last executing test programs: 58.141845678s ago: executing program 3 (id=1137): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(0x0, r0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) 58.014016847s ago: executing program 3 (id=1138): mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502000000"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) sendfile$auto(r3, r3, &(0x7f0000000000)=0x3, 0x8) seccomp$auto(0x0, 0x100000000, 0xfffffffffffffffc) r4 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x0, 0x0) read$auto_drm_connector_fops_drm_debugfs(r4, &(0x7f0000000040)=""/99, 0x63) 57.853043309s ago: executing program 3 (id=1140): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x440, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae64, 0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r2, 0x11, 0x3, 0xfffffffffffffffc, 0x0) sysfs$auto(0x2, 0x10000000000002c, 0x0) open(0x0, 0x88341, 0x99) fsopen$auto(0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) fsopen$auto(0x0, 0x1) ioctl$auto(r0, 0x64d2, 0xffffffffffffffff) sysfs$auto(0x86, 0xe, 0x7ff) 57.491828749s ago: executing program 3 (id=1142): r0 = socket(0x2c, 0x80003, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x48) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) io_uring_setup$auto(0x52, 0x0) write$auto(r3, 0x0, 0x3) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getegid() r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) keyctl$auto(0x5, 0xffffffffffffffff, 0x200008, 0x6, 0x3) clock_nanosleep$auto(0x66, 0x8, &(0x7f00000001c0)={0x40000000000, 0x9}, &(0x7f0000000200)={0x11f3, 0x20}) keyctl$auto(0x3, 0xffffffffffffffff, 0x2, 0x3b, 0x9) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x60044000) setsockopt$auto(r0, 0x11b, 0x4, 0xffffffffffffffff, 0x18) r6 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r6, 0x29, 0x32, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5', 0x10000110) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 57.116452642s ago: executing program 3 (id=1143): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/platform/vivid.0/video4linux/video39/name\x00', 0x22400, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x88180, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) (async) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000001140)="dd7a26cab8487691704f03610844c841b4cc7de200ced670a624e3cf13bbb2fc791e9e8381398b6fb5f22c15452ae436a919d4ab3ac49fd52b36727664b5f1dc3ae2d49d41cdb427b131569e83c360391d7e329476451bb97a2c33b5cb66d88cf9f3b99b80e8931f4e47756178a99d2c53bfe004f7c5f77629bad3f619ba25557f8afe2fc6", 0x7111}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime$auto(0x9, &(0x7f0000000000)={0x7, 0xb}) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/4091, 0xffb) r3 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) io_uring_setup$auto(0x7, &(0x7f00000010c0)={0x6, 0x9, 0x3, 0x47e, 0x2, 0x67, r3, [0x4, 0x9f2, 0x2], {0x40, 0x5be, 0x4, 0x5, 0x5, 0x8000, 0xffff8001, 0xa82, 0x7}, {0x946, 0x1, 0x7, 0x7fffffff, 0x5, 0xd, 0x8000, 0xbdc, 0x4}}) 56.995896921s ago: executing program 3 (id=1144): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x7, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) (async, rerun: 64) capget$auto(0x0, 0xfffffffffffffffe) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x840000000002, 0x3, 0xff) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004805}, 0x10008091) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) (async) keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0xffffffffff800002, 0x10) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404050}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="8055defc50c40cc58f45e88e458cbbc2ec31c8d67b7774c6605ea0d07cec0360663b7382b35e59b8b9c6d9098b5c205b9785701138f9e227d4334dfa6f427178c0207bdaa69da93cc40e0389816ee640fca9ed0578bbf7ffed12c75746d46da80d043cd176056cfb08801825227e4f7ac312a1877257bb732f97335aef9853429e25f81e69d2c12aaf12b0"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async, rerun: 64) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f00000001c0)="72b20d11c5b29cd02e83f4e42ee30747f3b1d6ece7cc4d2bd0dfafeb31d3213907545067c881cb04df194ba5cf85fbb40f0ad860d34cff55ba3cb497086afeee6c5a0bb22b4bdcf95012b8599af8c5f6d207b00d312280e85796c7cfe061d749a24143dfb8b2c2169dcaea0c2304ba9a7e36199cb521e30bf6ce0db6288b5fecc4e9dbd8e04696184e9794c6dc3547299a5f9f46167906cad908db7a68309e95ff2417900a7bac6876ca9e873bf78275") timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (rerun: 