last executing test programs: 10.702046837s ago: executing program 1 (id=859): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/103, 0x67) getpgid(0x0) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000000447b7ab3aacba8c906557d8aa062f419f9223cc5d24143a77dde06cbe23ab789bc033f2772dc1d71fec18679a8b9b9087983068616c5a6d4cbee5ddc040fb8a5e4d63c4fd2c81aea263bbf962730e5a38e5b4fa318d306c99bd5", @ANYRES16=r3, @ANYBLOB="060a2dbd7000fcdbdf252b0000000500070008000000050003000e000000050034000500000005002600bd0000000e001f006f76735f76706f727400000006000a0008000000"], 0x4c}}, 0x20004000) 8.346895916s ago: executing program 1 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x277, 0x400, 0x9}]}) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3987fc00ed90a976e154aac62a3c000004", @ANYRES16=r1, @ANYBLOB="040027bd7000fedbdf250f000000a873b72a0ab69bd6761a1e600ef1bd2d26ccd4f9771feb76bd28d8d1112a0f59e59aec91f0ba0000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) r5 = prctl$auto_PR_SCHED_CORE_CREATE(0xd57, 0x1, 0xffffffffffffffff, 0x1000, 0x4) read$auto_proc_pid_maps_operations_internal(r5, &(0x7f00000000c0)=""/47, 0x2f) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000280)=ANY=[@ANYBLOB="50b5927271b93a6aca2ab930a00a657621298157135e3726bb2c2db4df091a9ea8e6896048d51cd7205f667dec758afe935b60e8963a3c096b1970d7caf90d25a10fb15e2e4ead1630bdb95988cc2dd532b99319bc9878596b6bd1212578eb777c785fc2e1d31e3ecacb2144524007ebff498e22dee5affcdc459539db7936338953afb4e51d2c6f2cd3deb385d53eff5d2681573249c2ec4fb90c2f69d5a20b7294d708d095e7aaee1c83b6ed325e8f0136932993a4e0365a012a9f0e1b", @ANYRES16=r4, @ANYBLOB="210026bd7000fedbdf25010000001400020077673000000000000000000000000000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) 7.904302568s ago: executing program 0 (id=868): mmap$auto(0x3, 0x400008, 0x20000000000000, 0x9b71, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0) fcntl$auto_F_GETOWN_EX(r1, 0x10, 0x7ea5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x2) socket(0x1f, 0x6, 0x301) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x9, 0x0, 0x1000001, 0x3432) mmap$auto(0x800000000, 0x2, 0xdf, 0xebf, 0x401, 0x20000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2480, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, r0) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) mmap$auto(0x3ff, 0x3, 0xffffffff, 0x100000eb1, 0x40000000000a1, 0x4000008000) setsockopt$auto_SO_OOBINLINE(r2, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) close_range$auto(0x2, 0xa, 0x3) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 7.608100028s ago: executing program 1 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, "929833c2d2da3a79de6ff8b410e7f6f5b094a28fa0406871c067ae1c3f2f959176bd31d77c170b340f16bd072c0012330c3dc276ab9b1b491ce3824e953ed68812f468eff8f9ddb950adcf09d5d6c3c80309ab4cd60d02bec9e863c471ce0808fe14fb9005923bfb29f256b88e12976dd0fae08a94b08bcaa1db25b4f0673724c5ce119e92b4f415c24141ecc89c82ca3b912d53e036dbe946d0a4"}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x200000d1) r1 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc}, 0xfffffffffffffd42}}, 0x20000000) read$auto_fops_u8_(0xffffffffffffffff, &(0x7f0000001e40)=""/109, 0x6d) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1f9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x4, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 7.282470159s ago: executing program 0 (id=871): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2600, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x600040, 0x0) mmap$auto(0xd47, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(0xffffffffffffffff, 0xa5d, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000040)="36354b406139a69ec0a47244719bcf42d3e090a9cf4b8b47e3c116b2ece7861a36a6a39923a605e587e3d124a4fe75cf5ac482f14961bf180c15605841", 0x5) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca436c4d13dd823843180bb151e936e8ce6cb454168d6c", 0x3ff, 0x4, 0x1000, 0x2, 0x200000000000000d, 0x0}) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x500) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto_PR_SET_MM_END_DATA(0x7, 0x4, r1, 0x6, 0x6) ioctl$auto_FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="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") timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) timer_gettime$auto(0x0, 0x0) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) creat$auto(&(0x7f0000000080)='./file0\x00', 0x2d05) 5.694383715s ago: executing program 0 (id=874): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b48, 0x1) ioctl$auto_KVM_CREATE_VM(r0, 0x4188aea7, 0x0) (fail_nth: 2) 5.644125599s ago: executing program 1 (id=875): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r0 = open(0x0, 0x22240, 0x154) r1 = setfsgid$auto(0xee01) setresgid$auto(r1, 0x0, 0x0) fchownat$auto(r0, 0x0, 0x0, r1, 0x0) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000000100)={{0x8, 0xffffffffffffffff, 0xee01, 0xd, 0x5, 0x101, 0x701}, 0x101, 0x7, 0x3, 0x2, @raw=0x8001, @raw=0x3, 0x8000, 0x0, &(0x7f0000000880)="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", &(0x7f0000000000)="e1c226c753a6d55af322ac4c6e152d790f528d88b122b929b8b839815eef75c11172b72537fbbc96ba5279c1950dcdf9c374740d93cce4274370d7d0009e3288f478682c568d8cb4da975a06c9aae643c9845aa50b992597fb4a595d3987ff58ffad23df97379ac2cb12d1c671976607371c05dd2418360dfd447293d58580d66775b99aa13b24cf04a34c0df0ff434dd49a958e3a8a259770f336607d05d18a970b07ad5bd1ed9017c88e2c7bab1e5020eb5922dd7dbc99083ae63be31f577fe8f507ce78fde8bc41f0d265c644a90b4b30061b214329fdf8941ca0ebd1e769c3c9a8"}) r3 = open(0x0, 0x22240, 0x154) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) fchownat$auto(r3, 0x0, 0x0, r4, 0x0) r5 = wait4$auto(0xffffffffffffffff, &(0x7f0000000040)=0x8001, 0x6, &(0x7f00000003c0)={{0x9, 0x6573}, {0x7, 0x8}, 0x3df9, 0xfffffffffffffffb, 0x80000000, 0x7, 0x80000000, 0xc83, 0x5d, 0xdbd, 0x725, 0x100000000, 0x2, 0x9, 0x8000000000000001, 0x4}) r6 = semctl$auto(0x4, 0x8, 0x0, 0xc01) shmctl$auto(0x5, 0x8001, &(0x7f00000002c0)={{0x8, 0xee00, r4, 0x5, 0x5, 0x3c, 0xf800}, 0x6, 0x5e1, 0xfffffffffffffffc, 0x5, @inferred=r5, @inferred=r6, 0x3, 0x0, &(0x7f0000000480)="8f3dc69f57dbf77fba6a0e82cbcd74e7aaa30158987a8a24608f41d03af457e60b46dff5612ff208c1b5a9f6c38b8cb72ba691458ea1af9b3294595601c5253a2fe7328b8ae80366ce115e2200b31c86f913a8207779e2540b4cdaddd3cec1bf45b4acfc36a4d9ee351b711f9907dce4d79e3cce4a27708f66456f3ad918b44040158041737773c1b3c86bf21332a93d89f7b4ebb757225de80af5af94957175a3f0dc8daa15ca3b8d73f2d6a0847a2099374cb615571a172883494f8f64b691dd", &(0x7f0000000580)="57f78152165683e0fbc54dbedbf88f56d83a7c6b0dea0caa02a091abd1c90fe5ba25b0396d86edfc8e3e136766f10f14a0eb11adda15a4da16133c50b9729c68ce7428b305d6426a8622cb8b057cef953a96130dc8a5a28915348e38f118e0fd18ec2c79a257ba2c125b802e391db649d6dcdc4ee3f71cb20b10997a0755d5470f3372b71d87cedaff5ac007306fead6de24740cb1a6d0b568b4a8b16da1e1183c214f26b79196d5714d2c06740afa743844ae08ea4d74b42b7bd31759a191eb55594b19a4a0bc5ee1371fb3db7db97a6182b5b31fe5d3ce493d21bc72b5d2952a14db6e8f1102"}) setresgid$auto(r1, r2, r4) 4.557757176s ago: executing program 1 (id=877): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) socket(0x10, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1fd, 0x583, 0xd, 0x8fd6, 0x2, 0x1, 0x15f4da0a, 0x3, 0x7, 0x62, 0x80000001, 0x7, 0x8, 0x2, 0x1000, 0xfffffffffffffffe]}, 0x0) r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_score_adj\x00', 0x20202, 0x0) read$auto_proc_oom_score_adj_operations_base(r1, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clone3$auto(&(0x7f00000002c0)={0x7ff, 0xffffffff, 0x1, 0x100, 0x5, 0xe, 0x4, 0x5, 0x1, 0x9, 0x32}, 0xf0e) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2c, 0x6, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) connect$auto(0xffffffffffffffff, &(0x7f0000000240)=@l2={0x1f, 0x4, @any, 0x1, 0x2}, 0x0) madvise$auto(0x0, 0x200007, 0x8) setresuid$auto(0x2, 0x7, 0x8080) socket(0x10, 0x2, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 4.166283674s ago: executing program 2 (id=879): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r0) mkdir$auto(0x0, 0x6) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x2000000000009, 0x3, 0x7, 0xfffffffffffff718, 0x5, 0x7fff, 0x2000000000010006, 0x0, 0x7, 0x8, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x403, 0x8001, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x3]}, 0x200, 0xfffffffb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB="0100", @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x20040001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffa474, &(0x7f00000002c0)={0x0, 0xc4}, 0x9, 0x0, 0x0, 0xa}, 0x9}, 0x2, 0x800) 3.798562652s ago: executing program 0 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) (fail_nth: 5) 3.780403773s ago: executing program 3 (id=881): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ad090000b98dd965245925890c0001e308000100", @ANYRES32=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c00) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x40) prctl$auto(0x35, 0x1, 0x0, 0x0, 0xfffffffffffffffc) mmap$auto(0x1, 0x7, 0x106, 0xeb1, 0x405, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x1, 0x84) r3 = socket(0x27, 0xa, 0x40000084) mremap$auto(0x8000000003, 0xda1, 0x3fd6, 0xb, 0xfffffffffffffffd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) listen$auto(r3, 0x3) getsockopt$auto(r3, 0x84, 0x6f, 0x0, &(0x7f0000000280)=0x8) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) writev$auto(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0x2}, 0xa) prctl$auto_PR_SET_MDWE(0x41, 0x5, 0x0, 0x4, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r5 = mq_open$auto(0x0, 0x5, 0x3, 0x0) sendto$auto(0x3, 0x0, 0x7fff, 0x4, 0x0, 0xfffffffb) ioctl$auto_dma_heap_fops_dma_heap(r5, 0x4, &(0x7f00000000c0)="f116762d3ac87e05b04b90feabbfeb7f8416eaa7c5a508398469103583bea0cbf3ec80477d02be5bddc5714f99eafa3cb4e3ef28801db6c71bfcfaa902f9303c5581643a47f21dd87b0e38b2a1f28efb57fb87d4b23b4432c8cc44bde224427f999f08c61b2ee3362d04efcab98954dc3d8892f6c2557c0791f2c6e92ee25ad26c080ee8a0e9fa256d0ef4549a") 3.587886788s ago: executing program 2 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, 0x0, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1b0, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r4, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0xffff0000, 0x0, 0x2000c040}, 0x4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000080)={0x0}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0x80000000a, 0x40000000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000c00)) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) ioctl$auto(0x3, 0x400454ca, 0x38) r7 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r7, 0x0, 0x4) r8 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r8) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000001f80)={0x18, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r11, 0xaf01, 0x5) ioctl$auto(r11, 0x4004af07, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) shutdown$auto(0x200000003, 0x2) 2.922664187s ago: executing program 0 (id=883): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000280), 0xffffffffffffffff) 2.71901602s ago: executing program 3 (id=884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x28, r1, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) (fail_nth: 7) 2.590957051s ago: executing program 2 (id=885): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2600, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x600040, 0x0) mmap$auto(0xd47, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_JFFS2_COMPR_MODE_FORCEZLIB(0xffffffffffffffff, 0xa5d, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000040)="36354b406139a69ec0a47244719bcf42d3e090a9cf4b8b47e3c116b2ece7861a36a6a39923a605e587e3d124a4fe75cf5ac482f14961bf180c15605841", 0x5) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef13a5421a8765cadfca436c4d13dd823843180bb151e936e8ce6cb454168d6c", 0x3ff, 0x4, 0x1000, 0x2, 0x200000000000000d, 0x0}) ioctl$auto_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x700) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto_PR_SET_MM_END_DATA(0x7, 0x4, r1, 0x6, 0x6) ioctl$auto_FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000001c0)="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") timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) timer_gettime$auto(0x0, 0x0) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) ioctl$auto(0x3, 0x80045530, 0x38) creat$auto(&(0x7f0000000080)='./file0\x00', 0x2d05) 1.91051664s ago: executing program 3 (id=886): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) write$auto(r0, 0x0, 0x1) pipe$auto(0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x3) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000002, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x44, 0x104, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)={0x0, "83b8aa9d", 0x5, 0x78, 0x1, 0xb7, 0x6, 0xffffffff, 0x3, 0x2, 0x9, 0x1, 0x69f, 0x8, 0x80000000, 0x9, 0x8000000000000000, 0x5, 0x7, "a68bae97290018a0ddbc9ed747a115e20fade243"}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) ioctl$auto(0x20000000000003, 0x8947, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x7, 0x4}}, 0x0) timer_gettime$auto(0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/bpq0/uevent\x00', 0x200, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) 1.646496535s ago: executing program 3 (id=887): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (fail_nth: 5) 1.534441446s ago: executing program 2 (id=888): readlinkat$auto(0x1, &(0x7f0000000080)='#/#\x00', 0x0, 0x16a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x1, 0x1ff, 0x1, 0x7, &(0x7f0000000080)}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto(0x400, &(0x7f0000000000)=@bpf_attr_3={0xfffffc01, 0x2, 0x6, 0x5, 0x1fe, 0x2, 0x1, 0x4, 0x4007, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x4, 0x89, 0xb03, 0xfffffffffffffffd, 0x3ff, 0x7, @attach_prog_fd, 0x40, 0x1, 0x57d, 0x1ff, 0x9}, 0xa3) r2 = socket(0x11, 0x3, 0x400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x5e8}, 0x2, &(0x7f0000000140), 0x7, 0x1000}, 0x5}, 0x2, 0x101) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) set_mempolicy$auto(0x18003, &(0x7f0000000280)=0x200000007b, 0x4) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clock_adjtime$auto(0xfffffffffffffffb, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x2, 0x5, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0xa, 0x300) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0x100000001, 0x9b72, 0x2, 0x8000) 926.579954ms ago: executing program 3 (id=889): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto(r0, 0x545c, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x6}, 0xc) rt_sigprocmask$auto(0x9, &(0x7f0000000040)={0x2}, &(0x7f0000000080)={0x8}, 0x8) 460.381665ms ago: executing program 2 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f0000000100)={0x28, 0x0, 0x38f, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1b0, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r4, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0xffff000000000000, 0x2000c040}, 0x4) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x42a120, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000080)={0x0}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0x80000000a, 0x40000000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000c00)) socket(0x11, 0xa, 0x300) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) ioctl$auto(0x3, 0x400454ca, 0x38) r7 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r7, 0x0, 0x4) r8 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), r8) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000001f80)={0x18, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) r11 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r11, 0xaf01, 0x5) ioctl$auto(r11, 0x4004af07, 0xffffffffffffffff) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x40, 0x10006, 0x0) shutdown$auto(0x200000003, 0x2) 392.46597ms ago: executing program 1 (id=891): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4100000000df, 0xeb1, r0, 0x8000000000008000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1ce9c523}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x4000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0xffe, 0x0, 0x0, 0x0, 0x2) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5393, r1) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 260.014945ms ago: executing program 3 (id=892): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200c00, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) read$auto(0x3, 0x0, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2a, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), r0) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x9, 0x2, 0xd, 0x1, 0xee00, 0xee01, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x7738, 0x2c, 0x7c1bbda0, 0x6, 0xfff, 0xffffffffffff7fff}, 0x2) r5 = getpid() ioctl$auto(0xc8, 0x401054d6, 0x5c8d) process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001245}, 0xa, 0x40000000000000) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x7f, 0xee00, 0xee00, 0x6, 0xe, 0xe, 0x5}, &(0x7f0000000280)=0xfa, &(0x7f00000002c0)=0x5, 0x0, 0x4, 0x2, 0x80000001, 0x3, 0x0, 0x4, 0x7, @raw=0x6, @inferred=0xffffffffffffffff}) r7 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r7, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b4d", 0x3a) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000400)={0x7fffffff, @inferred=r2, @inferred=r1, 0x0, 0xfe, '\x00', {0x2, 0x1, 0x19, 0xee01, 0x0, 0x82b2, 0xfffffeff, 0x6, {0x1, 0x7}, {0x8000, 0x4e31}, {0x6, 0x4}, 0xc, 0xfff, 0x1d, 0x6, 0xad0a, 0x0, 0x0, 0x1, 0xaf, 0x7, '\x00', 0x31, 0x0, 0xa6f, 0x2}}) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000003140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000003180)={0x2c2c, r3, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [@typed={0x6, 0x92, 0x0, 0x0, @str='.