MAC80211_HWSIM\x00', 0x101) r9 = memfd_secret$auto(0x4) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r9, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x2ec, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x2}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0xf}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0xa}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x6}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xb33}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x200}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}]}, @ETHTOOL_A_TSCONFIG_TX_TYPES={0x13c, 0x3, 0x0, 0x1, [@generic="e243c7ac5f36430292270cb1e89d9407cfd1b2ac55028486f097441a93fd92fa70cc48e95a234a8917c9df430210a73e06f9fa", @generic="8e0ceca9ad5476d32bf0", @generic="9f781009d16931bcd8688106046cade629b518ae3a71d99b31b3b8b4d61f51e22d22673b89921ee2a4dcd4fe8c27734ac50f18cd11f147cc8e274394a6a2", @generic="2e48119a13e5fc3cc8c249650eafdc040306b4b287e5988b7456c02f99e0754c98a8c612457ab750419ed6fc19527b2a03c926c1121857238912c2c9f72965118c8a3b13204262d4c7afc70d006fcec356c331833a09547da0f080591924a6ee3599a568fbd90361f4b5e6413f196f1ddb79c46ce7a577f289c55bb19507260f7f9d1968ce475605b06e8a91f845df854a", @nested={0x2c, 0xc, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xdd}, @typed={0xa, 0x76, 0x0, 0x0, @str='wlan0\x00'}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}]}, @ETHTOOL_A_TSCONFIG_HWTSTAMP_FLAGS={0x143, 0x5, 0x0, 0x1, [@generic="a9cc6f6b45a063609a05f033a36e6d1f90e1aef1665467f8ee438868c5ec703479b5b491d663d9faa08f0c8bfc50cd6cd98711085c897161dbdbf795007259c7aeba2643974b8578561b1835120b8b92561d5852338959cdc2837fe6f1f77b94b57bee1e3576f1e965e47f77a5c8e5ebdf3dd47909e909338d3d6506a74bc62bcfb583eb1866f10db8", @nested={0x3d, 0x10f, 0x0, 0x1, [@generic="09e9a91d97a53a77bf073476d1664a47f53e17d422370ef4b6", @nested={0x4, 0xff}, @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x129}, @nested={0x4, 0xba}]}, @generic="7a47b7fa7ca66f6772dabbf0e6bd686818123937cc894dbc18f01afaecf93b7732af8a4dab087203f0b9f45d6942a39d169871aa6867b2d1eb3cfd53fd144c6516b3595d77afd4f2c6bd62409495d20810138f68feb3968f9fc043cd620d938e93ac6b20c43bf4d02161cd2969671d33ef16c2397ed6"]}, @ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x5}]}]}, 0x2ec}}, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r9, &(0x7f0000000f00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000bc0)={0x2ec, r4, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x2}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0xf}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0xa}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x6}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0xb33}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x200}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_QUALIFIER={0x8, 0x2, 0x4}]}, @ETHTOOL_A_TSCONFIG_TX_TYPES={0x13c, 0x3, 0x0, 0x1, [@generic="e243c7ac5f36430292270cb1e89d9407cfd1b2ac55028486f097441a93fd92fa70cc48e95a234a8917c9df430210a73e06f9fa", @generic="8e0ceca9ad5476d32bf0", @generic="9f781009d16931bcd8688106046cade629b518ae3a71d99b31b3b8b4d61f51e22d22673b89921ee2a4dcd4fe8c27734ac50f18cd11f147cc8e274394a6a2", @generic="2e48119a13e5fc3cc8c249650eafdc040306b4b287e5988b7456c02f99e0754c98a8c612457ab750419ed6fc19527b2a03c926c1121857238912c2c9f72965118c8a3b13204262d4c7afc70d006fcec356c331833a09547da0f080591924a6ee3599a568fbd90361f4b5e6413f196f1ddb79c46ce7a577f289c55bb19507260f7f9d1968ce475605b06e8a91f845df854a", @nested={0x2c, 0xc, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xdd}, @typed={0xa, 0x76, 0x0, 0x0, @str='wlan0\x00'}, @typed={0xc, 0xbd, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}]}]}, @ETHTOOL_A_TSCONFIG_HWTSTAMP_FLAGS={0x143, 0x5, 0x0, 0x1, [@generic="a9cc6f6b45a063609a05f033a36e6d1f90e1aef1665467f8ee438868c5ec703479b5b491d663d9faa08f0c8bfc50cd6cd98711085c897161dbdbf795007259c7aeba2643974b8578561b1835120b8b92561d5852338959cdc2837fe6f1f77b94b57bee1e3576f1e965e47f77a5c8e5ebdf3dd47909e909338d3d6506a74bc62bcfb583eb1866f10db8", @nested={0x3d, 0x10f, 0x0, 0x1, [@generic="09e9a91d97a53a77bf073476d1664a47f53e17d422370ef4b6", @nested={0x4, 0xff}, @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x129}, @nested={0x4, 0xba}]}, @generic="7a47b7fa7ca66f6772dabbf0e6bd686818123937cc894dbc18f01afaecf93b7732af8a4dab087203f0b9f45d6942a39d169871aa6867b2d1eb3cfd53fd144c6516b3595d77afd4f2c6bd62409495d20810138f68feb3968f9fc043cd620d938e93ac6b20c43bf4d02161cd2969671d33ef16c2397ed6"]}, @ETHTOOL_A_TSCONFIG_HWTSTAMP_PROVIDER={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_TS_HWTSTAMP_PROVIDER_INDEX={0x8, 0x1, 0x5}]}]}, 0x2ec}}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f80), r2) (async) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f80), r2) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xc8, r10, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_PMKID={0x7e, 0x55, "6b8a5712de84ea450f63844c673b95f8429da90905fb48907f10e6062aa207ccd01a582503976392999dbf42743c5a311b35dec9b92192fe0425fea80349f24c0047d6e2c0e404d8af3f5b2cba1cb9524e08033001ac0949a799eaf76887a9414681c50aa536f5546607c35bd60239f7da25da0481f0ad623ba3"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "25f6c0"}, @NL80211_ATTR_PMKR0_NAME={0x25, 0x102, "7feb6aab247d13f71410503a780d660864ca0122a915f8ee4642b01d708b2ca96e"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2400c800}, 0x24000000) r11 = openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ipsec\x00', 0x6200, 0x0) pwrite64$auto(r11, &(0x7f0000001180)='@^)\x00', 0x2, 0x2) (async) pwrite64$auto(r11, &(0x7f0000001180)='@^)\x00', 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001200)={0xd4, r10, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xfffffffe}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x8c, 0xba, "be8ef25acc5cea960a90a687f69179a48ba086f29b36c95fb055363bce5fcb39d42648c5f459b68dd7346d3b95a02868de90e65e45671564d1607d296273b0daef5621e3f13da402f229bd745fa8bd37341b71f81d30c46a732da284a6d83eed960be0a34254f078df69248098abea77ad9c2d9d98d8daf72715058d45490c185eb7e0e8c22e6f74"}]}, 0xd4}}, 0x10) madvise$auto(0x0, 0x76, 0x0) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) (async) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) 6m6.620269345s ago: executing program 1 (id=1614): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/amidi2\x00', 0x600000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/017/001\x00', 0x802, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r4 = socket(0x11, 0x3, 0xe) sendmmsg$auto(r4, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x6, &(0x7f0000000040), 0x7, 0x1000}, 0x5}, 0x44, 0xfd) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c09, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000003200)=""/64, 0x40) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0x189202, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) r8 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto_sg_fops_sg(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="148bac6ad1c112db573f63ed9b36a207bfefc5369b7795b1f7fd033d86d20d2778d2c984c963fc248955e6793bf6efc2c85d60d76514cbcd2a5d23434375404bae454ce8d5106e28d84f351c472131bea837d3358098d5464d1340ac86b66c038a89897c61ba3f5b2648e747d783700e27f78066455745a74476c5f20303ef37c254ba9ea91100a29eac385d08103bd4", @ANYRES16=0x0, @ANYBLOB="0e002dbd7000fcdbdf25030000000500040009000000050014008d00000006001c000500000006001a004e210000"], 0x34}}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) ioctl$auto_FS_IOC_GETFSUUID(r8, 0x80111500, 0x8) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 6m4.744551714s ago: executing program 1 (id=1627): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = socket(0x1a, 0x800, 0xfffffffe) (async, rerun: 64) socket(0xa, 0x1, 0x84) setresuid$auto(0x2, 0x7, 0x8080) (async) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) (async) connect$auto(r0, &(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x5) mmap$auto(0x0, 0x10000, 0x4000000000df, 0x20000000040eb1, 0x401, 0x300000000000) (async) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=0x0, 0x0, 0x0, 0x2) (async) shutdown$auto(0x200000003, 0x2) 6m4.47202208s ago: executing program 1 (id=1630): madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)=0x425792c7) mprotect$auto(0x200000000000, 0x806124, 0x8) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) epoll_pwait2$auto(0x1, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r2, &(0x7f00000000c0)='r\x02', 0x2fb) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "386ea25c05200a8c522883de50158eec17952e4c04417e2b5ed7097a9515b757"}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x8104) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) sendmsg$auto_L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1802", @ANYRES16=r1], 0x218}, 0x1, 0x0, 0x0, 0x4080}, 0x4000040) madvise$auto(0x0, 0x2003ec, 0x14) 6m4.226795159s ago: executing program 1 (id=1633): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x20100, 0x0) r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r2, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800fedbdf250300000008000200000000", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYRES32=r0], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x2, 0x8, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x3419c0c5) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @ipv4=@local}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x63, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6m2.543877261s ago: executing program 1 (id=1640): sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd, 0x7}, 0x3) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d05, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r0, &(0x7f00000000c0)=""/62, 0x3e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r2) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1311, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) set_mempolicy$auto(0x2ae5, &(0x7f0000000100)=0x100000001, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) 5m46.971004302s ago: executing program 32 (id=1640): sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_map_fd, 0x7}, 0x3) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181842, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x43403d05, 0x0) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r0, &(0x7f00000000c0)=""/62, 0x3e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), r2) sendmsg$auto_L2TP_CMD_SESSION_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1311, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) set_mempolicy$auto(0x2ae5, &(0x7f0000000100)=0x100000001, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) 23.163292137s ago: executing program 2 (id=2843): mmap$auto(0x0, 0x7ff, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x7ff, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x620801, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x7, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) 22.722188388s ago: executing program 2 (id=2848): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ip6_vti0/operstate\x00', 0xc0400, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) read$auto(r0, 0x0, 0x1) madvise$auto(0x5, 0x4, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r1, r2, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) fanotify_init$auto(0x6, 0x1) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) select$auto(0x6, 0x0, &(0x7f0000001200)={[0x9, 0x90f, 0x0, 0x10001, 0x0, 0x9, 0x9, 0x7000000000, 0x0, 0x10001, 0x7, 0x7, 0x9, 0x2, 0x5, 0x401]}, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub5/status\x00', 0x8100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setpriority$auto(0x2, 0x0, 0x80000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 20.717492897s ago: executing program 2 (id=2860): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x8, 0x5, 0xffff0054, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000380), 0x88403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc005}, 0x4) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0xa, 0x8) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffff, 0x19) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r1, 0x40, &(0x7f0000000040)='#\x00', &(0x7f0000000240)="62f5745c5dcb0888ac988edb684bc13ebda5e9d187ba235e1399896c384051ac6863f4838239a4dc983dc4fcbcaf22eae294b5474892ffe54cd89ba8cc7ffdb83ecf2913afe9dc3d42c841538a3cba0359298f2bd6346f2679cc4c4fbb89490ed80295", 0x1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r3, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x5, @_sigchld={r3, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/workqueue/raid5wq/power/runtime_status\x00', 0x2000, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') 17.339246383s ago: executing program 2 (id=2871): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x40, &(0x7f0000000000)='\x15!\xa8^J/\xdd\x01\x00\x00\x80\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xc6\nNF\xa1l\xaa\v.\xe4\xda\xc4\xef\xff(i\xc6@\xbf\xff\xff\x1fj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xfe\xff\xff\a\xdf\xe2\xf5\xdc6]\xf0JQq\x00\x04\x17\xe3\x00\x00>\xa3S\x0e\xca\x81\xdfw\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xcc+MJ\xcb\f', 0x420b5bf1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (rerun: 64) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000140)='\t', 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/ueagle_atm/parameters/cmv_file\x00', 0x82942, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) sendfile$auto(r1, r2, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_OVS_METER_CMD_SET(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000340)=ANY=[@ANYBLOB="ba3ff1007bcbb1abe0b1be564eb3188dc1496488ae8ded6687ff97f7e9eab29ecf52a595ae9f6bb7717c08ce95b914628f3b5132f08f2bffc355e19d2fad3068fe3e9e17b120153220587331a55fc1a9539d7c483ddfa37222d7b2bf53f149103ea42217aed1c36f6e7dda6fb5cb7d9a0b773caf", @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf2502000000040002000c00048008002980040001800800010005000000"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) (async) sendmsg$auto_OVS_METER_CMD_FEATURES(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000030c0)={0x43c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xe}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xe}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x5}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x81}, @OVS_METER_ATTR_MAX_BANDS={0x8, 0x8, 0x18}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}, @OVS_METER_ATTR_BANDS={0x3ec, 0x4, 0x0, 0x1, [@typed={0x4, 0x9f}, @nested={0x31b, 0x30, 0x0, 0x1, [@generic="61a966e41a9f2dc3756934b0c532998367a23ee3ffe78467bf9e40434c96f7327a8f87bf27175a7acfba00fe3f550a6463b44714796e5c103fe5c5a0", @generic="e05d4d197f961aa287e4fd4d69799314e170674315ff9af6870539d5dff910b49263bc87877aac9b4e6a17194dd8faf85532b7d55bd42791a155e7af02fc112952db1cbcc70fe721bd0d58bc442c33fab489b2d875cfb6d46be13ad84dbabbcb25d465d8b4579de57accc11454e36d2378275c09704dddeabc60635ae951133e0be8f49b937e1069602b84bce83400cc0cd41ba4bf9dccfe6e7f5329112f9bfdc77ba940db44c136bb67ca6002492500e15ae25b890e55b48faaeeba39b108753c788da99311f2fe8aee6a147058e647897c84d501400ebf13a4ce4ca42bf5a89fb120a28c1bb5c8385793", @generic="2a36bd4045b1192de9f956089bc392abe639762b2e2bf72128751ca988d52aedc647f26c40b1dccde8f9a1f8875b08766f871dda4ba0f21104a6a9b739a841b1ba3cc98b93c8a9348e67ff104fd5213e9a949c0f541096d68e69266a147165254bf4a50bc0a3116a68bf14aa", @typed={0xaf, 0x18, 0x0, 0x0, @binary="274f6375ae48e4e7aa65281f5b0951a151eba6d6b8fafc82d0644cbd192e0ef118d3e9a2560e419374829c076a821e608d5ba8f2bedc1a7e1c60784614c4f96ec4ce5fec9b7d80d84f792b5e7a544ee3b7b87c5678d894a5309065bbd9ae242d682a435012ac43e8a499a4446e212fa65032856d9e7c68d12833659d4e6b588b8f2916a09345c8f97a3e7a87079d9a9da9dce271c78807e06d6583afd5853d7c93cd06bb43a66b8bfdcdc3"}, @nested={0x4, 0xc0}, @typed={0x8, 0xb2, 0x0, 0x0, @u32}, @typed={0x41, 0x143, 0x0, 0x0, @fd=r2}, @typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}, @generic="0b2fb5ccbd112c51f2243f392b0cf0a312f7cbcf79b239848288392d23bc80b16024436fbefc774a67ecb09a07a5a00c6804f3afb2f252b5883aa89241c0b0460082ec9f6838936f903f631652a4db6ee517ec1ef1d7ce08cf38ed15cb98654fffa6ada65649a5adb452e0b6183ac8b079cdd03ae5fc0dcc8c9ad609b698e08dcb842da225ea4ed0993538c37e8b8fd2d4ee6ea29f4874a543d7243b1b69c60be35327d02e438f75", @nested={0x4, 0xc5}]}, @generic="0cbd2a3acc268288406d4c1ca8048b765752fdaf9834d8aedac5d4408b7f2d71d465db3b0e503d57d06216e3b0a50f62a44a56a2cec3f9f3b7e91f0e662efb0b2c81d9bae511d27ea3f8fcb0c029257c4e89b27b4f4831e059a39204039892a4010d2225aee82a6e00413f01cf13cf237b4a31c96638eb0966f42afac602de3096e5286fa5b05b3e263249468e620a98d17e21aae61a5b71e711ea5cde9e2f3451cd7f11b886cf3bfe8a7605f3142bfcc1b20e76bfb5b37455f58b3ef30bd6d4", @typed={0x8, 0x29, 0x0, 0x0, @u32=0x9}]}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0x80001) (async, rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 64) read$auto_proc_pid_maps_operations_internal(r8, &(0x7f00000020c0)=""/4093, 0xffd) (async, rerun: 32) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r9 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r9, 0x29, 0x20, 0x0, 0x8002) (async, rerun: 64) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r9) (rerun: 64) 16.038914301s ago: executing program 2 (id=2876): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x10100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010037bd7000ffdbdf251000002396dbf5fe798bdcf1b5e06ee16a5a21122c2e3fa63323957e4c000c00018048000100", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)=@batch={0xd6e9, 0x7, 0x7, 0x8000000000000001, 0x3, r4, 0x6, 0x4}, 0xb) socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r6 = open$dir(&(0x7f0000000180)='}[,&*}\x00', 0x400a83, 0x10) utimensat$auto(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4, 0x9}, 0xfffffeff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000004d40), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r7, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000328bd7000fedbdf2502000000080001000602276b8d62339177b36f4501d257dbcaaadd94b98210534fda65aac376d66de45ca4586864dce2de860cbd33d9872c46bdc1e90859cdd8a94c01390aa98ba2a9a293700530ef58433732c75b7d", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm0p/sub3/hw_params\x00', 0x204100, 0x0) 15.621770044s ago: executing program 2 (id=2880): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x20000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0xbd, 0x100000004, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) r5 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r6) sendmsg$auto_NFC_CMD_DISABLE_SE(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0xc08, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40814) sendmsg$auto_NFC_CMD_GET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1028, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xfd}]}, 0x1028}, 0x1, 0x0, 0x0, 0x41}, 0x4044011) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, &(0x7f0000000000)='^{\x00', 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000336bd7000fedb"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000001525369cd2612cd1d5e3dfe76b7f13cde845537cef2f65b6c54b31107988956771b9a96021c33aff7a2a610", @ANYRES16=0x0, @ANYBLOB="010328bd7000ffdbdf252a000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 5.974253738s ago: executing program 4 (id=2905): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) setresuid$auto(r1, r2, r1) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x84d, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0xa400, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x40102, 