64) 41.894516019s ago: executing program 32 (id=1144): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/040/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x2, 0x2, 0x8, 0x7fa, &(0x7f0000001800)}) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x7, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) (async, rerun: 64) capget$auto(0x0, 0xfffffffffffffffe) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x840000000002, 0x3, 0xff) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004805}, 0x10008091) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) (async) keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0xffffffffff800002, 0x10) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404050}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="8055defc50c40cc58f45e88e458cbbc2ec31c8d67b7774c6605ea0d07cec0360663b7382b35e59b8b9c6d9098b5c205b9785701138f9e227d4334dfa6f427178c0207bdaa69da93cc40e0389816ee640fca9ed0578bbf7ffed12c75746d46da80d043cd176056cfb08801825227e4f7ac312a1877257bb732f97335aef9853429e25f81e69d2c12aaf12b0"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) (async, rerun: 64) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async, rerun: 64) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r5, 0x4004510d, &(0x7f00000001c0)="72b20d11c5b29cd02e83f4e42ee30747f3b1d6ece7cc4d2bd0dfafeb31d3213907545067c881cb04df194ba5cf85fbb40f0ad860d34cff55ba3cb497086afeee6c5a0bb22b4bdcf95012b8599af8c5f6d207b00d312280e85796c7cfe061d749a24143dfb8b2c2169dcaea0c2304ba9a7e36199cb521e30bf6ce0db6288b5fecc4e9dbd8e04696184e9794c6dc3547299a5f9f46167906cad908db7a68309e95ff2417900a7bac6876ca9e873bf78275") timerfd_settime$auto(0xffffffffffffffff, 0x3, 0x0, 0x0) (async, rerun: 64) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (rerun: 64) 7.266459615s ago: executing program 0 (id=1347): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/144, 0xfffffefa) 6.693513656s ago: executing program 0 (id=1349): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000240)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\"CZ\xbeA\x11W$\xe0*\x8e\x00\xef\xd9~JZx\x9d\xf2\xc0O\x91\xe2\xb2K\xc0D\xdd\xf2\x9b\xc1VO\x02\xd4\x92+)$\x1e\x87\xaa*k\x9d\xd5z\xcdxlA\x1b\xce\x86\xbe\x1e\\\xf2je\xa4\xd0R\xb8L1cg\xcc\xa6\xbd\xf9[$\xfd\xf6\x91@k\xc3\xf2B\xeb\xbcU\xf94\xc7\xeb\xb6\xb2*\x83\x99\x11\xfd\x8dI\xd4\xa9\x1f\x9b@+\xab\x90\x83DJ\x9e\xb1\xf0\x14S\xbfE\x03\x18\xf8<\xe9b\xe0\xa1\xf5\xbb\v\xe6\x89\x12\x90)M\xc3\x17x\xce\xb2\xc0\xf3\xfd\x1fM\xfe>W\x00\xd7e\x91P\xcb\x91]\xcf\x93H;\xa4\xa4\xa3^G\xaf\x90F-\xa6g_\xb1|\xc3\xaf\x8c\t\xc6\xb6\xbbR8.@R\xb1G@\xcf\x10\xa3eg\x93\xd7B\x8c\x83\x9dY\xa8\xd9\xa6$-\xd6z\x98J\xd7\xbb\x9e@Aw\xb9iu\bn\x88\x93C\xb1\xb6\xef\xb9\xaa\xf8d\xa5\xcc\xc2@*{\xe2|[\xc7F\xe7wS\x96\x80(P\x02\xea\x94-y\xba\xd3I\x98Q\xf0\xb6\xf5\\\x02\vJ\xc6\x1d\xb3#\xfe\x99R/\xe3@\a>)\xd2\xeb\x92\\\xd5\xb6\xe4\x19\x1e\xa8\x18Qb\x9d8\xb8\xad_\x8c\n5\x99\x87\x93\xe2\x96\xd2\xb3\x85f\xbc\xa4\xa4\xa3\f\x9a\xbb\xf0\xf2\x1e\xca\xa4\xb8\x05\x8a\'\x98\r\x97F@\x85=z\xef\x89\xa2\x90\xf4\xf2', 0x81) listen$auto(r1, 0x1f64b57d) fcntl$auto(0xff80000000000000, 0x4, 0xfffffffffffffffc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, 0xffffffffffffffff, 0x4}, 0x7) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xcf, 0xfffffffffffffffc, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r2) getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cpu/0/cpuid\x00', 0x2008c0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs\x00', 0x181800, 0x0) pread64$auto(r3, 0x0, 0x13ed, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x1098c7) 6.034018335s ago: executing program 0 (id=1350): getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) readv$auto(0x3, 0x0, 0x9) r0 = socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop10/queue/max_sectors_kb\x00', 0x80000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x40c0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x1, 0x0) unshare$auto(0x40000080) 5.822948405s ago: executing program 2 (id=1351): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000040), 0x5, &(0x7f0000000180)={&(0x7f00000000c0)="9eadd22ec343976f3f14c907c61cc429bbb8c19aba28d36f035e8f6a8214a3826e62c4bda3b829047bd17cc49416895d2d08f5f5a1c93a898ed634acd800c9869f6745cc6400917d3c87bed998fb45e7dd59129f6e1638777d69a5ab987dc9499af8975951d8601ecd6aee99fedef4c8e19ab8a6", 