\x00'}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe2, 0x8, 0x0, 0x1, [@generic="d32fa45352e9412010e47b190f243adffef7643354e51facdda4650c073220b6abf7dd7e9b79c64b95da6ff6edc75dece8cc7cfd9c88a278d6ed798f679b145468db87617227f13bf0227aef24b783ccaccf9bd9565cd88b47b0a11f440ddcaef376c231188a34d995e75a8053cdbe15232a02491366be0280140a01350590deb056d004f6c044f98c5249e5c1c0c56bc4dd325d08ec4463ce0468425c587c21cbfd724470e256e1bde2f47983fb078e5fcb6272068395409b7bb95d34dbfe509abf4c4793d768ea6cda36387720d280d550", @typed={0xa, 0xd3, 0x0, 0x0, @str=':-^\\#\x00'}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1287, 0x8, 0x0, 0x1, [@generic="ecf678f8119c2b140c3206aaf7b563c33a56725b3c31d07f5945abed7b189bdff43a535d02515c15ad444658121ff4e7df27e8fe9a7b917f9c0961", @generic="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", @nested={0xc, 0x90, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x6}]}, @nested={0x9b, 0x5e, 0x0, 0x1, [@generic="df55446aa31e5db19339f0690fb588525c567e8b622a80b452933bb04768813882930852542d15b49f8050a7df22ec3d352b06907bbb1a3a3cca17b03196ff28325e66ae63c8eb971c700b74a1d878dac7d3634e3eb72e1dcc5050702285be400f320bd9ecdfbaaab69d6a1335b5e0f4602d09bf3ab26d9568a443fab248dd20aa6af1f6ad5f35def1ec6b59b9d4a483ffe12c", @nested={0x4}]}, @nested={0x134, 0x141, 0x0, 0x1, [@typed={0xc, 0xc0, 0x0, 0x0, @u64=0x698b470b}, @generic="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", @typed={0x1c, 0x1, 0x0, 0x0, @binary="4065f8db7a3773c96dc906048bf35204625b5aa7b92beb3f"}, @typed={0x4, 0x3}, @nested={0x4, 0x4}, @nested={0x4, 0xe6}]}, @nested={0x69, 0x23, 0x0, 0x1, [@typed={0x8, 0x62, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x2b}, @generic="7203073eeda78cfd3ef9bbd7e3f9c6d86deebd4acb4fd765eb2c70949f53bb72ad9b2a3c6df0d2feb1e8780f4e438465de29950f324f12f3add5fc25a165c01b293be27ddfbd5e1b2fff2bb90c1771ca0701c98087660e8927"]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x21f, 0xc, 0x0, 0x1, [@typed={0xb, 0xe2, 0x0, 0x0, @binary="c4ff50706e9ed4"}, @nested={0x8, 0x91, 0x0, 0x1, [@nested={0x4, 0xcb}]}, @typed={0x8a, 0x18, 0x0, 0x0, @binary="8fcd76d1300292b1894c51d754987e48428283f50eae1205bc57ffac24936fb098b1c6ac2f8dd4ee21aadd3d95ad17b9211ae21f6e4b26f2254dd7a36daf1f9f1ec2e9a1d259b2d6d52ac7e2975ea8a1ca1388aedc8cb1288ef79a97bec087234feeac5877ec9ed144d25f539898cf0cf95862fe6426f04593c603959960f50b57ab456f9915"}, @typed={0x8, 0x62, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x47, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="ec69561a034f2cea2495a361219246292919b8d9cd10d9aa50db4c17db5acc9757e96480b4c865ab8e8b283711656b1da0c3a93d70a6811d1a4a869c8ba1c80042e75d567d318b094b401050a887605b647dffd787f6c8d6e923276c235f0284266cc4e30b7221ccce5fd1a46af6f334aaa436b41c2b7bb750b7623bcff8e6a096bd23b74240f406c65af2afb22394eb586a928389ea14521463257c7992156f7812794b472cf9b2508fd2a65fe6752ca853fdb94946a00e261fed4d1497e372aa6bbfdffa294d98ddcce1d0e4ce4811e30323e646aaf2f41526f6b940076b231e961cfc97375e3ddf17f0cceff74da75df302", @typed={0x78, 0x11c, 0x0, 0x0, @binary="cd545e879b2511f51f0265ae2700b11120c874ad5ae1650f6541df1154e41086205ad6506a321180e7772ff3e1f1288a5bb5ff4ecd8dfcc95d80cea94bb48ec0c976ae5d5f5446936303b6184ca2c5147af03e20c54a2fe07d5a3bfbff4d7e5f354e757cd33509c671ef2ccd09205a6db7c6a949"}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1380, 0xc, 0x0, 0x1, [@typed={0x8, 0xdb, 0x0, 0x0, @uid=r6}, @nested={0x90, 0x4, 0x0, 0x1, [@generic="4b0a70a4aa10f02e637ffed3c2dafe9bdc09b26f2ec51aa245e794a3b5df0a8401cdd9a435b25d060cc49e37e4bb8d2cf3520336441d36c63282ae395356a82c747babfc98504bb616bbc447aca67a710c836f86d8ece15361759cc7f055078d6edda877e04d7e0c677f", @nested={0x4, 0x1e}, @generic="9f1b3f080620fbb5394e1e13ae734639a12bcf060656ed75aba2", @nested={0x4, 0x9e}]}, @typed={0xa8, 0x38, 0x0, 0x0, @binary="5e8382261ca5ebaf2bf428d00aef9e0e22f8b69a3eb90a8449e1036ac3f04142a171b0000dcd28f1d9d6216a4b74c59b3007337cac9694d69c1606908d28fb5ed70f89612a4122f033465cf5060b9754aee22a8e611421b9ad5bd916d0311ec537ebc67ab17697f45d6d5df357903c899eeb20d671e10e8675724e29ef673a23b376739aad5396e5d0fc8a7b5d4ffa21ea94f124c3f94f12e81f33dc54940412999f0643"}, @generic="38b4a0bad22211c8d82074ced0931e9498ce0be3b8109d9c790175cf011b3789dcefb3c0eb78d3b4afe68f6b7cafe2c1462de991cf0f21f942ab566a399dec21aa3ca3b96fd51bba9417b6ec5a8057eb82711dedb46ed48b8281b1d2f64a033caf803c6fc5cea3ac02e25c6a1a678361feee41fa1c6c184352235104635377db533eea046b1f617c81f10465a1bb92221a9da2b713fc6cdb4723a5a8a0b61fddfa0559e6466e9155a5cef275ef18", @generic="83bd2c0a679e25c0e114bff23ed90baca98b4473bed1cd03a06ef8ab3761ac8d5601a209e1814b9fd0cab0c001d6c3bf811e87e458fd627d21d2451c4abf3c1881c09d9bb7d00064f0d6049431a0b8c36b48c83c1d32b46a07ad", @nested={0x133, 0xab, 0x0, 0x1, [@generic="a2d6bc50d782024d5ab27050ca4db4537b8386779cdbc06c3c3af6bf848ab0b7703d1382bd80e626df7cf41c137d48754fead7cbe6e4998472f6f2ba75341dc7610f88c26fc90730d764c47f635036c4e08a0e1faf9ec1e3892d8ca4ee956d041b1389bbe2a99c3063188d5c392486393e075da023f602ea218cdf16d37225b769f79d265c39f770dc049bf83ffcbad91129dbcfe69236bf9c108f2b8ba4f2137cc173dd241b0d6a4c65735c3a2d6055c0ff9a1e433c1fdc756f99cc86143082cd106d97e9850d8316d8cbc73d3ae9b5c84c66", @generic="5accf6137037f29d2b57cf9805686c6fcf0d49c647c5d4e9fee8aa3f761fcaf40f219053d01f1a5e2b5f2e19bdbe4e9996b0f863ebb0ac4b67546996a2a89c1b3262dafe0913c6619cfd3605ae6db7f13f17dc55f95b7a4ceb3ea3f0"]}, @generic="50901c311f8c57f14999fa8ec605f7be428c7acf939c668e7309f82f1b7e458d5eb2d40c15ba208ed8bd15a914b7cad74df551774a19ab737ec428ed29d71c5d6dd74be7998af1e16f1fa1dc34376295a69f19023311f92ead1d4eb89de0aa9d5593d23913b1c5dc86fcf5e8d6dd59558e5e9ffee3487d9000edafc65659103be6289ed33ded781dc14a1cebaa7e066bc46be25e4da95c6c5b1ec8e49572963e0f18ad27c5464febef2dbacf20e3f7a7b4247ae1faf2506613873d5ac3fbd219e9cee540d97f54fa2e50f4f6d92c8e45a77c0b598d5f8fc85270b2791203fd72bb17721b5f7305ebe791b173d2750e537ba72821b98fdfc3aa1530d96ef40716a63913e2ad34f08877110d55b61c510c78cdeb9fef4b97bf906f59dca285f836984e38235ad710255f410c999e132a7cef0a3f2b0eb7c40210245de674c578ccad10b5d295d2fe0371e14149bf6ff3671ca9f0cca83625a8b26f8392b239cc94355e63854afc4e16616287566636e0ee146e51fb1c17eb97d1599fcba527b5dc58dcb8516f3413cb445369324ccdf5ebfb5264d8c9fd7102cd79ba5afe2d3c8652eb4a5f536abddab4d06db2bb60597bd7938aa31a7fbc8308b68fc958e253c0aee5fcdea67a55a19cd768c769e2aa71dbcc5812cc7d6eea67336b077f940e38e2d7e023e7ea99b44e8bafbad6b226f474a538fffb764778109ffba811f9d2484aec842dbdb2cedb7e83275ab43dda994c66d62371d9bf947b8b8dcec994416d19e31951134b86c520e52f5876c1c9345674c4a8bc265e2455e10f1d0635fdaf8a722117f6d5f5feebc6eda94dd44cd4e58b64027caeb8b96bf8a6e9abb4a644f838db0f5900276f41acfd4998aaf80e20af2ef721b18ac2205a92a3d4abc33fa1e87b67b53da6c454e703b38370fe02d1a953036b1aa7918f6c40920a692a62c3473afd62badee1226f56ef9161c2e2266ced7d714c986bf803880b9365feae0ea9cd9d55df5b4280fd9f65a7b138e21e4de3e026240a568e4b9dbe207a1d90997a9f9500459a3034841e16868500d3a3c4362ecd4456f4d2176f442d6cf0360d21ccfd464b6136a5cb6f1b8c08a0866dc5cd7f1f0d18e163bbdeea558657c46831a6afa3c6d3eee56f8266fa57dae8e9253da7b0a314d935d25e415c7433854bc990241bc21145b50755e19215887857b294daa6d6999f141c9f5b9d54eaf30ef96d12376c3730ca784e5c06fdc11f11e3d8ca5bf1bfb7de9b88a0cf90e0905c59d388cf32d7e9032cf330b7ff27b249e0138a1f7a3fb6e9b2ce7878fb3cac13867ce8d5691e1973d0b60002fdd0470bb313e23388639050a50209285ef5f84189f1387abf62f9cd8059ef417454121d60a5e9b540772d9c1fc9448c5d8d91bed79f531439f04eaaf77eea8c166619e3fe536992724868aaefde1d43c20c52beee2489988b1f0ac540c92aa486e8c8c998c5e67d02ce6aed3494c7fddfc94e6c69a474f975aeb5b9cc8348cd00f73391c144732c11b03b22507701fb098fbcc0ca49259149576364e48d34f48368a82a84c88c9a633a22e5b1b066db645dd364dcdf518c75b118233b76539878ee3759e41ddfebf601b2bc584717f0476bdb032a34eb16e2b6df9d0df4ff6199c4360520018fae2d562ccb1249fa66b4afb1256af70a6014782a7cd65b1b4cc5cf22377889f9978e22891119b962b4a842c87fe7c36de25bf7a53d4def9ab4206c16a76f8013ea048183545f232e9a04b3f5fb99c85b265b05cb149fd34cb48b5f5f3a12da0a6dbccb7fbbea8a8853b77829601dfbb62371536ad800de707f06a532beac6b95d531f6170d4e4b5d90a235f77296351ac6d8444f688c9a3b7936c1e89c504acb9904cc3d00578aa4c2ea9191ad315744b8c742e4bf4166fe87fcdd3380f7f8176ae73e2a7ad428bba1e5b976caf7820fd7fb9ae0ed54cc3c6f7cebca99325cff5fa55715d40126cbdaef3d56690093c0a5bee5e6223ebe426fca30550040d1e58f2abbecb2fb4e5173941e10ff95451d52c0730c3421f4dc10ef2d0664b9459ee0f9b48c471b31f97037b8dd1ba58ac066cebeed026076c06076c753ab58b11e5fa213d540c6eebe2b95b0c96f7af75045c1ee85b04790db2dc1b7fcd50f23e7d56612ee7de2174c48f13873e6b7fab0748bd53f5072eb8c8623fe84dc74002f3e8702a30fda0906ce75fee6bcb0e4e654382ac498673d8dd1e5b553571880eb5b3d05e16e31d1269907c780bf3ba35e05895376357f4117ba2804748f009ae9b70030ecd39e5eaac1944e9b21a48090a289f2036b44ffcd428aad830e8fdeff11a6658715821bc91c38ca57343ea755750e5a10e15749f3cbd123ce18ad73c0d255f907379940ba4cff86f01f4966632fe78e20d0403043d5dc3d4995c821df808de358bde487d0416ec391e3440bd2139211d8c8bd6fc9725e6e12c2398475b767817a4549786607cb51cb7ee044c7001582b0e335c54f58f0cbb6ea710aa67d9ceeba98fa41f78fdc73dc67cd1983fc4e918fc4d9fe6411181470eb70b0923e9715e7580ad4a035c8eb7e6b9fe1e28b352c3ff1ff74be273b8ca6553dc3ceead6bc7e24bb95d79184dab1ec2073a74760091a80427e85b2f96701929a45111ad0090f61bf0894ce335264928bb6be5b0a6a08ecb20edeb066c60d478d3956c199a10051b7a18f707781201a44aaa5d856f5ce14afbe95ffde2066a77f09405a424b5b676cfb0cdd5c63d0ff6ff22b87143ab9489e98c8b6293207e81860d04a6d1109f4f9fcd2288e52074117d8f9da1a6dd1ac8921f74c2c395dc43f446a786ba7e5d9ee8849b9afb5d81255f92a349c4ea3b9048be7313720510c50c6d3f2bc0135ac328639e47600cb4b2f8e5d67f0a822db8dd651e6bce3d896ad6bfa7db1dad8abf5d26e9bcaf6301575311661fc841747ceca3416fd1c97d61dbe41859e0b6d05dfbe9f53d805fc204d8d0990d95c6cc6b497c3994981b0c01007490d5a4e87fd988ec677ea6c4db88d4ab99cf00f59814c4c8eb7ccb72fd893baf4455dae7ae2f6b9dd54ae4c82be2c738e8fec5e39678e44737525cad9389a2f05e3de3764ffe5d6579cc75fe0a14add0ecaadb880dba983b535e1d1f2d09959a92cb7000e57a748595c05c453ac68a8035a3d717d4df3c63e5cd61261971f17ea9f40a18253c8533e2f16846e9b6b94b979d27c893d23e1541bdc7dcd858515cc802ea4853df9bed8e6b828409b72b3f5ba81dcd276dd755c1621c096946d0e0fea4a496606635d17c0aa4ec61ca17f7f8d8f89a3951abf44cd0adcb8699aeae87ee277c961c035d2ff67c89a781ae5bf56074feea2cb2f168f1f8ef06d2bf40ba57e93f46608ac27a00c25e97eda9303979ee91361fbfca0df8b5a57bd691f8850b2d7686455ec8157a24a23cfba76452a719da07957b4e019e054a2c081fa5d654b6b82f5fd66d6f850d7b7f9ac427765ecf8b8a67e6b885003c8f17be75bf8dfd3bc1940e33d52e88746647d8757b4b497bfedc06685f9bf23130ce0e6bf6a9dfc3dc334ef8337b6def62ca541c5ef40940eb632125d531c507d2ceda4aceffcc42ee4f63830bfb17ead7d3c78b19de1bae7ec23d5c1740119c01058fc43fe63cc8ad0cc72b09deb692901ae6c66e929581cf5f0285aa944f9071205600cf7ea347463911e6479f483e2ee0d63c51f85cc8631cdeda7670920b9d4eb3eedd77b583dfc202904138d90ebda20fb895bfc4da06e813c5a92e484e4bb96e9d511b472769409336a986ad5bb70cdef7f8185d5ca1f372e8a027e733a20418dfbfbe436dea38037f708b81edc75f04d8a8b37c1b831378dc1ff1f790097c700f64fd1b474f6513445e273bc51817fc6a1f8e8ef2d3d668c72f41ea0b61ff7387c9d126311a2e37a43d9a80ca5d13854744f56fb35a5527863f85d81b72fc7d547a8ce78f80e9b0869f91a7c301f77cab2769cb445098d79ee65a183717e179522dd55e1c83e936b2f1e7ac56c6c7900ff9d3bd549d8c493b00c73fdcac020c556062acbdb70bd446689c0c867a27e9a1a85ca66beb2867273805671506874232f454d2951c42a8cc58e20326054469e34a859582bb3da95851a344d277f472f0b73a645b4a7d2de541a3c324a015d166862a03e160cafc97837a3468d240bb8d7fd64fd9e2cdf6c00896a460eb23b264d52033425816faf4e8727470f49a1e4583009cab51e3ae3b4620c44637f725b048eeebbc7d5f14ed4246ecd140feb9f4ef2abc0579193520ec99769c485d96d7da70eb0038bf9985a5db9fdaf665333b1d99ac17e2ba3b84e5b483438b0dc094cad95c7319f8c0691bafde36dac07d3c2924a59ce86edcacbd7ede7e7ef056f4ad67515cf89a51965ee418dd24d52396a9d9979987dc848ca66ea6a2a6f02e5b5979a39810d821b9783da3ef454462a89164af84ab4eab73224fe04ef8de025c010ff3416749aec01c6a7e043b8508a9d9774e329f7258a3370845d4ed5ecae1834cbc23aa4d02c88981343455062690d539715a1a72a13426cba86359b87d0d75dc9ea2e6c1987d30aaa231bf9f028fec9aa403145aa74c2db1812212f452a3f547eaa39375b947698e6f100f968476cb901644fd0095be63ff9293ee1fe6a20d4c775e08ec01d558d3dd18a0513d56862dded5383c3f1a0137c96739fb3ddbee89a53f3b6b864b76dd549ccffb1d2591e6109bd82d4d2e904774e65ed72a9ccab81779734135fbfea78a306de27810c5c3a86b7b303e9f30dfbe75e0aa1c788c198cf1eeaf52b4127e7a299f2444a8e841093471d15ec15b2ff0b5d6b1ef9a026cb8f02d82ed91cd3a770820623030315f2c873a9e0c90a7b8c144dbcb95027d86cbebced8ad697a66e4e1e6f9a43b54300a732f8e836b648617ae6c3ea7deed8ba55c7281a9d9399de0befaabeb71624861bae58f8df16f43d0a77629824d05721d6f30bdb308ff7293f92695e509ee69932520b16afaeb3ca31f25d0fd1aa0cf71770fe9982938a86874e499ad66884d166a2c0fbc1a7bfd34b83c52b61286c96026ec3331178c85a8bdf14830c0dc8b350712e9a6cc7c3b238c83e5ab66047d929dfafd0a8f657d18c5d508cc19b776bd9092a87212857533d29e04ba5281b0d3d12b14b5e46ad0aaa4db13d53a1238317fbc1a244868a5b205375fc91f7234b4233d423a7a612966db7653fe18cea809916efa3fab109bb8f5f87756dd9792ac15119c345b84c085f62a0f524edc151053b8436543c821099bd215550db507c81b4b51380b9908755cf2ded749438d1050ab2df4cc2929dcd99d0d07fc715599c8f4945faa6bed580c3c8ec35bc453a4acd19950ea1135577147e1877856aa8d4d722389e47c2f6108155c61d24412199be9b12dcee4e11bb22d5197133326fffd3bb48cfcc51e2ef4574ed292ad3acc7481937f5ed90da7bbb253fc3608c73ec87ccc21005adb5b3323186c76f61ac28fae90bb7e8f080106e5cbbad9663ed4b68ca47ddae6528de423db6b407060860c1d6a2ec71c3437d49008ffc3c3b7677cdb4265ab25cd42720044755af592d08c507a60dab1e61fc5a2a0e0b8c0d6217ce294e62e42aadc16d860981ca13ffe2745502b653b333666904687de5869170ef31af777b2424aa8b026be3d4ece3c39ecaa12833b99be5c1ee268e9b5fc8d3dd388bfb1f6a021fd3bcd3d494b9decd467012507532d3223d7d19130e2903f73857ef2db50f6173e7afc2cdba8511dbcdc059eee7a83dddd36c"]}, @NLBL_CIPSOV4_A_MLSLVL={0x2f8, 0x7, 0x0, 0x1, [@nested={0x8, 0xbe, 0x0, 0x1, [@nested={0x4, 0x13a}]}, @nested={0x4, 0x14}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}, @nested={0xb5, 0x64, 0x0, 0x1, [@typed={0x4, 0x25}, @generic="4dbf7a30e60ab5ca9c7d9235c332a107d5602e3f7b6fab2cafc6a81f953cff9d1d3606c590e141137f6efe0c0ac0e166eec7e3a19aa125fb38149bf3d036605445f056dd679ec6411c988920233d145504bc9776b96932ead9428ee3ebfc91fa4852cf95e8303cc333bae060fdd75f2771f40037b83a715aed532a9aa473796556a2679e4b543357407f71f7219198c9b1cd6650905bead5ab8f480948d1916e2937dc13b36778269bd317c6ce"]}, @nested={0xa5, 0xfd, 0x0, 0x1, [@generic="181b0895810d70434f368932fadce216a914596e3338a53813e836ac240ca7dba782a8a4944517df6b4059ec2892d6fe657c67dd43bc3428f31e3fd01c669dc6817d580b5cc0db32c70811e31767b29c67e9b1caf3c14da2ef85e9c1087ed0e4fb3a2bb0868d66d01e712be62750d47134220120d38a01faa590310974cc1b53c0fa314e7cc6b69ac1d9269c45", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @nested={0x126, 0x53, 0x0, 0x1, [@generic="80592d9d56421e236b7097b3cccf8d550608ddc110f1e0e7274753907b31a3101fa3c0c06ae6b2f6609ddac3d5ba5019165a6e3a74da21d7ec7bfb2c23beaf3b69e8fdd5b12fd83bf67a7b", @nested={0x4, 0x80}, @typed={0x4, 0x48}, @generic="7c8e8fba18b3378fd2411d5c08d05161f05aca6e758f456885d1fe85d261460b8c277365e036107acc3f40e08acedc3499105c126869028e54a747741c53889c4fce8a3f2114e367ca125f36af38322566db51fda3923451ef2bf302b0e761e8fe954b91bcb66427f3b8189368017a453ef26e9dc0cae4c797bf955d410c63a21f5e9ddbb7d85057b58854a4a702448bb906257ff93f442682ac482e3f79d546afa25a4bb3924be782861fbe7e97559e916a7ca274ad367b1deaa9776236ec18fbc33a23c6dc85e9007680275f3127"]}, @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0xc, 0x37, 0x0, 0x1, [@typed={0x8, 0x128, 0x0, 0x0, @uid}]}, @typed={0x8, 0x82, 0x0, 0x0, @uid=r8}, @generic="31eac6d1d2930dbe13cea14e6d9bbf4ab15a3a510c8d5d897e9fd13a90be35cff2f295f4003952bcd5d42824105e7c8e"]}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x902a}]}, 0x2c2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000100)="b4", 0x1) r10 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2, 0x0) ioctl$auto_OSS_GETVERSION(r10, 0x80044d76, 0xffffffffffffffff) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9u\x00', 0x40, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d02, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x80, 0x104, 0x6, 0x20000000003}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r11 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r11, &(0x7f0000000d40)=""/16, 0x10) 145.320778ms ago: executing program 2 (id=893): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) ioctl$auto_TCFLSH2(r1, 0x540b, 0xfffffffffffffffd) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x40000cbf, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0x55, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) r4 = socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r3, @new_map_fd=r5, 0x8, @old_map_fd=r4}, 0xa3) 0s ago: executing program 0 (id=894): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyse\x00', 0x202, 0x0) ioctl$auto_TIOCNOTTY2(r0, 0x5422, &(0x7f0000000300)="04aebb7fa4dc3e481d7da0dc1f62087e4534381279f98220346a50e2419f0d923740fea43c24af1e5748ab3e0195da7eb387668a4e2499fdecfcbbe3242424b61e3bf121a137f2b94abff23c7163338aa26beda497b8d1eca994447aae8f329801505421a0f0843e26188259b51023076ef7d41369d6265505f9867663989f877c1c023c00c322a94561abab8e5c5591dd6a33858276c554d2efe908ed7c0f284d6242ce3dccde6d580cf2886f71ea56c2659cf5d135c016f0a8a41349dfdf30dd6cbfd9d4c378609b919abafd112a224f") r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x6184, 0x9, 0xb4, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) getsockopt$auto(0x7, 0x29, 0x41, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r2, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NET_SHAPER_A_BURST={0xc, 0x5, 0xbd7}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) mmap$auto(0xfffffffffffffffa, 0x2020009, 0x4, 0x17, 0xfffffffffffffffa, 0x2000008) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r6, 0xc0404d1a, r6) write$auto(0x3, 0x0, 0xb92) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250c0000000400038018000180fe790200776c616e3000"/42], 0x30}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) kernel console output (not intermixed with test programs): was attempted by ""[7942] [ 296.355026][ T7945] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 296.460161][ T7945] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.468875][ T7945] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.573136][ T7945] page_type: f5(slab) [ 296.578508][ T7945] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 296.587909][ T7945] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 296.597154][ T7945] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 296.609362][ T7945] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 296.772122][ T7945] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 296.811469][ T7945] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 296.852141][ T7945] page dumped because: unmovable page [ 296.857614][ T7945] page_owner tracks the page as allocated [ 296.944339][ T7945] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 297.110163][ T7945] post_alloc_hook+0x1c0/0x230 [ 297.156798][ T7951] could not allocate digest TFM handle binfmt_misc [ 297.225014][ T7945] get_page_from_freelist+0x1321/0x3890 [ 297.230877][ T7945] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 297.236864][ T7945] alloc_pages_mpol+0x1fb/0x550 [ 297.241982][ T7945] new_slab+0x23b/0x330 [ 297.246222][ T7945] ___slab_alloc+0xd9c/0x1940 [ 297.251035][ T7945] __slab_alloc.constprop.0+0x56/0xb0 [ 297.256596][ T7945] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 297.262544][ T7945] alloc_inode+0xc3/0x240 [ 297.267029][ T7945] iget_locked+0x2e4/0x830 [ 297.271909][ T7945] kernfs_get_inode+0x48/0x460 [ 297.276805][ T7945] kernfs_iop_lookup+0x1a7/0x2d0 [ 297.282436][ T7945] __lookup_slow+0x251/0x460 [ 297.287109][ T7945] walk_component+0x353/0x5b0 [ 297.310001][ T7945] link_path_walk+0x627/0xe20 [ 297.325098][ T7945] path_lookupat+0x15a/0x6d0 [ 297.329825][ T7945] page last free pid 1 tgid 1 stack trace: [ 297.349999][ T7945] __free_frozen_pages+0x7fe/0x1180 [ 297.355324][ T7945] free_contig_range+0x183/0x4b0 [ 297.389975][ T7945] destroy_args+0x7f6/0xa60 [ 297.395828][ T7945] debug_vm_pgtable+0x13b8/0x2d00 [ 297.430155][ T7945] do_one_initcall+0x120/0x6e0 [ 297.460040][ T7945] kernel_init_freeable+0x5c2/0x900 [ 297.465403][ T7945] kernel_init+0x1c/0x2b0 [ 297.469818][ T7945] ret_from_fork+0x5d7/0x6f0 [ 297.500015][ T7945] ret_from_fork_asm+0x1a/0x30 [ 297.690403][ T7963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 300.402252][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.377'. [ 303.694053][ T8026] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[8026] [ 303.965945][ T8031] FAULT_INJECTION: forcing a failure. [ 303.965945][ T8031] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 304.057320][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.3.384 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 304.057365][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.057383][ T8031] Call Trace: [ 304.057394][ T8031] [ 304.057407][ T8031] dump_stack_lvl+0x16c/0x1f0 [ 304.057457][ T8031] should_fail_ex+0x512/0x640 [ 304.057513][ T8031] _copy_from_user+0x2e/0xd0 [ 304.057547][ T8031] copy_msghdr_from_user+0x98/0x160 [ 304.057595][ T8031] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 304.057661][ T8031] ___sys_sendmsg+0xfe/0x1d0 [ 304.057710][ T8031] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.057753][ T8031] ? __lock_acquire+0x622/0x1c90 [ 304.057848][ T8031] __sys_sendmsg+0x16d/0x220 [ 304.057895][ T8031] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.057968][ T8031] do_syscall_64+0xcd/0x490 [ 304.058020][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.058053][ T8031] RIP: 0033:0x7f7a7638e929 [ 304.058078][ T8031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.058108][ T8031] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.058138][ T8031] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 304.058159][ T8031] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000003 [ 304.058177][ T8031] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 304.058196][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.058214][ T8031] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 304.058281][ T8031] [ 304.222940][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.402660][ T8034] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 305.660254][ T8034] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 305.668874][ T8034] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 305.780147][ T8034] page_type: f5(slab) [ 305.784249][ T8034] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 305.794506][ T8034] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 305.837425][ T8034] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 305.891521][ T8034] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 305.902016][ T8034] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 305.911200][ T8034] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 305.920395][ T8034] page dumped because: unmovable page [ 305.925816][ T8034] page_owner tracks the page as allocated [ 306.043223][ T8036] could not allocate digest TFM handle binfmt_misc [ 306.068508][ T8034] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 306.130684][ T8034] post_alloc_hook+0x1c0/0x230 [ 306.135711][ T8034] get_page_from_freelist+0x1321/0x3890 [ 306.145394][ T8034] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 306.155564][ T8034] alloc_pages_mpol+0x1fb/0x550 [ 306.235334][ T8034] new_slab+0x23b/0x330 [ 306.270438][ T8034] ___slab_alloc+0xd9c/0x1940 [ 306.275200][ T8034] __slab_alloc.constprop.0+0x56/0xb0 [ 306.352792][ T8034] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 306.358677][ T8034] alloc_inode+0xc3/0x240 [ 306.385681][ T8034] iget_locked+0x2e4/0x830 [ 306.414018][ T8034] kernfs_get_inode+0x48/0x460 [ 306.439991][ T8034] kernfs_iop_lookup+0x1a7/0x2d0 [ 306.445092][ T8034] __lookup_slow+0x251/0x460 [ 306.471709][ T8034] walk_component+0x353/0x5b0 [ 306.486771][ T8034] link_path_walk+0x627/0xe20 [ 306.512085][ T8034] path_lookupat+0x15a/0x6d0 [ 306.516839][ T8034] page last free pid 1 tgid 1 stack trace: [ 306.579956][ T8034] __free_frozen_pages+0x7fe/0x1180 [ 306.585293][ T8034] free_contig_range+0x183/0x4b0 [ 306.649938][ T8034] destroy_args+0x7f6/0xa60 [ 306.654588][ T8034] debug_vm_pgtable+0x13b8/0x2d00 [ 306.659716][ T8034] do_one_initcall+0x120/0x6e0 [ 306.701712][ T8034] kernel_init_freeable+0x5c2/0x900 [ 306.707045][ T8034] kernel_init+0x1c/0x2b0 [ 306.713485][ T8034] ret_from_fork+0x5d7/0x6f0 [ 306.718193][ T8034] ret_from_fork_asm+0x1a/0x30 [ 306.919735][ T8056] random: crng reseeded on system resumption [ 311.313900][ T8092] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 311.365534][ T8092] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 311.410615][ T8092] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 311.418275][ T8092] page_type: f5(slab) [ 311.553692][ T8092] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 311.610087][ T8092] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 311.660158][ T8092] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 311.691540][ T8092] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 311.765862][ T8092] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 311.820350][ T8089] could not allocate digest TFM handle binfmt_misc [ 311.850566][ T8092] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 311.972524][ T8092] page dumped because: unmovable page [ 311.978004][ T8092] page_owner tracks the page as allocated [ 312.064979][ T8092] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 312.087882][ C0] vkms_vblank_simulate: vblank timer overrun [ 312.240360][ T8092] post_alloc_hook+0x1c0/0x230 [ 312.246501][ T8092] get_page_from_freelist+0x1321/0x3890 [ 312.358074][ T8092] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 312.379949][ T8092] alloc_pages_mpol+0x1fb/0x550 [ 312.384916][ T8092] new_slab+0x23b/0x330 [ 312.389163][ T8092] ___slab_alloc+0xd9c/0x1940 [ 312.500543][ T8092] __slab_alloc.constprop.0+0x56/0xb0 [ 312.506092][ T8092] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 312.571253][ T8092] alloc_inode+0xc3/0x240 [ 312.582613][ T8092] iget_locked+0x2e4/0x830 [ 312.607415][ T8092] kernfs_get_inode+0x48/0x460 [ 312.623762][ T8092] kernfs_iop_lookup+0x1a7/0x2d0 [ 312.655142][ T8092] __lookup_slow+0x251/0x460 [ 312.681127][ T8092] walk_component+0x353/0x5b0 [ 312.685936][ T8092] link_path_walk+0x627/0xe20 [ 312.724159][ T8092] path_lookupat+0x15a/0x6d0 [ 312.728893][ T8092] page last free pid 1 tgid 1 stack trace: [ 312.800031][ T8092] __free_frozen_pages+0x7fe/0x1180 [ 312.819959][ T8092] free_contig_range+0x183/0x4b0 [ 312.844908][ T8092] destroy_args+0x7f6/0xa60 [ 312.866547][ T8092] debug_vm_pgtable+0x13b8/0x2d00 [ 312.878143][ T8092] do_one_initcall+0x120/0x6e0 [ 312.893530][ T8092] kernel_init_freeable+0x5c2/0x900 [ 312.914102][ T8092] kernel_init+0x1c/0x2b0 [ 312.918590][ T8092] ret_from_fork+0x5d7/0x6f0 [ 312.943780][ T8092] ret_from_fork_asm+0x1a/0x30 [ 313.288484][ T30] audit: type=1804 audit(6044207442.196:3): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.405" name="/newroot/91/file0" dev="tmpfs" ino=495 res=1 errno=0 [ 313.350242][ T30] audit: type=1800 audit(6044207442.196:4): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.405" name="file0" dev="tmpfs" ino=495 res=0 errno=0 [ 314.024144][ T8109] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 314.130154][ T8109] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 314.213491][ T8109] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 314.319056][ T8109] page_type: f5(slab) [ 314.389172][ T8109] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 314.580233][ T8109] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 314.745261][ T8109] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 314.876795][ T8111] could not allocate digest TFM handle binfmt_misc [ 314.960157][ T8109] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 314.969159][ T8109] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 314.986313][ T8109] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 315.160018][ T8109] page dumped because: unmovable page [ 315.255972][ T8109] page_owner tracks the page as allocated [ 315.465603][ T8109] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 315.488486][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.560198][ T8109] post_alloc_hook+0x1c0/0x230 [ 315.710124][ T8109] get_page_from_freelist+0x1321/0x3890 [ 315.715851][ T8109] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 315.790058][ T8109] alloc_pages_mpol+0x1fb/0x550 [ 315.795344][ T8109] new_slab+0x23b/0x330 [ 315.799600][ T8109] ___slab_alloc+0xd9c/0x1940 [ 315.805056][ T8109] __slab_alloc.constprop.0+0x56/0xb0 [ 315.810912][ T8109] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 315.820193][ T8109] alloc_inode+0xc3/0x240 [ 315.825724][ T8109] iget_locked+0x2e4/0x830 [ 315.831444][ T8109] kernfs_get_inode+0x48/0x460 [ 315.836660][ T8109] kernfs_iop_lookup+0x1a7/0x2d0 [ 315.843228][ T8109] __lookup_slow+0x251/0x460 [ 315.848107][ T8109] walk_component+0x353/0x5b0 [ 315.959996][ T8109] link_path_walk+0x627/0xe20 [ 315.964861][ T8109] path_lookupat+0x15a/0x6d0 [ 315.969548][ T8109] page last free pid 1 tgid 1 stack trace: [ 316.134861][ T8109] __free_frozen_pages+0x7fe/0x1180 [ 316.218407][ T8109] free_contig_range+0x183/0x4b0 [ 316.372581][ T8109] destroy_args+0x7f6/0xa60 [ 316.377339][ T8109] debug_vm_pgtable+0x13b8/0x2d00 [ 316.382774][ T8109] do_one_initcall+0x120/0x6e0 [ 316.387843][ T8109] kernel_init_freeable+0x5c2/0x900 [ 316.394400][ T8109] kernel_init+0x1c/0x2b0 [ 316.399007][ T8109] ret_from_fork+0x5d7/0x6f0 [ 316.411280][ T8109] ret_from_fork_asm+0x1a/0x30 [ 317.557868][ T8144] can: request_module (can-proto-3) failed. [ 318.184760][ T8134] FAULT_INJECTION: forcing a failure. [ 318.184760][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 318.277774][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.1.404 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 318.277824][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.277843][ T8134] Call Trace: [ 318.277854][ T8134] [ 318.277867][ T8134] dump_stack_lvl+0x16c/0x1f0 [ 318.277922][ T8134] should_fail_ex+0x512/0x640 [ 318.277986][ T8134] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 318.278045][ T8134] should_failslab+0xc2/0x120 [ 318.278078][ T8134] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 318.278132][ T8134] ? mas_alloc_nodes+0x18b/0x8b0 [ 318.278180][ T8134] mas_alloc_nodes+0x18b/0x8b0 [ 318.278231][ T8134] mas_node_count_gfp+0x105/0x130 [ 318.278277][ T8134] mas_preallocate+0x77b/0xda0 [ 318.278341][ T8134] ? __pfx_mas_preallocate+0x10/0x10 [ 318.278408][ T8134] ? anon_vma_name+0x75/0x100 [ 318.278452][ T8134] __split_vma+0x33b/0x1030 [ 318.278508][ T8134] ? __pfx___split_vma+0x10/0x10 [ 318.278554][ T8134] ? lock_acquire+0x179/0x350 [ 318.278606][ T8134] ? lock_acquire+0x179/0x350 [ 318.278651][ T8134] ? do_raw_spin_lock+0x12c/0x2b0 [ 318.278708][ T8134] vms_gather_munmap_vmas+0x1c2/0x1310 [ 318.278768][ T8134] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 318.278845][ T8134] do_vmi_align_munmap+0x27c/0x7d0 [ 318.278904][ T8134] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 318.279025][ T8134] do_vmi_munmap+0x204/0x3e0 [ 318.279085][ T8134] move_vma+0xb67/0x1740 [ 318.279146][ T8134] ? __pfx_move_vma+0x10/0x10 [ 318.279204][ T8134] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 318.279258][ T8134] ? vrm_set_new_addr+0x208/0x290 [ 318.279313][ T8134] __do_sys_mremap+0xe07/0x1590 [ 318.279370][ T8134] ? __pfx___do_sys_mremap+0x10/0x10 [ 318.279439][ T8134] ? find_held_lock+0x2b/0x80 [ 318.279477][ T8134] ? __x64_sys_futex+0x1e0/0x4c0 [ 318.279545][ T8134] do_syscall_64+0xcd/0x490 [ 318.279599][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.279633][ T8134] RIP: 0033:0x7fa15b18e929 [ 318.279661][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.279695][ T8134] RSP: 002b:00007fa15bf2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 318.279727][ T8134] RAX: ffffffffffffffda RBX: 00007fa15b3b5fa0 RCX: 00007fa15b18e929 [ 318.279748][ T8134] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000001000 [ 318.279767][ T8134] RBP: 00007fa15b210b39 R08: 0000000100000000 R09: 0000000000000000 [ 318.279788][ T8134] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 318.279807][ T8134] R13: 0000000000000000 R14: 00007fa15b3b5fa0 R15: 00007ffc7c3d6b78 [ 318.279853][ T8134] [ 318.538929][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.841982][ T8154] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 319.842087][ T8154] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 319.842179][ T8154] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 319.842272][ T8154] page_type: f5(slab) [ 319.844210][ T8154] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 319.844239][ T8154] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 319.844264][ T8154] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 319.844287][ T8154] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 319.844310][ T8154] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 319.844333][ T8154] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 319.844348][ T8154] page dumped because: unmovable page [ 319.844361][ T8154] page_owner tracks the page as allocated [ 319.844370][ T8154] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 319.844417][ T8154] post_alloc_hook+0x1c0/0x230 [ 319.844454][ T8154] get_page_from_freelist+0x1321/0x3890 [ 319.844490][ T8154] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 319.844528][ T8154] alloc_pages_mpol+0x1fb/0x550 [ 319.844550][ T8154] new_slab+0x23b/0x330 [ 319.844579][ T8154] ___slab_alloc+0xd9c/0x1940 [ 319.844609][ T8154] __slab_alloc.constprop.0+0x56/0xb0 [ 319.844647][ T8154] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 319.844685][ T8154] alloc_inode+0xc3/0x240 [ 319.844709][ T8154] iget_locked+0x2e4/0x830 [ 319.844733][ T8154] kernfs_get_inode+0x48/0x460 [ 319.844766][ T8154] kernfs_iop_lookup+0x1a7/0x2d0 [ 319.844801][ T8154] __lookup_slow+0x251/0x460 [ 319.844826][ T8154] walk_component+0x353/0x5b0 [ 319.844856][ T8154] link_path_walk+0x627/0xe20 [ 319.844886][ T8154] path_lookupat+0x15a/0x6d0 [ 319.844919][ T8154] page last free pid 1 tgid 1 stack trace: [ 319.844933][ T8154] __free_frozen_pages+0x7fe/0x1180 [ 319.844963][ T8154] free_contig_range+0x183/0x4b0 [ 319.844994][ T8154] destroy_args+0x7f6/0xa60 [ 319.845026][ T8154] debug_vm_pgtable+0x13b8/0x2d00 [ 319.845059][ T8154] do_one_initcall+0x120/0x6e0 [ 319.845083][ T8154] kernel_init_freeable+0x5c2/0x900 [ 319.845108][ T8154] kernel_init+0x1c/0x2b0 [ 319.845131][ T8154] ret_from_fork+0x5d7/0x6f0 [ 319.845162][ T8154] ret_from_fork_asm+0x1a/0x30 [ 320.249387][ T8158] could not allocate digest TFM handle binfmt_misc [ 326.279150][ T8210] FAULT_INJECTION: forcing a failure. [ 326.279150][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 326.333497][ T8210] CPU: 0 UID: 0 PID: 8210 Comm: syz.2.417 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 326.333545][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.333565][ T8210] Call Trace: [ 326.333575][ T8210] [ 326.333587][ T8210] dump_stack_lvl+0x16c/0x1f0 [ 326.333642][ T8210] should_fail_ex+0x512/0x640 [ 326.333693][ T8210] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 326.333752][ T8210] should_failslab+0xc2/0x120 [ 326.333787][ T8210] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 326.333838][ T8210] ? __lock_acquire+0xb8a/0x1c90 [ 326.333880][ T8210] ? look_up_lock_class+0x59/0x150 [ 326.333924][ T8210] ? vm_area_dup+0x27/0x8d0 [ 326.333976][ T8210] vm_area_dup+0x27/0x8d0 [ 326.334025][ T8210] __split_vma+0x17f/0x1030 [ 326.334084][ T8210] ? __pfx___split_vma+0x10/0x10 [ 326.334141][ T8210] ? lock_acquire+0x179/0x350 [ 326.334192][ T8210] ? lock_acquire+0x179/0x350 [ 326.334237][ T8210] ? do_raw_spin_lock+0x12c/0x2b0 [ 326.334294][ T8210] vms_gather_munmap_vmas+0x1c2/0x1310 [ 326.334353][ T8210] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 326.334431][ T8210] do_vmi_align_munmap+0x27c/0x7d0 [ 326.334488][ T8210] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 326.334598][ T8210] do_vmi_munmap+0x204/0x3e0 [ 326.334655][ T8210] move_vma+0xb67/0x1740 [ 326.334723][ T8210] ? __pfx_move_vma+0x10/0x10 [ 326.334780][ T8210] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 326.334835][ T8210] ? vrm_set_new_addr+0x208/0x290 [ 326.334889][ T8210] __do_sys_mremap+0xe07/0x1590 [ 326.334948][ T8210] ? __pfx___do_sys_mremap+0x10/0x10 [ 326.335014][ T8210] ? find_held_lock+0x2b/0x80 [ 326.335053][ T8210] ? __x64_sys_futex+0x1e0/0x4c0 [ 326.335131][ T8210] do_syscall_64+0xcd/0x490 [ 326.335185][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.335219][ T8210] RIP: 0033:0x7faff538e929 [ 326.335245][ T8210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.335278][ T8210] RSP: 002b:00007faff621b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 326.335309][ T8210] RAX: ffffffffffffffda RBX: 00007faff55b6080 RCX: 00007faff538e929 [ 326.335330][ T8210] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000001000 [ 326.335349][ T8210] RBP: 00007faff5410b39 R08: 0000000100000000 R09: 0000000000000000 [ 326.335369][ T8210] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 326.335388][ T8210] R13: 0000000000000000 R14: 00007faff55b6080 R15: 00007ffc4baa1798 [ 326.335430][ T8210] [ 327.682701][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.728539][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.997971][ T8232] ovs_ÿþ: entered promiscuous mode [ 331.570753][ T8269] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 331.616170][ T8269] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 331.700212][ T8269] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 331.748131][ T8269] page_type: f5(slab) [ 331.790340][ T8269] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 331.859967][ T8269] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 331.910408][ T8269] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 331.969994][ T8269] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 331.978801][ T8269] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 332.048993][ T8269] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 332.124972][ T8269] page dumped because: unmovable page [ 332.174058][ T8269] page_owner tracks the page as allocated [ 332.190128][ T8269] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 332.280176][ T8269] post_alloc_hook+0x1c0/0x230 [ 332.285097][ T8269] get_page_from_freelist+0x1321/0x3890 [ 332.314173][ T8269] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 332.329950][ T8269] alloc_pages_mpol+0x1fb/0x550 [ 332.349972][ T8269] new_slab+0x23b/0x330 [ 332.354280][ T8269] ___slab_alloc+0xd9c/0x1940 [ 332.389732][ T8269] __slab_alloc.constprop.0+0x56/0xb0 [ 332.410062][ T8269] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 332.417319][ T8269] alloc_inode+0xc3/0x240 [ 332.443403][ T8269] iget_locked+0x2e4/0x830 [ 332.447953][ T8269] kernfs_get_inode+0x48/0x460 [ 332.479973][ T8269] kernfs_iop_lookup+0x1a7/0x2d0 [ 332.489982][ T8269] __lookup_slow+0x251/0x460 [ 332.494776][ T8269] walk_component+0x353/0x5b0 [ 332.530050][ T8269] link_path_walk+0x627/0xe20 [ 332.534908][ T8269] path_lookupat+0x15a/0x6d0 [ 332.539595][ T8269] page last free pid 1 tgid 1 stack trace: [ 332.590004][ T8269] __free_frozen_pages+0x7fe/0x1180 [ 332.595448][ T8269] free_contig_range+0x183/0x4b0 [ 332.634025][ T8269] destroy_args+0x7f6/0xa60 [ 332.638668][ T8269] debug_vm_pgtable+0x13b8/0x2d00 [ 332.689997][ T8269] do_one_initcall+0x120/0x6e0 [ 332.694909][ T8269] kernel_init_freeable+0x5c2/0x900 [ 332.729954][ T8269] kernel_init+0x1c/0x2b0 [ 332.734400][ T8269] ret_from_fork+0x5d7/0x6f0 [ 332.739081][ T8269] ret_from_fork_asm+0x1a/0x30 [ 334.102650][ T8281] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 334.111768][ T8281] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 334.230980][ T8281] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 334.309973][ T8281] page_type: f5(slab) [ 334.353134][ T8281] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 334.431231][ T8281] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 334.510725][ T8281] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 334.519558][ T8281] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 334.533027][ T8281] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 334.545699][ T8281] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 334.557572][ T8281] page dumped because: unmovable page [ 334.594774][ T8295] Setting dangerous option i915.mitigations - tainting kernel [ 334.675590][ T8281] page_owner tracks the page as allocated [ 334.759946][ T8281] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 334.940540][ T8290] could not allocate digest TFM handle binfmt_misc [ 335.039011][ T8281] post_alloc_hook+0x1c0/0x230 [ 335.044798][ T8281] get_page_from_freelist+0x1321/0x3890 [ 335.052736][ T8281] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 335.058832][ T8281] alloc_pages_mpol+0x1fb/0x550 [ 335.148109][ T8281] new_slab+0x23b/0x330 [ 335.191756][ T8281] ___slab_alloc+0xd9c/0x1940 [ 335.196566][ T8281] __slab_alloc.constprop.0+0x56/0xb0 [ 335.253132][ T8281] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 335.290486][ T8281] alloc_inode+0xc3/0x240 [ 335.305241][ T8281] iget_locked+0x2e4/0x830 [ 335.309825][ T8281] kernfs_get_inode+0x48/0x460 [ 335.334812][ T8281] kernfs_iop_lookup+0x1a7/0x2d0 [ 335.382513][ T8281] __lookup_slow+0x251/0x460 [ 335.420171][ T8281] walk_component+0x353/0x5b0 [ 335.440132][ T8281] link_path_walk+0x627/0xe20 [ 335.444959][ T8281] path_lookupat+0x15a/0x6d0 [ 335.530855][ T8281] page last free pid 1 tgid 1 stack trace: [ 335.598099][ T8281] __free_frozen_pages+0x7fe/0x1180 [ 335.656017][ T8281] free_contig_range+0x183/0x4b0 [ 335.661520][ T8281] destroy_args+0x7f6/0xa60 [ 335.696679][ T8281] debug_vm_pgtable+0x13b8/0x2d00 [ 335.710002][ T8281] do_one_initcall+0x120/0x6e0 [ 335.714883][ T8281] kernel_init_freeable+0x5c2/0x900 [ 335.749905][ T8281] kernel_init+0x1c/0x2b0 [ 335.763621][ T8281] ret_from_fork+0x5d7/0x6f0 [ 335.790763][ T8281] ret_from_fork_asm+0x1a/0x30 [ 337.138424][ T8312] misc userio: No port type given on /dev/userio [ 337.887643][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.437'. [ 337.959968][ T8319] can: request_module (can-proto-0) failed. [ 338.180759][ T8319] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input22 [ 340.704511][ T8348] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 340.863643][ T8337] binder: 8330:8337 ioctl c00c620f 200000000340 returned -22 [ 341.900155][ T8349] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 342.637352][ T8357] CIFS mount error: No usable UNC path provided in device string! [ 342.637352][ T8357] [ 342.647765][ T8357] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 344.168527][ T8370] netlink: set zone limit has 8 unknown bytes [ 345.071910][ T8383] bridge0: port 3(dummy0) entered blocking state [ 345.078717][ T8383] bridge0: port 3(dummy0) entered disabled state [ 345.108437][ T8383] dummy0: entered allmulticast mode [ 345.117406][ T8383] dummy0: entered promiscuous mode [ 345.126303][ T8383] bridge0: port 3(dummy0) entered blocking state [ 345.132897][ T8383] bridge0: port 3(dummy0) entered forwarding state [ 345.467441][ T8048] syz.2.386 (8048) used greatest stack depth: 20808 bytes left [ 347.679340][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 349.506880][ T8436] CIFS mount error: No usable UNC path provided in device string! [ 349.506880][ T8436] [ 349.529952][ T8436] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 350.780849][ T8457] netlink: 'syz.2.464': attribute type 11 has an invalid length. [ 350.832523][ T8457] netlink: 'syz.2.464': attribute type 11 has an invalid length. [ 350.868710][ T8457] netlink: 89 bytes leftover after parsing attributes in process `syz.2.464'. [ 350.900118][ T8457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.464'. [ 354.981203][ T8483] can: request_module (can-proto-0) failed. [ 355.013254][ T8483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 355.258298][ T8498] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input25 [ 355.298033][ T8497] FAULT_INJECTION: forcing a failure. [ 355.298033][ T8497] name failslab, interval 1, probability 0, space 0, times 0 [ 355.360034][ T8497] CPU: 1 UID: 0 PID: 8497 Comm: syz.1.470 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 355.360094][ T8497] Tainted: [U]=USER [ 355.360107][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.360127][ T8497] Call Trace: [ 355.360137][ T8497] [ 355.360149][ T8497] dump_stack_lvl+0x16c/0x1f0 [ 355.360203][ T8497] should_fail_ex+0x512/0x640 [ 355.360255][ T8497] ? __kmalloc_noprof+0xbf/0x510 [ 355.360312][ T8497] ? lsm_blob_alloc+0x68/0x90 [ 355.360341][ T8497] should_failslab+0xc2/0x120 [ 355.360376][ T8497] __kmalloc_noprof+0xd2/0x510 [ 355.360437][ T8497] lsm_blob_alloc+0x68/0x90 [ 355.360469][ T8497] security_sk_alloc+0x30/0x270 [ 355.360509][ T8497] sk_prot_alloc+0x1c7/0x2a0 [ 355.360547][ T8497] sk_alloc+0x36/0xc20 [ 355.360595][ T8497] xsk_create+0x11b/0x730 [ 355.360636][ T8497] __sock_create+0x335/0x8d0 [ 355.360687][ T8497] __sys_socket+0x14d/0x260 [ 355.360726][ T8497] ? __pfx___sys_socket+0x10/0x10 [ 355.360765][ T8497] ? xfd_validate_state+0x61/0x180 [ 355.360832][ T8497] __x64_sys_socket+0x72/0xb0 [ 355.360870][ T8497] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.360914][ T8497] do_syscall_64+0xcd/0x490 [ 355.360966][ T8497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.361001][ T8497] RIP: 0033:0x7fa15b18e929 [ 355.361028][ T8497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.361061][ T8497] RSP: 002b:00007fa15bf2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 355.361094][ T8497] RAX: ffffffffffffffda RBX: 00007fa15b3b5fa0 RCX: 00007fa15b18e929 [ 355.361117][ T8497] RDX: 0000000000000000 RSI: 0000000000080003 RDI: 000000000000002c [ 355.361138][ T8497] RBP: 00007fa15b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 355.361160][ T8497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.361182][ T8497] R13: 0000000000000000 R14: 00007fa15b3b5fa0 R15: 00007ffc7c3d6b78 [ 355.361224][ T8497] [ 355.569235][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.316556][ T8513] bridge0: port 3(dummy0) entered blocking state [ 356.352100][ T8513] bridge0: port 3(dummy0) entered disabled state [ 356.393209][ T8513] dummy0: entered allmulticast mode [ 356.421509][ T8513] dummy0: entered promiscuous mode [ 356.453149][ T8513] bridge0: port 3(dummy0) entered blocking state [ 356.459712][ T8513] bridge0: port 3(dummy0) entered forwarding state [ 358.848696][ T8542] netlink: 330 bytes leftover after parsing attributes in process `syz.1.481'. [ 358.955678][ T8543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 359.359380][ T8549] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 360.700028][ T8561] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 360.712241][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 362.174458][ T8580] FAULT_INJECTION: forcing a failure. [ 362.174458][ T8580] name failslab, interval 1, probability 0, space 0, times 0 [ 362.252099][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.2.487 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 362.252152][ T8580] Tainted: [U]=USER [ 362.252163][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.252183][ T8580] Call Trace: [ 362.252202][ T8580] [ 362.252215][ T8580] dump_stack_lvl+0x16c/0x1f0 [ 362.252268][ T8580] should_fail_ex+0x512/0x640 [ 362.252326][ T8580] ? __kmalloc_noprof+0xbf/0x510 [ 362.252383][ T8580] ? __register_sysctl_table+0xea2/0x1900 [ 362.252412][ T8580] should_failslab+0xc2/0x120 [ 362.252444][ T8580] __kmalloc_noprof+0xd2/0x510 [ 362.252493][ T8580] ? __register_sysctl_table+0xe8e/0x1900 [ 362.252536][ T8580] __register_sysctl_table+0xea2/0x1900 [ 362.252575][ T8580] ? __pfx___register_sysctl_table+0x10/0x10 [ 362.252601][ T8580] ? is_module_address+0x69/0xf0 [ 362.252641][ T8580] ? register_net_sysctl_sz+0x228/0x3e0 [ 362.252690][ T8580] ? __asan_memcpy+0x3c/0x60 [ 362.252733][ T8580] smc_sysctl_net_init+0xbb/0x3d0 [ 362.252783][ T8580] ? __pfx_smc_net_init+0x10/0x10 [ 362.252817][ T8580] smc_net_init+0x16/0x50 [ 362.252851][ T8580] ops_init+0x1e2/0x5f0 [ 362.252908][ T8580] setup_net+0x1ff/0x510 [ 362.252958][ T8580] ? lockdep_init_map_type+0x5c/0x280 [ 362.253004][ T8580] ? __pfx_setup_net+0x10/0x10 [ 362.253058][ T8580] ? debug_mutex_init+0x37/0x70 [ 362.253103][ T8580] copy_net_ns+0x2a6/0x5f0 [ 362.253140][ T8580] create_new_namespaces+0x3ea/0xa90 [ 362.253188][ T8580] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 362.253230][ T8580] ksys_unshare+0x45b/0xa40 [ 362.253278][ T8580] ? __pfx_ksys_unshare+0x10/0x10 [ 362.253349][ T8580] ? xfd_validate_state+0x61/0x180 [ 362.253409][ T8580] __x64_sys_unshare+0x31/0x40 [ 362.253455][ T8580] do_syscall_64+0xcd/0x490 [ 362.253508][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.253542][ T8580] RIP: 0033:0x7faff538e929 [ 362.253568][ T8580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.253602][ T8580] RSP: 002b:00007faff621b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 362.253633][ T8580] RAX: ffffffffffffffda RBX: 00007faff55b6080 RCX: 00007faff538e929 [ 362.253656][ T8580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 362.253676][ T8580] RBP: 00007faff5410b39 R08: 0000000000000000 R09: 0000000000000000 [ 362.253696][ T8580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.253715][ T8580] R13: 0000000000000000 R14: 00007faff55b6080 R15: 00007ffc4baa1798 [ 362.253758][ T8580] [ 362.253800][ T8580] sysctl could not get directory: /net/smc -12 [ 364.750613][ T8611] netlink: 330 bytes leftover after parsing attributes in process `syz.0.492'. [ 364.835352][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.492'. [ 365.562056][ T8619] random: crng reseeded on system resumption [ 365.680698][ T8617] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 365.852539][ T8621] netlink: set zone limit has 8 unknown bytes [ 365.976211][ T8630] block nbd7: not configured, cannot reconfigure [ 371.823029][ T8690] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 371.991339][ T8695] netlink: set zone limit has 8 unknown bytes [ 374.778223][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 374.892800][ T8731] Invalid ELF header magic: != ELF [ 380.028945][ T8772] FAULT_INJECTION: forcing a failure. [ 380.028945][ T8772] name failslab, interval 1, probability 0, space 0, times 0 [ 380.049396][ T8766] could not allocate digest TFM handle [ 380.090716][ T8772] CPU: 1 UID: 0 PID: 8772 Comm: syz.1.521 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 380.090782][ T8772] Tainted: [U]=USER [ 380.090794][ T8772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 380.090814][ T8772] Call Trace: [ 380.090825][ T8772] [ 380.090839][ T8772] dump_stack_lvl+0x16c/0x1f0 [ 380.090894][ T8772] should_fail_ex+0x512/0x640 [ 380.090946][ T8772] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 380.090998][ T8772] should_failslab+0xc2/0x120 [ 380.091034][ T8772] __kmalloc_cache_noprof+0x6a/0x3e0 [ 380.091077][ T8772] ? lockdep_init_map_type+0x5c/0x280 [ 380.091127][ T8772] ? smc_stats_init+0x4e/0x160 [ 380.091176][ T8772] ? __pfx_smc_net_stat_init+0x10/0x10 [ 380.091210][ T8772] smc_stats_init+0x4e/0x160 [ 380.091251][ T8772] ? smc_net_init+0x39/0x50 [ 380.091281][ T8772] ops_init+0x1e2/0x5f0 [ 380.091337][ T8772] setup_net+0x1ff/0x510 [ 380.091386][ T8772] ? lockdep_init_map_type+0x5c/0x280 [ 380.091430][ T8772] ? __pfx_setup_net+0x10/0x10 [ 380.091499][ T8772] ? debug_mutex_init+0x37/0x70 [ 380.091537][ T8772] copy_net_ns+0x2a6/0x5f0 [ 380.091576][ T8772] create_new_namespaces+0x3ea/0xa90 [ 380.091623][ T8772] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 380.091664][ T8772] ksys_unshare+0x45b/0xa40 [ 380.091710][ T8772] ? __pfx_ksys_unshare+0x10/0x10 [ 380.091756][ T8772] ? xfd_validate_state+0x61/0x180 [ 380.091826][ T8772] __x64_sys_unshare+0x31/0x40 [ 380.091871][ T8772] do_syscall_64+0xcd/0x490 [ 380.091923][ T8772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.091956][ T8772] RIP: 0033:0x7fa15b18e929 [ 380.091981][ T8772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.092014][ T8772] RSP: 002b:00007fa158ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 380.092045][ T8772] RAX: ffffffffffffffda RBX: 00007fa15b3b6080 RCX: 00007fa15b18e929 [ 380.092067][ T8772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 380.092086][ T8772] RBP: 00007fa15b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 380.092105][ T8772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.092124][ T8772] R13: 0000000000000000 R14: 00007fa15b3b6080 R15: 00007ffc7c3d6b78 [ 380.092163][ T8772] [ 381.036928][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.522'. [ 389.115038][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.121558][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.933835][ T8880] netlink: 330 bytes leftover after parsing attributes in process `syz.1.539'. [ 391.995389][ T8884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 400.070346][ T8982] netlink: 330 bytes leftover after parsing attributes in process `syz.0.558'. [ 400.240299][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz.0.558'. [ 402.887786][ T9021] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 402.896976][ T9021] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 403.050893][ T9021] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 403.339992][ T9021] page_type: f5(slab) [ 403.344104][ T9021] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 403.465547][ T9021] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 403.482052][ T9022] could not allocate digest TFM handle binfmt_misc [ 403.545169][ T9021] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 403.650092][ T9021] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 403.707634][ T9021] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 403.741604][ T9021] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 403.791675][ T9021] page dumped because: unmovable page [ 403.797132][ T9021] page_owner tracks the page as allocated [ 403.842572][ T9021] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 403.929488][ T9021] post_alloc_hook+0x1c0/0x230 [ 403.944072][ T9021] get_page_from_freelist+0x1321/0x3890 [ 403.973671][ T9021] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 403.995339][ T9021] alloc_pages_mpol+0x1fb/0x550 [ 404.014735][ T9021] new_slab+0x23b/0x330 [ 404.043621][ T9021] ___slab_alloc+0xd9c/0x1940 [ 404.057310][ T9021] __slab_alloc.constprop.0+0x56/0xb0 [ 404.076913][ T9021] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 404.105053][ T9021] alloc_inode+0xc3/0x240 [ 404.124501][ T9021] iget_locked+0x2e4/0x830 [ 404.140149][ T9021] kernfs_get_inode+0x48/0x460 [ 404.173254][ T9021] kernfs_iop_lookup+0x1a7/0x2d0 [ 404.178396][ T9021] __lookup_slow+0x251/0x460 [ 404.183653][ T9021] walk_component+0x353/0x5b0 [ 404.188464][ T9021] link_path_walk+0x627/0xe20 [ 404.205813][ T9021] path_lookupat+0x15a/0x6d0 [ 404.247350][ T9021] page last free pid 1 tgid 1 stack trace: [ 404.265617][ T9021] __free_frozen_pages+0x7fe/0x1180 [ 404.271157][ T9021] free_contig_range+0x183/0x4b0 [ 404.276207][ T9021] destroy_args+0x7f6/0xa60 [ 404.281004][ T9021] debug_vm_pgtable+0x13b8/0x2d00 [ 404.287620][ T9021] do_one_initcall+0x120/0x6e0 [ 404.292534][ T9021] kernel_init_freeable+0x5c2/0x900 [ 404.297857][ T9021] kernel_init+0x1c/0x2b0 [ 404.304958][ T9021] ret_from_fork+0x5d7/0x6f0 [ 404.309738][ T9021] ret_from_fork_asm+0x1a/0x30 [ 405.386115][ T9043] netlink: 330 bytes leftover after parsing attributes in process `syz.3.574'. [ 405.476661][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 407.351507][ T9070] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 407.360996][ T9070] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 407.369710][ T9070] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 407.379275][ T9070] page_type: f5(slab) [ 407.383748][ T9070] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 407.518101][ T9070] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 407.572543][ T9070] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 407.630020][ T9070] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 407.661313][ T9070] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 407.735699][ T9070] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 407.746456][ T9070] page dumped because: unmovable page [ 407.760459][ T9070] page_owner tracks the page as allocated [ 407.766278][ T9070] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 407.949132][ T9068] could not allocate digest TFM handle binfmt_misc [ 407.972021][ T9070] post_alloc_hook+0x1c0/0x230 [ 407.976941][ T9070] get_page_from_freelist+0x1321/0x3890 [ 408.018127][ T9070] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 408.040396][ T9070] alloc_pages_mpol+0x1fb/0x550 [ 408.060117][ T9070] new_slab+0x23b/0x330 [ 408.089333][ T9070] ___slab_alloc+0xd9c/0x1940 [ 408.132447][ T9070] __slab_alloc.constprop.0+0x56/0xb0 [ 408.137962][ T9070] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 408.160025][ T9070] alloc_inode+0xc3/0x240 [ 408.164722][ T9070] iget_locked+0x2e4/0x830 [ 408.169223][ T9070] kernfs_get_inode+0x48/0x460 [ 408.206150][ T9070] kernfs_iop_lookup+0x1a7/0x2d0 [ 408.211634][ T9070] __lookup_slow+0x251/0x460 [ 408.216322][ T9070] walk_component+0x353/0x5b0 [ 408.233550][ T9070] link_path_walk+0x627/0xe20 [ 408.248289][ T9070] path_lookupat+0x15a/0x6d0 [ 408.256971][ T9070] page last free pid 1 tgid 1 stack trace: [ 408.284405][ T9070] __free_frozen_pages+0x7fe/0x1180 [ 408.289757][ T9070] free_contig_range+0x183/0x4b0 [ 408.315570][ T9070] destroy_args+0x7f6/0xa60 [ 408.330389][ T9070] debug_vm_pgtable+0x13b8/0x2d00 [ 408.343835][ T9070] do_one_initcall+0x120/0x6e0 [ 408.361033][ T9070] kernel_init_freeable+0x5c2/0x900 [ 408.366350][ T9070] kernel_init+0x1c/0x2b0 [ 408.371376][ T9070] ret_from_fork+0x5d7/0x6f0 [ 408.376077][ T9070] ret_from_fork_asm+0x1a/0x30 [ 411.524145][ T9111] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 411.548452][ T9111] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 411.580572][ T9111] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 411.616598][ T9111] page_type: f5(slab) [ 411.621320][ T9111] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 411.630386][ T9111] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 411.639208][ T9111] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 411.648948][ T9111] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 411.670735][ T9111] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 411.822457][ T9111] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 411.850845][ T9111] page dumped because: unmovable page [ 411.913779][ T9111] page_owner tracks the page as allocated [ 411.919613][ T9111] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 412.022570][ T9111] post_alloc_hook+0x1c0/0x230 [ 412.027534][ T9111] get_page_from_freelist+0x1321/0x3890 [ 412.140033][ T9111] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 412.205054][ T9111] alloc_pages_mpol+0x1fb/0x550 [ 412.262739][ T9111] new_slab+0x23b/0x330 [ 412.277379][ T9111] ___slab_alloc+0xd9c/0x1940 [ 412.289990][ T9111] __slab_alloc.constprop.0+0x56/0xb0 [ 412.307838][ T9111] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 412.323119][ T9111] alloc_inode+0xc3/0x240 [ 412.327575][ T9111] iget_locked+0x2e4/0x830 [ 412.342994][ T9111] kernfs_get_inode+0x48/0x460 [ 412.347895][ T9111] kernfs_iop_lookup+0x1a7/0x2d0 [ 412.363524][ T9111] __lookup_slow+0x251/0x460 [ 412.368263][ T9111] walk_component+0x353/0x5b0 [ 412.391830][ T9111] link_path_walk+0x627/0xe20 [ 412.397092][ T9111] path_lookupat+0x15a/0x6d0 [ 412.402500][ T9111] page last free pid 1 tgid 1 stack trace: [ 412.408493][ T9111] __free_frozen_pages+0x7fe/0x1180 [ 412.417858][ T9111] free_contig_range+0x183/0x4b0 [ 412.423341][ T9111] destroy_args+0x7f6/0xa60 [ 412.443862][ T9111] debug_vm_pgtable+0x13b8/0x2d00 [ 412.449037][ T9111] do_one_initcall+0x120/0x6e0 [ 412.481406][ T9111] kernel_init_freeable+0x5c2/0x900 [ 412.486739][ T9111] kernel_init+0x1c/0x2b0 [ 412.522159][ T9111] ret_from_fork+0x5d7/0x6f0 [ 412.526903][ T9111] ret_from_fork_asm+0x1a/0x30 [ 413.010729][ T9128] could not allocate digest TFM handle binfmt_misc [ 419.657787][ T9202] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 423.732192][ T9246] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 434.161729][ T9349] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 434.274569][ T9349] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 434.428141][ T9349] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 434.616739][ T9349] page_type: f5(slab) [ 434.703686][ T9349] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 434.804490][ T9349] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 434.974849][ T9349] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 435.150278][ T9349] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 435.243629][ T9349] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 435.366762][ T9349] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 435.852001][ T9349] page dumped because: unmovable page [ 435.857491][ T9349] page_owner tracks the page as allocated [ 435.889996][ T9349] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 435.946032][ T9349] post_alloc_hook+0x1c0/0x230 [ 435.982767][ T9349] get_page_from_freelist+0x1321/0x3890 [ 436.043272][ T9349] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 436.068214][ T9349] alloc_pages_mpol+0x1fb/0x550 [ 436.083089][ T9349] new_slab+0x23b/0x330 [ 436.087404][ T9349] ___slab_alloc+0xd9c/0x1940 [ 436.132355][ T9349] __slab_alloc.constprop.0+0x56/0xb0 [ 436.137905][ T9349] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 436.165976][ T9349] alloc_inode+0xc3/0x240 [ 436.209996][ T9349] iget_locked+0x2e4/0x830 [ 436.214550][ T9349] kernfs_get_inode+0x48/0x460 [ 436.219397][ T9349] kernfs_iop_lookup+0x1a7/0x2d0 [ 436.269953][ T9349] __lookup_slow+0x251/0x460 [ 436.274723][ T9349] walk_component+0x353/0x5b0 [ 436.306069][ T9349] link_path_walk+0x627/0xe20 [ 436.334761][ T9349] path_lookupat+0x15a/0x6d0 [ 436.339542][ T9349] page last free pid 1 tgid 1 stack trace: [ 436.346849][ T9349] __free_frozen_pages+0x7fe/0x1180 [ 436.376774][ T9349] free_contig_range+0x183/0x4b0 [ 436.382864][ T9349] destroy_args+0x7f6/0xa60 [ 436.387478][ T9349] debug_vm_pgtable+0x13b8/0x2d00 [ 436.394229][ T9349] do_one_initcall+0x120/0x6e0 [ 436.399120][ T9349] kernel_init_freeable+0x5c2/0x900 [ 436.405525][ T9349] kernel_init+0x1c/0x2b0 [ 436.410281][ T9349] ret_from_fork+0x5d7/0x6f0 [ 436.414965][ T9349] ret_from_fork_asm+0x1a/0x30 [ 437.964111][ T9382] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 438.020000][ T9382] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 438.143903][ T9382] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 438.309973][ T9382] page_type: f5(slab) [ 438.339908][ T9382] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 438.348618][ T9382] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 438.505265][ T9382] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 438.531056][ T9382] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 438.685821][ T9382] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 438.694793][ T9382] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 438.703623][ T9382] page dumped because: unmovable page [ 438.710408][ T9382] page_owner tracks the page as allocated [ 438.716680][ T9382] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 438.740308][ T9382] post_alloc_hook+0x1c0/0x230 [ 438.745181][ T9382] get_page_from_freelist+0x1321/0x3890 [ 438.751906][ T9382] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 438.759984][ T9382] alloc_pages_mpol+0x1fb/0x550 [ 438.767671][ T9382] new_slab+0x23b/0x330 [ 438.774013][ T9382] ___slab_alloc+0xd9c/0x1940 [ 438.779007][ T9382] __slab_alloc.constprop.0+0x56/0xb0 [ 438.859232][ T9382] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 438.903723][ T9382] alloc_inode+0xc3/0x240 [ 438.908195][ T9382] iget_locked+0x2e4/0x830 [ 438.914012][ T9382] kernfs_get_inode+0x48/0x460 [ 438.919353][ T9382] kernfs_iop_lookup+0x1a7/0x2d0 [ 438.925373][ T9382] __lookup_slow+0x251/0x460 [ 438.948839][ T9382] walk_component+0x353/0x5b0 [ 438.958685][ T9382] link_path_walk+0x627/0xe20 [ 438.993527][ T9382] path_lookupat+0x15a/0x6d0 [ 439.112965][ T9382] page last free pid 1 tgid 1 stack trace: [ 439.120753][ T9382] __free_frozen_pages+0x7fe/0x1180 [ 439.126189][ T9382] free_contig_range+0x183/0x4b0 [ 439.131872][ T9382] destroy_args+0x7f6/0xa60 [ 439.136601][ T9382] debug_vm_pgtable+0x13b8/0x2d00 [ 439.390792][ T9382] do_one_initcall+0x120/0x6e0 [ 439.429958][ T9382] kernel_init_freeable+0x5c2/0x900 [ 439.435257][ T9382] kernel_init+0x1c/0x2b0 [ 439.554245][ T9382] ret_from_fork+0x5d7/0x6f0 [ 439.645387][ T9382] ret_from_fork_asm+0x1a/0x30 [ 440.526978][ T9409] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 440.604083][ T9409] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.663727][ T9409] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 440.672023][ T9409] page_type: f5(slab) [ 440.676192][ T9409] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 440.763198][ T9409] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 440.846754][ T9409] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 440.910617][ T9409] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 440.920027][ T9409] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 440.931969][ T9409] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 440.941011][ T9409] page dumped because: unmovable page [ 440.946490][ T9409] page_owner tracks the page as allocated [ 440.952676][ T9409] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 440.975414][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.044273][ T9409] post_alloc_hook+0x1c0/0x230 [ 441.088614][ T9409] get_page_from_freelist+0x1321/0x3890 [ 441.124766][ T9409] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 441.186458][ T9409] alloc_pages_mpol+0x1fb/0x550 [ 441.314643][ T9409] new_slab+0x23b/0x330 [ 441.670189][ T9409] ___slab_alloc+0xd9c/0x1940 [ 441.679925][ T9409] __slab_alloc.constprop.0+0x56/0xb0 [ 441.697785][ T9409] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 441.726296][ T9409] alloc_inode+0xc3/0x240 [ 441.749895][ T9409] iget_locked+0x2e4/0x830 [ 441.754463][ T9409] kernfs_get_inode+0x48/0x460 [ 441.809996][ T9409] kernfs_iop_lookup+0x1a7/0x2d0 [ 441.815169][ T9409] __lookup_slow+0x251/0x460 [ 441.910555][ T9409] walk_component+0x353/0x5b0 [ 441.915662][ T9409] link_path_walk+0x627/0xe20 [ 441.929953][ T9409] path_lookupat+0x15a/0x6d0 [ 441.934878][ T9409] page last free pid 1 tgid 1 stack trace: [ 441.956219][ T9409] __free_frozen_pages+0x7fe/0x1180 [ 441.969892][ T9409] free_contig_range+0x183/0x4b0 [ 441.974967][ T9409] destroy_args+0x7f6/0xa60 [ 441.983250][ T9409] debug_vm_pgtable+0x13b8/0x2d00 [ 441.988428][ T9409] do_one_initcall+0x120/0x6e0 [ 441.993812][ T9409] kernel_init_freeable+0x5c2/0x900 [ 441.999110][ T9409] kernel_init+0x1c/0x2b0 [ 442.023414][ T9409] ret_from_fork+0x5d7/0x6f0 [ 442.032231][ T9409] ret_from_fork_asm+0x1a/0x30 [ 447.426426][ T9483] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 447.647173][ T9483] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 447.718758][ T9483] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 447.726916][ T9483] page_type: f5(slab) [ 447.732507][ T9483] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 447.745335][ T9483] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 447.754232][ T9483] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 447.763216][ T9483] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 447.773223][ T9483] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 447.837656][ T9483] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 447.939984][ T9483] page dumped because: unmovable page [ 448.074182][ T9483] page_owner tracks the page as allocated [ 448.143233][ T9483] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 448.293660][ T9483] post_alloc_hook+0x1c0/0x230 [ 448.298568][ T9483] get_page_from_freelist+0x1321/0x3890 [ 448.332084][ T9483] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 448.338950][ T9483] alloc_pages_mpol+0x1fb/0x550 [ 448.347083][ T9483] new_slab+0x23b/0x330 [ 448.351590][ T9483] ___slab_alloc+0xd9c/0x1940 [ 448.356381][ T9483] __slab_alloc.constprop.0+0x56/0xb0 [ 448.365542][ T9483] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 448.371470][ T9483] alloc_inode+0xc3/0x240 [ 448.376073][ T9483] iget_locked+0x2e4/0x830 [ 448.387179][ T9483] kernfs_get_inode+0x48/0x460 [ 448.438014][ T9483] kernfs_iop_lookup+0x1a7/0x2d0 [ 448.466875][ T9483] __lookup_slow+0x251/0x460 [ 448.504110][ T9483] walk_component+0x353/0x5b0 [ 448.551618][ T9483] link_path_walk+0x627/0xe20 [ 448.559857][ T9483] path_lookupat+0x15a/0x6d0 [ 448.576017][ T9483] page last free pid 1 tgid 1 stack trace: [ 448.627459][ T9483] __free_frozen_pages+0x7fe/0x1180 [ 448.649923][ T9483] free_contig_range+0x183/0x4b0 [ 448.672016][ T9483] destroy_args+0x7f6/0xa60 [ 448.676612][ T9483] debug_vm_pgtable+0x13b8/0x2d00 [ 448.694276][ T9483] do_one_initcall+0x120/0x6e0 [ 448.699160][ T9483] kernel_init_freeable+0x5c2/0x900 [ 448.728762][ T9483] kernel_init+0x1c/0x2b0 [ 448.752725][ T9483] ret_from_fork+0x5d7/0x6f0 [ 448.757462][ T9483] ret_from_fork_asm+0x1a/0x30 [ 450.556781][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.563228][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.746311][ T9572] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 456.893651][ T9572] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 456.927614][ T9572] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 456.984351][ T9572] page_type: f5(slab) [ 456.988451][ T9572] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 457.117884][ T9572] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 457.140492][ T9572] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 457.199860][ T9572] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 457.241208][ T9572] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 457.284097][ T9572] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 457.323079][ T9572] page dumped because: unmovable page [ 457.328558][ T9572] page_owner tracks the page as allocated [ 457.370025][ T9572] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 457.445510][ T9572] post_alloc_hook+0x1c0/0x230 [ 457.450793][ T9572] get_page_from_freelist+0x1321/0x3890 [ 457.457124][ T9572] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 457.463864][ T9572] alloc_pages_mpol+0x1fb/0x550 [ 457.468976][ T9572] new_slab+0x23b/0x330 [ 457.473684][ T9572] ___slab_alloc+0xd9c/0x1940 [ 457.478479][ T9572] __slab_alloc.constprop.0+0x56/0xb0 [ 457.509990][ T9572] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 457.541752][ T9572] alloc_inode+0xc3/0x240 [ 457.547559][ T9572] iget_locked+0x2e4/0x830 [ 457.596036][ T9572] kernfs_get_inode+0x48/0x460 [ 457.601384][ T9572] kernfs_iop_lookup+0x1a7/0x2d0 [ 457.606559][ T9572] __lookup_slow+0x251/0x460 [ 457.638388][ T9572] walk_component+0x353/0x5b0 [ 457.680180][ T9572] link_path_walk+0x627/0xe20 [ 457.686220][ T9572] path_lookupat+0x15a/0x6d0 [ 457.750132][ T9572] page last free pid 1 tgid 1 stack trace: [ 457.757408][ T9572] __free_frozen_pages+0x7fe/0x1180 [ 457.817670][ T9572] free_contig_range+0x183/0x4b0 [ 457.842794][ T9572] destroy_args+0x7f6/0xa60 [ 457.875060][ T9572] debug_vm_pgtable+0x13b8/0x2d00 [ 457.880938][ T9572] do_one_initcall+0x120/0x6e0 [ 457.885846][ T9572] kernel_init_freeable+0x5c2/0x900 [ 457.891828][ T9572] kernel_init+0x1c/0x2b0 [ 457.896249][ T9572] ret_from_fork+0x5d7/0x6f0 [ 457.901548][ T9572] ret_from_fork_asm+0x1a/0x30 [ 459.719993][ T9608] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 459.728952][ T9608] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 459.856430][ T9608] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 459.911276][ T9608] page_type: f5(slab) [ 459.933857][ T9608] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 459.964110][ T9608] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 459.980751][ T9608] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 460.150320][ T9608] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 460.189672][ T9608] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 460.200052][ T9608] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 460.209913][ T9608] page dumped because: unmovable page [ 460.215465][ T9608] page_owner tracks the page as allocated [ 460.221287][ T9608] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 460.312821][ T9608] post_alloc_hook+0x1c0/0x230 [ 460.340574][ T9608] get_page_from_freelist+0x1321/0x3890 [ 460.346257][ T9608] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 460.383195][ T9608] alloc_pages_mpol+0x1fb/0x550 [ 460.518008][ T9608] new_slab+0x23b/0x330 [ 460.602300][ T9608] ___slab_alloc+0xd9c/0x1940 [ 460.607094][ T9608] __slab_alloc.constprop.0+0x56/0xb0 [ 460.690116][ T9608] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 460.717476][ T9608] alloc_inode+0xc3/0x240 [ 460.738728][ T9608] iget_locked+0x2e4/0x830 [ 460.767839][ T9608] kernfs_get_inode+0x48/0x460 [ 460.783823][ T9608] kernfs_iop_lookup+0x1a7/0x2d0 [ 460.815394][ T9608] __lookup_slow+0x251/0x460 [ 460.873538][ T9608] walk_component+0x353/0x5b0 [ 460.878361][ T9608] link_path_walk+0x627/0xe20 [ 460.883264][ T9608] path_lookupat+0x15a/0x6d0 [ 460.888006][ T9608] page last free pid 1 tgid 1 stack trace: [ 460.894023][ T9608] __free_frozen_pages+0x7fe/0x1180 [ 460.899319][ T9608] free_contig_range+0x183/0x4b0 [ 460.904491][ T9608] destroy_args+0x7f6/0xa60 [ 460.909101][ T9608] debug_vm_pgtable+0x13b8/0x2d00 [ 460.914289][ T9608] do_one_initcall+0x120/0x6e0 [ 460.919275][ T9608] kernel_init_freeable+0x5c2/0x900 [ 460.924749][ T9608] kernel_init+0x1c/0x2b0 [ 460.930570][ T9608] ret_from_fork+0x5d7/0x6f0 [ 460.935269][ T9608] ret_from_fork_asm+0x1a/0x30 [ 465.509022][ T9662] netlink: 330 bytes leftover after parsing attributes in process `syz.3.704'. [ 465.553977][ T9662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.704'. [ 465.619308][ T9666] netlink: 330 bytes leftover after parsing attributes in process `syz.1.713'. [ 465.674551][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 465.812648][ T9670] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 465.822992][ T9670] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 465.846189][ T9670] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 465.866086][ T9670] page_type: f5(slab) [ 465.880931][ T9670] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 465.909079][ T9670] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 465.937335][ T9670] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 465.964601][ T9670] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 465.987874][ T9670] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 466.056487][ T9670] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 466.085305][ T9670] page dumped because: unmovable page [ 466.102422][ T9670] page_owner tracks the page as allocated [ 466.139472][ T9670] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 466.219862][ T9670] post_alloc_hook+0x1c0/0x230 [ 466.236536][ T9670] get_page_from_freelist+0x1321/0x3890 [ 466.292454][ T9670] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 466.326595][ T9670] alloc_pages_mpol+0x1fb/0x550 [ 466.400356][ T9670] new_slab+0x23b/0x330 [ 466.404707][ T9670] ___slab_alloc+0xd9c/0x1940 [ 466.409467][ T9670] __slab_alloc.constprop.0+0x56/0xb0 [ 466.541417][ T9670] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 466.669870][ T9670] alloc_inode+0xc3/0x240 [ 466.674400][ T9670] iget_locked+0x2e4/0x830 [ 466.678882][ T9670] kernfs_get_inode+0x48/0x460 [ 466.773424][ T9670] kernfs_iop_lookup+0x1a7/0x2d0 [ 466.829901][ T9670] __lookup_slow+0x251/0x460 [ 466.850880][ T9670] walk_component+0x353/0x5b0 [ 466.866612][ T9670] link_path_walk+0x627/0xe20 [ 466.886270][ T9670] path_lookupat+0x15a/0x6d0 [ 466.898807][ T9670] page last free pid 1 tgid 1 stack trace: [ 466.929894][ T9670] __free_frozen_pages+0x7fe/0x1180 [ 466.959827][ T9670] free_contig_range+0x183/0x4b0 [ 466.965000][ T9670] destroy_args+0x7f6/0xa60 [ 467.016098][ T9670] debug_vm_pgtable+0x13b8/0x2d00 [ 467.029975][ T9670] do_one_initcall+0x120/0x6e0 [ 467.039996][ T9670] kernel_init_freeable+0x5c2/0x900 [ 467.055137][ T9670] kernel_init+0x1c/0x2b0 [ 467.065263][ T9670] ret_from_fork+0x5d7/0x6f0 [ 467.077048][ T9670] ret_from_fork_asm+0x1a/0x30 [ 469.031442][ T9709] netlink: 330 bytes leftover after parsing attributes in process `syz.2.717'. [ 469.099863][ T9709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.717'. [ 470.078698][ T9721] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 470.101958][ T9721] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 470.133982][ T9721] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 470.172545][ T9721] page_type: f5(slab) [ 470.176756][ T9721] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 470.230002][ T9721] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 470.238729][ T9721] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 470.333657][ T9721] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 470.362531][ T9721] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 470.374872][ T9721] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 470.395326][ T9721] page dumped because: unmovable page [ 470.402664][ T9721] page_owner tracks the page as allocated [ 470.408690][ T9721] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 470.433327][ T9721] post_alloc_hook+0x1c0/0x230 [ 470.438353][ T9721] get_page_from_freelist+0x1321/0x3890 [ 470.454673][ T9721] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 470.461323][ T9721] alloc_pages_mpol+0x1fb/0x550 [ 470.466417][ T9721] new_slab+0x23b/0x330 [ 470.471435][ T9721] ___slab_alloc+0xd9c/0x1940 [ 470.476376][ T9721] __slab_alloc.constprop.0+0x56/0xb0 [ 470.490883][ T9721] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 470.496986][ T9721] alloc_inode+0xc3/0x240 [ 470.543555][ T9721] iget_locked+0x2e4/0x830 [ 470.556811][ T9721] kernfs_get_inode+0x48/0x460 [ 470.561947][ T9721] kernfs_iop_lookup+0x1a7/0x2d0 [ 470.567792][ T9721] __lookup_slow+0x251/0x460 [ 470.573853][ T9721] walk_component+0x353/0x5b0 [ 470.578866][ T9721] link_path_walk+0x627/0xe20 [ 470.584683][ T9721] path_lookupat+0x15a/0x6d0 [ 