0x1a00) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) shmget$auto(0x9cf, 0x1, 0x0) 4.666655752s ago: executing program 0 (id=2908): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r1, @ANYRES64=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x24064000}, 0x24000070) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mknod$auto(0x0, 0x1003, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0xff, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r3, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) open$dir(0x0, 0x201, 0x14) 3.702380022s ago: executing program 4 (id=2910): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, 0x0, 0x81) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 3.544975998s ago: executing program 4 (id=2911): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) ioctl$auto_TIOCGETD2(r2, 0x5424, &(0x7f0000000080)="694d69ed0844015dd83d75183e0d6d88db890bf9d1bd997240a6351bd5358174c0af9c0760351ba0") close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x74cc630b, r4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r5, 0x8000) ioctl$auto_BLKRRPART(r5, 0x125f, 0x0) madvise$auto(0x0, 0x40004f, 0xe) r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r6, &(0x7f0000001100)=""/4096, 0x1000) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000081, 0x402, 0x5}]}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) lseek$auto(r0, 0x8, 0x3) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2.777690276s ago: executing program 3 (id=2914): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x4642c0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vicodec.0/power/runtime_status\x00', 0x81f00, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080028bd7000ffdbdf252f000000050022000100000050377acc5fd5f90b31e58030ec000765ad27843ee13c4fab511c6c346ceb1f9165770c317d1a414d85da38eb15a06d415ef02998239e9906f6b9bf00bb6fc750cbcb5cacafde2781292162f18ec8673ba610a4e468b39d45f92c2c7fbf73881113f7e057cde2be65af95040ef3f60bb43ca6b1adf1f8df7830b36b39de01593065e5200754e52a49f3b4432af196d0e3a641d0f41ca89cd50490868b3542c7"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004080) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x1000) read$auto(r1, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x517002, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x80000000) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x7ffe) socket(0x2, 0x2, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x202, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) ioctl$auto_BLKSECTGET2(r5, 0x1267, 0x0) setsockopt$auto_SO_DEBUG(r5, 0x9, 0x1, &(0x7f0000000000)='/dev/tty45\x00', 0x40) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/ram1/queue/write_zeroes_max_bytes\x00', 0xa0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000003c0)=""/137, 0x89) madvise$auto(0x10002, 0x7ffffffffffffffb, 0x4) open_tree$auto(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x2, 0x0) syz_clone(0x20212011, 0x0, 0x0, 0x0, 0x0, 0x0) 2.344872817s ago: executing program 3 (id=2915): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x402200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7e4a58eec679c659}, 0xd085) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400001e"], 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x9, 0x4e, 0xffffffffffffffff, 0x80100001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0x1ae3, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r3, 0x3, &(0x7f0000000000)={{0x6, 0x7}, {0x0, 0xa2b}}, 0x0) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3b, 0x0, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0xf08f, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000440)='/devDa\xde\xea\x1b\x8cF,\x90\'b\xbc\xbdw#\xd8\\(\xc2\x8e\xe3\x18)\"QE%\xd3F6\xf9\xba\x0e2\v\x9d\xb3s\xa32\xe5H\x01\xb0\xa6\xc3\xd1|\x89\xf5~3\x01\xa5\xa8\xec\xf2\xec\xe7\xaf6n\x94\xb5\x18?VF+\x90T\x14\x95\x9eA2/\xc6\x9f\xc1\x8c\x99)\xd0\x01\x93X\xd8?\xfc\x05\xf1w\x18\xe3SK\xd0\xa6\x818h\xcc\xcb\xe0\x7fV\x86\x80c\x1e\x97\b}\x87i\xfe\xec\x18\xb7\xa0b\xedX\x97z\x81Z\xa4\x85\x0fR\x06\x93\xe9$\x9a\xe3Q\xa7\xfa\xeb\b\xc5\xa8\x8e\xe4\xec\x18\xff\xdeZ{\xa0\x12ofT\'\x19{\xd1V\xea\xba)Bs3\x87f\xbe\x1c\xc5|9\x8a}\x1f\xf80U\vL\x90\x05\x14\x9f\xc6\xf1\x80\x90K|\xa3e\x8a\xa8\xecio\x16\xf3\xbd\xb4:x\x14h\xf4\x8d\x84\xe7.)>\"\xfcm\x90\xdb\xbf\x14+C\xb6K\x06\r\x99\xa1\x02E\xe1^U\xd4Qh;\xc1\x96\xb0?\xc0\x96\xb3:\xa9R\xd4\xb3\x03\fZ\xc0\xd5\xec\xab3\x99\xbd\x10Z~\xaf0\x9fl\xe7\xc7\xbc\xf6-\xd9\xd9F\x9f\x830d\xd1Kx\xb8P\xe6\x93\x19\xd3E\x92\x7f\xe9\xa29\xc8\xbd\xeeT\\G\xbd\xa5\xf5\xcbvP\x9ap\xd66\xe4\xbex\xc8\\\x02\xb1\x8d\xdc\xa9\x9f{:\x9a\xcf\xbbE\xd7r\x15o\"\xf9\xe0u\x12\xa11\x1b\x98^\xd5\x83!', 0x10000027d5) r5 = socket(0x2a, 0x2, 0x6) bind$auto(r5, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x1, 0x3, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) write$auto(0x3, 0x0, 0x6) 2.319859972s ago: executing program 0 (id=2916): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/trace/act_mask\x00', 0x0, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (rerun: 64) socket(0x23, 0x5, 0x0) (async) socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setsockopt$auto(0x1, 0x1, 0xa, &(0x7f0000000000)='\xe1', 0xbb) (async) ioctl$auto(0x1, 0x541b, 0x8) (async) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f00000004c0)="eb3a", 0x2) 2.074067725s ago: executing program 0 (id=2917): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x8) 2.071187075s ago: executing program 3 (id=2918): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x42e00, 0x0) socket(0x2a, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={r0, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) shmctl$auto_IPC_INFO(0x28, 0x3, 0x0) read$auto_proc_auxv_operations_base(0xffffffffffffffff, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(0xffffffffffffffff, 0x409, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000180)='\xa1\x00\x16\x12\xf8\x98\x00\x00\x00\x00I}T\x99\xb4\xd8S]\xbb\f\xdaY\xae\xf1\xa2\x98s3\xfe@\v\xc2\x90X\x81\xa3r\xfdH\xb2\x0f\x01\xfb\xf4\x84\xbd\xf8\xe9+>e?&\x1c\xd2kj7\xba\xe6\xd3zkL\xa8s\x8ccT=\xac\'\x00\x00n\xf3\x8f\x1d9+\x04\x85\x9b\x8f\x1f\x0e\xeb%\xd4l\xfcfQ=\x10z%\x16Y\xc9\xe5\x9c\xe2\x1c\xdd+\x1e\xde\x0f\x9deB\xb3\xb2\xed\xa2:H\'', 0x4) sendfile$auto(r1, r1, 0x0, 0x2) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x485, 0x0, &(0x7f0000000040)=0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) msync$auto(0x7, 0x72, 0x81) sendfile$auto(r3, r3, 0x0, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40841, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x8000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x0) 1.230601171s ago: executing program 0 (id=2919): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, 0x0, 0x81) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 1.132022s ago: executing program 0 (id=2920): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x108000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xeb, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x40000000007) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x3, 0x5, 0x7ff) timer_create$auto(0x0, &(0x7f0000000140)={@sival_ptr=0x0, @inferred, 0x1}, &(0x7f0000000200)=0x1000004) timer_settime$auto(0x0, 0x8, &(0x7f0000000040)={{0x0, 0xd3}, {0x1000}}, &(0x7f0000000100)={{0xa04, 0x4}, {0x9000, 0x7ff}}) sysinfo$auto(&(0x7f0000000140)={0x7, [0x6, 0x10, 0x1], 0xde, 0x7f, 0xa63, 0xe, 0x3d3, 0x2eeb, 0x5, 0x0, 0x6, 0xfffffffffffffff2, 0xe}) sendto$auto(r0, 0x0, 0x7ff, 0x800000, &(0x7f0000000440)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x20) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x0, 0x0) readv$auto(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0x40}, 0x6) unshare$auto(0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x41, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x23, 0xeb1, 0xfffffffffffffffa, 0x8040) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0xa, 0x0, &(0x7f0000000000)=0x7ffe) prctl$auto(0x41, 0x1, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xca, 0x0, 0x0, 0x0, 0x5, 0xa501}, 0x800}, 0x6, 0x4048) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa) io_uring_setup$auto(0x6, 0x0) 1.111100519s ago: executing program 4 (id=2921): openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = signalfd$auto(r0, 0x0, 0x8) r2 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) pwrite64$auto(r2, 0x0, 0x98f, 0x3) (async) ioctl$auto(r2, 0x4, 0xffffffffffffffff) (async) r3 = socket(0x2, 0x1, 0x106) (async) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = socket(0x11, 0x3, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xf, 0x5, 0x0) (async) socket(0xa, 0x2, 0x0) (async) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) msgctl$auto_IPC_INFO(0xfffffff3, 0x3, &(0x7f0000000200)={{0x1, 0xee01, 0xee00, 0x3, 0x9, 0x2, 0x5}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0x6, 0x3, 0xc1d3, 0x0, 0x0, 0x9, 0x6, 0x9, 0xfffd}) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000340)={{0xffffffff, 0x0, 0xee01, 0x8, 0x9, 0x9, 0x10}, &(0x7f0000000280)=0x3, &(0x7f0000000300)=0xca, 0xffffffffffffffc0, 0x7fffffffffffffff, 0x7, 0x4, 0x1, 0x54a, 0xb3, 0x7, @raw=0xfffffd39, @raw=0x3}) shmctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000540)={{0xbb7, r6, r7, 0x100, 0x9, 0xae, 0xff00}, 0x6, 0x3f, 0xfffffffffffffff9, 0x1, @raw=0x10000, @raw=0x2, 0x7ff, 0x0, &(0x7f00000003c0)="3100c1658ee0d23080149b2d9bf68f712959e1ff658731ecdca018dca8d9d518cb535c94d9c6a1a66c5727ef710c8b6a9df5ef22e3e73c1cf11b7e6fa486d517201fa7758c99f18012bc124b05b46cfee72c185879fe37be5532d10463ed7bd4684d6d86a7925e873e409e7f31309705b15de724678af66c0b27b7e0d0694b5176f8e9d156bb0802", &(0x7f0000000480)="c40d9b430646c8426ac863feba38c5d7019e1da4210771c7a869dd9f477a6c4b2ba29e95a85ee1df5068752a8e68f9b9291ebf9053d9d2c3be40be5af5a51ff72219023d4a681de9b38f5225ef6125e1eb626e22c2840e31dc419fae60154d60abff836e11ea9dadb1429e9e96bc0f6f56315f8ace55516b9b66acb54e5acd680f85810d5b253f9c2956a3"}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) socketpair$auto(0x1, 0x10, 0xff0c, &(0x7f00000000c0)=0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async) r8 = socket(0x10, 0x2, 0x4) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) mmap$auto(0x100000001, 0x5b, 0x7, 0x16, r4, 0x5) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r5, @ANYRES8=r5], 0x18}}, 0x2000c082) (async) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r9, 0x0, 0x8, 0xffff) (async) ioctl$auto_MEMERASE64(r1, 0x40104d14, &(0x7f00000005c0)={0xc14, 0x1fd}) write$auto(r8, &(0x7f0000000000)='-\x00', 0xfdef) 1.100016096s ago: executing program 3 (id=2922): mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x18, 0x401, 0x3) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xfffffff77fffffff, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop15\x00', 0x8003, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0x80, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x1, 0x3, 0xffffffffffffffff, 0xbb, 0x0) write$auto(r2, 0x0, 0xfff) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0x2, 0x1, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rpc/nfsd.export/flush\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0xfffffffffffffffc, 0xfffdbfffffff0001, 0x11) prctl$auto(0xdf0, 0x1, 0x4, 0x5, 0x10001) mmap$auto(0x10000000000000, 0x20006, 0x104000000000df, 0xeb1, 0x401, 0x7ffd) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda1\x00', 0x74e83, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) vmsplice$auto(r5, &(0x7f0000000240)={0x0, 0x1ff}, 0x8, 0x1) ioctl$auto(r1, 0x2284, r1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.6/usb22/power/wakeup_active_count\x00', 0x14f841, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/scsi/drivers/sd/uevent\x00', 0x2a400, 0x0) readv$auto(r6, &(0x7f0000001680)={&(0x7f0000000000)="598d4cef7f6f0ad28c2ec79191275f8f75828119e4f1dec4a7c14aedeb61c000b0ea543d50a8defb2ec2b2084b2fc10afa9073ee9b962266abbe7692540358bc1af2b286b5d708bbe107c692fb109432fe585a943793b6d42453a582ae620ca2725a914bfc2cfa79797e312b3f55ee7c78ba9deb68a9f53068141f1318127dfd8865fe17853d81571911c572c6272cf4cf7258b73b9f2c23b5887d800163b3f5b1ccb538ffc897faf0db1a5f90b7148a182b97262e61e0086f8ac7210bfe1b975e18eddb4e7d443599037074e65fc710491fb1d9723f1fe71cb2a91b643f08e467f670572368fea64454138622a5029b4134", 0x7}, 0x66c3) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r3, 0x0, 0x0) 701.848935ms ago: executing program 0 (id=2923): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video66\x00', 0x200, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0xa, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x6, 0x6, 0x5, 0x9, 0x20003, 0x6, 0x4, 0xb4, 0x9, 0x3, 0x10000, 0x80, 0x7, 0x0, 0x8000007, 0x2000, 0x200, 0x0, 0x40084, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xb8a0, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0x200c) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x20000, 0x0) r1 = io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop4\x00', 0x0, 0x0) socket(0x15, 0x5, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x39b8) pread64$auto(r0, 0x0, 0x68, 0x10005) ioctl$auto_TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)="20ab85e74994f1bc1b31f491dfe3c73fc5c3286de8c001a4b97a00374ddba9c57a2ed9d88ec795a9144277b4130fbea52afd0a735ec9e65f0c12bdb9027b03c91b28db0d50873b33f1e88f41d7f8fd7c91d3d3e2952079fd0b7124b8db16253868946868f34de072608d10928fb262449412df21840784f7a0a619df6ca18058") 385.195967ms ago: executing program 33 (id=2880): write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x20000101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0xbd, 0x100000004, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) r5 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r6) sendmsg$auto_NFC_CMD_DISABLE_SE(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0xc08, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40814) sendmsg$auto_NFC_CMD_GET_DEVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1028, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7fff}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xfd}]}, 0x1028}, 0x1, 0x0, 0x0, 0x41}, 0x4044011) getsockopt$auto_SO_RCVTIMEO_NEW(r4, 0x8, 0x42, &(0x7f0000000000)='^{\x00', 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000336bd7000fedb"], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MM_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000001525369cd2612cd1d5e3dfe76b7f13cde845537cef2f65b6c54b31107988956771b9a96021c33aff7a2a610", @ANYRES16=0x0, @ANYBLOB="010328bd7000ffdbdf252a000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 356.556964ms ago: executing program 3 (id=2925): r0 = socket(0x2, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x84, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x7}, @BATADV_ATTR_DAT_CACHE_HWADDRESS={0xa, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'geneve0\x00'}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xcf3}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'erspan0\x00'}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x1ff}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000d00), r5) sendmsg$auto_SMC_PNETID_DEL(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x6, 0x1, '$\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r7, 0x0, 0x8ed) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)='\t', 0x1) write$auto(r2, &(0x7f0000000080)=')@-!\x00', 0x1e1) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) r9 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x2, "f74d086d6600f5daa47fca1f1a0730a2f629350000000000000008600418af10", @inferred=r8}) sendfile$auto(r9, r8, 0x0, 0x7fffe002) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 355.990924ms ago: executing program 4 (id=2926): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = socket(0x15, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80080}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/numa/demotion_enabled\x00', 0xa001, 0x0) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000240)=""/212, 0xd4) read$auto(r6, 0x0, 0x7) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) 97.480857ms ago: executing program 3 (id=2927): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) (async) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) (async) write$auto(r1, &(0x7f0000000240)='/sys/kernel/config/target/dbroot\x00', 0x100) clock_gettime$auto(0x80000020, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000280), 0x107}, 0x4) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/threads-max\x00', 0x20202, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x81, 0x9}, 0x7f, &(0x7f0000000040)={0x7, 0x1f}, &(0x7f00000000c0)={0x6}, 0x8) (async) sendfile$auto(r0, r2, 0x0, 0x4) (async) lseek$auto(r0, 0x7fffffffffffffff, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) link$auto(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async, rerun: 32) unshare$auto(0x20000080) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async, rerun: 64) read$auto(r3, &(0x7f0000002300)='MAC802154_@WSIM\x00', 0x20d) (async, rerun: 64) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 4 (id=2928): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = io_uring_setup$auto(0x86, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r2, 0xc0205647, r1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x40, r4, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xc4}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "9e8771f1c19f17010006000000dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc880) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000200)=0xfb) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x6, 0x1d2c, 0x6, 0x4, 0x15f4da0d, 0x6, 0x9, 0x1, 0x8, 0x4, 0x5, 0x9, 0x4e, 0x40000000000009]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) set_mempolicy$auto(0x3aa73dac, &(0x7f0000000040)=0x401, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8081, 0x0) r5 = socket(0x15, 0x5, 0x0) setsockopt$auto(r5, 0x114, 0xa, 0x0, 0x4) kernel console output (not intermixed with test programs): 290 [ 689.010795][T16273] ? __pfx_do_sys_openat2+0x10/0x10 [ 689.010835][T16273] __x64_sys_openat+0x174/0x210 [ 689.010865][T16273] ? __pfx___x64_sys_openat+0x10/0x10 [ 689.010906][T16273] do_syscall_64+0xcd/0xf80 [ 689.010945][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.010972][T16273] RIP: 0033:0x7f8126f8f7c9 [ 689.010993][T16273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.011017][T16273] RSP: 002b:00007f8127eb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.011041][T16273] RAX: ffffffffffffffda RBX: 00007f81271e6090 RCX: 00007f8126f8f7c9 [ 689.011060][T16273] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 689.011077][T16273] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 689.011093][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.011110][T16273] R13: 00007f81271e6128 R14: 00007f81271e6090 R15: 00007ffcd29a11e8 [ 689.011145][T16273] [ 691.853181][T16320] FAULT_INJECTION: forcing a failure. [ 691.853181][T16320] name fail_futex, interval 1, probability 0, space 0, times 0 [ 691.967094][T16320] CPU: 1 UID: 0 PID: 16320 Comm: syz.4.2311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 691.967140][T16320] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 691.967146][T16320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.967155][T16320] Call Trace: [ 691.967160][T16320] [ 691.967167][T16320] dump_stack_lvl+0x16c/0x1f0 [ 691.967198][T16320] should_fail_ex+0x512/0x640 [ 691.967218][T16320] get_futex_key+0x1d0/0x15f0 [ 691.967237][T16320] ? __pfx_get_futex_key+0x10/0x10 [ 691.967254][T16320] ? trace_sched_set_need_resched_tp+0xf3/0x130 [ 691.967281][T16320] futex_wait_setup+0x9d/0x570 [ 691.967307][T16320] __futex_wait+0x193/0x2f0 [ 691.967327][T16320] ? __pfx___futex_wait+0x10/0x10 [ 691.967350][T16320] ? __pfx_futex_wake_mark+0x10/0x10 [ 691.967371][T16320] ? futex_hash+0x2c5/0x380 [ 691.967388][T16320] ? futex_private_hash_put+0x160/0x1b0 [ 691.967405][T16320] futex_wait+0xe8/0x380 [ 691.967424][T16320] ? __pfx_futex_wait+0x10/0x10 [ 691.967454][T16320] do_futex+0x229/0x350 [ 691.967470][T16320] ? __pfx_do_futex+0x10/0x10 [ 691.967491][T16320] __x64_sys_futex+0x1e0/0x4c0 [ 691.967509][T16320] ? fdget_pos+0x2b8/0x370 [ 691.967530][T16320] ? __pfx___x64_sys_futex+0x10/0x10 [ 691.967546][T16320] ? ksys_write+0x1ac/0x250 [ 691.967566][T16320] ? __pfx_ksys_write+0x10/0x10 [ 691.967591][T16320] do_syscall_64+0xcd/0xf80 [ 691.967613][T16320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.967629][T16320] RIP: 0033:0x7f8126f8f7c9 [ 691.967641][T16320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.967656][T16320] RSP: 002b:00007f8127ed50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 691.967671][T16320] RAX: ffffffffffffffda RBX: 00007f81271e5fa8 RCX: 00007f8126f8f7c9 [ 691.967680][T16320] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81271e5fa8 [ 691.967689][T16320] RBP: 00007f81271e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 691.967698][T16320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.967707][T16320] R13: 00007f81271e6038 R14: 00007ffcd29a1100 R15: 00007ffcd29a11e8 [ 691.967726][T16320] [ 692.648395][T14404] Bluetooth: hci2: unexpected event 0x35 length: 13 > 6 [ 692.984293][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2311'. [ 693.166195][T16322] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2311'. [ 693.284306][T16321] __vm_enough_memory: pid: 16321, comm: syz.4.2311, bytes: 4398046511104 not enough memory for the allocation [ 694.653236][T16373] can: request_module (can-proto-0) failed. [ 695.178299][T16391] FAULT_INJECTION: forcing a failure. [ 695.178299][T16391] name failslab, interval 1, probability 0, space 0, times 0 [ 695.208258][T16391] CPU: 0 UID: 0 PID: 16391 Comm: syz.0.2323 Tainted: G U L syzkaller #0 PREEMPT(full) [ 695.208313][T16391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 695.208326][T16391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 695.208345][T16391] Call Trace: [ 695.208355][T16391] [ 695.208367][T16391] dump_stack_lvl+0x16c/0x1f0 [ 695.208413][T16391] should_fail_ex+0x512/0x640 [ 695.208445][T16391] ? fs_reclaim_acquire+0xae/0x150 [ 695.208493][T16391] should_failslab+0xc2/0x120 [ 695.208537][T16391] __kmalloc_noprof+0xeb/0x910 [ 695.208573][T16391] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 695.208627][T16391] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 695.208665][T16391] tomoyo_realpath_from_path+0xc2/0x6e0 [ 695.208716][T16391] tomoyo_check_open_permission+0x2ab/0x3c0 [ 695.208751][T16391] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 695.208817][T16391] ? do_raw_spin_lock+0x12c/0x2b0 [ 695.208860][T16391] tomoyo_file_open+0x6b/0x90 [ 695.208901][T16391] security_file_open+0x84/0x1e0 [ 695.208934][T16391] do_dentry_open+0x597/0x1590 [ 695.208974][T16391] ? security_inode_permission+0xbf/0x260 [ 695.209008][T16391] vfs_open+0x82/0x3f0 [ 695.209040][T16391] path_openat+0x2078/0x3140 [ 695.209087][T16391] ? __pfx_path_openat+0x10/0x10 [ 695.209137][T16391] do_filp_open+0x20b/0x470 [ 695.209175][T16391] ? __pfx_do_filp_open+0x10/0x10 [ 695.209235][T16391] ? alloc_fd+0x471/0x7d0 [ 695.209280][T16391] do_sys_openat2+0x121/0x290 [ 695.209308][T16391] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.209349][T16391] __x64_sys_openat+0x174/0x210 [ 695.209378][T16391] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.209420][T16391] do_syscall_64+0xcd/0xf80 [ 695.209459][T16391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.209485][T16391] RIP: 0033:0x7fe27e98f7c9 [ 695.209505][T16391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.209530][T16391] RSP: 002b:00007fe27f7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.209555][T16391] RAX: ffffffffffffffda RBX: 00007fe27ebe5fa0 RCX: 00007fe27e98f7c9 [ 695.209573][T16391] RDX: 0000000000088442 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 695.209590][T16391] RBP: 00007fe27ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.209612][T16391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.209629][T16391] R13: 00007fe27ebe6038 R14: 00007fe27ebe5fa0 R15: 00007fffdd6b6a68 [ 695.209664][T16391] [ 695.209748][T16391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 696.303281][T16414] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2331'. [ 697.740296][T16460] FAULT_INJECTION: forcing a failure. [ 697.740296][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 697.749555][T16459] FAULT_INJECTION: forcing a failure. [ 697.749555][T16459] name fail_futex, interval 1, probability 0, space 0, times 0 [ 697.778734][T16459] CPU: 1 UID: 0 PID: 16459 Comm: syz.0.2337 Tainted: G U L syzkaller #0 PREEMPT(full) [ 697.778776][T16459] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 697.778786][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.778801][T16459] Call Trace: [ 697.778808][T16459] [ 697.778818][T16459] dump_stack_lvl+0x16c/0x1f0 [ 697.778856][T16459] should_fail_ex+0x512/0x640 [ 697.778887][T16459] get_futex_key+0x293/0x15f0 [ 697.778916][T16459] ? __pfx_get_futex_key+0x10/0x10 [ 697.778951][T16459] futex_wake+0xea/0x530 [ 697.778984][T16459] ? __pfx_futex_wake+0x10/0x10 [ 697.779028][T16459] do_futex+0x1e3/0x350 [ 697.779054][T16459] ? __pfx_do_futex+0x10/0x10 [ 697.779077][T16459] ? __might_fault+0xe3/0x190 [ 697.779113][T16459] mm_release+0x24e/0x300 [ 697.779144][T16459] do_exit+0x69e/0x2bd0 [ 697.779172][T16459] ? __pfx_do_exit+0x10/0x10 [ 697.779193][T16459] ? do_raw_spin_lock+0x12c/0x2b0 [ 697.779217][T16459] ? find_held_lock+0x2b/0x80 [ 697.779251][T16459] do_group_exit+0xd3/0x2a0 [ 697.779276][T16459] get_signal+0x2671/0x26d0 [ 697.779318][T16459] ? __pfx_get_signal+0x10/0x10 [ 697.779351][T16459] ? do_futex+0x122/0x350 [ 697.779378][T16459] arch_do_signal_or_restart+0x8f/0x7a0 [ 697.779412][T16459] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 697.779454][T16459] ? __pfx___x64_sys_futex+0x10/0x10 [ 697.779485][T16459] exit_to_user_mode_loop+0x8c/0x540 [ 697.779518][T16459] do_syscall_64+0x4ee/0xf80 [ 697.779560][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.779585][T16459] RIP: 0033:0x7fe27e98f7c9 [ 697.779604][T16459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.779627][T16459] RSP: 002b:00007fe27f7f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 697.779649][T16459] RAX: fffffffffffffe00 RBX: 00007fe27ebe5fa8 RCX: 00007fe27e98f7c9 [ 697.779666][T16459] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe27ebe5fa8 [ 697.779680][T16459] RBP: 00007fe27ebe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 697.779694][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.779708][T16459] R13: 00007fe27ebe6038 R14: 00007fffdd6b6980 R15: 00007fffdd6b6a68 [ 697.779740][T16459] [ 697.786208][T16460] CPU: 1 UID: 0 PID: 16460 Comm: syz.4.2338 Tainted: G U L syzkaller #0 PREEMPT(full) [ 697.786260][T16460] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 697.786270][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 697.786287][T16460] Call Trace: [ 697.786297][T16460] [ 697.786307][T16460] dump_stack_lvl+0x16c/0x1f0 [ 697.786354][T16460] should_fail_ex+0x512/0x640 [ 697.786385][T16460] ? fs_reclaim_acquire+0xae/0x150 [ 697.786428][T16460] should_failslab+0xc2/0x120 [ 697.786463][T16460] __kmalloc_noprof+0xeb/0x910 [ 697.786492][T16460] ? tomoyo_encode2+0x100/0x3e0 [ 697.786530][T16460] ? tomoyo_encode2+0x100/0x3e0 [ 697.786572][T16460] tomoyo_encode2+0x100/0x3e0 [ 697.786612][T16460] tomoyo_encode+0x29/0x50 [ 697.786646][T16460] tomoyo_realpath_from_path+0x18f/0x6e0 [ 697.786694][T16460] tomoyo_mkdev_perm+0x22b/0x570 [ 697.786722][T16460] ? tomoyo_mkdev_perm+0x217/0x570 [ 697.786753][T16460] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 697.786783][T16460] ? do_raw_spin_lock+0x12c/0x2b0 [ 697.786822][T16460] ? do_raw_spin_unlock+0x172/0x230 [ 697.786875][T16460] ? __pfx_current_check_access_path+0x10/0x10 [ 697.786914][T16460] ? simple_lookup+0x105/0x1d0 [ 697.786961][T16460] tomoyo_path_mknod+0x12a/0x190 [ 697.787005][T16460] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 697.787051][T16460] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.787100][T16460] security_path_mknod+0x161/0x310 [ 697.787135][T16460] do_mknodat+0x24e/0x6f0 [ 697.787179][T16460] ? __pfx_do_mknodat+0x10/0x10 [ 697.787220][T16460] ? getname_flags.part.0+0x1c5/0x550 [ 697.787259][T16460] __x64_sys_mknod+0x87/0xb0 [ 697.787301][T16460] do_syscall_64+0xcd/0xf80 [ 697.787346][T16460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.787376][T16460] RIP: 0033:0x7f8126f8f7c9 [ 697.787400][T16460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.787427][T16460] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 697.787456][T16460] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 697.787474][T16460] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 697.787489][T16460] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 697.787504][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.787522][T16460] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 697.787571][T16460] [ 697.787600][T16460] ERROR: Out of memory at tomoyo_realpath_from_path. [ 700.223773][T16515] zero sized request [ 700.701573][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 701.693954][T16557] FAULT_INJECTION: forcing a failure. [ 701.693954][T16557] name fail_futex, interval 1, probability 0, space 0, times 0 [ 701.734626][T16557] CPU: 0 UID: 0 PID: 16557 Comm: syz.2.2357 Tainted: G U L syzkaller #0 PREEMPT(full) [ 701.734672][T16557] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 701.734683][T16557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.734700][T16557] Call Trace: [ 701.734709][T16557] [ 701.734719][T16557] dump_stack_lvl+0x16c/0x1f0 [ 701.734761][T16557] should_fail_ex+0x512/0x640 [ 701.734793][T16557] get_futex_key+0x293/0x15f0 [ 701.734824][T16557] ? __pfx_get_futex_key+0x10/0x10 [ 701.734870][T16557] futex_wake+0xea/0x530 [ 701.734907][T16557] ? __pfx_futex_wake+0x10/0x10 [ 701.734958][T16557] do_futex+0x1e3/0x350 [ 701.734988][T16557] ? __pfx_do_futex+0x10/0x10 [ 701.735016][T16557] ? __might_fault+0xe3/0x190 [ 701.735055][T16557] mm_release+0x24e/0x300 [ 701.735092][T16557] do_exit+0x69e/0x2bd0 [ 701.735123][T16557] ? __pfx_do_exit+0x10/0x10 [ 701.735149][T16557] ? do_raw_spin_lock+0x12c/0x2b0 [ 701.735179][T16557] ? find_held_lock+0x2b/0x80 [ 701.735218][T16557] do_group_exit+0xd3/0x2a0 [ 701.735245][T16557] get_signal+0x2671/0x26d0 [ 701.735291][T16557] ? __pfx_get_signal+0x10/0x10 [ 701.735330][T16557] ? do_futex+0x122/0x350 [ 701.735363][T16557] arch_do_signal_or_restart+0x8f/0x7a0 [ 701.735403][T16557] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 701.735451][T16557] ? __pfx___x64_sys_futex+0x10/0x10 [ 701.735489][T16557] exit_to_user_mode_loop+0x8c/0x540 [ 701.735528][T16557] do_syscall_64+0x4ee/0xf80 [ 701.735570][T16557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.735597][T16557] RIP: 0033:0x7f9e0498f7c9 [ 701.735619][T16557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.735646][T16557] RSP: 002b:00007f9e058840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 701.735672][T16557] RAX: fffffffffffffe00 RBX: 00007f9e04be5fa8 RCX: 00007f9e0498f7c9 [ 701.735692][T16557] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9e04be5fa8 [ 701.735709][T16557] RBP: 00007f9e04be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 701.735726][T16557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.735743][T16557] R13: 00007f9e04be6038 R14: 00007ffef8efd9b0 R15: 00007ffef8efda98 [ 701.735780][T16557] [ 702.745416][T16580] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 702.806766][T16578] Invalid ELF header magic: != ELF [ 702.910059][T16581] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 703.952798][T16591] usbcore.quirks: string doesn't fit in 127 chars. [ 704.637190][T16603] FAULT_INJECTION: forcing a failure. [ 704.637190][T16603] name fail_futex, interval 1, probability 0, space 0, times 0 [ 704.845338][T16603] CPU: 1 UID: 0 PID: 16603 Comm: syz.4.2370 Tainted: G U L syzkaller #0 PREEMPT(full) [ 704.845385][T16603] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 704.845395][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 704.845410][T16603] Call Trace: [ 704.845419][T16603] [ 704.845430][T16603] dump_stack_lvl+0x16c/0x1f0 [ 704.845473][T16603] should_fail_ex+0x512/0x640 [ 704.845509][T16603] get_futex_key+0x293/0x15f0 [ 704.845542][T16603] ? __pfx_get_futex_key+0x10/0x10 [ 704.845583][T16603] futex_wake+0xea/0x530 [ 704.845622][T16603] ? __pfx_futex_wake+0x10/0x10 [ 704.845672][T16603] do_futex+0x1e3/0x350 [ 704.845703][T16603] ? __pfx_do_futex+0x10/0x10 [ 704.845731][T16603] ? __might_fault+0xe3/0x190 [ 704.845777][T16603] mm_release+0x24e/0x300 [ 704.845813][T16603] do_exit+0x69e/0x2bd0 [ 704.845845][T16603] ? __pfx_do_exit+0x10/0x10 [ 704.845870][T16603] ? do_raw_spin_lock+0x12c/0x2b0 [ 704.845899][T16603] ? find_held_lock+0x2b/0x80 [ 704.845938][T16603] do_group_exit+0xd3/0x2a0 [ 704.845967][T16603] get_signal+0x2671/0x26d0 [ 704.846014][T16603] ? __pfx_get_signal+0x10/0x10 [ 704.846052][T16603] ? do_futex+0x122/0x350 [ 704.846084][T16603] arch_do_signal_or_restart+0x8f/0x7a0 [ 704.846123][T16603] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 704.846170][T16603] ? __pfx___x64_sys_futex+0x10/0x10 [ 704.846208][T16603] exit_to_user_mode_loop+0x8c/0x540 [ 704.846245][T16603] do_syscall_64+0x4ee/0xf80 [ 704.846289][T16603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.846316][T16603] RIP: 0033:0x7f8126f8f7c9 [ 704.846346][T16603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.846372][T16603] RSP: 002b:00007f8127ed50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 704.846399][T16603] RAX: fffffffffffffe00 RBX: 00007f81271e5fa8 RCX: 00007f8126f8f7c9 [ 704.846418][T16603] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81271e5fa8 [ 704.846435][T16603] RBP: 00007f81271e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 704.846453][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.846468][T16603] R13: 00007f81271e6038 R14: 00007ffcd29a1100 R15: 00007ffcd29a11e8 [ 704.846502][T16603] [ 705.538972][T16611] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2373'. [ 705.585434][T16614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2376'. [ 706.362163][T16633] random: crng reseeded on system resumption [ 707.881203][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 708.010897][T16666] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 708.042998][T16661] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2385'. [ 708.074930][T16667] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 711.867057][T16736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2405: No space for directory leaf checksum. Please run e2fsck -D. [ 711.967498][T16736] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2405: checksumming directory block 0 [ 712.023102][T16736] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 712.039255][T16736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2405: No space for directory leaf checksum. Please run e2fsck -D. [ 712.068050][T16736] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2405: checksumming directory block 0 [ 712.113046][T16736] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 712.181589][T16736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2405: No space for directory leaf checksum. Please run e2fsck -D. [ 712.224275][T16736] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2405: checksumming directory block 0 [ 712.258642][T16736] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 712.333112][T16736] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.3.2405: No space for directory leaf checksum. Please run e2fsck -D. [ 712.401603][T16736] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.3.2405: checksumming directory block 0 [ 712.471317][T16736] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 712.520132][T16736] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 712.559204][T16736] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 716.128148][T16794] futex_wake_op: syz.4.2418 tries to shift op by -2048; fix this program [ 716.963153][T16779] syz.2.2415 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 717.060201][T16779] CPU: 1 UID: 0 PID: 16779 Comm: syz.2.2415 Tainted: G U L syzkaller #0 PREEMPT(full) [ 717.060244][T16779] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 717.060254][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.060271][T16779] Call Trace: [ 717.060279][T16779] [ 717.060288][T16779] dump_stack_lvl+0x16c/0x1f0 [ 717.060331][T16779] dump_header+0x101/0x960 [ 717.060364][T16779] oom_kill_process+0x176/0x910 [ 717.060396][T16779] out_of_memory+0x350/0x1700 [ 717.060424][T16779] ? __lock_acquire+0x436/0x2890 [ 717.060456][T16779] ? __pfx_out_of_memory+0x10/0x10 [ 717.060498][T16779] mem_cgroup_out_of_memory+0x118/0x130 [ 717.060531][T16779] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 717.060574][T16779] ? do_raw_spin_unlock+0x172/0x230 [ 717.060612][T16779] try_charge_memcg+0x695/0xd30 [ 717.060662][T16779] ? __pfx_try_charge_memcg+0x10/0x10 [ 717.060704][T16779] ? peak_open+0x11/0x50 [ 717.060734][T16779] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 717.060774][T16779] obj_cgroup_charge_account+0x336/0x670 [ 717.060820][T16779] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 717.060873][T16779] __kmalloc_noprof+0x6c9/0x910 [ 717.060902][T16779] ? __register_sysctl_table+0xb3/0x1900 [ 717.060943][T16779] ? __register_sysctl_table+0xb3/0x1900 [ 717.060975][T16779] __register_sysctl_table+0xb3/0x1900 [ 717.061010][T16779] ? is_module_address+0x5f/0xf0 [ 717.061045][T16779] ? __pfx___register_sysctl_table+0x10/0x10 [ 717.061079][T16779] ? is_module_address+0x69/0xf0 [ 717.061107][T16779] ? register_net_sysctl_sz+0x222/0x450 [ 717.061135][T16779] ? __asan_memcpy+0x3c/0x60 [ 717.061175][T16779] ipv4_sysctl_init_net+0x101/0x350 [ 717.061205][T16779] ? __pfx_ipv4_sysctl_init_net+0x10/0x10 [ 717.061233][T16779] ops_init+0x1e2/0x5f0 [ 717.061268][T16779] setup_net+0x11d/0x3a0 [ 717.061300][T16779] ? __pfx_setup_net+0x10/0x10 [ 717.061330][T16779] ? lockdep_init_map_type+0x5c/0x270 [ 717.061355][T16779] ? mutex_init_lockep+0x110/0x150 [ 717.061386][T16779] copy_net_ns+0x351/0x7c0 [ 717.061424][T16779] create_new_namespaces+0x3ea/0xab0 [ 717.061465][T16779] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 717.061501][T16779] ksys_unshare+0x45b/0xa40 [ 717.061539][T16779] ? __pfx_ksys_unshare+0x10/0x10 [ 717.061577][T16779] ? xfd_validate_state+0x61/0x180 [ 717.061610][T16779] __x64_sys_unshare+0x31/0x40 [ 717.061646][T16779] do_syscall_64+0xcd/0xf80 [ 717.061683][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.061708][T16779] RIP: 0033:0x7f9e0498f7c9 [ 717.061729][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.061752][T16779] RSP: 002b:00007f9e05884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 