470.597740][ T9721] page last free pid 1 tgid 1 stack trace: [ 470.604671][ T9721] __free_frozen_pages+0x7fe/0x1180 [ 470.610726][ T9721] free_contig_range+0x183/0x4b0 [ 470.616019][ T9721] destroy_args+0x7f6/0xa60 [ 470.620926][ T9721] debug_vm_pgtable+0x13b8/0x2d00 [ 470.629047][ T9721] do_one_initcall+0x120/0x6e0 [ 470.667576][ T9721] kernel_init_freeable+0x5c2/0x900 [ 470.677445][ T9721] kernel_init+0x1c/0x2b0 [ 470.686403][ T9721] ret_from_fork+0x5d7/0x6f0 [ 470.696892][ T9721] ret_from_fork_asm+0x1a/0x30 [ 473.196332][ T9769] netlink: 330 bytes leftover after parsing attributes in process `syz.3.730'. [ 473.223102][ T9771] netlink: 330 bytes leftover after parsing attributes in process `syz.2.729'. [ 473.247939][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.729'. [ 473.266702][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.730'. [ 475.352810][ T9792] netlink: 330 bytes leftover after parsing attributes in process `syz.0.736'. [ 475.367595][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.736'. [ 475.656721][ T9800] netlink: 330 bytes leftover after parsing attributes in process `syz.3.739'. [ 475.675756][ T9800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 476.579176][ T9809] netlink: 330 bytes leftover after parsing attributes in process `syz.0.742'. [ 476.638664][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 479.239728][ T9848] __nla_validate_parse: 2 callbacks suppressed [ 479.239748][ T9848] netlink: 330 bytes leftover after parsing attributes in process `syz.2.751'. [ 479.493106][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 479.933704][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 481.368834][ T9879] netlink: 330 bytes leftover after parsing attributes in process `syz.0.760'. [ 481.385286][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.760'. [ 483.138038][ T9901] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 483.187732][ T9901] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 483.249752][ T9901] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 483.275823][ T9901] page_type: f5(slab) [ 483.301652][ T9907] netlink: 330 bytes leftover after parsing attributes in process `syz.1.769'. [ 483.319932][ T9901] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 483.328652][ T9901] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 483.356202][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.769'. [ 483.378441][ T9901] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 483.438293][ T9901] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 483.453135][ T9901] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 483.464454][ T9901] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 483.477403][ T9901] page dumped because: unmovable page [ 483.490016][ T9901] page_owner tracks the page as allocated [ 483.496093][ T9901] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 483.518939][ C0] vkms_vblank_simulate: vblank timer overrun [ 483.537213][ T9901] post_alloc_hook+0x1c0/0x230 [ 483.546991][ T9901] get_page_from_freelist+0x1321/0x3890 [ 483.627350][ T9901] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 483.656295][ T9901] alloc_pages_mpol+0x1fb/0x550 [ 483.748512][ T9901] new_slab+0x23b/0x330 [ 483.791203][ T9901] ___slab_alloc+0xd9c/0x1940 [ 483.836410][ T9901] __slab_alloc.constprop.0+0x56/0xb0 [ 483.898061][ T9901] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 484.011305][ T9901] alloc_inode+0xc3/0x240 [ 484.065938][ T9901] iget_locked+0x2e4/0x830 [ 484.166633][ T9901] kernfs_get_inode+0x48/0x460 [ 484.240023][ T9901] kernfs_iop_lookup+0x1a7/0x2d0 [ 484.262512][ T9901] __lookup_slow+0x251/0x460 [ 484.322309][ T9901] walk_component+0x353/0x5b0 [ 484.327121][ T9901] link_path_walk+0x627/0xe20 [ 484.339026][ T9901] path_lookupat+0x15a/0x6d0 [ 484.347143][ T9901] page last free pid 1 tgid 1 stack trace: [ 484.357156][ T9901] __free_frozen_pages+0x7fe/0x1180 [ 484.362974][ T9901] free_contig_range+0x183/0x4b0 [ 484.368166][ T9901] destroy_args+0x7f6/0xa60 [ 484.373295][ T9901] debug_vm_pgtable+0x13b8/0x2d00 [ 484.379650][ T9901] do_one_initcall+0x120/0x6e0 [ 484.386176][ T9901] kernel_init_freeable+0x5c2/0x900 [ 484.392064][ T9901] kernel_init+0x1c/0x2b0 [ 484.396452][ T9901] ret_from_fork+0x5d7/0x6f0 [ 484.402317][ T9901] ret_from_fork_asm+0x1a/0x30 [ 487.665050][ T9949] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 487.701646][ T9949] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 487.729943][ T9949] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 487.737631][ T9949] page_type: f5(slab) [ 487.748340][ T9949] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 487.826362][ T9949] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 487.851966][ T9949] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 487.901371][ T9949] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 487.963982][ T9949] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 488.044064][ T9949] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 488.141866][ T9949] page dumped because: unmovable page [ 488.154114][ T9949] page_owner tracks the page as allocated [ 488.169998][ T9949] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 488.208970][ T9949] post_alloc_hook+0x1c0/0x230 [ 488.217258][ T9949] get_page_from_freelist+0x1321/0x3890 [ 488.293725][ T9949] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 488.326632][ T9949] alloc_pages_mpol+0x1fb/0x550 [ 488.523227][ T9949] new_slab+0x23b/0x330 [ 488.718847][ T9949] ___slab_alloc+0xd9c/0x1940 [ 488.724126][ T9949] __slab_alloc.constprop.0+0x56/0xb0 [ 488.729615][ T9949] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 488.735976][ T9949] alloc_inode+0xc3/0x240 [ 488.740690][ T9949] iget_locked+0x2e4/0x830 [ 488.745194][ T9949] kernfs_get_inode+0x48/0x460 [ 488.755826][ T9949] kernfs_iop_lookup+0x1a7/0x2d0 [ 488.761207][ T9949] __lookup_slow+0x251/0x460 [ 488.765891][ T9949] walk_component+0x353/0x5b0 [ 488.771190][ T9949] link_path_walk+0x627/0xe20 [ 488.775982][ T9949] path_lookupat+0x15a/0x6d0 [ 488.782775][ T9949] page last free pid 1 tgid 1 stack trace: [ 488.788708][ T9949] __free_frozen_pages+0x7fe/0x1180 [ 488.795061][ T9949] free_contig_range+0x183/0x4b0 [ 488.800511][ T9949] destroy_args+0x7f6/0xa60 [ 488.805145][ T9949] debug_vm_pgtable+0x13b8/0x2d00 [ 488.810763][ T9949] do_one_initcall+0x120/0x6e0 [ 488.820110][ T9949] kernel_init_freeable+0x5c2/0x900 [ 488.825412][ T9949] kernel_init+0x1c/0x2b0 [ 488.830519][ T9949] ret_from_fork+0x5d7/0x6f0 [ 488.849929][ T9949] ret_from_fork_asm+0x1a/0x30 [ 488.878112][ T9974] netlink: 330 bytes leftover after parsing attributes in process `syz.0.786'. [ 488.944553][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.786'. [ 490.494015][ T3536] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 490.522007][ T9997] FAULT_INJECTION: forcing a failure. [ 490.522007][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 490.561047][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.0.791 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 490.561103][ T9997] Tainted: [U]=USER [ 490.561114][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.561134][ T9997] Call Trace: [ 490.561145][ T9997] [ 490.561158][ T9997] dump_stack_lvl+0x16c/0x1f0 [ 490.561214][ T9997] should_fail_ex+0x512/0x640 [ 490.561280][ T9997] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 490.561348][ T9997] should_failslab+0xc2/0x120 [ 490.561384][ T9997] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 490.561441][ T9997] ? alloc_inode+0x61/0x240 [ 490.561479][ T9997] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 490.561538][ T9997] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 490.561574][ T9997] alloc_inode+0x61/0x240 [ 490.561612][ T9997] new_inode+0x22/0x1c0 [ 490.561652][ T9997] __rpc_create_common+0x57/0x2f0 [ 490.561703][ T9997] rpc_populate.constprop.0+0x153/0x5d0 [ 490.561760][ T9997] rpc_fill_super+0x2bc/0x840 [ 490.561805][ T9997] ? sget_fc+0x808/0xc20 [ 490.561854][ T9997] ? __pfx_set_anon_super_fc+0x10/0x10 [ 490.561901][ T9997] ? __pfx_rpc_fill_super+0x10/0x10 [ 490.561947][ T9997] get_tree_keyed+0x10e/0x1d0 [ 490.562005][ T9997] vfs_get_tree+0x8e/0x340 [ 490.562049][ T9997] vfs_cmd_create+0xd7/0x2a0 [ 490.562084][ T9997] __do_sys_fsconfig+0x7b8/0xbe0 [ 490.562124][ T9997] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 490.562197][ T9997] do_syscall_64+0xcd/0x490 [ 490.562358][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.562399][ T9997] RIP: 0033:0x7f6a5c58e929 [ 490.562427][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.562459][ T9997] RSP: 002b:00007f6a5d3b3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 490.562490][ T9997] RAX: ffffffffffffffda RBX: 00007f6a5c7b6080 RCX: 00007f6a5c58e929 [ 490.562513][ T9997] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 490.562533][ T9997] RBP: 00007f6a5c610b39 R08: 0000000000000000 R09: 0000000000000000 [ 490.562553][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.562574][ T9997] R13: 0000000000000000 R14: 00007f6a5c7b6080 R15: 00007ffd657014a8 [ 490.562619][ T9997] [ 490.568419][ T9997] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry lockd [ 490.810532][ T9997] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 491.917779][T10008] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 493.637654][T10025] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 493.850144][T10025] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 493.870015][T10025] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 494.346166][T10025] page_type: f5(slab) [ 494.750649][T10025] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 494.765880][T10041] FAULT_INJECTION: forcing a failure. [ 494.765880][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 494.799987][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.0.800 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 494.800041][T10041] Tainted: [U]=USER [ 494.800051][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.800070][T10041] Call Trace: [ 494.800080][T10041] [ 494.800092][T10041] dump_stack_lvl+0x16c/0x1f0 [ 494.800143][T10041] should_fail_ex+0x512/0x640 [ 494.800194][T10041] ? fs_reclaim_acquire+0xae/0x150 [ 494.800237][T10041] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 494.800284][T10041] should_failslab+0xc2/0x120 [ 494.800318][T10041] __kmalloc_noprof+0xd2/0x510 [ 494.800378][T10041] tomoyo_realpath_from_path+0xc2/0x6e0 [ 494.800432][T10041] ? tomoyo_profile+0x47/0x60 [ 494.800465][T10041] tomoyo_path_number_perm+0x245/0x580 [ 494.800504][T10041] ? tomoyo_path_number_perm+0x237/0x580 [ 494.800550][T10041] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 494.800593][T10041] ? find_held_lock+0x2b/0x80 [ 494.800665][T10041] ? find_held_lock+0x2b/0x80 [ 494.800695][T10041] ? hook_file_ioctl_common+0x145/0x410 [ 494.800751][T10041] ? __fget_files+0x20e/0x3c0 [ 494.800806][T10041] security_file_ioctl+0x9b/0x240 [ 494.800851][T10041] __x64_sys_ioctl+0xb7/0x210 [ 494.800895][T10041] do_syscall_64+0xcd/0x490 [ 494.800946][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.800979][T10041] RIP: 0033:0x7f6a5c58e929 [ 494.801004][T10041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.801036][T10041] RSP: 002b:00007f6a5d3d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.801066][T10041] RAX: ffffffffffffffda RBX: 00007f6a5c7b5fa0 RCX: 00007f6a5c58e929 [ 494.801088][T10041] RDX: ffffffffffffffff RSI: 000000000000545c RDI: 0000000000000003 [ 494.801107][T10041] RBP: 00007f6a5d3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 494.801127][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.801146][T10041] R13: 0000000000000000 R14: 00007f6a5c7b5fa0 R15: 00007ffd657014a8 [ 494.801189][T10041] [ 494.801361][T10041] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.829961][T10025] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 494.830009][T10025] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 494.830043][T10025] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 494.830076][T10025] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 494.830109][T10025] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 494.830128][T10025] page dumped because: unmovable page [ 494.830146][T10025] page_owner tracks the page as allocated [ 494.830159][T10025] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 494.830225][T10025] post_alloc_hook+0x1c0/0x230 [ 494.830295][T10025] get_page_from_freelist+0x1321/0x3890 [ 494.830345][T10025] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 494.830398][T10025] alloc_pages_mpol+0x1fb/0x550 [ 495.019404][T10043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 495.189937][T10025] new_slab+0x23b/0x330 [ 495.199916][T10025] ___slab_alloc+0xd9c/0x1940 [ 495.223913][T10025] __slab_alloc.constprop.0+0x56/0xb0 [ 495.259922][T10025] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 495.265796][T10025] alloc_inode+0xc3/0x240 [ 495.290068][T10025] iget_locked+0x2e4/0x830 [ 495.305018][T10025] kernfs_get_inode+0x48/0x460 [ 495.319927][T10025] kernfs_iop_lookup+0x1a7/0x2d0 [ 495.329830][T10025] __lookup_slow+0x251/0x460 [ 495.347480][T10025] walk_component+0x353/0x5b0 [ 495.360075][T10025] link_path_walk+0x627/0xe20 [ 495.375226][T10025] path_lookupat+0x15a/0x6d0 [ 495.387667][T10025] page last free pid 1 tgid 1 stack trace: [ 495.560424][T10025] __free_frozen_pages+0x7fe/0x1180 [ 495.565732][T10025] free_contig_range+0x183/0x4b0 [ 495.571284][T10025] destroy_args+0x7f6/0xa60 [ 495.575893][T10025] debug_vm_pgtable+0x13b8/0x2d00 [ 495.581563][T10025] do_one_initcall+0x120/0x6e0 [ 495.586488][T10025] kernel_init_freeable+0x5c2/0x900 [ 495.592336][T10025] kernel_init+0x1c/0x2b0 [ 495.596754][T10025] ret_from_fork+0x5d7/0x6f0 [ 495.602056][T10025] ret_from_fork_asm+0x1a/0x30 [ 496.293676][T10059] FAULT_INJECTION: forcing a failure. [ 496.293676][T10059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.344005][T10059] CPU: 0 UID: 0 PID: 10059 Comm: syz.1.804 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 496.344058][T10059] Tainted: [U]=USER [ 496.344069][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.344086][T10059] Call Trace: [ 496.344096][T10059] [ 496.344107][T10059] dump_stack_lvl+0x16c/0x1f0 [ 496.344145][T10059] should_fail_ex+0x512/0x640 [ 496.344185][T10059] _copy_from_user+0x2e/0xd0 [ 496.344208][T10059] copy_msghdr_from_user+0x98/0x160 [ 496.344242][T10059] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 496.344289][T10059] ___sys_sendmsg+0xfe/0x1d0 [ 496.344323][T10059] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.344353][T10059] ? __lock_acquire+0x622/0x1c90 [ 496.344419][T10059] __sys_sendmsg+0x16d/0x220 [ 496.344452][T10059] ? __pfx___sys_sendmsg+0x10/0x10 [ 496.344505][T10059] do_syscall_64+0xcd/0x490 [ 496.344541][T10059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.344565][T10059] RIP: 0033:0x7fa15b18e929 [ 496.344583][T10059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.344606][T10059] RSP: 002b:00007fa15bf2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.344628][T10059] RAX: ffffffffffffffda RBX: 00007fa15b3b5fa0 RCX: 00007fa15b18e929 [ 496.344643][T10059] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 496.344658][T10059] RBP: 00007fa15bf2d090 R08: 0000000000000000 R09: 0000000000000000 [ 496.344672][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.344686][T10059] R13: 0000000000000000 R14: 00007fa15b3b5fa0 R15: 00007ffc7c3d6b78 [ 496.344715][T10059] [ 496.518457][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.244039][T10065] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 497.561844][T10065] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.741193][T10065] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 498.020450][T10065] page_type: f5(slab) [ 498.024576][T10065] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 498.261789][T10065] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 498.473415][T10065] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 498.874854][T10065] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 499.040214][T10065] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 499.049010][T10065] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 499.091969][T10065] page dumped because: unmovable page [ 499.097490][T10065] page_owner tracks the page as allocated [ 499.255477][T10065] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 499.279075][T10065] post_alloc_hook+0x1c0/0x230 [ 499.284278][T10065] get_page_from_freelist+0x1321/0x3890 [ 499.290318][T10065] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 499.296313][T10065] alloc_pages_mpol+0x1fb/0x550 [ 499.301799][T10065] new_slab+0x23b/0x330 [ 499.306039][T10065] ___slab_alloc+0xd9c/0x1940 [ 499.311297][T10065] __slab_alloc.constprop.0+0x56/0xb0 [ 499.316886][T10065] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 499.323263][T10065] alloc_inode+0xc3/0x240 [ 499.328831][T10065] iget_locked+0x2e4/0x830 [ 499.333917][T10065] kernfs_get_inode+0x48/0x460 [ 499.338807][T10065] kernfs_iop_lookup+0x1a7/0x2d0 [ 499.344568][T10065] __lookup_slow+0x251/0x460 [ 499.349364][T10065] walk_component+0x353/0x5b0 [ 499.354696][T10065] link_path_walk+0x627/0xe20 [ 499.359560][T10065] path_lookupat+0x15a/0x6d0 [ 499.364727][T10065] page last free pid 1 tgid 1 stack trace: [ 499.371035][T10065] __free_frozen_pages+0x7fe/0x1180 [ 499.376322][T10065] free_contig_range+0x183/0x4b0 [ 499.381885][T10065] destroy_args+0x7f6/0xa60 [ 499.386517][T10065] debug_vm_pgtable+0x13b8/0x2d00 [ 499.419913][T10065] do_one_initcall+0x120/0x6e0 [ 499.424794][T10065] kernel_init_freeable+0x5c2/0x900 [ 499.464315][T10065] kernel_init+0x1c/0x2b0 [ 499.468790][T10065] ret_from_fork+0x5d7/0x6f0 [ 499.529842][T10065] ret_from_fork_asm+0x1a/0x30 [ 499.811586][T10087] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 500.165969][T10087] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 500.500867][T10096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 500.555310][T10087] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 500.770001][T10087] page_type: f5(slab) [ 500.883348][T10087] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 500.996733][T10087] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 501.065021][T10087] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 501.080362][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 501.104482][T10087] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 501.114050][T10087] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 501.126796][T10087] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 501.203259][T10087] page dumped because: unmovable page [ 501.220188][T10087] page_owner tracks the page as allocated [ 501.258086][T10087] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 501.388743][T10087] post_alloc_hook+0x1c0/0x230 [ 501.423167][T10087] get_page_from_freelist+0x1321/0x3890 [ 501.443490][T10087] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 501.460659][T10087] alloc_pages_mpol+0x1fb/0x550 [ 501.465730][T10087] new_slab+0x23b/0x330 [ 501.475148][T10087] ___slab_alloc+0xd9c/0x1940 [ 501.490897][T10087] __slab_alloc.constprop.0+0x56/0xb0 [ 501.512952][T10087] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 501.519064][T10087] alloc_inode+0xc3/0x240 [ 