717.061776][T16779] RAX: ffffffffffffffda RBX: 00007f9e04be5fa0 RCX: 00007f9e0498f7c9 [ 717.061793][T16779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 717.061807][T16779] RBP: 00007f9e04a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 717.061823][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.061838][T16779] R13: 00007f9e04be6038 R14: 00007f9e04be5fa0 R15: 00007ffef8efda98 [ 717.061872][T16779] [ 717.472151][T16779] memory: usage 3072kB, limit 3072kB, failcnt 247550 [ 717.480281][T16779] memory+swap: usage 58348kB, limit 9007199254740988kB, failcnt 0 [ 717.490152][T16779] kmem: usage 2620kB, limit 9007199254740988kB, failcnt 0 [ 717.498972][T16779] Memory cgroup stats for /syz2: [ 717.499260][T16779] cache 0 [ 717.509140][T16779] rss 0 [ 717.512458][T16779] rss_huge 0 [ 717.516679][T16779] shmem 0 [ 717.520244][T16779] mapped_file 0 [ 717.524429][T16779] dirty 0 [ 717.528670][T16779] writeback 0 [ 717.532646][T16779] workingset_refault_anon 42235 [ 717.538940][T16779] workingset_refault_file 40352 [ 717.544809][T16779] swap 56602624 [ 717.549379][T16779] swapcached 462848 [ 717.553992][T16779] pgpgin 589555 [ 717.558361][T16779] pgpgout 591486 [ 717.562656][T16779] pgfault 527791 [ 717.568253][T16779] pgmajfault 15357 [ 717.572787][T16779] inactive_anon 12288 [ 717.577636][T16779] active_anon 331776 [ 717.582326][T16779] inactive_file 0 [ 717.586750][T16779] active_file 0 [ 717.590913][T16779] unevictable 0 [ 717.595070][T16779] hierarchical_memory_limit 3145728 [ 717.601370][T16779] hierarchical_memsw_limit 9223372036854771712 [ 717.608866][T16779] total_cache 0 [ 717.613041][T16779] total_rss 0 [ 717.617076][T16779] total_rss_huge 0 [ 717.621592][T16779] total_shmem 0 [ 717.625811][T16779] total_mapped_file 0 [ 717.630611][T16779] total_dirty 0 [ 717.634791][T16779] total_writeback 0 [ 717.639485][T16779] total_workingset_refault_anon 42235 [ 717.646141][T16779] total_workingset_refault_file 40352 [ 717.652608][T16779] total_swap 56602624 [ 717.657500][T16779] total_swapcached 462848 [ 717.662725][T16779] total_pgpgin 589555 [ 717.667591][T16779] total_pgpgout 591486 [ 717.673293][T16779] total_pgfault 527791 [ 717.678236][T16779] total_pgmajfault 15357 [ 717.683329][T16779] total_inactive_anon 12288 [ 717.688767][T16779] total_active_anon 331776 [ 717.694062][T16779] total_inactive_file 0 [ 717.699096][T16779] total_active_file 0 [ 717.704019][T16779] total_unevictable 0 [ 717.708831][T16779] anon_cost 0 [ 717.712770][T16779] file_cost 0 [ 717.716731][T16779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2307,pid=16347,uid=0 [ 717.736536][T16779] Memory cgroup out of memory: Killed process 16347 (syz.2.2307) total-vm:119104kB, anon-rss:1172kB, file-rss:67576kB, shmem-rss:0kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 719.815599][ T32] oom_reaper: reaped process 16347 (syz.2.2307), now anon-rss:28kB, file-rss:15680kB, shmem-rss:0kB [ 722.652341][T16874] FAULT_INJECTION: forcing a failure. [ 722.652341][T16874] name failslab, interval 1, probability 0, space 0, times 0 [ 722.673660][T16874] CPU: 0 UID: 0 PID: 16874 Comm: syz.2.2433 Tainted: G U L syzkaller #0 PREEMPT(full) [ 722.673708][T16874] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 722.673719][T16874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 722.673736][T16874] Call Trace: [ 722.673746][T16874] [ 722.673757][T16874] dump_stack_lvl+0x16c/0x1f0 [ 722.673802][T16874] should_fail_ex+0x512/0x640 [ 722.673833][T16874] ? kmem_cache_alloc_noprof+0x62/0x770 [ 722.673869][T16874] should_failslab+0xc2/0x120 [ 722.673909][T16874] kmem_cache_alloc_noprof+0x83/0x770 [ 722.673943][T16874] ? __kernfs_new_node+0xd2/0x9b0 [ 722.673984][T16874] ? __kernfs_new_node+0xd2/0x9b0 [ 722.674014][T16874] __kernfs_new_node+0xd2/0x9b0 [ 722.674053][T16874] ? __pfx___kernfs_new_node+0x10/0x10 [ 722.674093][T16874] ? find_held_lock+0x2b/0x80 [ 722.674130][T16874] ? kernfs_root+0xee/0x2a0 [ 722.674164][T16874] kernfs_new_node+0x13c/0x1e0 [ 722.674206][T16874] __kernfs_create_file+0x53/0x350 [ 722.674254][T16874] sysfs_add_file_mode_ns+0x207/0x3c0 [ 722.674293][T16874] sysfs_merge_group+0x1aa/0x340 [ 722.674322][T16874] ? kernfs_add_one+0x14e/0x840 [ 722.674353][T16874] ? __pfx_sysfs_merge_group+0x10/0x10 [ 722.674388][T16874] ? __pfx_dev_add_physical_location+0x10/0x10 [ 722.674424][T16874] ? bus_to_subsys+0x131/0x160 [ 722.674466][T16874] dpm_sysfs_add+0x237/0x280 [ 722.674500][T16874] device_add+0x9cc/0x1980 [ 722.674537][T16874] ? __pfx_device_add+0x10/0x10 [ 722.674595][T16874] nfc_register_device+0x41/0x410 [ 722.674636][T16874] nci_register_device+0x7f1/0xb80 [ 722.674668][T16874] ? __pfx_nci_register_device+0x10/0x10 [ 722.674702][T16874] ? lockdep_init_map_type+0x5c/0x270 [ 722.674736][T16874] virtual_ncidev_open+0x141/0x220 [ 722.674776][T16874] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 722.674815][T16874] misc_open+0x26d/0x450 [ 722.674844][T16874] ? __pfx_misc_open+0x10/0x10 [ 722.674872][T16874] chrdev_open+0x234/0x6a0 [ 722.674909][T16874] ? __pfx_apparmor_file_open+0x10/0x10 [ 722.674936][T16874] ? __pfx_chrdev_open+0x10/0x10 [ 722.674975][T16874] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 722.675022][T16874] do_dentry_open+0x748/0x1590 [ 722.675057][T16874] ? __pfx_chrdev_open+0x10/0x10 [ 722.675103][T16874] vfs_open+0x82/0x3f0 [ 722.675134][T16874] path_openat+0x2078/0x3140 [ 722.675181][T16874] ? __pfx_path_openat+0x10/0x10 [ 722.675230][T16874] do_filp_open+0x20b/0x470 [ 722.675268][T16874] ? __pfx_do_filp_open+0x10/0x10 [ 722.675329][T16874] ? alloc_fd+0x471/0x7d0 [ 722.675374][T16874] do_sys_openat2+0x121/0x290 [ 722.675403][T16874] ? __pfx_do_sys_openat2+0x10/0x10 [ 722.675433][T16874] ? __fput+0x68d/0xb70 [ 722.675466][T16874] __x64_sys_openat+0x174/0x210 [ 722.675495][T16874] ? __pfx___x64_sys_openat+0x10/0x10 [ 722.675557][T16874] do_syscall_64+0xcd/0xf80 [ 722.675598][T16874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.675625][T16874] RIP: 0033:0x7f9e0498f7c9 [ 722.675647][T16874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.675672][T16874] RSP: 002b:00007f9e05842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 722.675697][T16874] RAX: ffffffffffffffda RBX: 00007f9e04be6180 RCX: 00007f9e0498f7c9 [ 722.675714][T16874] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 722.675731][T16874] RBP: 00007f9e04a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 722.675747][T16874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.675763][T16874] R13: 00007f9e04be6218 R14: 00007f9e04be6180 R15: 00007ffef8efda98 [ 722.675798][T16874] [ 723.939675][T16891] nvme_fabrics: missing parameter 'transport=%s' [ 724.035126][T16891] nvme_fabrics: missing parameter 'nqn=%s' [ 726.217412][T16953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2450'. [ 726.724194][T16957] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 727.034943][T16953] program syz.2.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 727.057588][ T30] audit: type=1807 audit(4294968580.226:35): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 727.072872][T16952] ima: policy update failed [ 727.191703][ T30] audit: type=1802 audit(4294968580.226:36): pid=16953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.2450" res=0 errno=0 [ 727.236639][ T30] audit: type=1802 audit(4294968580.246:37): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2450" res=0 errno=0 [ 730.865513][T17012] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2461'. [ 731.305115][T17041] netlink: 302 bytes leftover after parsing attributes in process `syz.4.2469'. [ 731.843896][T17047] netlink: 21 bytes leftover after parsing attributes in process `syz.4.2471'. [ 732.414192][T14404] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 732.926520][T17067] __vm_enough_memory: pid: 17067, comm: syz.0.2473, bytes: 4398046511104 not enough memory for the allocation [ 736.254890][T17111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2485: No space for directory leaf checksum. Please run e2fsck -D. [ 736.287607][T17111] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2485: checksumming directory block 0 [ 736.433212][T17111] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 736.496850][T17111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2485: No space for directory leaf checksum. Please run e2fsck -D. [ 736.563639][T15166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 736.593257][T15166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.606251][T17111] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2485: checksumming directory block 0 [ 736.626120][T15166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.635653][T15166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.644915][T15166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.705286][T17111] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 736.749728][T17111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2485: No space for directory leaf checksum. Please run e2fsck -D. [ 736.929950][T17111] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2485: checksumming directory block 0 [ 736.965924][T17111] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 737.044471][T17111] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2485: No space for directory leaf checksum. Please run e2fsck -D. [ 737.133660][T17111] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2485: checksumming directory block 0 [ 737.152174][T17111] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 737.164567][T17111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 737.186451][T17111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 737.480293][T17116] chnl_net:caif_netlink_parms(): no params data found [ 737.704643][T17125] Console: switching to colour VGA+ 80x25 [ 738.135550][T16828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.223301][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.241783][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.269489][T17116] bridge_slave_0: entered allmulticast mode [ 738.301761][T17116] bridge_slave_0: entered promiscuous mode [ 738.533251][T16828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.617497][T17155] block nbd8: shutting down sockets [ 738.669375][T15166] Bluetooth: hci5: command tx timeout [ 738.679812][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.719069][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.753949][T17116] bridge_slave_1: entered allmulticast mode [ 739.031836][T17116] bridge_slave_1: entered promiscuous mode [ 739.139626][T16828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.310770][T17116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.360719][T17116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.415354][T16828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.522931][T17116] team0: Port device team_slave_0 added [ 739.637840][T17116] team0: Port device team_slave_1 added [ 739.816413][T17116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.841047][T17116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.920474][T17116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.955413][T17116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.970236][T17116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.039941][T17116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.121442][T17173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 740.419896][T17116] hsr_slave_0: entered promiscuous mode [ 740.459107][T17116] hsr_slave_1: entered promiscuous mode [ 740.605548][T16828] bridge_slave_0: left allmulticast mode [ 740.634384][T16828] bridge_slave_0: left promiscuous mode [ 740.643396][T16828] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.676004][T17185] netlink: 322 bytes leftover after parsing attributes in process `syz.4.2500'. [ 740.746975][T15166] Bluetooth: hci5: command tx timeout [ 741.296566][T17199] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2502'. [ 741.517185][T16828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.540265][T16828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.631128][T16828] bond0 (unregistering): Released all slaves [ 741.703377][T17199] : renamed from ip6tnl0 (while UP) [ 741.799941][T17203] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 741.854049][T17203] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 741.877432][T17203] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 741.898058][T17203] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 741.914398][T16828] ovs_ÿþÿþ: left promiscuous mode [ 742.039511][T17214] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 742.093525][T16828] HfR: left promiscuous mode [ 742.102455][T17214] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 742.128408][T17214] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 742.152882][T17214] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 742.807054][T15166] Bluetooth: hci5: command tx timeout [ 742.822983][T17238] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 742.866048][T17238] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 742.885855][T17238] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 742.909838][T17238] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 743.028871][T17243] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 743.085729][T17243] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 743.175613][T17243] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 743.206456][T17243] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 743.581346][T17257] cougar: G6 mapped to space [ 743.800782][T17260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 743.822563][T16828] hsr_slave_0: left promiscuous mode [ 743.853094][ T30] audit: type=1800 audit(4294968597.105:38): pid=17262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2515" name="lu_gp_id" dev="configfs" ino=73529 res=0 errno=0 [ 743.936222][T16828] hsr_slave_1: left promiscuous mode [ 743.947568][T17260] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 743.984083][T16828] veth0_vlan: left promiscuous mode [ 744.016193][T17260] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 744.104529][T17260] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 744.885490][T15166] Bluetooth: hci5: command tx timeout [ 745.336825][T16828] team0 (unregistering): Port device team_slave_1 removed [ 745.423502][T16828] team0 (unregistering): Port device team_slave_0 removed [ 746.333133][T17116] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.364942][T17116] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.375792][T17116] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.566732][T17116] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.285511][T17116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.366120][T17116] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.492788][T16444] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.501384][T16444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.519871][T16444] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.528610][T16444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.609853][T17116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 747.622831][T17116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network                                                                                                           [ 751.321650][T17355] kexec: Could not allocate control_code_buffer [ 752.054737][T17392] MTRR 2 not used [ 752.093938][T17400] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 752.451823][T17410] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 754.271841][T17464] FAULT_INJECTION: forcing a failure. [ 754.271841][T17464] name failslab, interval 1, probability 0, space 0, times 0 [ 754.285374][T17464] CPU: 1 UID: 0 PID: 17464 Comm: syz.4.2548 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.285402][T17464] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.285409][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 754.285418][T17464] Call Trace: [ 754.285424][T17464] [ 754.285431][T17464] dump_stack_lvl+0x16c/0x1f0 [ 754.285457][T17464] should_fail_ex+0x512/0x640 [ 754.285474][T17464] ? kmem_cache_alloc_noprof+0x62/0x770 [ 754.285496][T17464] should_failslab+0xc2/0x120 [ 754.285519][T17464] kmem_cache_alloc_noprof+0x83/0x770 [ 754.285536][T17464] ? alloc_vfsmnt+0x23/0x6b0 [ 754.285555][T17464] ? alloc_vfsmnt+0x23/0x6b0 [ 754.285570][T17464] alloc_vfsmnt+0x23/0x6b0 [ 754.285586][T17464] fc_mount_longterm+0x154/0x270 [ 754.285605][T17464] mq_init_ns+0x482/0x810 [ 754.285623][T17464] copy_ipcs+0x3db/0x7d0 [ 754.285639][T17464] create_new_namespaces+0x20a/0xab0 [ 754.285659][T17464] ? security_capable+0x7e/0x260 [ 754.285685][T17464] copy_namespaces+0x468/0x570 [ 754.285706][T17464] copy_process+0x2a70/0x7430 [ 754.285727][T17464] ? __pfx___schedule+0x10/0x10 [ 754.285755][T17464] ? __pfx_copy_process+0x10/0x10 [ 754.285780][T17464] ? _copy_from_user+0x59/0xd0 [ 754.285799][T17464] kernel_clone+0xfc/0x910 [ 754.285822][T17464] ? __pfx_kernel_clone+0x10/0x10 [ 754.285842][T17464] ? futex_private_hash_put+0x160/0x1b0 [ 754.285863][T17464] ? __pfx_futex_wake+0x10/0x10 [ 754.285885][T17464] __do_sys_clone3+0x212/0x290 [ 754.285907][T17464] ? __pfx___do_sys_clone3+0x10/0x10 [ 754.285937][T17464] ? find_held_lock+0x2b/0x80 [ 754.285970][T17464] do_syscall_64+0xcd/0xf80 [ 754.285993][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.286008][T17464] RIP: 0033:0x7f8126f8f7c9 [ 754.286021][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.286036][T17464] RSP: 002b:00007f8127ed4f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 754.286050][T17464] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f8126f8f7c9 [ 754.286060][T17464] RDX: 00007f8127ed4f20 RSI: 0000000000000058 RDI: 00007f8127ed4f20 [ 754.286069][T17464] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000058 [ 754.286079][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.286088][T17464] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 754.286116][T17464] [ 755.445165][T17476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2550'. [ 755.726811][T17481] FAULT_INJECTION: forcing a failure. [ 755.726811][T17481] name failslab, interval 1, probability 0, space 0, times 0 [ 755.744055][T17481] CPU: 1 UID: 0 PID: 17481 Comm: syz.4.2552 Tainted: G U L syzkaller #0 PREEMPT(full) [ 755.744110][T17481] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 755.744121][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 755.744138][T17481] Call Trace: [ 755.744148][T17481] [ 755.744168][T17481] dump_stack_lvl+0x16c/0x1f0 [ 755.744216][T17481] should_fail_ex+0x512/0x640 [ 755.744247][T17481] ? __kmalloc_cache_noprof+0x5f/0x800 [ 755.744284][T17481] should_failslab+0xc2/0x120 [ 755.744328][T17481] __kmalloc_cache_noprof+0x80/0x800 [ 755.744362][T17481] ? trace_pid_list_alloc+0x232/0x480 [ 755.744406][T17481] ? trace_pid_list_alloc+0x232/0x480 [ 755.744443][T17481] trace_pid_list_alloc+0x232/0x480 [ 755.744487][T17481] trace_pid_write+0x10c/0x4b0 [ 755.744521][T17481] ? __pfx_trace_pid_write+0x10/0x10 [ 755.744546][T17481] ? __pfx_aa_file_perm+0x10/0x10 [ 755.744591][T17481] ? update_last_data+0xaa/0x510 [ 755.744639][T17481] event_pid_write.isra.0+0x1e4/0x7f0 [ 755.744682][T17481] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 755.744734][T17481] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 755.744773][T17481] vfs_write+0x2a0/0x11d0 [ 755.744813][T17481] ? __pfx___mutex_lock+0x10/0x10 [ 755.744857][T17481] ? __pfx_vfs_write+0x10/0x10 [ 755.744904][T17481] ? __fget_files+0x20e/0x3c0 [ 755.744950][T17481] ksys_write+0x12a/0x250 [ 755.744989][T17481] ? __pfx_ksys_write+0x10/0x10 [ 755.745041][T17481] do_syscall_64+0xcd/0xf80 [ 755.745094][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.745125][T17481] RIP: 0033:0x7f8126f8f7c9 [ 755.745148][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.745184][T17481] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.745212][T17481] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 755.745234][T17481] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 755.745252][T17481] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 755.745271][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.745288][T17481] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 755.745328][T17481] [ 756.532625][T17490] mkiss: ax0: crc mode is auto. [ 756.816987][T17503] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 756.823947][T17503] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 757.272362][T17512] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 757.306252][T17511] ima: policy update failed [ 757.324104][ T30] audit: type=1802 audit(4294968610.628:39): pid=17511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2560" res=0 errno=0 [ 759.366837][T17566] FAULT_INJECTION: forcing a failure. [ 759.366837][T17566] name failslab, interval 1, probability 0, space 0, times 0 [ 759.386986][T17566] CPU: 0 UID: 0 PID: 17566 Comm: syz.0.2575 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.387030][T17566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.387039][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.387052][T17566] Call Trace: [ 759.387061][T17566] [ 759.387071][T17566] dump_stack_lvl+0x16c/0x1f0 [ 759.387112][T17566] should_fail_ex+0x512/0x640 [ 759.387140][T17566] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 759.387177][T17566] should_failslab+0xc2/0x120 [ 759.387216][T17566] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 759.387249][T17566] ? __d_alloc+0x35/0xa80 [ 759.387279][T17566] ? __d_alloc+0x35/0xa80 [ 759.387300][T17566] __d_alloc+0x35/0xa80 [ 759.387326][T17566] d_alloc_pseudo+0x1c/0xc0 [ 759.387355][T17566] alloc_file_pseudo+0xcf/0x230 [ 759.387388][T17566] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 759.387418][T17566] ? alloc_fd+0x471/0x7d0 [ 759.387462][T17566] sock_alloc_file+0x50/0x210 [ 759.387500][T17566] __sys_socket+0x1c0/0x260 [ 759.387525][T17566] ? fput+0x70/0xf0 [ 759.387556][T17566] ? __pfx___sys_socket+0x10/0x10 [ 759.387583][T17566] ? xfd_validate_state+0x61/0x180 [ 759.387608][T17566] ? __pfx_ksys_write+0x10/0x10 [ 759.387651][T17566] __x64_sys_socket+0x72/0xb0 [ 759.387675][T17566] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.387713][T17566] do_syscall_64+0xcd/0xf80 [ 759.387754][T17566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.387782][T17566] RIP: 0033:0x7fe27e98f7c9 [ 759.387803][T17566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.387829][T17566] RSP: 002b:00007fe27f7f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 759.387855][T17566] RAX: ffffffffffffffda RBX: 00007fe27ebe5fa0 RCX: 00007fe27e98f7c9 [ 759.387873][T17566] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 759.387889][T17566] RBP: 00007fe27ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 759.387906][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.387923][T17566] R13: 00007fe27ebe6038 R14: 00007fe27ebe5fa0 R15: 00007fffdd6b6a68 [ 759.387959][T17566] [ 759.722693][T17570] FAULT_INJECTION: forcing a failure. [ 759.722693][T17570] name failslab, interval 1, probability 0, space 0, times 0 [ 759.789711][T17570] CPU: 1 UID: 0 PID: 17570 Comm: syz.3.2574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.789752][T17570] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.789762][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.789777][T17570] Call Trace: [ 759.789786][T17570] [ 759.789797][T17570] dump_stack_lvl+0x16c/0x1f0 [ 759.789840][T17570] should_fail_ex+0x512/0x640 [ 759.789868][T17570] ? fs_reclaim_acquire+0xae/0x150 [ 759.789909][T17570] should_failslab+0xc2/0x120 [ 759.789949][T17570] __kmalloc_noprof+0xeb/0x910 [ 759.789980][T17570] ? tomoyo_encode2+0x100/0x3e0 [ 759.790019][T17570] ? tomoyo_encode2+0x100/0x3e0 [ 759.790051][T17570] tomoyo_encode2+0x100/0x3e0 [ 759.790089][T17570] tomoyo_encode+0x29/0x50 [ 759.790122][T17570] tomoyo_realpath_from_path+0x18f/0x6e0 [ 759.790170][T17570] tomoyo_check_open_permission+0x2ab/0x3c0 [ 759.790201][T17570] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 759.790264][T17570] ? lock_acquire+0x179/0x330 [ 759.790289][T17570] ? find_held_lock+0x2b/0x80 [ 759.790322][T17570] ? mnt_get_write_access+0x52/0x2f0 [ 759.790354][T17570] tomoyo_file_open+0x6b/0x90 [ 759.790393][T17570] security_file_open+0x84/0x1e0 [ 759.790427][T17570] do_dentry_open+0x597/0x1590 [ 759.790466][T17570] ? security_inode_permission+0xbf/0x260 [ 759.790510][T17570] vfs_open+0x82/0x3f0 [ 759.790542][T17570] path_openat+0x2078/0x3140 [ 759.790586][T17570] ? __pfx_path_openat+0x10/0x10 [ 759.790636][T17570] do_filp_open+0x20b/0x470 [ 759.790676][T17570] ? __pfx_do_filp_open+0x10/0x10 [ 759.790727][T17570] ? __pfx_kfree_link+0x10/0x10 [ 759.790770][T17570] ? alloc_fd+0x471/0x7d0 [ 759.790819][T17570] do_sys_openat2+0x121/0x290 [ 759.790849][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 759.790881][T17570] ? __sys_sendmsg+0x18c/0x220 [ 759.790924][T17570] __x64_sys_openat+0x174/0x210 [ 759.790955][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 759.791001][T17570] do_syscall_64+0xcd/0xf80 [ 759.791041][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.791069][T17570] RIP: 0033:0x7f953458f7c9 [ 759.791089][T17570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.791113][T17570] RSP: 002b:00007f95327ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 759.791138][T17570] RAX: ffffffffffffffda RBX: 00007f95347e5fa0 RCX: 00007f953458f7c9 [ 759.791156][T17570] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 759.791173][T17570] RBP: 00007f9534613f91 R08: 0000000000000000 R09: 0000000000000000 [ 759.791189][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.791205][T17570] R13: 00007f95347e6038 R14: 00007f95347e5fa0 R15: 00007ffcf4a1ec88 [ 759.791243][T17570] [ 759.791271][T17570] ERROR: Out of memory at tomoyo_realpath_from_path. [ 761.084719][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 761.845943][T17627] EXT4-fs warning: 6 callbacks suppressed [ 761.845958][T17627] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2586: No space for directory leaf checksum. Please run e2fsck -D. [ 761.893753][T17627] EXT4-fs error: 6 callbacks suppressed [ 761.893776][T17627] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2586: checksumming directory block 0 [ 761.975207][T17627] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 762.005314][T17627] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2586: No space for directory leaf checksum. Please run e2fsck -D. [ 762.100637][T17627] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2586: checksumming directory block 0 [ 762.114611][T17627] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 762.129177][T17627] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2586: No space for directory leaf checksum. Please run e2fsck -D. [ 762.146050][T17627] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2586: checksumming directory block 0 [ 762.166223][T17627] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 762.177731][T17627] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.4.2586: No space for directory leaf checksum. Please run e2fsck -D. [ 762.193538][T17627] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.4.2586: checksumming directory block 0 [ 762.322825][T17627] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 762.436376][T17627] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 762.494430][T17627] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 762.514629][T17627] FAULT_INJECTION: forcing a failure. [ 762.514629][T17627] name failslab, interval 1, probability 0, space 0, times 0 [ 762.552336][T17627] CPU: 1 UID: 0 PID: 17627 Comm: syz.4.2586 Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.552387][T17627] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.552398][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.552415][T17627] Call Trace: [ 762.552426][T17627] [ 762.552438][T17627] dump_stack_lvl+0x16c/0x1f0 [ 762.552494][T17627] should_fail_ex+0x512/0x640 [ 762.552526][T17627] ? kmem_cache_alloc_noprof+0x62/0x770 [ 762.552562][T17627] should_failslab+0xc2/0x120 [ 762.552601][T17627] kmem_cache_alloc_noprof+0x83/0x770 [ 762.552633][T17627] ? __kernfs_new_node+0xd2/0x9b0 [ 762.552667][T17627] ? __kernfs_new_node+0xd2/0x9b0 [ 762.552695][T17627] __kernfs_new_node+0xd2/0x9b0 [ 762.552735][T17627] ? __pfx___kernfs_new_node+0x10/0x10 [ 762.552779][T17627] ? find_held_lock+0x2b/0x80 [ 762.552818][T17627] ? kernfs_root+0xee/0x2a0 [ 762.552859][T17627] kernfs_new_node+0x13c/0x1e0 [ 762.552905][T17627] kernfs_create_dir_ns+0x4c/0x1a0 [ 762.552949][T17627] sysfs_create_dir_ns+0x13a/0x2b0 [ 762.552983][T17627] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 762.553014][T17627] ? find_held_lock+0x2b/0x80 [ 762.553051][T17627] ? class_dir_child_ns_type+0xd/0x60 [ 762.553092][T17627] kobject_add_internal+0x2c4/0x9d0 [ 762.553120][T17627] ? kobject_add+0xf1/0x240 [ 762.553152][T17627] kobject_add+0x16e/0x240 [ 762.553180][T17627] ? __pfx_kobject_add+0x10/0x10 [ 762.553212][T17627] ? kobject_put+0xaf/0x6f0 [ 762.553266][T17627] device_add+0x288/0x1980 [ 762.553313][T17627] ? __pfx_device_add+0x10/0x10 [ 762.553350][T17627] ? __init_waitqueue_head+0xca/0x150 [ 762.553397][T17627] firmware_fallback_sysfs+0x2ec/0xc40 [ 762.553439][T17627] _request_firmware+0x101c/0x14e0 [ 762.553488][T17627] ? __pfx__request_firmware+0x10/0x10 [ 762.553516][T17627] ? __pfx_netdev_run_todo+0x10/0x10 [ 762.553569][T17627] request_firmware+0x35/0x50 [ 762.553600][T17627] reg_reload_regdb+0x85/0x460 [ 762.553632][T17627] ? __pfx_reg_reload_regdb+0x10/0x10 [ 762.553664][T17627] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 762.553698][T17627] ? nl80211_pre_doit+0x1b0/0xb10 [ 762.553739][T17627] genl_family_rcv_msg_doit+0x209/0x2f0 [ 762.553789][T17627] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.553835][T17627] ? genl_get_cmd+0x194/0x580 [ 762.553886][T17627] ? bpf_lsm_capable+0x9/0x10 [ 762.553924][T17627] ? security_capable+0x7e/0x260 [ 762.553977][T17627] genl_rcv_msg+0x55c/0x800 [ 762.554006][T17627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.554035][T17627] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 762.554064][T17627] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 762.554088][T17627] ? __pfx_nl80211_post_doit+0x10/0x10 [ 762.554131][T17627] netlink_rcv_skb+0x158/0x420 [ 762.554168][T17627] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.554193][T17627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.554246][T17627] ? netlink_deliver_tap+0x1ae/0xd30 [ 762.554292][T17627] genl_rcv+0x28/0x40 [ 762.554333][T17627] netlink_unicast+0x5aa/0x870 [ 762.554381][T17627] ? __pfx_netlink_unicast+0x10/0x10 [ 762.554437][T17627] netlink_sendmsg+0x8c8/0xdd0 [ 762.554493][T17627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.554533][T17627] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 762.554580][T17627] ____sys_sendmsg+0xa5d/0xc30 [ 762.554620][T17627] ? copy_msghdr_from_user+0x10a/0x160 [ 762.554654][T17627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.554703][T17627] ? __pfx_futex_wake_mark+0x10/0x10 [ 762.554746][T17627] ___sys_sendmsg+0x134/0x1d0 [ 762.554782][T17627] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.554810][T17627] ? futex_private_hash_put+0x160/0x1b0 [ 762.554879][T17627] __sys_sendmsg+0x16d/0x220 [ 762.554915][T17627] ? __pfx___sys_sendmsg+0x10/0x10 [ 762.554951][T17627] ? __x64_sys_futex+0x1e0/0x4c0 [ 762.555004][T17627] do_syscall_64+0xcd/0xf80 [ 762.555049][T17627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.555075][T17627] RIP: 0033:0x7f8126f8f7c9 [ 762.555097][T17627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.555124][T17627] RSP: 002b:00007f8127eb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.555149][T17627] RAX: ffffffffffffffda RBX: 00007f81271e6090 RCX: 00007f8126f8f7c9 [ 762.555168][T17627] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000006 [ 762.555185][T17627] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 762.555203][T17627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.555218][T17627] R13: 00007f81271e6128 R14: 00007f81271e6090 R15: 00007ffcd29a11e8 [ 762.555256][T17627] [ 763.327756][T17627] kobject: kobject_add_internal failed for regulatory.db (error: -12 parent: firmware) [ 763.431120][T17627] firmware regulatory.db: fw_load_sysfs_fallback: device_register failed [ 764.285685][T17662] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2591'. [ 765.079418][T17682] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2596'. [ 765.263231][ T30] audit: type=1800 audit(4294968618.616:40): pid=17691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2598" name="dbroot" dev="configfs" ino=76914 res=0 errno=0 [ 766.403795][T17704] FAULT_INJECTION: forcing a failure. [ 766.403795][T17704] name failslab, interval 1, probability 0, space 0, times 0 [ 766.423422][T17704] CPU: 0 UID: 0 PID: 17704 Comm: syz.4.2601 Tainted: G U L syzkaller #0 PREEMPT(full) [ 766.423472][T17704] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 766.423484][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.423503][T17704] Call Trace: [ 766.423513][T17704] [ 766.423525][T17704] dump_stack_lvl+0x16c/0x1f0 [ 766.423574][T17704] should_fail_ex+0x512/0x640 [ 766.423605][T17704] ? kmem_cache_alloc_noprof+0x62/0x770 [ 766.423645][T17704] should_failslab+0xc2/0x120 [ 766.423689][T17704] kmem_cache_alloc_noprof+0x83/0x770 [ 766.423724][T17704] ? getname_flags.part.0+0x4c/0x550 [ 766.423768][T17704] ? getname_flags.part.0+0x4c/0x550 [ 766.423800][T17704] getname_flags.part.0+0x4c/0x550 [ 766.423839][T17704] getname_flags+0x93/0xf0 [ 766.423876][T17704] do_sys_openat2+0xb9/0x290 [ 766.423907][T17704] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.423954][T17704] __x64_sys_openat+0x174/0x210 [ 766.423988][T17704] ? __pfx___x64_sys_openat+0x10/0x10 [ 766.424034][T17704] do_syscall_64+0xcd/0xf80 [ 766.424077][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.424107][T17704] RIP: 0033:0x7f8126f8f7c9 [ 766.424130][T17704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.424157][T17704] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.424185][T17704] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 766.424205][T17704] RDX: 0000000000080080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 766.424224][T17704] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 766.424241][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.424259][T17704] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 766.424298][T17704] [ 768.109821][T17289] syz.2.2518 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 768.127895][T17289] CPU: 1 UID: 0 PID: 17289 Comm: syz.2.2518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 768.127948][T17289] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 768.127958][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 768.127974][T17289] Call Trace: [ 768.127984][T17289] [ 768.127994][T17289] dump_stack_lvl+0x16c/0x1f0 [ 768.128039][T17289] dump_header+0x101/0x960 [ 768.128073][T17289] oom_kill_process+0x176/0x910 [ 768.128105][T17289] out_of_memory+0x350/0x1700 [ 768.128134][T17289] ? __lock_acquire+0x436/0x2890 [ 768.128166][T17289] ? __pfx_out_of_memory+0x10/0x10 [ 768.128204][T17289] mem_cgroup_out_of_memory+0x118/0x130 [ 768.128235][T17289] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 768.128275][T17289] ? do_raw_spin_unlock+0x172/0x230 [ 768.128312][T17289] try_charge_memcg+0x695/0xd30 [ 768.128361][T17289] ? __pfx_try_charge_memcg+0x10/0x10 [ 768.128405][T17289] ? find_held_lock+0x11/0x80 [ 768.128441][T17289] ? rcu_read_unlock+0x17/0x60 [ 768.128477][T17289] charge_memcg+0x8a/0x230 [ 768.128516][T17289] __mem_cgroup_charge+0x2b/0x1e0 [ 768.128546][T17289] filemap_add_folio+0xe6/0x610 [ 768.128587][T17289] ? __pfx_filemap_add_folio+0x10/0x10 [ 768.128630][T17289] __filemap_get_folio_mpol+0x511/0xc60 [ 768.128673][T17289] filemap_fault+0x684/0x29d0 [ 768.128712][T17289] ? __pfx_filemap_fault+0x10/0x10 [ 768.128763][T17289] ? __pfx_filemap_map_pages+0x10/0x10 [ 768.128789][T17289] __do_fault+0x10d/0x490 [ 768.128825][T17289] ? __pfx_filemap_map_pages+0x10/0x10 [ 768.128852][T17289] do_fault+0xae4/0x1ad0 [ 768.128888][T17289] ? __pfx_filemap_map_pages+0x10/0x10 [ 768.128926][T17289] __handle_mm_fault+0x1919/0x2bb0 [ 768.128966][T17289] ? __pfx___handle_mm_fault+0x10/0x10 [ 768.128998][T17289] ? __pte_offset_map_lock+0x174/0x310 [ 768.129035][T17289] ? find_held_lock+0x2b/0x80 [ 768.129081][T17289] ? follow_page_pte+0x5cf/0x1390 [ 768.129129][T17289] handle_mm_fault+0x3fe/0xad0 [ 768.129165][T17289] __get_user_pages+0x54e/0x3590 [ 768.129218][T17289] ? __pfx___get_user_pages+0x10/0x10 [ 768.129257][T17289] ? __kernel_write_iter+0x5a5/0xb10 [ 768.129302][T17289] get_dump_page+0x257/0x3d0 [ 768.129342][T17289] ? __pfx_get_dump_page+0x10/0x10 [ 768.129382][T17289] ? dump_user_range+0x756/0xb70 [ 768.129427][T17289] dump_user_range+0x195/0xb70 [ 768.129474][T17289] ? __pfx_dump_user_range+0x10/0x10 [ 768.129514][T17289] ? elf_coredump_extra_notes_write+0xbd/0x500 [ 768.129553][T17289] ? __pfx_writenote+0x10/0x10 [ 768.129610][T17289] elf_core_dump+0x29c3/0x3c10 [ 768.129653][T17289] ? __pfx_elf_core_dump+0x10/0x10 [ 768.129677][T17289] ? update_se+0x43f/0x6f0 [ 768.129722][T17289] ? __pick_eevdf+0x14c/0x440 [ 768.129760][T17289] ? 