501.530566][T10087] iget_locked+0x2e4/0x830 [ 501.545519][T10087] kernfs_get_inode+0x48/0x460 [ 501.565976][T10087] kernfs_iop_lookup+0x1a7/0x2d0 [ 501.833072][T10087] __lookup_slow+0x251/0x460 [ 501.837889][T10087] walk_component+0x353/0x5b0 [ 501.844005][T10087] link_path_walk+0x627/0xe20 [ 501.849138][T10087] path_lookupat+0x15a/0x6d0 [ 501.866158][T10087] page last free pid 1 tgid 1 stack trace: [ 501.873012][T10087] __free_frozen_pages+0x7fe/0x1180 [ 501.878505][T10087] free_contig_range+0x183/0x4b0 [ 501.912477][T10087] destroy_args+0x7f6/0xa60 [ 501.917324][T10087] debug_vm_pgtable+0x13b8/0x2d00 [ 502.011879][T10087] do_one_initcall+0x120/0x6e0 [ 502.017065][T10087] kernel_init_freeable+0x5c2/0x900 [ 502.023110][T10087] kernel_init+0x1c/0x2b0 [ 502.027781][T10087] ret_from_fork+0x5d7/0x6f0 [ 502.038381][T10087] ret_from_fork_asm+0x1a/0x30 [ 503.754920][T10125] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 503.818521][T10125] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 504.270367][T10125] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 504.278306][T10125] page_type: f5(slab) [ 504.282712][T10125] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 504.291491][T10125] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 504.300399][T10125] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 504.429952][T10125] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 504.553168][T10125] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 504.792676][T10125] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 504.949942][T10125] page dumped because: unmovable page [ 504.970144][T10125] page_owner tracks the page as allocated [ 505.088362][T10125] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 505.140968][ T34] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 505.169254][T10125] post_alloc_hook+0x1c0/0x230 [ 505.217202][T10125] get_page_from_freelist+0x1321/0x3890 [ 505.225750][T10147] netlink: 330 bytes leftover after parsing attributes in process `syz.0.825'. [ 505.263584][T10125] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 505.265966][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.825'. [ 505.307081][T10125] alloc_pages_mpol+0x1fb/0x550 [ 505.322722][T10125] new_slab+0x23b/0x330 [ 505.360798][T10125] ___slab_alloc+0xd9c/0x1940 [ 505.408680][T10125] __slab_alloc.constprop.0+0x56/0xb0 [ 505.440415][T10125] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 505.446466][T10125] alloc_inode+0xc3/0x240 [ 505.471724][T10125] iget_locked+0x2e4/0x830 [ 505.515814][T10125] kernfs_get_inode+0x48/0x460 [ 505.581781][T10125] kernfs_iop_lookup+0x1a7/0x2d0 [ 505.639182][T10125] __lookup_slow+0x251/0x460 [ 505.672033][T10125] walk_component+0x353/0x5b0 [ 505.692212][T10125] link_path_walk+0x627/0xe20 [ 505.723452][T10125] path_lookupat+0x15a/0x6d0 [ 505.735869][T10125] page last free pid 1 tgid 1 stack trace: [ 505.741953][T10125] __free_frozen_pages+0x7fe/0x1180 [ 505.747411][T10125] free_contig_range+0x183/0x4b0 [ 505.752766][T10125] destroy_args+0x7f6/0xa60 [ 505.757439][T10125] debug_vm_pgtable+0x13b8/0x2d00 [ 505.762847][T10125] do_one_initcall+0x120/0x6e0 [ 505.767884][T10125] kernel_init_freeable+0x5c2/0x900 [ 505.773584][T10125] kernel_init+0x1c/0x2b0 [ 505.778973][T10125] ret_from_fork+0x5d7/0x6f0 [ 505.783919][T10125] ret_from_fork_asm+0x1a/0x30 [ 506.376443][T10154] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 506.399033][T10154] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 506.447175][T10154] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 506.523811][T10154] page_type: f5(slab) [ 506.708758][T10154] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 506.790531][T10154] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 506.839320][T10154] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 506.943875][T10154] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 507.001617][T10154] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 507.033034][T10154] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 507.163844][T10154] page dumped because: unmovable page [ 507.268115][T10154] page_owner tracks the page as allocated [ 507.486460][T10154] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 507.581987][T10154] post_alloc_hook+0x1c0/0x230 [ 507.587267][T10154] get_page_from_freelist+0x1321/0x3890 [ 507.608264][T10154] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 507.614685][T10154] alloc_pages_mpol+0x1fb/0x550 [ 507.778245][T10154] new_slab+0x23b/0x330 [ 507.896135][T10154] ___slab_alloc+0xd9c/0x1940 [ 508.102077][T10154] __slab_alloc.constprop.0+0x56/0xb0 [ 508.107590][T10154] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 508.180305][T10154] alloc_inode+0xc3/0x240 [ 508.185636][T10154] iget_locked+0x2e4/0x830 [ 508.190622][T10154] kernfs_get_inode+0x48/0x460 [ 508.195480][T10154] kernfs_iop_lookup+0x1a7/0x2d0 [ 508.200824][T10154] __lookup_slow+0x251/0x460 [ 508.205515][T10154] walk_component+0x353/0x5b0 [ 508.210477][T10154] link_path_walk+0x627/0xe20 [ 508.215384][T10154] path_lookupat+0x15a/0x6d0 [ 508.221636][T10154] page last free pid 1 tgid 1 stack trace: [ 508.227715][T10154] __free_frozen_pages+0x7fe/0x1180 [ 508.233185][T10154] free_contig_range+0x183/0x4b0 [ 508.239413][T10154] destroy_args+0x7f6/0xa60 [ 508.264412][T10154] debug_vm_pgtable+0x13b8/0x2d00 [ 508.270287][T10154] do_one_initcall+0x120/0x6e0 [ 508.275271][T10154] kernel_init_freeable+0x5c2/0x900 [ 508.319976][T10154] kernel_init+0x1c/0x2b0 [ 508.360651][T10154] ret_from_fork+0x5d7/0x6f0 [ 508.365332][T10154] ret_from_fork_asm+0x1a/0x30 [ 508.927410][T10172] netlink: 330 bytes leftover after parsing attributes in process `syz.2.830'. [ 509.134919][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'. [ 510.363224][T10185] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 510.476321][T10185] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 510.493749][T10185] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 510.582682][T10185] page_type: f5(slab) [ 510.608195][T10185] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 510.643539][T10193] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 510.781482][T10185] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 510.870211][T10185] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 510.897825][T10185] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 510.946688][T10185] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 511.025122][T10198] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 511.089330][T10185] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 511.127949][T10185] page dumped because: unmovable page [ 511.153489][T10185] page_owner tracks the page as allocated [ 511.176089][T10185] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 511.310194][T10185] post_alloc_hook+0x1c0/0x230 [ 511.348056][T10185] get_page_from_freelist+0x1321/0x3890 [ 511.369894][T10185] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 511.375948][T10185] alloc_pages_mpol+0x1fb/0x550 [ 511.459926][T10185] new_slab+0x23b/0x330 [ 511.464302][T10185] ___slab_alloc+0xd9c/0x1940 [ 511.469072][T10185] __slab_alloc.constprop.0+0x56/0xb0 [ 511.519917][T10185] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 511.529175][T10185] alloc_inode+0xc3/0x240 [ 511.540181][T10185] iget_locked+0x2e4/0x830 [ 511.544742][T10185] kernfs_get_inode+0x48/0x460 [ 511.553964][T10185] kernfs_iop_lookup+0x1a7/0x2d0 [ 511.559044][T10185] __lookup_slow+0x251/0x460 [ 511.614273][T10185] walk_component+0x353/0x5b0 [ 511.619130][T10185] link_path_walk+0x627/0xe20 [ 511.672708][T10185] path_lookupat+0x15a/0x6d0 [ 511.685747][T10185] page last free pid 1 tgid 1 stack trace: [ 511.737724][T10185] __free_frozen_pages+0x7fe/0x1180 [ 511.767111][T10185] free_contig_range+0x183/0x4b0 [ 511.776091][T10185] destroy_args+0x7f6/0xa60 [ 511.801914][T10185] debug_vm_pgtable+0x13b8/0x2d00 [ 511.846796][T10185] do_one_initcall+0x120/0x6e0 [ 511.854010][T10185] kernel_init_freeable+0x5c2/0x900 [ 511.874196][T10185] kernel_init+0x1c/0x2b0 [ 511.880222][T10185] ret_from_fork+0x5d7/0x6f0 [ 511.902996][T10185] ret_from_fork_asm+0x1a/0x30 [ 512.024203][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.033244][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.651068][T10245] netlink: 330 bytes leftover after parsing attributes in process `syz.0.855'. [ 514.664106][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'. [ 516.273210][T10258] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 516.301428][T10258] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 516.525416][T10258] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 516.534304][T10258] page_type: f5(slab) [ 516.538493][T10258] raw: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 516.550363][T10258] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 516.559059][T10258] head: 00fff00000000040 ffff88801ca948c0 dead000000000122 0000000000000000 [ 516.570361][T10258] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 516.579261][T10258] head: 00fff00000000002 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 516.588201][T10258] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 516.597387][T10258] page dumped because: unmovable page [ 516.634090][T10258] page_owner tracks the page as allocated [ 516.674636][T10258] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (udevadm), ts 46186676282, free_ts 37356278178 [ 516.818062][T10258] post_alloc_hook+0x1c0/0x230 [ 516.907259][T10258] get_page_from_freelist+0x1321/0x3890 [ 516.981465][T10258] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 516.987594][T10258] alloc_pages_mpol+0x1fb/0x550 [ 517.004643][T10258] new_slab+0x23b/0x330 [ 517.009146][T10258] ___slab_alloc+0xd9c/0x1940 [ 517.127675][T10258] __slab_alloc.constprop.0+0x56/0xb0 [ 517.172533][T10258] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 517.312638][T10258] alloc_inode+0xc3/0x240 [ 517.317137][T10258] iget_locked+0x2e4/0x830 [ 517.381920][T10258] kernfs_get_inode+0x48/0x460 [ 517.399870][T10258] kernfs_iop_lookup+0x1a7/0x2d0 [ 517.420502][T10258] __lookup_slow+0x251/0x460 [ 517.425311][T10258] walk_component+0x353/0x5b0 [ 517.471744][T10258] link_path_walk+0x627/0xe20 [ 517.488465][T10273] ======================================================= [ 517.488465][T10273] WARNING: The mand mount option has been deprecated and [ 517.488465][T10273] and is ignored by this kernel. Remove the mand [ 517.488465][T10273] option from the mount to silence this warning. [ 517.488465][T10273] ======================================================= [ 517.548555][T10258] path_lookupat+0x15a/0x6d0 [ 517.590071][T10258] page last free pid 1 tgid 1 stack trace: [ 517.595995][T10258] __free_frozen_pages+0x7fe/0x1180 [ 517.609924][T10258] free_contig_range+0x183/0x4b0 [ 517.615107][T10258] destroy_args+0x7f6/0xa60 [ 517.620355][T10258] debug_vm_pgtable+0x13b8/0x2d00 [ 517.625598][T10258] do_one_initcall+0x120/0x6e0 [ 517.630588][T10258] kernel_init_freeable+0x5c2/0x900 [ 517.636000][T10258] kernel_init+0x1c/0x2b0 [ 517.640727][T10258] ret_from_fork+0x5d7/0x6f0 [ 517.645419][T10258] ret_from_fork_asm+0x1a/0x30 [ 517.695055][T10274] random: crng reseeded on system resumption [ 518.087219][T10276] warning: `syz.0.854' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 518.095900][ T1161] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 518.681736][T10284] FAULT_INJECTION: forcing a failure. [ 518.681736][T10284] name failslab, interval 1, probability 0, space 0, times 0 [ 518.747405][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.3.857 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 518.747444][T10284] Tainted: [U]=USER [ 518.747452][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 518.747465][T10284] Call Trace: [ 518.747473][T10284] [ 518.747482][T10284] dump_stack_lvl+0x16c/0x1f0 [ 518.747520][T10284] should_fail_ex+0x512/0x640 [ 518.747555][T10284] ? fs_reclaim_acquire+0xae/0x150 [ 518.747586][T10284] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 518.747620][T10284] should_failslab+0xc2/0x120 [ 518.747643][T10284] __kmalloc_noprof+0xd2/0x510 [ 518.747684][T10284] tomoyo_realpath_from_path+0xc2/0x6e0 [ 518.747724][T10284] ? tomoyo_profile+0x47/0x60 [ 518.747748][T10284] tomoyo_path_number_perm+0x245/0x580 [ 518.747775][T10284] ? tomoyo_path_number_perm+0x237/0x580 [ 518.747807][T10284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 518.747838][T10284] ? find_held_lock+0x2b/0x80 [ 518.747887][T10284] ? find_held_lock+0x2b/0x80 [ 518.747909][T10284] ? hook_file_ioctl_common+0x145/0x410 [ 518.747949][T10284] ? __fget_files+0x20e/0x3c0 [ 518.747987][T10284] security_file_ioctl+0x9b/0x240 [ 518.748019][T10284] __x64_sys_ioctl+0xb7/0x210 [ 518.748050][T10284] do_syscall_64+0xcd/0x490 [ 518.748086][T10284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.748110][T10284] RIP: 0033:0x7f7a7638e929 [ 518.748136][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.748165][T10284] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.748191][T10284] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 518.748207][T10284] RDX: 0000000000000000 RSI: 000000004188aea7 RDI: 0000000000000004 [ 518.748222][T10284] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 518.748240][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.748256][T10284] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 518.748286][T10284] [ 518.748295][T10284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 519.700232][T10293] FAULT_INJECTION: forcing a failure. [ 519.700232][T10293] name failslab, interval 1, probability 0, space 0, times 0 [ 519.799966][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.3.861 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 519.800006][T10293] Tainted: [U]=USER [ 519.800014][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.800028][T10293] Call Trace: [ 519.800036][T10293] [ 519.800045][T10293] dump_stack_lvl+0x16c/0x1f0 [ 519.800084][T10293] should_fail_ex+0x512/0x640 [ 519.800125][T10293] should_failslab+0xc2/0x120 [ 519.800148][T10293] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 519.800186][T10293] ? skb_clone+0x190/0x3f0 [ 519.800225][T10293] skb_clone+0x190/0x3f0 [ 519.800260][T10293] netlink_deliver_tap+0xabd/0xd30 [ 519.800304][T10293] netlink_unicast+0x5df/0x7f0 [ 519.800330][T10293] ? __pfx_netlink_unicast+0x10/0x10 [ 519.800361][T10293] netlink_sendmsg+0x8d1/0xdd0 [ 519.800389][T10293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.800424][T10293] ____sys_sendmsg+0xa98/0xc70 [ 519.800450][T10293] ? copy_msghdr_from_user+0x10a/0x160 [ 519.800484][T10293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.800522][T10293] ___sys_sendmsg+0x134/0x1d0 [ 519.800558][T10293] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.800589][T10293] ? __lock_acquire+0x622/0x1c90 [ 519.800664][T10293] __sys_sendmsg+0x16d/0x220 [ 519.800698][T10293] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.800751][T10293] do_syscall_64+0xcd/0x490 [ 519.800787][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.800810][T10293] RIP: 0033:0x7f7a7638e929 [ 519.800828][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.800851][T10293] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.800873][T10293] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 519.800889][T10293] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000003 [ 519.800903][T10293] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 519.800918][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.800931][T10293] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 519.800961][T10293] [ 520.301703][T10298] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 521.025954][T10309] FAULT_INJECTION: forcing a failure. [ 521.025954][T10309] name failslab, interval 1, probability 0, space 0, times 0 [ 521.100129][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.3.864 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 521.100183][T10309] Tainted: [U]=USER [ 521.100193][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.100212][T10309] Call Trace: [ 521.100221][T10309] [ 521.100234][T10309] dump_stack_lvl+0x16c/0x1f0 [ 521.100285][T10309] should_fail_ex+0x512/0x640 [ 521.100335][T10309] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 521.100391][T10309] should_failslab+0xc2/0x120 [ 521.100424][T10309] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 521.100475][T10309] ? alloc_empty_file+0x55/0x1e0 [ 521.100517][T10309] alloc_empty_file+0x55/0x1e0 [ 521.100555][T10309] path_openat+0xda/0x2cb0 [ 521.100600][T10309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.100660][T10309] ? __pfx_path_openat+0x10/0x10 [ 521.100712][T10309] ? __lock_acquire+0xb8a/0x1c90 [ 521.100762][T10309] do_filp_open+0x20b/0x470 [ 521.100812][T10309] ? __pfx_do_filp_open+0x10/0x10 [ 521.100893][T10309] ? alloc_fd+0x471/0x7d0 [ 521.100950][T10309] do_sys_openat2+0x11b/0x1d0 [ 521.100989][T10309] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.101032][T10309] ? __fget_files+0x20e/0x3c0 [ 521.101085][T10309] __x64_sys_openat+0x174/0x210 [ 521.101124][T10309] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.101162][T10309] ? ksys_write+0x1ac/0x250 [ 521.101225][T10309] do_syscall_64+0xcd/0x490 [ 521.101276][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.101309][T10309] RIP: 0033:0x7f7a7638e929 [ 521.101333][T10309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.101365][T10309] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.101395][T10309] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 521.101416][T10309] RDX: 0000000000020000 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 521.101437][T10309] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 521.101456][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.101476][T10309] R13: 0000000000000001 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 521.101518][T10309] [ 521.328386][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.632926][T10311] FAULT_INJECTION: forcing a failure. [ 521.632926][T10311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.680294][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.3.865 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 521.680348][T10311] Tainted: [U]=USER [ 521.680358][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.680377][T10311] Call Trace: [ 521.680387][T10311] [ 521.680399][T10311] dump_stack_lvl+0x16c/0x1f0 [ 521.680451][T10311] should_fail_ex+0x512/0x640 [ 521.680509][T10311] _copy_from_iter+0x29f/0x16f0 [ 521.680546][T10311] ? __alloc_skb+0x200/0x380 [ 521.680591][T10311] ? __pfx__copy_from_iter+0x10/0x10 [ 521.680626][T10311] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 521.680702][T10311] netlink_sendmsg+0x829/0xdd0 [ 521.680741][T10311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.680790][T10311] ____sys_sendmsg+0xa98/0xc70 [ 521.680825][T10311] ? copy_msghdr_from_user+0x10a/0x160 [ 521.680872][T10311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.680926][T10311] ___sys_sendmsg+0x134/0x1d0 [ 521.680976][T10311] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.681020][T10311] ? __lock_acquire+0x622/0x1c90 [ 521.681117][T10311] __sys_sendmsg+0x16d/0x220 [ 521.681166][T10311] ? __pfx___sys_sendmsg+0x10/0x10 [ 521.681240][T10311] do_syscall_64+0xcd/0x490 [ 