0xffffffffff600000 [ 768.129785][T17289] ? rcu_is_watching+0x12/0xc0 [ 768.129822][T17289] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 768.129918][T17289] ? vfs_coredump+0x2b85/0x55e0 [ 768.129955][T17289] vfs_coredump+0x2b85/0x55e0 [ 768.130009][T17289] ? __pfx_vfs_coredump+0x10/0x10 [ 768.130047][T17289] ? __lock_acquire+0x436/0x2890 [ 768.130081][T17289] ? __lock_acquire+0x436/0x2890 [ 768.130108][T17289] ? lock_acquire+0x179/0x330 [ 768.130139][T17289] ? lock_acquire+0x179/0x330 [ 768.130190][T17289] ? arch_stack_walk+0xa6/0x100 [ 768.130238][T17289] ? stack_trace_save+0x8e/0xc0 [ 768.130278][T17289] ? __pfx_stack_trace_save+0x10/0x10 [ 768.130319][T17289] ? stack_depot_save_flags+0x29/0x9b0 [ 768.130349][T17289] ? __lock_acquire+0x436/0x2890 [ 768.130380][T17289] ? kasan_save_stack+0x42/0x60 [ 768.130480][T17289] ? proc_coredump_connector+0x2d1/0x4f0 [ 768.130522][T17289] ? __pfx_proc_coredump_connector+0x10/0x10 [ 768.130595][T17289] ? rcu_is_watching+0x12/0xc0 [ 768.130637][T17289] get_signal+0x22e1/0x26d0 [ 768.130689][T17289] ? __pfx_get_signal+0x10/0x10 [ 768.130723][T17289] ? find_held_lock+0x2b/0x80 [ 768.130755][T17289] ? fixup_vdso_exception+0x34b/0x400 [ 768.130803][T17289] arch_do_signal_or_restart+0x8f/0x7a0 [ 768.130843][T17289] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 768.130893][T17289] ? do_user_addr_fault+0xa62/0x1370 [ 768.130934][T17289] irqentry_exit+0x38a/0x8c0 [ 768.130978][T17289] asm_exc_page_fault+0x26/0x30 [ 768.131005][T17289] RIP: 0033:0x0 [ 768.131025][T17289] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 768.131039][T17289] RSP: 002b:000000000000000e EFLAGS: 00010217 [ 768.131060][T17289] RAX: 0000000000000000 RBX: 00007f9e04be6270 RCX: 00007f9e0498f7c9 [ 768.131080][T17289] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000010051c [ 768.131097][T17289] RBP: 00007f9e04a13f91 R08: 0000000080000001 R09: 0000000000000000 [ 768.131115][T17289] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 768.131133][T17289] R13: 00007f9e04be6308 R14: 00007f9e04be6270 R15: 00007ffef8efda98 [ 768.131174][T17289] [ 768.132310][T17289] memory: usage 3072kB, limit 3072kB, failcnt 281725 [ 768.615331][T17289] memory+swap: usage 86880kB, limit 9007199254740988kB, failcnt 0 [ 768.629445][T17289] kmem: usage 2816kB, limit 9007199254740988kB, failcnt 0 [ 768.653549][T17289] Memory cgroup stats for /syz2: [ 768.653753][T17289] cache 0 [ 768.677307][T17289] rss 0 [ 768.686979][T17289] rss_huge 0 [ 768.696175][T17289] shmem 0 [ 768.702273][T17289] mapped_file 0 [ 768.715167][T17289] dirty 0 [ 768.718909][T17289] writeback 0 [ 768.729423][T17289] workingset_refault_anon 48645 [ 768.740722][T17289] workingset_refault_file 46547 [ 768.756034][T17289] swap 85819392 [ 768.762798][T17289] swapcached 212992 [ 768.775543][T17289] pgpgin 643113 [ 768.779062][T17289] pgpgout 645105 [ 768.790362][T17289] pgfault 563281 [ 768.802430][T17289] pgmajfault 17942 [ 768.810571][T17289] inactive_anon 212992 [ 768.837504][T17289] active_anon 0 [ 768.854514][T17289] inactive_file 0 [ 768.858247][T17289] active_file 0 [ 768.869147][T17289] unevictable 0 [ 768.881580][T17289] hierarchical_memory_limit 3145728 [ 768.898341][T17289] hierarchical_memsw_limit 9223372036854771712 [ 768.924765][T17289] total_cache 0 [ 768.947525][T17289] total_rss 0 [ 768.955501][T17289] total_rss_huge 0 [ 768.965910][T17289] total_shmem 0 [ 768.972480][T17289] total_mapped_file 0 [ 769.000384][T17289] total_dirty 0 [ 769.023684][T17289] total_writeback 0 [ 769.027644][T17289] total_workingset_refault_anon 48645 [ 769.063526][T17289] total_workingset_refault_file 46547 [ 769.069042][T17289] total_swap 85819392 [ 769.093391][T17289] total_swapcached 212992 [ 769.114758][T17289] total_pgpgin 643113 [ 769.123243][T17289] total_pgpgout 645105 [ 769.127372][T17289] total_pgfault 563281 [ 769.138621][T17289] total_pgmajfault 17942 [ 769.142899][T17289] total_inactive_anon 212992 [ 769.148180][T17289] total_active_anon 0 [ 769.152159][T17289] total_inactive_file 0 [ 769.163157][T17289] total_active_file 0 [ 769.167181][T17289] total_unevictable 0 [ 769.183283][T17289] anon_cost 0 [ 769.186800][T17289] file_cost 0 [ 769.190075][T17289] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2518,pid=17289,uid=0 [ 769.247648][T17289] Memory cgroup out of memory: Killed process 17289 (syz.2.2518) total-vm:143668kB, anon-rss:1244kB, file-rss:63516kB, shmem-rss:120kB, UID:0 pgtables:292kB oom_score_adj:1000 [ 770.289293][T17741] FAULT_INJECTION: forcing a failure. [ 770.289293][T17741] name failslab, interval 1, probability 0, space 0, times 0 [ 770.365537][T17754] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input39 [ 770.450005][T17741] CPU: 1 UID: 0 PID: 17741 Comm: syz.0.2608 Tainted: G U L syzkaller #0 PREEMPT(full) [ 770.450052][T17741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 770.450062][T17741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.450078][T17741] Call Trace: [ 770.450087][T17741] [ 770.450097][T17741] dump_stack_lvl+0x16c/0x1f0 [ 770.450141][T17741] should_fail_ex+0x512/0x640 [ 770.450170][T17741] ? kmem_cache_alloc_noprof+0x62/0x770 [ 770.450202][T17741] should_failslab+0xc2/0x120 [ 770.450241][T17741] kmem_cache_alloc_noprof+0x83/0x770 [ 770.450273][T17741] ? alloc_empty_file+0x55/0x1e0 [ 770.450329][T17741] ? alloc_empty_file+0x55/0x1e0 [ 770.450356][T17741] alloc_empty_file+0x55/0x1e0 [ 770.450384][T17741] alloc_file_pseudo+0x13a/0x230 [ 770.450416][T17741] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 770.450450][T17741] ? do_raw_spin_unlock+0x172/0x230 [ 770.450485][T17741] __anon_inode_getfile+0xe8/0x280 [ 770.450518][T17741] anon_inode_getfile_fmode+0x37/0xa0 [ 770.450548][T17741] do_eventfd+0x156/0x390 [ 770.450579][T17741] ? rcu_is_watching+0x12/0xc0 [ 770.450617][T17741] __x64_sys_eventfd+0x32/0x50 [ 770.450651][T17741] do_syscall_64+0xcd/0xf80 [ 770.450691][T17741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.450718][T17741] RIP: 0033:0x7fe27e98f7c9 [ 770.450741][T17741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.450765][T17741] RSP: 002b:00007fe27f7f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 770.450791][T17741] RAX: ffffffffffffffda RBX: 00007fe27ebe5fa0 RCX: 00007fe27e98f7c9 [ 770.450810][T17741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 770.450826][T17741] RBP: 00007fe27ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 770.450842][T17741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.450858][T17741] R13: 00007fe27ebe6038 R14: 00007fe27ebe5fa0 R15: 00007fffdd6b6a68 [ 770.450894][T17741] [ 771.414682][T17763] zswap: compressor not available [ 771.691697][T17783] futex_wake_op: syz.3.2616 tries to shift op by -2048; fix this program [ 771.770796][T15166] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 772.163847][T17793] can: request_module (can-proto-0) failed. [ 772.717364][T17813] hub 1-0:1.0: USB hub found [ 772.736530][T17813] hub 1-0:1.0: 1 port detected [ 773.610632][T17839] ptp ptp0: only physical clock in use now [ 774.018996][T17843] FAULT_INJECTION: forcing a failure. [ 774.018996][T17843] name failslab, interval 1, probability 0, space 0, times 0 [ 774.035426][T17843] CPU: 1 UID: 0 PID: 17843 Comm: syz.4.2629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 774.035480][T17843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 774.035492][T17843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.035509][T17843] Call Trace: [ 774.035519][T17843] [ 774.035532][T17843] dump_stack_lvl+0x16c/0x1f0 [ 774.035579][T17843] should_fail_ex+0x512/0x640 [ 774.035610][T17843] ? kmem_cache_alloc_noprof+0x62/0x770 [ 774.035649][T17843] should_failslab+0xc2/0x120 [ 774.035702][T17843] kmem_cache_alloc_noprof+0x83/0x770 [ 774.035737][T17843] ? getname_flags.part.0+0x4c/0x550 [ 774.035775][T17843] ? getname_flags.part.0+0x4c/0x550 [ 774.035805][T17843] getname_flags.part.0+0x4c/0x550 [ 774.035840][T17843] getname_flags+0x93/0xf0 [ 774.035877][T17843] do_sys_openat2+0xb9/0x290 [ 774.035908][T17843] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.035939][T17843] ? putname+0xf5/0x1a0 [ 774.035966][T17843] ? do_unlinkat+0x152/0x660 [ 774.036029][T17843] __x64_sys_openat+0x174/0x210 [ 774.036062][T17843] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.036110][T17843] do_syscall_64+0xcd/0xf80 [ 774.036154][T17843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.036184][T17843] RIP: 0033:0x7f8126f8f7c9 [ 774.036208][T17843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.036236][T17843] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.036260][T17843] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 774.036279][T17843] RDX: 000000000000a901 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 774.036298][T17843] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.036320][T17843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.036337][T17843] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 774.036377][T17843] [ 775.415137][T17890] Invalid ELF header magic: != ELF [ 776.950407][T17923] random: crng reseeded on system resumption [ 777.773196][T17945] mkiss: ax0: crc mode is auto. [ 780.242783][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2661'. [ 780.312937][T17983] ip6g: entered promiscuous mode [ 780.486353][T17976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2661'. [ 782.103387][T18009] zswap: compressor û not available [ 782.575209][T18024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 782.629752][T18022] zswap: compressor not available [ 782.830620][T18022] nbd: must specify a device to reconfigure [ 783.301933][T18050] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 783.727729][T18061] usbip-vudc usbip-vudc.0: gadget not bound [ 784.156271][T18073] nvme_fcloop: unknown parameter or missing value '7' [ 784.261546][T18077] FAULT_INJECTION: forcing a failure. [ 784.261546][T18077] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.301533][T18077] CPU: 1 UID: 0 PID: 18077 Comm: syz.4.2677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 784.301586][T18077] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 784.301600][T18077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.301618][T18077] Call Trace: [ 784.301629][T18077] [ 784.301640][T18077] dump_stack_lvl+0x16c/0x1f0 [ 784.301688][T18077] should_fail_ex+0x512/0x640 [ 784.301729][T18077] should_fail_alloc_page+0xe7/0x130 [ 784.301773][T18077] prepare_alloc_pages+0x401/0x670 [ 784.301833][T18077] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 784.301869][T18077] ? __lock_acquire+0x436/0x2890 [ 784.301903][T18077] ? __lock_acquire+0x436/0x2890 [ 784.301935][T18077] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.301988][T18077] ? is_bpf_text_address+0x8a/0x1a0 [ 784.302025][T18077] ? bpf_ksym_find+0x124/0x1c0 [ 784.302054][T18077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.302098][T18077] ? policy_nodemask+0xea/0x4e0 [ 784.302142][T18077] alloc_pages_mpol+0x1fb/0x550 [ 784.302183][T18077] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 784.302234][T18077] alloc_pages_noprof+0x131/0x390 [ 784.302276][T18077] __pud_alloc+0x3b/0x760 [ 784.302320][T18077] copy_page_range+0x40e0/0x6780 [ 784.302350][T18077] ? __lock_acquire+0x436/0x2890 [ 784.302379][T18077] ? __lock_acquire+0x436/0x2890 [ 784.302417][T18077] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.302459][T18077] ? mas_wr_store_entry+0xa14/0x2550 [ 784.302491][T18077] ? __pfx_copy_page_range+0x10/0x10 [ 784.302524][T18077] ? mas_store+0xb4b/0x12f0 [ 784.302554][T18077] ? __vma_enter_locked+0x1dc/0x770 [ 784.302580][T18077] ? __pfx_mas_store+0x10/0x10 [ 784.302625][T18077] dup_mmap+0xbea/0x20e0 [ 784.302679][T18077] ? __pfx_dup_mmap+0x10/0x10 [ 784.302747][T18077] copy_process+0x3b9f/0x7430 [ 784.302784][T18077] ? preempt_schedule_thunk+0x16/0x30 [ 784.302840][T18077] ? __pfx_copy_process+0x10/0x10 [ 784.302882][T18077] ? find_held_lock+0x2b/0x80 [ 784.302922][T18077] ? futex_private_hash_put+0x160/0x1b0 [ 784.302963][T18077] kernel_clone+0xfc/0x910 [ 784.303005][T18077] ? __pfx_futex_wake+0x10/0x10 [ 784.303041][T18077] ? __pfx_kernel_clone+0x10/0x10 [ 784.303080][T18077] ? __pfx_vfs_writev+0x10/0x10 [ 784.303138][T18077] __do_sys_clone+0xce/0x120 [ 784.303180][T18077] ? __pfx___do_sys_clone+0x10/0x10 [ 784.303238][T18077] ? xfd_validate_state+0x61/0x180 [ 784.303264][T18077] ? __pfx_do_writev+0x10/0x10 [ 784.303311][T18077] do_syscall_64+0xcd/0xf80 [ 784.303355][T18077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.303384][T18077] RIP: 0033:0x7f8126f8f7c9 [ 784.303408][T18077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.303436][T18077] RSP: 002b:00007f8127eb3fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 784.303464][T18077] RAX: ffffffffffffffda RBX: 00007f81271e6090 RCX: 00007f8126f8f7c9 [ 784.303485][T18077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000600 [ 784.303504][T18077] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 784.303522][T18077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 784.303541][T18077] R13: 00007f81271e6128 R14: 00007f81271e6090 R15: 00007ffcd29a11e8 [ 784.303583][T18077] [ 785.546251][T18111] hub 1-0:1.0: USB hub found [ 785.552884][T18111] hub 1-0:1.0: 1 port detected [ 785.687472][T18118] FAULT_INJECTION: forcing a failure. [ 785.687472][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 785.726443][T18118] CPU: 0 UID: 0 PID: 18118 Comm: syz.4.2687 Tainted: G U L syzkaller #0 PREEMPT(full) [ 785.726494][T18118] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 785.726506][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.726528][T18118] Call Trace: [ 785.726538][T18118] [ 785.726550][T18118] dump_stack_lvl+0x16c/0x1f0 [ 785.726600][T18118] should_fail_ex+0x512/0x640 [ 785.726631][T18118] ? kmem_cache_alloc_noprof+0x62/0x770 [ 785.726668][T18118] should_failslab+0xc2/0x120 [ 785.726710][T18118] kmem_cache_alloc_noprof+0x83/0x770 [ 785.726746][T18118] ? ptlock_alloc+0x1f/0x70 [ 785.726783][T18118] ? ptlock_alloc+0x1f/0x70 [ 785.726810][T18118] ptlock_alloc+0x1f/0x70 [ 785.726839][T18118] pte_alloc_one+0x84/0x3d0 [ 785.726879][T18118] do_fault+0x8b8/0x1ad0 [ 785.726929][T18118] ? __pfx_filemap_map_pages+0x10/0x10 [ 785.726963][T18118] ? __pmd_alloc+0x6aa/0x9c0 [ 785.727011][T18118] __handle_mm_fault+0x1919/0x2bb0 [ 785.727053][T18118] ? __pfx___handle_mm_fault+0x10/0x10 [ 785.727107][T18118] ? find_vma+0xbf/0x140 [ 785.727145][T18118] ? __pfx_find_vma+0x10/0x10 [ 785.727188][T18118] handle_mm_fault+0x3fe/0xad0 [ 785.727226][T18118] do_user_addr_fault+0x7a6/0x1370 [ 785.727265][T18118] ? rcu_is_watching+0x12/0xc0 [ 785.727308][T18118] exc_page_fault+0x64/0xc0 [ 785.727350][T18118] asm_exc_page_fault+0x26/0x30 [ 785.727378][T18118] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 785.727414][T18118] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 785.727443][T18118] RSP: 0018:ffffc9000d7ffd90 EFLAGS: 00050206 [ 785.727467][T18118] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000054 [ 785.727485][T18118] RDX: fffff52001afffcc RSI: 0000000000000000 RDI: ffffc9000d7ffe08 [ 785.727505][T18118] RBP: 0000000000000054 R08: 0000000000000001 R09: fffff52001afffcb [ 785.727523][T18118] R10: ffffc9000d7ffe5b R11: ffff88802b93a9b0 R12: 0000000000000000 [ 785.727542][T18118] R13: ffffc9000d7ffe08 R14: 0000000000000054 R15: 0000000000000000 [ 785.727580][T18118] _copy_from_user+0x98/0xd0 [ 785.727613][T18118] move_addr_to_kernel+0x65/0x170 [ 785.727643][T18118] __sys_connect+0xb1/0x160 [ 785.727672][T18118] ? __pfx___sys_connect+0x10/0x10 [ 785.727776][T18118] ? xfd_validate_state+0x61/0x180 [ 785.727813][T18118] ? __pfx_ksys_write+0x10/0x10 [ 785.727859][T18118] __x64_sys_connect+0x72/0xb0 [ 785.727888][T18118] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.727927][T18118] do_syscall_64+0xcd/0xf80 [ 785.727977][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.728008][T18118] RIP: 0033:0x7f8126f8f7c9 [ 785.728032][T18118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.728062][T18118] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 785.728092][T18118] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 785.728112][T18118] RDX: 0000000000000054 RSI: 0000000000000000 RDI: 0000000000000003 [ 785.728130][T18118] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.728148][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.728166][T18118] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 785.728205][T18118] [ 786.797023][ T30] audit: type=1804 audit(4294968640.247:41): pid=18133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2691" name="/newroot/43/file0" dev="tmpfs" ino=240 res=1 errno=0 [ 788.687332][T18159] netlink: 'syz.4.2697': attribute type 4 has an invalid length. [ 788.695447][T18159] netlink: 306 bytes leftover after parsing attributes in process `syz.4.2697'. [ 790.036346][T18195] mkiss: ax0: crc mode is auto. [ 790.476225][T18213] Â: entered promiscuous mode [ 790.481898][T18216] MTRR 2 not used [ 790.503596][T18216] MTRR 2 not used [ 790.832332][ T30] audit: type=1800 audit(4294968644.306:42): pid=18226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2714" name="dbroot" dev="configfs" ino=78681 res=0 errno=0 [ 791.181076][T18228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2713'. [ 791.699868][T18238] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2716'. [ 791.781889][T18235] zswap: compressor not available [ 792.352217][T18259] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 792.445991][T18251] hub 1-0:1.0: USB hub found [ 792.483482][T18251] hub 1-0:1.0: 1 port detected [ 792.749744][T18270] random: crng reseeded on system resumption [ 794.203380][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2727'. [ 794.719277][T18314] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 794.736539][T18316] vhci_hcd: not connected 4 [ 794.752807][T18314] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 794.803084][T18314] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 794.846215][T18314] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 794.875097][T18316] FAULT_INJECTION: forcing a failure. [ 794.875097][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 794.898623][T18322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 794.985441][T18323] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 795.019379][T18323] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 795.044725][T18316] CPU: 1 UID: 0 PID: 18316 Comm: syz.4.2731 Tainted: G U L syzkaller #0 PREEMPT(full) [ 795.044776][T18316] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 795.044787][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.044804][T18316] Call Trace: [ 795.044814][T18316] [ 795.044825][T18316] dump_stack_lvl+0x16c/0x1f0 [ 795.044873][T18316] should_fail_ex+0x512/0x640 [ 795.044905][T18316] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 795.044946][T18316] should_failslab+0xc2/0x120 [ 795.044990][T18316] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 795.045027][T18316] ? mqueue_alloc_inode+0x25/0x50 [ 795.045076][T18316] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 795.045116][T18316] ? mqueue_alloc_inode+0x25/0x50 [ 795.045155][T18316] mqueue_alloc_inode+0x25/0x50 [ 795.045197][T18316] alloc_inode+0x64/0x240 [ 795.045228][T18316] new_inode+0x22/0x1c0 [ 795.045263][T18316] mqueue_get_inode+0x2e/0xdd0 [ 795.045310][T18316] mqueue_create_attr+0x2b6/0x570 [ 795.045343][T18316] vfs_mkobj+0x3db/0x620 [ 795.045372][T18316] ? __pfx_mqueue_create_attr+0x10/0x10 [ 795.045406][T18316] do_mq_open+0x7a1/0x9e0 [ 795.045452][T18316] ? __pfx_do_mq_open+0x10/0x10 [ 795.045491][T18316] ? arch_do_signal_or_restart+0x211/0x7a0 [ 795.045532][T18316] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 795.045589][T18316] __x64_sys_mq_open+0x155/0x1e0 [ 795.045619][T18316] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 795.045667][T18316] do_syscall_64+0xcd/0xf80 [ 795.045711][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.045740][T18316] RIP: 0033:0x7f8126f8f7c9 [ 795.045763][T18316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.045790][T18316] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 795.045817][T18316] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 795.045836][T18316] RDX: 000000000000fffc RSI: 0000000000000062 RDI: 00002000000000c0 [ 795.045855][T18316] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 795.045873][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.045890][T18316] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 795.045931][T18316] [ 795.320710][T18323] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 795.340275][T18323] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 795.616348][T18324] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 795.637002][T18330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 795.668816][T18324] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 795.717170][T18324] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 795.752716][T18324] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 796.013805][T18334] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 796.066599][T18334] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 796.102398][T18334] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 796.163400][T18334] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 798.268671][T18375] zswap: compressor not available [ 798.477712][T18388] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 800.927940][T18426] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 800.970294][T18426] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 800.996324][T18426] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 801.030610][T18426] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 801.171421][T18430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 801.211795][T18430] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 801.247547][T18430] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 801.273057][T18430] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 801.426998][T18434] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 801.466344][T18434] EXT4-fs error (device sda1): htree_dirblock_to_tree:1051: inode #268: comm dhcpcd-run-hook: Directory block failed checksum [ 801.500185][T18434] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #268: comm dhcpcd-run-hook: No space for directory leaf checksum. Please run e2fsck -D. [ 801.541339][T18434] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #268: comm dhcpcd-run-hook: checksumming directory block 0 [ 802.719548][T18416] FAULT_INJECTION: forcing a failure. [ 802.719548][T18416] name failslab, interval 1, probability 0, space 0, times 0 [ 802.765148][T18416] CPU: 1 UID: 0 PID: 18416 Comm: syz.2.2756 Tainted: G U L syzkaller #0 PREEMPT(full) [ 802.765199][T18416] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 802.765210][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.765220][T18416] Call Trace: [ 802.765227][T18416] [ 802.765233][T18416] dump_stack_lvl+0x16c/0x1f0 [ 802.765261][T18416] should_fail_ex+0x512/0x640 [ 802.765278][T18416] ? kmem_cache_alloc_noprof+0x62/0x770 [ 802.765298][T18416] should_failslab+0xc2/0x120 [ 802.765322][T18416] kmem_cache_alloc_noprof+0x83/0x770 [ 802.765339][T18416] ? skb_clone+0x190/0x3f0 [ 802.765362][T18416] ? skb_clone+0x190/0x3f0 [ 802.765378][T18416] skb_clone+0x190/0x3f0 [ 802.765397][T18416] netlink_broadcast_filtered+0xb76/0xf90 [ 802.765427][T18416] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 802.765447][T18416] ? sprintf+0xcc/0x100 [ 802.765472][T18416] ? netlink_has_listeners+0x20f/0x430 [ 802.765494][T18416] netlink_broadcast+0x39/0x50 [ 802.765515][T18416] kobject_uevent_env+0xcbc/0x1920 [ 802.765540][T18416] nfs_netns_sysfs_setup+0x173/0x1f0 [ 802.765562][T18416] nfs_net_init+0x10a/0x340 [ 802.765582][T18416] ? __pfx_nfs_net_init+0x10/0x10 [ 802.765614][T18416] ops_init+0x1e2/0x5f0 [ 802.765641][T18416] setup_net+0x11d/0x3a0 [ 802.765661][T18416] ? __pfx_setup_net+0x10/0x10 [ 802.765679][T18416] ? lockdep_init_map_type+0x5c/0x270 [ 802.765694][T18416] ? mutex_init_lockep+0x110/0x150 [ 802.765712][T18416] copy_net_ns+0x351/0x7c0 [ 802.765735][T18416] create_new_namespaces+0x3ea/0xab0 [ 802.765777][T18416] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 802.765826][T18416] ksys_unshare+0x45b/0xa40 [ 802.765862][T18416] ? __pfx_ksys_unshare+0x10/0x10 [ 802.765889][T18416] ? xfd_validate_state+0x61/0x180 [ 802.765924][T18416] __x64_sys_unshare+0x31/0x40 [ 802.765966][T18416] do_syscall_64+0xcd/0xf80 [ 802.765995][T18416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.766011][T18416] RIP: 0033:0x7f9e0498f7c9 [ 802.766025][T18416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.766042][T18416] RSP: 002b:00007f9e05884038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 802.766058][T18416] RAX: ffffffffffffffda RBX: 00007f9e04be5fa0 RCX: 00007f9e0498f7c9 [ 802.766068][T18416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 802.766078][T18416] RBP: 00007f9e04a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 802.766087][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.766097][T18416] R13: 00007f9e04be6038 R14: 00007f9e04be5fa0 R15: 00007ffef8efda98 [ 802.766122][T18416] [ 807.880570][T18518] snd_aloop snd_aloop.0: control 7:268:7:ª¸è:2 is already present [ 810.800407][T18540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2783'. [ 810.971119][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.985386][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.158676][T18564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 814.532923][T18564] FAULT_INJECTION: forcing a failure. [ 814.532923][T18564] name failslab, interval 1, probability 0, space 0, times 0 [ 814.968650][T18564] CPU: 1 UID: 0 PID: 18564 Comm: syz.4.2787 Tainted: G U L syzkaller #0 PREEMPT(full) [ 814.968712][T18564] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 814.968724][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 814.968741][T18564] Call Trace: [ 814.968751][T18564] [ 814.968763][T18564] dump_stack_lvl+0x16c/0x1f0 [ 814.968810][T18564] should_fail_ex+0x512/0x640 [ 814.968843][T18564] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 814.968891][T18564] should_failslab+0xc2/0x120 [ 814.968935][T18564] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 814.968978][T18564] ? debugfs_create_symlink+0x29/0x260 [ 814.969014][T18564] ? kstrdup+0x53/0x100 [ 814.969044][T18564] kstrdup+0x53/0x100 [ 814.969086][T18564] debugfs_create_symlink+0x29/0x260 [ 814.969118][T18564] ref_tracker_dir_symlink+0x255/0x3c0 [ 814.969156][T18564] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 814.969193][T18564] ? __lock_acquire+0x436/0x2890 [ 814.969251][T18564] ? lockdep_hardirqs_on+0x7c/0x110 [ 814.969292][T18564] ? crng_make_state+0x48e/0x6c0 [ 814.969331][T18564] ? __pfx_net_ns_net_init+0x10/0x10 [ 814.969370][T18564] net_ns_net_init+0xd2/0x120 [ 814.969409][T18564] ops_init+0x1e2/0x5f0 [ 814.969449][T18564] setup_net+0x11d/0x3a0 [ 814.969487][T18564] ? __pfx_setup_net+0x10/0x10 [ 814.969522][T18564] ? lockdep_init_map_type+0x5c/0x270 [ 814.969552][T18564] ? mutex_init_lockep+0x110/0x150 [ 814.969588][T18564] copy_net_ns+0x351/0x7c0 [ 814.969634][T18564] create_new_namespaces+0x3ea/0xab0 [ 814.969688][T18564] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 814.969731][T18564] ksys_unshare+0x45b/0xa40 [ 814.969775][T18564] ? __pfx_ksys_unshare+0x10/0x10 [ 814.969821][T18564] ? syscall_user_dispatch+0x78/0x140 [ 814.969865][T18564] __x64_sys_unshare+0x31/0x40 [ 814.969907][T18564] do_syscall_64+0xcd/0xf80 [ 814.969951][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.969981][T18564] RIP: 0033:0x7f8126f8f7c9 [ 814.970004][T18564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.970031][T18564] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 814.970059][T18564] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 814.970079][T18564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 814.970096][T18564] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 814.970115][T18564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.970133][T18564] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 814.970172][T18564] [ 815.849104][T18584] Console: switching to colour frame buffer device 128x48 [ 816.760443][T18596] netlink: zone id is out of range [ 816.843563][T18596] netlink: del zone limit has 4 unknown bytes [ 817.106625][T18591] HfR: entered promiscuous mode [ 817.183237][T18595] netlink: set zone limit has 8 unknown bytes [ 817.595648][T18600] FAULT_INJECTION: forcing a failure. [ 817.595648][T18600] name failslab, interval 1, probability 0, space 0, times 0 [ 817.669312][T18600] CPU: 0 UID: 0 PID: 18600 Comm: syz.3.2793 Tainted: G U L syzkaller #0 PREEMPT(full) [ 817.669367][T18600] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 817.669379][T18600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.669395][T18600] Call Trace: [ 817.669406][T18600] [ 817.669417][T18600] dump_stack_lvl+0x16c/0x1f0 [ 817.669467][T18600] should_fail_ex+0x512/0x640 [ 817.669505][T18600] should_failslab+0xc2/0x120 [ 817.669550][T18600] kmem_cache_alloc_noprof+0x83/0x770 [ 817.669586][T18600] ? dst_alloc+0x99/0x1a0 [ 817.669625][T18600] ? dst_alloc+0x99/0x1a0 [ 817.669654][T18600] dst_alloc+0x99/0x1a0 [ 817.669689][T18600] rt_dst_alloc+0x35/0x3a0 [ 817.669736][T18600] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 817.669781][T18600] ip_route_output_key_hash+0x10f/0x2b0 [ 817.669816][T18600] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 817.669848][T18600] ? __pfx_tomoyo_audit_inet_log+0x10/0x10 [ 817.669904][T18600] tcp_v4_connect+0x821/0x1c10 [ 817.669948][T18600] ? __pfx_tcp_v4_connect+0x10/0x10 [ 817.669979][T18600] ? __lock_acquire+0x436/0x2890 [ 817.670018][T18600] __inet_stream_connect+0x915/0xf50 [ 817.670062][T18600] ? __pfx___inet_stream_connect+0x10/0x10 [ 817.670096][T18600] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 817.670135][T18600] ? __pfx_inet_stream_connect+0x10/0x10 [ 817.670178][T18600] ? __local_bh_enable_ip+0xa4/0x120 [ 817.670223][T18600] ? __pfx_inet_stream_connect+0x10/0x10 [ 817.670255][T18600] inet_stream_connect+0x57/0xa0 [ 817.670290][T18600] __sys_connect_file+0x141/0x1a0 [ 817.670325][T18600] __sys_connect+0x13b/0x160 [ 817.670355][T18600] ? __pfx___sys_connect+0x10/0x10 [ 817.670399][T18600] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 817.670452][T18600] __x64_sys_connect+0x72/0xb0 [ 817.670481][T18600] ? lockdep_hardirqs_on+0x7c/0x110 [ 817.670522][T18600] do_syscall_64+0xcd/0xf80 [ 817.670566][T18600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.670597][T18600] RIP: 0033:0x7f953458f7c9 [ 817.670620][T18600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.670647][T18600] RSP: 002b:00007f95327ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 817.670675][T18600] RAX: ffffffffffffffda RBX: 00007f95347e5fa0 RCX: 00007f953458f7c9 [ 817.670695][T18600] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 817.670714][T18600] RBP: 00007f9534613f91 R08: 0000000000000000 R09: 0000000000000000 [ 817.670732][T18600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.670749][T18600] R13: 00007f95347e6038 R14: 00007f95347e5fa0 R15: 00007ffcf4a1ec88 [ 817.670790][T18600] [ 818.185547][T18607] syz_tun: refused to change device tx_queue_len [ 820.758989][T18645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 825.379429][T18716] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2818'. [ 825.399739][T18719] netlink: 376 bytes leftover after parsing attributes in process `syz.3.2818'. [ 827.195501][T18751] vhci_hcd vhci_hcd.0: invalid port number 16 [ 827.627690][T18762] sp0: Synchronizing with TNC [ 829.110167][T18786] netlink: zone id is out of range [ 829.185153][T18784] bond0: invalid ARP target specified [ 833.358007][T18865] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2853'. [ 833.521530][T18869] dyndbg: expected <4096 bytes into control [ 833.540142][T18869] ptp ptp0: only physical clock in use now [ 833.635829][T18872] dyndbg: expected <4096 bytes into control [ 833.671146][T18871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2856'. [ 833.747544][T18873] aoe: can't write to that file. [ 834.125847][T18879] ALSA: mixer_oss: invalid OSS volume '' [ 834.256109][T18879] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 834.606348][T18887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 836.181962][T18909] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2865: No space for directory leaf checksum. Please run e2fsck -D. [ 836.258192][T18909] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2865: checksumming directory block 0 [ 836.277896][T18909] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 836.313443][T18909] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2865: No space for directory leaf checksum. Please run e2fsck -D. [ 836.368901][T18909] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2865: checksumming directory block 0 [ 836.414048][T18909] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 836.462809][T18909] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2865: No space for directory leaf checksum. Please run e2fsck -D. [ 836.479999][T18909] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2865: checksumming directory block 0 [ 836.507387][T18909] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 836.529009][T18909] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2865: No space for directory leaf checksum. Please run e2fsck -D. [ 836.547275][T18909] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2865: checksumming directory block 0 [ 836.576764][T18909] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 836.626533][T18909] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 836.639656][T18909] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 836.677424][T18914] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2866'. [ 836.758415][T18914] ipvlan0: entered promiscuous mode [ 836.825009][T18914] ipvlan0: entered allmulticast mode [ 836.855954][T18914] veth0_vlan: entered allmulticast mode [ 837.043204][T18921] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 837.865737][T18938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2872'. [ 838.555110][T18953] FAULT_INJECTION: forcing a failure. [ 838.555110][T18953] name failslab, interval 1, probability 0, space 0, times 0 [ 838.631180][T18953] CPU: 0 UID: 0 PID: 18953 Comm: syz.4.2875 Tainted: G U L syzkaller #0 PREEMPT(full) [ 838.631230][T18953] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 838.631241][T18953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 838.631260][T18953] Call Trace: [ 838.631270][T18953] [ 838.631280][T18953] dump_stack_lvl+0x16c/0x1f0 [ 838.631326][T18953] should_fail_ex+0x512/0x640 [ 838.631358][T18953] ? trace_fib_table_lookup+0x19f/0x200 [ 838.631399][T18953] should_failslab+0xc2/0x120 [ 838.631446][T18953] kmem_cache_alloc_noprof+0x83/0x770 [ 838.631495][T18953] ? dst_alloc+0x99/0x1a0 [ 838.631530][T18953] ? dst_alloc+0x99/0x1a0 [ 838.631560][T18953] dst_alloc+0x99/0x1a0 [ 838.631591][T18953] rt_dst_alloc+0x35/0x3a0 [ 838.631633][T18953] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 838.631675][T18953] ip_route_output_key_hash+0x10f/0x2b0 [ 838.631703][T18953] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 838.631731][T18953] ? __pfx_tomoyo_audit_inet_log+0x10/0x10 [ 838.631787][T18953] tcp_v4_connect+0x821/0x1c10 [ 838.631827][T18953] ? __pfx_tcp_v4_connect+0x10/0x10 [ 838.631869][T18953] ? __lock_acquire+0x436/0x2890 [ 838.631904][T18953] __inet_stream_connect+0x915/0xf50 [ 838.631945][T18953] ? __pfx___inet_stream_connect+0x10/0x10 [ 838.631977][T18953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.632015][T18953] ? __pfx_inet_stream_connect+0x10/0x10 [ 838.632048][T18953] ? __local_bh_enable_ip+0xa4/0x120 [ 838.632097][T18953] ? __pfx_inet_stream_connect+0x10/0x10 [ 838.632129][T18953] inet_stream_connect+0x57/0xa0 [ 838.632163][T18953] __sys_connect_file+0x141/0x1a0 [ 838.632200][T18953] __sys_connect+0x13b/0x160 [ 838.632229][T18953] ? __pfx___sys_connect+0x10/0x10 [ 838.632271][T18953] ? xfd_validate_state+0x61/0x180 [ 838.632297][T18953] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 838.632350][T18953] __x64_sys_connect+0x72/0xb0 [ 838.632379][T18953] ? lockdep_hardirqs_on+0x7c/0x110 [ 838.632420][T18953] do_syscall_64+0xcd/0xf80 [ 838.632463][T18953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.632490][T18953] RIP: 0033:0x7f8126f8f7c9 [ 838.632514][T18953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.632540][T18953] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 838.632566][T18953] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 838.632585][T18953] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 838.632603][T18953] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 838.632619][T18953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.632634][T18953] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 838.632669][T18953] [ 841.339122][T19008] zswap: compressor not available [ 841.466865][T18999] FAULT_INJECTION: forcing a failure. [ 841.466865][T18999] name failslab, interval 1, probability 0, space 0, times 0 [ 841.535009][T18999] CPU: 1 UID: 0 PID: 18999 Comm: syz.3.2885 Tainted: G U L syzkaller #0 PREEMPT(full) [ 841.535054][T18999] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 841.535064][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.535080][T18999] Call Trace: [ 841.535089][T18999] [ 841.535100][T18999] dump_stack_lvl+0x16c/0x1f0 [ 841.535144][T18999] should_fail_ex+0x512/0x640 [ 841.535174][T18999] ? __kmalloc_noprof+0xca/0x910 [ 841.535207][T18999] should_failslab+0xc2/0x120 [ 841.535247][T18999] __kmalloc_noprof+0xeb/0x910 [ 841.535278][T18999] ? lsm_blob_alloc+0x68/0x90 [ 841.535321][T18999] ? lsm_blob_alloc+0x68/0x90 [ 841.535357][T18999] lsm_blob_alloc+0x68/0x90 [ 841.535395][T18999] security_prepare_creds+0x2f/0x270 [ 841.535434][T18999] prepare_creds+0x5d6/0x940 [ 841.535468][T18999] __sys_setresgid+0x4af/0x1150 [ 841.535506][T18999] do_syscall_64+0xcd/0xf80 [ 841.535547][T18999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.535580][T18999] RIP: 0033:0x7f953458f7c9 [ 841.535602][T18999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.535631][T18999] RSP: 002b:00007f95327ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 841.535656][T18999] RAX: ffffffffffffffda RBX: 00007f95347e5fa0 RCX: 00007f953458f7c9 [ 841.535675][T18999] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 841.535692][T18999] RBP: 00007f9534613f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.535709][T18999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.535726][T18999] R13: 00007f95347e6038 R14: 00007f95347e5fa0 R15: 00007ffcf4a1ec88 [ 841.535807][T18999] [ 843.972215][T19029] random: crng reseeded on system resumption [ 844.407077][T19034] FAULT_INJECTION: forcing a failure. [ 844.407077][T19034] name failslab, interval 1, probability 0, space 0, times 0 [ 844.451414][T19034] CPU: 1 UID: 0 PID: 19034 Comm: syz.3.2893 Tainted: G U L syzkaller #0 PREEMPT(full) [ 844.451473][T19034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 844.451485][T19034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 844.451503][T19034] Call Trace: [ 844.451514][T19034] [ 844.451526][T19034] dump_stack_lvl+0x16c/0x1f0 [ 844.451574][T19034] should_fail_ex+0x512/0x640 [ 844.451606][T19034] ? __kmalloc_noprof+0xca/0x910 [ 844.451643][T19034] should_failslab+0xc2/0x120 [ 844.451686][T19034] __kmalloc_noprof+0xeb/0x910 [ 844.451717][T19034] ? proc_create_reg+0xe3/0x180 [ 844.451754][T19034] ? xfrm_hash_alloc+0xd1/0x100 [ 844.451791][T19034] ? xfrm_hash_alloc+0xd1/0x100 [ 844.451818][T19034] xfrm_hash_alloc+0xd1/0x100 [ 844.451849][T19034] xfrm_state_init+0x15f/0x640 [ 844.451883][T19034] ? __pfx_xfrm_net_init+0x10/0x10 [ 844.451912][T19034] xfrm_net_init+0x210/0xcc0 [ 844.451952][T19034] ? __pfx_xfrm_net_init+0x10/0x10 [ 844.451986][T19034] ops_init+0x1e2/0x5f0 [ 844.452029][T19034] setup_net+0x11d/0x3a0 [ 844.452068][T19034] ? __pfx_setup_net+0x10/0x10 [ 844.452104][T19034] ? lockdep_init_map_type+0x5c/0x270 [ 844.452135][T19034] ? mutex_init_lockep+0x110/0x150 [ 844.452171][T19034] copy_net_ns+0x351/0x7c0 [ 844.452216][T19034] create_new_namespaces+0x3ea/0xab0 [ 844.452264][T19034] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 844.452307][T19034] ksys_unshare+0x45b/0xa40 [ 844.452351][T19034] ? __pfx_ksys_unshare+0x10/0x10 [ 844.452397][T19034] ? xfd_validate_state+0x61/0x180 [ 844.452436][T19034] __x64_sys_unshare+0x31/0x40 [ 