521.681292][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.681325][T10311] RIP: 0033:0x7f7a7638e929 [ 521.681349][T10311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.681381][T10311] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.681411][T10311] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 521.681432][T10311] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000003 [ 521.681452][T10311] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 521.681472][T10311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.681491][T10311] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 521.681532][T10311] [ 521.889876][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.784875][T10326] sp0: Synchronizing with TNC [ 523.501251][T10332] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 525.072264][T10352] FAULT_INJECTION: forcing a failure. [ 525.072264][T10352] name failslab, interval 1, probability 0, space 0, times 0 [ 525.220900][T10354] FAULT_INJECTION: forcing a failure. [ 525.220900][T10354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.277388][T10352] CPU: 1 UID: 0 PID: 10352 Comm: syz.0.874 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 525.277439][T10352] Tainted: [U]=USER [ 525.277449][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.277468][T10352] Call Trace: [ 525.277478][T10352] [ 525.277490][T10352] dump_stack_lvl+0x16c/0x1f0 [ 525.277541][T10352] should_fail_ex+0x512/0x640 [ 525.277592][T10352] ? fs_reclaim_acquire+0xae/0x150 [ 525.277635][T10352] ? tomoyo_encode2+0x100/0x3e0 [ 525.277757][T10352] should_failslab+0xc2/0x120 [ 525.277794][T10352] __kmalloc_noprof+0xd2/0x510 [ 525.277844][T10352] ? d_absolute_path+0x136/0x1a0 [ 525.277888][T10352] tomoyo_encode2+0x100/0x3e0 [ 525.277941][T10352] tomoyo_encode+0x29/0x50 [ 525.277987][T10352] tomoyo_realpath_from_path+0x18f/0x6e0 [ 525.278050][T10352] tomoyo_path_number_perm+0x245/0x580 [ 525.278090][T10352] ? tomoyo_path_number_perm+0x237/0x580 [ 525.278146][T10352] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 525.278191][T10352] ? find_held_lock+0x2b/0x80 [ 525.278263][T10352] ? find_held_lock+0x2b/0x80 [ 525.278294][T10352] ? hook_file_ioctl_common+0x145/0x410 [ 525.278338][T10352] ? __fget_files+0x20e/0x3c0 [ 525.278391][T10352] security_file_ioctl+0x9b/0x240 [ 525.278435][T10352] __x64_sys_ioctl+0xb7/0x210 [ 525.278475][T10352] do_syscall_64+0xcd/0x490 [ 525.278523][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.278554][T10352] RIP: 0033:0x7f6a5c58e929 [ 525.278579][T10352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.278610][T10352] RSP: 002b:00007f6a5d392038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.278639][T10352] RAX: ffffffffffffffda RBX: 00007f6a5c7b6160 RCX: 00007f6a5c58e929 [ 525.278659][T10352] RDX: 0000000000000000 RSI: 000000004188aea7 RDI: 0000000000000004 [ 525.278678][T10352] RBP: 00007f6a5d392090 R08: 0000000000000000 R09: 0000000000000000 [ 525.278697][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.278716][T10352] R13: 0000000000000000 R14: 00007f6a5c7b6160 R15: 00007ffd657014a8 [ 525.278755][T10352] [ 525.278781][T10352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.336962][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.3.876 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 525.337033][T10354] Tainted: [U]=USER [ 525.337045][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 525.337067][T10354] Call Trace: [ 525.337078][T10354] [ 525.337093][T10354] dump_stack_lvl+0x16c/0x1f0 [ 525.337151][T10354] should_fail_ex+0x512/0x640 [ 525.337215][T10354] _copy_from_iter+0x29f/0x16f0 [ 525.337257][T10354] ? __alloc_skb+0x200/0x380 [ 525.337306][T10354] ? __pfx__copy_from_iter+0x10/0x10 [ 525.337344][T10354] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 525.337425][T10354] netlink_sendmsg+0x829/0xdd0 [ 525.337469][T10354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.337523][T10354] ____sys_sendmsg+0xa98/0xc70 [ 525.337569][T10354] ? copy_msghdr_from_user+0x10a/0x160 [ 525.337624][T10354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.337684][T10354] ___sys_sendmsg+0x134/0x1d0 [ 525.337740][T10354] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.337788][T10354] ? __lock_acquire+0x622/0x1c90 [ 525.337882][T10354] __sys_sendmsg+0x16d/0x220 [ 525.337931][T10354] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.338006][T10354] do_syscall_64+0xcd/0x490 [ 525.338066][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.338100][T10354] RIP: 0033:0x7f7a7638e929 [ 525.338126][T10354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.338158][T10354] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.338188][T10354] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 525.338209][T10354] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 525.338229][T10354] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 525.338249][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.338268][T10354] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 525.338309][T10354] [ 525.941701][T10362] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 526.365704][T10368] FAULT_INJECTION: forcing a failure. [ 526.365704][T10368] name failslab, interval 1, probability 0, space 0, times 0 [ 526.431743][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.0.880 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 526.431797][T10368] Tainted: [U]=USER [ 526.431807][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.431826][T10368] Call Trace: [ 526.431836][T10368] [ 526.431849][T10368] dump_stack_lvl+0x16c/0x1f0 [ 526.431901][T10368] should_fail_ex+0x512/0x640 [ 526.431958][T10368] should_failslab+0xc2/0x120 [ 526.431991][T10368] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 526.432052][T10368] ? skb_clone+0x190/0x3f0 [ 526.432107][T10368] skb_clone+0x190/0x3f0 [ 526.432156][T10368] netlink_deliver_tap+0xabd/0xd30 [ 526.432219][T10368] netlink_unicast+0x5df/0x7f0 [ 526.432257][T10368] ? __pfx_netlink_unicast+0x10/0x10 [ 526.432302][T10368] netlink_sendmsg+0x8d1/0xdd0 [ 526.432342][T10368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.432391][T10368] ____sys_sendmsg+0xa98/0xc70 [ 526.432428][T10368] ? copy_msghdr_from_user+0x10a/0x160 [ 526.432476][T10368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.432531][T10368] ___sys_sendmsg+0x134/0x1d0 [ 526.432581][T10368] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.432625][T10368] ? __lock_acquire+0x622/0x1c90 [ 526.432728][T10368] __sys_sendmsg+0x16d/0x220 [ 526.432776][T10368] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.432852][T10368] do_syscall_64+0xcd/0x490 [ 526.432902][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.432936][T10368] RIP: 0033:0x7f6a5c58e929 [ 526.432961][T10368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.432993][T10368] RSP: 002b:00007f6a5d3d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.433023][T10368] RAX: ffffffffffffffda RBX: 00007f6a5c7b5fa0 RCX: 00007f6a5c58e929 [ 526.433052][T10368] RDX: 0000000000000080 RSI: 00002000000028c0 RDI: 0000000000000003 [ 526.433072][T10368] RBP: 00007f6a5d3d4090 R08: 0000000000000000 R09: 0000000000000000 [ 526.433092][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.433110][T10368] R13: 0000000000000000 R14: 00007f6a5c7b5fa0 R15: 00007ffd657014a8 [ 526.433152][T10368] [ 526.653583][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.933542][T10370] netlink: set zone limit has 8 unknown bytes [ 527.231285][T10363] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 527.396967][T10379] FAULT_INJECTION: forcing a failure. [ 527.396967][T10379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.457320][T10379] CPU: 0 UID: 0 PID: 10379 Comm: syz.3.884 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 527.457360][T10379] Tainted: [U]=USER [ 527.457367][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.457381][T10379] Call Trace: [ 527.457389][T10379] [ 527.457397][T10379] dump_stack_lvl+0x16c/0x1f0 [ 527.457435][T10379] should_fail_ex+0x512/0x640 [ 527.457475][T10379] _copy_to_user+0x32/0xd0 [ 527.457499][T10379] simple_read_from_buffer+0xcb/0x170 [ 527.457532][T10379] proc_fail_nth_read+0x197/0x270 [ 527.457561][T10379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.457592][T10379] ? rw_verify_area+0xcf/0x680 [ 527.457622][T10379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 527.457650][T10379] vfs_read+0x1e1/0xc60 [ 527.457686][T10379] ? __pfx___mutex_lock+0x10/0x10 [ 527.457719][T10379] ? __pfx_vfs_read+0x10/0x10 [ 527.457760][T10379] ? __fget_files+0x20e/0x3c0 [ 527.457800][T10379] ksys_read+0x12a/0x250 [ 527.457832][T10379] ? __pfx_ksys_read+0x10/0x10 [ 527.457874][T10379] do_syscall_64+0xcd/0x490 [ 527.457909][T10379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.457932][T10379] RIP: 0033:0x7f7a7638d33c [ 527.457950][T10379] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 527.457973][T10379] RSP: 002b:00007f7a77159030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.457995][T10379] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638d33c [ 527.458011][T10379] RDX: 000000000000000f RSI: 00007f7a771590a0 RDI: 0000000000000004 [ 527.458025][T10379] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 527.458039][T10379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.458053][T10379] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 527.458090][T10379] [ 527.647673][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.200611][T10382] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 528.401184][T10391] FAULT_INJECTION: forcing a failure. [ 528.401184][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 528.478759][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.3.887 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 528.478813][T10391] Tainted: [U]=USER [ 528.478823][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 528.478853][T10391] Call Trace: [ 528.478863][T10391] [ 528.478875][T10391] dump_stack_lvl+0x16c/0x1f0 [ 528.478925][T10391] should_fail_ex+0x512/0x640 [ 528.478976][T10391] ? fs_reclaim_acquire+0xae/0x150 [ 528.479018][T10391] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.479067][T10391] should_failslab+0xc2/0x120 [ 528.479100][T10391] __kmalloc_noprof+0xd2/0x510 [ 528.479161][T10391] tomoyo_realpath_from_path+0xc2/0x6e0 [ 528.479220][T10391] tomoyo_check_open_permission+0x2ab/0x3c0 [ 528.479261][T10391] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 528.479343][T10391] ? do_raw_spin_lock+0x12c/0x2b0 [ 528.479406][T10391] tomoyo_file_open+0x6b/0x90 [ 528.479438][T10391] security_file_open+0x84/0x1e0 [ 528.479483][T10391] do_dentry_open+0x596/0x1c10 [ 528.479548][T10391] vfs_open+0x82/0x3f0 [ 528.479588][T10391] path_openat+0x1de4/0x2cb0 [ 528.479651][T10391] ? __pfx_path_openat+0x10/0x10 [ 528.479702][T10391] ? __lock_acquire+0xb8a/0x1c90 [ 528.479762][T10391] do_filp_open+0x20b/0x470 [ 528.479810][T10391] ? __pfx_do_filp_open+0x10/0x10 [ 528.479899][T10391] ? alloc_fd+0x471/0x7d0 [ 528.479959][T10391] do_sys_openat2+0x11b/0x1d0 [ 528.479997][T10391] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.480041][T10391] ? __fget_files+0x20e/0x3c0 [ 528.480096][T10391] __x64_sys_openat+0x174/0x210 [ 528.480137][T10391] ? __pfx___x64_sys_openat+0x10/0x10 [ 528.480174][T10391] ? ksys_write+0x1ac/0x250 [ 528.480238][T10391] do_syscall_64+0xcd/0x490 [ 528.480289][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.480321][T10391] RIP: 0033:0x7f7a7638e929 [ 528.480346][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.480379][T10391] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 528.480410][T10391] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 528.480431][T10391] RDX: 0000000000020000 RSI: 0000200000000840 RDI: ffffffffffffff9c [ 528.480452][T10391] RBP: 00007f7a77159090 R08: 0000000000000000 R09: 0000000000000000 [ 528.480471][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.480490][T10391] R13: 0000000000000001 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 528.480530][T10391] [ 528.821509][T10391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 529.952087][T10409] ================================================================== [ 529.952112][T10409] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 529.952170][T10409] Write of size 8 at addr ffffc90003959000 by task syz.3.892/10409 [ 529.952201][T10409] [ 529.952221][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.3.892 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 529.952273][T10409] Tainted: [U]=USER [ 529.952286][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.952305][T10409] Call Trace: [ 529.952316][T10409] [ 529.952330][T10409] dump_stack_lvl+0x116/0x1f0 [ 529.952381][T10409] print_report+0xcd/0x680 [ 529.952414][T10409] ? __virt_addr_valid+0x81/0x610 [ 529.952455][T10409] ? sys_fillrect+0x15d4/0x17b0 [ 529.952498][T10409] kasan_report+0xe0/0x110 [ 529.952531][T10409] ? sys_fillrect+0x15d4/0x17b0 [ 529.952580][T10409] sys_fillrect+0x15d4/0x17b0 [ 529.952628][T10409] ? __pfx_sys_fillrect+0x10/0x10 [ 529.952674][T10409] ? __pfx_bit_putcs+0x10/0x10 [ 529.952706][T10409] ? bit_cursor+0xeca/0x17e0 [ 529.952760][T10409] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 529.952812][T10409] bit_clear+0x17d/0x220 [ 529.952850][T10409] ? __pfx_bit_clear+0x10/0x10 [ 529.952883][T10409] ? __pfx___might_resched+0x10/0x10 [ 529.952920][T10409] ? fb_get_color_depth+0x120/0x250 [ 529.952973][T10409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.953033][T10409] ? __pfx_bit_clear+0x10/0x10 [ 529.953064][T10409] __fbcon_clear+0x603/0x780 [ 529.953124][T10409] fbcon_scroll+0x48b/0x690 [ 529.953179][T10409] con_scroll+0x45c/0x690 [ 529.953238][T10409] do_con_write+0x6869/0x7c90 [ 529.953284][T10409] ? __pfx_do_con_write+0x10/0x10 [ 529.953329][T10409] con_write+0x23/0xb0 [ 529.953360][T10409] n_tty_write+0x412/0x1160 [ 529.953411][T10409] ? __pfx_n_tty_write+0x10/0x10 [ 529.953451][T10409] ? rcu_is_watching+0x12/0xc0 [ 529.953486][T10409] ? __pfx_woken_wake_function+0x10/0x10 [ 529.953543][T10409] ? kfree+0x24f/0x4d0 [ 529.953585][T10409] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 529.953622][T10409] ? __pfx_n_tty_write+0x10/0x10 [ 529.953664][T10409] file_tty_write.constprop.0+0x501/0x9b0 [ 529.953705][T10409] redirected_tty_write+0xd4/0x150 [ 529.953748][T10409] vfs_write+0x6c4/0x1150 [ 529.953800][T10409] ? __pfx_redirected_tty_write+0x10/0x10 [ 529.953836][T10409] ? __pfx_vfs_write+0x10/0x10 [ 529.953885][T10409] ? find_held_lock+0x2b/0x80 [ 529.953931][T10409] ksys_write+0x12a/0x250 [ 529.953982][T10409] ? __pfx_ksys_write+0x10/0x10 [ 529.954039][T10409] do_syscall_64+0xcd/0x490 [ 529.954091][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.954126][T10409] RIP: 0033:0x7f7a7638e929 [ 529.954153][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.954188][T10409] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.954221][T10409] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 529.954244][T10409] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000005 [ 529.954265][T10409] RBP: 00007f7a76410b39 R08: 0000000000000000 R09: 0000000000000000 [ 529.954286][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.954306][T10409] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 529.954338][T10409] [ 529.954348][T10409] [ 529.954362][T10409] The buggy address ffffc90003959000 belongs to a vmalloc virtual mapping [ 529.954379][T10409] Memory state around the buggy address: [ 529.954395][T10409] ffffc90003958f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 529.954420][T10409] ffffc90003958f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 529.954445][T10409] >ffffc90003959000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 529.954464][T10409] ^ [ 529.954480][T10409] ffffc90003959080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 529.954503][T10409] ffffc90003959100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 529.954520][T10409] ================================================================== [ 529.954538][T10409] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.954564][T10409] CPU: 0 UID: 0 PID: 10409 Comm: syz.3.892 Tainted: G U 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 529.954615][T10409] Tainted: [U]=USER [ 529.954627][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.954647][T10409] Call Trace: [ 529.954658][T10409] [ 529.954671][T10409] dump_stack_lvl+0x3d/0x1f0 [ 529.954720][T10409] panic+0x71c/0x800 [ 529.954777][T10409] ? __pfx_panic+0x10/0x10 [ 529.954827][T10409] ? __pfx__printk+0x10/0x10 [ 529.954872][T10409] ? rcu_is_watching+0x12/0xc0 [ 529.954913][T10409] ? sys_fillrect+0x15d4/0x17b0 [ 529.954957][T10409] check_panic_on_warn+0xab/0xb0 [ 529.955007][T10409] end_report+0x107/0x170 [ 529.955038][T10409] kasan_report+0xee/0x110 [ 529.955071][T10409] ? sys_fillrect+0x15d4/0x17b0 [ 529.955121][T10409] sys_fillrect+0x15d4/0x17b0 [ 529.955170][T10409] ? __pfx_sys_fillrect+0x10/0x10 [ 529.955217][T10409] ? __pfx_bit_putcs+0x10/0x10 [ 529.955249][T10409] ? bit_cursor+0xeca/0x17e0 [ 529.955285][T10409] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 529.955336][T10409] bit_clear+0x17d/0x220 [ 529.955369][T10409] ? __pfx_bit_clear+0x10/0x10 [ 529.955403][T10409] ? __pfx___might_resched+0x10/0x10 [ 529.955438][T10409] ? fb_get_color_depth+0x120/0x250 [ 529.955492][T10409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.955550][T10409] ? __pfx_bit_clear+0x10/0x10 [ 529.955582][T10409] __fbcon_clear+0x603/0x780 [ 529.955642][T10409] fbcon_scroll+0x48b/0x690 [ 529.955699][T10409] con_scroll+0x45c/0x690 [ 529.955766][T10409] do_con_write+0x6869/0x7c90 [ 529.955814][T10409] ? __pfx_do_con_write+0x10/0x10 [ 529.955859][T10409] con_write+0x23/0xb0 [ 529.955893][T10409] n_tty_write+0x412/0x1160 [ 529.955944][T10409] ? __pfx_n_tty_write+0x10/0x10 [ 529.955986][T10409] ? rcu_is_watching+0x12/0xc0 [ 529.956021][T10409] ? __pfx_woken_wake_function+0x10/0x10 [ 529.956078][T10409] ? kfree+0x24f/0x4d0 [ 529.956120][T10409] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 529.956156][T10409] ? __pfx_n_tty_write+0x10/0x10 [ 529.956199][T10409] file_tty_write.constprop.0+0x501/0x9b0 [ 529.956240][T10409] redirected_tty_write+0xd4/0x150 [ 529.956275][T10409] vfs_write+0x6c4/0x1150 [ 529.956326][T10409] ? __pfx_redirected_tty_write+0x10/0x10 [ 529.956364][T10409] ? __pfx_vfs_write+0x10/0x10 [ 529.956412][T10409] ? find_held_lock+0x2b/0x80 [ 529.956458][T10409] ksys_write+0x12a/0x250 [ 529.956510][T10409] ? __pfx_ksys_write+0x10/0x10 [ 529.956568][T10409] do_syscall_64+0xcd/0x490 [ 529.956619][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.956654][T10409] RIP: 0033:0x7f7a7638e929 [ 529.956681][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.956718][T10409] RSP: 002b:00007f7a77159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.956761][T10409] RAX: ffffffffffffffda RBX: 00007f7a765b5fa0 RCX: 00007f7a7638e929 [ 529.956784][T10409] RDX: 000000000000003a RSI: 0000200000000440 RDI: 0000000000000005 [ 529.956806][T10409] RBP: 00007f7a76410b39 R08: 0000000000000000 R09: 0000000000000000 [ 529.956828][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.956850][T10409] R13: 0000000000000000 R14: 00007f7a765b5fa0 R15: 00007ffca2d66008 [ 529.956883][T10409] [ 529.957263][T10409] Kernel Offset: disabled