844.452486][T19034] do_syscall_64+0xcd/0xf80 [ 844.452530][T19034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.452560][T19034] RIP: 0033:0x7f953458f7c9 [ 844.452584][T19034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.452612][T19034] RSP: 002b:00007f95327ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 844.452640][T19034] RAX: ffffffffffffffda RBX: 00007f95347e5fa0 RCX: 00007f953458f7c9 [ 844.452660][T19034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 844.452678][T19034] RBP: 00007f9534613f91 R08: 0000000000000000 R09: 0000000000000000 [ 844.452696][T19034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.452714][T19034] R13: 00007f95347e6038 R14: 00007f95347e5fa0 R15: 00007ffcf4a1ec88 [ 844.452755][T19034] [ 846.292934][T19048] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2896: No space for directory leaf checksum. Please run e2fsck -D. [ 846.465100][T19048] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2896: checksumming directory block 0 [ 846.547351][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2897'. [ 846.592296][T19048] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 846.614532][T19048] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2896: No space for directory leaf checksum. Please run e2fsck -D. [ 846.630435][T19048] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2896: checksumming directory block 0 [ 846.646401][T19048] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 846.657390][T19048] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2896: No space for directory leaf checksum. Please run e2fsck -D. [ 846.676561][T19048] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2896: checksumming directory block 0 [ 846.753836][T19048] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 846.818224][T19048] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #264: comm syz.0.2896: No space for directory leaf checksum. Please run e2fsck -D. [ 846.878024][T19064] FAULT_INJECTION: forcing a failure. [ 846.878024][T19064] name failslab, interval 1, probability 0, space 0, times 0 [ 846.917735][T19064] CPU: 1 UID: 0 PID: 19064 Comm: syz.4.2899 Tainted: G U L syzkaller #0 PREEMPT(full) [ 846.917783][T19064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 846.917794][T19064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 846.917809][T19064] Call Trace: [ 846.917819][T19064] [ 846.917830][T19064] dump_stack_lvl+0x16c/0x1f0 [ 846.917873][T19064] should_fail_ex+0x512/0x640 [ 846.917904][T19064] ? trace_fib_table_lookup+0x19f/0x200 [ 846.917945][T19064] should_failslab+0xc2/0x120 [ 846.917988][T19064] kmem_cache_alloc_noprof+0x83/0x770 [ 846.918024][T19064] ? dst_alloc+0x99/0x1a0 [ 846.918063][T19064] ? dst_alloc+0x99/0x1a0 [ 846.918091][T19064] dst_alloc+0x99/0x1a0 [ 846.918126][T19064] rt_dst_alloc+0x35/0x3a0 [ 846.918179][T19064] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 846.918231][T19064] ip_route_output_key_hash+0x10f/0x2b0 [ 846.918267][T19064] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 846.918308][T19064] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 846.918343][T19064] ? lockdep_hardirqs_on+0x7c/0x110 [ 846.918384][T19064] ? percpu_counter_add_batch+0xca/0x200 [ 846.918419][T19064] ip_route_output_flow+0x27/0x150 [ 846.918456][T19064] tcp_v4_connect+0x89e/0x1c10 [ 846.918501][T19064] ? __pfx_tcp_v4_connect+0x10/0x10 [ 846.918532][T19064] ? __lock_acquire+0x436/0x2890 [ 846.918567][T19064] __inet_stream_connect+0x915/0xf50 [ 846.918609][T19064] ? __pfx___inet_stream_connect+0x10/0x10 [ 846.918643][T19064] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 846.918681][T19064] ? __pfx_inet_stream_connect+0x10/0x10 [ 846.918715][T19064] ? __local_bh_enable_ip+0xa4/0x120 [ 846.918757][T19064] ? __pfx_inet_stream_connect+0x10/0x10 [ 846.918785][T19064] inet_stream_connect+0x57/0xa0 [ 846.918820][T19064] __sys_connect_file+0x141/0x1a0 [ 846.918855][T19064] __sys_connect+0x13b/0x160 [ 846.918886][T19064] ? __pfx___sys_connect+0x10/0x10 [ 846.918929][T19064] ? xfd_validate_state+0x61/0x180 [ 846.918954][T19064] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 846.919006][T19064] __x64_sys_connect+0x72/0xb0 [ 846.919035][T19064] ? lockdep_hardirqs_on+0x7c/0x110 [ 846.919075][T19064] do_syscall_64+0xcd/0xf80 [ 846.919119][T19064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.919149][T19064] RIP: 0033:0x7f8126f8f7c9 [ 846.919174][T19064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.919213][T19064] RSP: 002b:00007f8127ed5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 846.919241][T19064] RAX: ffffffffffffffda RBX: 00007f81271e5fa0 RCX: 00007f8126f8f7c9 [ 846.919261][T19064] RDX: 0000000000000055 RSI: 00002000000018c0 RDI: 0000000000000003 [ 846.919280][T19064] RBP: 00007f8127013f91 R08: 0000000000000000 R09: 0000000000000000 [ 846.919298][T19064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.919316][T19064] R13: 00007f81271e6038 R14: 00007f81271e5fa0 R15: 00007ffcd29a11e8 [ 846.919419][T19064] [ 847.654262][T19048] EXT4-fs error (device sda1): __ext4_find_entry:1624: inode #264: comm syz.0.2896: checksumming directory block 0 [ 847.731802][T19048] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 847.797568][T19048] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 847.930471][T19048] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 847.983989][T19048] FAULT_INJECTION: forcing a failure. [ 847.983989][T19048] name fail_futex, interval 1, probability 0, space 0, times 0 [ 848.155562][T19048] CPU: 0 UID: 0 PID: 19048 Comm: syz.0.2896 Tainted: G U L syzkaller #0 PREEMPT(full) [ 848.155608][T19048] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 848.155618][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.155632][T19048] Call Trace: [ 848.155640][T19048] [ 848.155650][T19048] dump_stack_lvl+0x16c/0x1f0 [ 848.155691][T19048] should_fail_ex+0x512/0x640 [ 848.155718][T19048] ? kasan_save_stack+0x42/0x60 [ 848.155756][T19048] get_futex_key+0x1085/0x15f0 [ 848.155789][T19048] ? __pfx_get_futex_key+0x10/0x10 [ 848.155828][T19048] futex_wake+0xea/0x530 [ 848.155876][T19048] ? __pfx_futex_wake+0x10/0x10 [ 848.155925][T19048] do_futex+0x1e3/0x350 [ 848.155953][T19048] ? __pfx_do_futex+0x10/0x10 [ 848.155980][T19048] ? __might_fault+0xe3/0x190 [ 848.156019][T19048] mm_release+0x24e/0x300 [ 848.156053][T19048] do_exit+0x69e/0x2bd0 [ 848.156075][T19048] ? __pfx___might_resched+0x10/0x10 [ 848.156113][T19048] ? __pfx_do_exit+0x10/0x10 [ 848.156135][T19048] ? do_raw_spin_lock+0x12c/0x2b0 [ 848.156161][T19048] ? find_held_lock+0x2b/0x80 [ 848.156198][T19048] do_group_exit+0xd3/0x2a0 [ 848.156226][T19048] get_signal+0x2671/0x26d0 [ 848.156274][T19048] ? __pfx_get_signal+0x10/0x10 [ 848.156304][T19048] ? __pfx___fput_deferred+0x10/0x10 [ 848.156331][T19048] ? __pfx___file_ref_put+0x10/0x10 [ 848.156370][T19048] arch_do_signal_or_restart+0x8f/0x7a0 [ 848.156405][T19048] ? fput+0xcf/0xf0 [ 848.156430][T19048] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 848.156485][T19048] exit_to_user_mode_loop+0x8c/0x540 [ 848.156522][T19048] do_syscall_64+0x4ee/0xf80 [ 848.156577][T19048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.156605][T19048] RIP: 0033:0x7fe27e98f7c9 [ 848.156628][T19048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.156654][T19048] RSP: 002b:00007fe27f7d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.156681][T19048] RAX: 0000000000000014 RBX: 00007fe27ebe6090 RCX: 00007fe27e98f7c9 [ 848.156699][T19048] RDX: 00000000000000d0 RSI: 0000200000000580 RDI: 0000000000000006 [ 848.156716][T19048] RBP: 00007fe27ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 848.156733][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.156749][T19048] R13: 00007fe27ebe6128 R14: 00007fe27ebe6090 R15: 00007fffdd6b6a68 [ 848.156787][T19048] [ 850.099735][T19098] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 851.529463][T19104] FAULT_INJECTION: forcing a failure. [ 851.529463][T19104] name failslab, interval 1, probability 0, space 0, times 0 [ 851.542288][T19104] CPU: 1 UID: 0 PID: 19104 Comm: syz.0.2908 Tainted: G U L syzkaller #0 PREEMPT(full) [ 851.542337][T19104] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 851.542349][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 851.542367][T19104] Call Trace: [ 851.542377][T19104] [ 851.542388][T19104] dump_stack_lvl+0x16c/0x1f0 [ 851.542487][T19104] should_fail_ex+0x512/0x640 [ 851.542519][T19104] ? fs_reclaim_acquire+0xae/0x150 [ 851.542566][T19104] should_failslab+0xc2/0x120 [ 851.542609][T19104] __kmalloc_noprof+0xeb/0x910 [ 851.542641][T19104] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 851.542686][T19104] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 851.542723][T19104] tomoyo_realpath_from_path+0xc2/0x6e0 [ 851.542773][T19104] tomoyo_check_open_permission+0x2ab/0x3c0 [ 851.542808][T19104] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 851.542880][T19104] ? do_raw_spin_lock+0x12c/0x2b0 [ 851.542924][T19104] tomoyo_file_open+0x6b/0x90 [ 851.542968][T19104] security_file_open+0x84/0x1e0 [ 851.543004][T19104] do_dentry_open+0x597/0x1590 [ 851.543048][T19104] ? security_inode_permission+0xbf/0x260 [ 851.543087][T19104] vfs_open+0x82/0x3f0 [ 851.543122][T19104] path_openat+0x2078/0x3140 [ 851.543176][T19104] ? __pfx_path_openat+0x10/0x10 [ 851.543231][T19104] do_filp_open+0x20b/0x470 [ 851.543274][T19104] ? __pfx_do_filp_open+0x10/0x10 [ 851.543343][T19104] ? alloc_fd+0x471/0x7d0 [ 851.543393][T19104] do_sys_openat2+0x121/0x290 [ 851.543437][T19104] ? __pfx_do_sys_openat2+0x10/0x10 [ 851.543486][T19104] __x64_sys_openat+0x174/0x210 [ 851.543520][T19104] ? __pfx___x64_sys_openat+0x10/0x10 [ 851.543568][T19104] do_syscall_64+0xcd/0xf80 [ 851.543613][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.543642][T19104] RIP: 0033:0x7fe27e98f7c9 [ 851.543665][T19104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.543693][T19104] RSP: 002b:00007fe27f7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 851.543721][T19104] RAX: ffffffffffffffda RBX: 00007fe27ebe6090 RCX: 00007fe27e98f7c9 [ 851.543741][T19104] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 851.543759][T19104] RBP: 00007fe27ea13f91 R08: 0000000000000000 R09: 0000000000000000 [ 851.543776][T19104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.543793][T19104] R13: 00007fe27ebe6128 R14: 00007fe27ebe6090 R15: 00007fffdd6b6a68 [ 851.543831][T19104] [ 851.543843][T19104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 853.140750][T19147] hub 1-0:1.0: USB hub found [ 853.157796][T19147] hub 1-0:1.0: 1 port detected [ 853.294302][T19145] hub 1-0:1.0: USB hub found [ 853.310922][T19145] hub 1-0:1.0: 1 port detected [ 854.126247][T19160] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2921'. [ 854.757260][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 854.807600][T19173] bond0: invalid ARP target specified [ 855.060759][ T30] audit: type=1800 audit(4294968708.828:43): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2927" name="dbroot" dev="configfs" ino=84926 res=0 errno=0 [ 855.092765][T19177] [ 855.095136][T19177] ============================================ [ 855.101323][T19177] WARNING: possible recursive locking detected [ 855.107483][T19177] syzkaller #0 Tainted: G U L [ 855.113458][T19177] -------------------------------------------- [ 855.119768][T19177] syz.3.2927/19177 is trying to acquire lock: [ 855.125932][T19177] ffff888027bb4278 (&p->frag_sem){.+.+}-{4:4}, at: __configfs_open_file+0xe8/0x9c0 [ 855.135281][T19177] [ 855.135281][T19177] but task is already holding lock: [ 855.142738][T19177] ffff888027bb4278 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 855.152224][T19177] [ 855.152224][T19177] other info that might help us debug this: [ 855.160298][T19177] Possible unsafe locking scenario: [ 855.160298][T19177] [ 855.167753][T19177] CPU0 [ 855.171022][T19177] ---- [ 855.174288][T19177] lock(&p->frag_sem); [ 855.178473][T19177] lock(&p->frag_sem); [ 855.182614][T19177] [ 855.182614][T19177] *** DEADLOCK *** [ 855.182614][T19177] [ 855.190919][T19177] May be due to missing lock nesting notation [ 855.190919][T19177] [ 855.199392][T19177] 5 locks held by syz.3.2927/19177: [ 855.204712][T19177] #0: ffff88802930a9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 855.214500][T19177] #1: ffff88801d394420 (sb_writers#19){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 855.224205][T19177] #2: ffff88803290fc88 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x75/0x4e0 [ 855.234488][T19177] #3: ffff888027bb4278 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x219/0x4e0 [ 855.244326][T19177] #4: ffffffff8f43d668 (target_devices_lock){+.+.}-{4:4}, at: target_core_item_dbroot_store+0x21/0x370 [ 855.255507][T19177] [ 855.255507][T19177] stack backtrace: [ 855.261412][T19177] CPU: 1 UID: 0 PID: 19177 Comm: syz.3.2927 Tainted: G U L syzkaller #0 PREEMPT(full) [ 855.261452][T19177] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 855.261463][T19177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.261479][T19177] Call Trace: [ 855.261488][T19177] [ 855.261498][T19177] dump_stack_lvl+0x116/0x1f0 [ 855.261540][T19177] print_deadlock_bug+0x225/0x2f0 [ 855.261566][T19177] __lock_acquire+0x1497/0x2890 [ 855.261582][T19177] lock_acquire+0x179/0x330 [ 855.261594][T19177] ? __configfs_open_file+0xe8/0x9c0 [ 855.261614][T19177] ? __pfx___might_resched+0x10/0x10 [ 855.261636][T19177] down_read+0x9b/0x460 [ 855.261649][T19177] ? __configfs_open_file+0xe8/0x9c0 [ 855.261666][T19177] ? __pfx_down_read+0x10/0x10 [ 855.261682][T19177] __configfs_open_file+0xe8/0x9c0 [ 855.261701][T19177] do_dentry_open+0x748/0x1590 [ 855.261722][T19177] ? __pfx_configfs_open_file+0x10/0x10 [ 855.261742][T19177] vfs_open+0x82/0x3f0 [ 855.261757][T19177] path_openat+0x2078/0x3140 [ 855.261779][T19177] ? stack_depot_save_flags+0x352/0x9b0 [ 855.261797][T19177] ? __pfx_path_openat+0x10/0x10 [ 855.261818][T19177] ? kasan_save_stack+0x42/0x60 [ 855.261836][T19177] ? kasan_save_stack+0x33/0x60 [ 855.261853][T19177] ? kasan_save_track+0x14/0x30 [ 855.261870][T19177] ? __kasan_slab_alloc+0x89/0x90 [ 855.261889][T19177] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 855.261906][T19177] ? getname_kernel+0x52/0x370 [ 855.261919][T19177] do_filp_open+0x20b/0x470 [ 855.261939][T19177] ? __pfx_do_filp_open+0x10/0x10 [ 855.261968][T19177] file_open_name+0x2a3/0x450 [ 855.261984][T19177] ? __pfx_file_open_name+0x10/0x10 [ 855.262007][T19177] ? __asan_memcpy+0x3c/0x60 [ 855.262025][T19177] filp_open+0x4b/0x80 [ 855.262039][T19177] target_core_item_dbroot_store+0x108/0x370 [ 855.262057][T19177] configfs_write_iter+0x306/0x4e0 [ 855.262076][T19177] vfs_write+0x7d3/0x11d0 [ 855.262095][T19177] ? __pfx_configfs_write_iter+0x10/0x10 [ 855.262114][T19177] ? __pfx_vfs_write+0x10/0x10 [ 855.262137][T19177] ksys_write+0x12a/0x250 [ 855.262156][T19177] ? __pfx_ksys_write+0x10/0x10 [ 855.262177][T19177] do_syscall_64+0xcd/0xf80 [ 855.262198][T19177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.262214][T19177] RIP: 0033:0x7f953458f7c9 [ 855.262227][T19177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 855.262242][T19177] RSP: 002b:00007f95327cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.262256][T19177] RAX: ffffffffffffffda RBX: 00007f95347e6090 RCX: 00007f953458f7c9 [ 855.262265][T19177] RDX: 0000000000000100 RSI: 0000200000000240 RDI: 0000000000000004 [ 855.262274][T19177] RBP: 00007f9534613f91 R08: 0000000000000000 R09: 0000000000000000 [ 855.262284][T19177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.262292][T19177] R13: 00007f95347e6128 R14: 00007f95347e6090 R15: 00007ffcf4a1ec88 [ 855.262305][T19177] [ 855.614148][ T30] audit: type=1804 audit(4294968709.380:44): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2927" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=84926 res=1 errno=0 [ 855.639577][T19177] db_root: not a directory: /sys/kernel/config/target/dbroot [ 855.821033][T14404] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 855.845914][T14404] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 855.855683][T14404] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 855.863430][T14404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 855.874305][T14404] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 856.974504][T16452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.083459][T16452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.181122][T16452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.269945][T16452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.429886][T16452] dummy0: left allmulticast mode [ 857.435098][T16452] dummy0: left promiscuous mode [ 857.448445][T16452] bridge0: port 3(dummy0) entered disabled state [ 857.457255][T16452] bridge_slave_1: left allmulticast mode [ 857.469899][T16452] bridge_slave_1: left promiscuous mode [ 857.477018][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.509612][T16452] bridge_slave_0: left allmulticast mode [ 857.516017][T16452] bridge_slave_0: left promiscuous mode [ 857.537893][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.797841][T16452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.836753][T16452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.869451][T16452] bond0 (unregistering): Released all slaves [ 857.932395][T16452] ip6g: left promiscuous mode [ 858.027871][T16452] Â: left promiscuous mode [ 858.585569][T16452] hsr_slave_0: left promiscuous mode [ 858.591364][T16452] hsr_slave_1: left promiscuous mode [ 858.625955][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.642698][T16452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.663250][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.670712][T16452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.706716][T16452] veth1_macvtap: left promiscuous mode [ 858.722157][T16452] veth0_macvtap: left promiscuous mode [ 858.752104][T16452] veth1_vlan: left promiscuous mode [ 858.757893][T16452] veth0_vlan: left promiscuous mode [ 859.277489][T16452] team0 (unregistering): Port device team_slave_1 removed [ 859.382228][T16452] team0 (unregistering): Port device team_slave_0 removed [ 860.067141][T16452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.134008][T16452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.218414][T16452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.364425][T16452] bridge_slave_1: left allmulticast mode [ 860.370447][T16452] bridge_slave_1: left promiscuous mode [ 860.395157][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.405054][T16452] bridge_slave_0: left allmulticast mode [ 860.411153][T16452] bridge_slave_0: left promiscuous mode [ 860.436248][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.644477][T16452] bond0 (unregistering): (slave ›): Releasing backup interface [ 860.705915][T16452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.733598][T16452] bond0 (unregistering): Released all slaves [ 860.797552][T16452] HfR: left promiscuous mode [ 861.274869][T16452] hsr_slave_0: left promiscuous mode [ 861.310140][T16452] hsr_slave_1: left promiscuous mode [ 861.320742][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.328136][T16452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.370163][T16452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.377591][T16452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.748759][T16452] team0 (unregistering): Port device team_slave_1 removed [ 861.838402][T16452] team0 (unregistering): Port device team_slave_0 removed