0xff}, 0x7, &(0x7f0000000240)="f15fe67a4c5d6b56f05e9070a6645283021f21412ab8d98269705e28b0903b2eb2add853ea3556c6bf73f080381f3050a0617fc17661a9b882de49c7d0f12b8cf9176fba4e4869056dcebb06bca36c23bba7cb41207c75001bbdfa29210058caf8b7be1bb8e14b95af8d0a35f140a0d1f74ec6a66c26a99b089525a3c63c87b26c330a0c22f9d82cb07f437e6aa7e26bf0a3860a38adbd", 0x4b4, 0xd0}, 0x2}, 0x80000001, 0xfffffff9, &(0x7f0000000300)={0x8ec6, 0xe1bf}) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000300)={{@raw=0x1, 0xa, 0xf8, 0x4671, "a401d243991a4dc376cc2bd4dbe3040e3cff152230323227f8d6c24be7ceeed84366bbadec197ea40209a468", @raw}, 0x1ea, 0x81, 0x1, @raw=0x8f10, @reserved="b2089ab0bbaab63c40853405fb772ade9448008d0040560232dbb586cf8f11ca82a2ba37174118952b850ad2099d3a3bc1c77e916330e96e2989bebf719430efe8c9a59c9349eac701c2bbb3122607916561a6da1cfdfc5dc83f4cc979d6dbf96bcb58d1f9042592b39ceec6193960c9a37975bc0153c5fce4d94f329d47f6d4", "2bb2d72b107f03a0ef0c6760e2e1fd64b8ae4a5be70b75810dfa4cc7182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) semctl$auto(0x1ff, 0x4, 0x13, 0x1) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x0, 0x1ff, 0x8, 0xb, 0x6, 0x2, 0xeb6}, 0x1fe) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/trace_printk_dest\x00', 0x200000, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) 4.672549469s ago: executing program 0 (id=1354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) read$auto(r1, &(0x7f0000002440)='&\x00', 0x9) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x103001, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000040)=0x1) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000100), 0x4e300, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r5, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x404c004) 4.657269011s ago: executing program 2 (id=1355): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000) io_getevents$auto(0x26, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0x7fffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14c017120efc0d5bdf312f33551cdc35000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r1, 0x0, 0x400000003f2, 0x5fffffffffc) 4.418153847s ago: executing program 0 (id=1356): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_SHM_LOCK(0x2, 0xb, &(0x7f0000000180)={{0x9, 0xee01, 0xee01, 0x333, 0xffff, 0xdc66, 0x5}, 0x7fffffff, 0xffffffffffffffff, 0x1ff, 0xc71, @raw=0x3, @inferred=0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) shmctl$auto_IPC_STAT(0x5, 0x2, &(0x7f0000000100)={{0x5, r0, r1, 0xfffffff9, 0x0, 0x79, 0x4}, 0x3, 0x3, 0x80, 0x402, @raw=0x5, @raw=0x4, 0x7, 0x0, &(0x7f0000000300)="5231e7d75492ca74a9cdda8e0f1035a02a5de17fd7f7551f2c2c26c1f899d36e40231e537f74c0de2f9ac8471e46a4ee5d3a3f3abceca0119126ad45920c377bd2d565e0558d78b47b4513aa8c165e41fedc68043982a693f05bc9755328f57f58e686d1487bfff5f1eeba7cb1554c1462c0903fc5e01b6945072a055504c8e4e6f4503d07c3097a1c4d152a54728bf48d77a5ddd5f54c470d127c39f6db56e655fc010be57dcfa48f3a07e0b7b03a5a9c72d93e0fade2e2a4828e6794f3319d872158", &(0x7f0000000200)="1800a650b8817c041b540f9d07682f21cbbd5fd58486b94d0fd53d3fe95cc56095d5c88dd42795d977604a2c76660978b5075130f0f5a257667fe67dc7bf2dca64207d7f6f9e193b040b4bf301962d3e3537ad29cf1c9e2c88ad2ae7214230739c43ce8e80d947b10573242b077e85f42ad405527e64895621322bb12de5e2baa65897a738dd27f69c9e7de501776a0426180cc867456512119db70bcee58bfc7c03fb6fef3acff5facfa658326ab4d29f1786466c22d7"}) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ptyp4/dev\x00', 0x8fa982, 0x0) socket(0xa, 0x801, 0x106) pipe2$auto(&(0x7f0000000040)=0x8, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) read$auto(0xca, 0x0, 0x6) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x11b, 0x7ff}, 0xc, 0x0, 0x0, 0x8) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x2803, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x0, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r4, 0xc0045520, r3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sg1\x00', 0x20000, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000300", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf251c00000005000a0007000000080003000000000008000d004900000006001100000000000800030000000080"], 0x3c}}, 0x0) ioctl$auto(0x3, 0x4020ae46, r5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) 4.189766847s ago: executing program 4 (id=1357): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x5, 0x107, 0x0) mmap$auto(0x0, 0xe983, 0xe2, 0xeb1, 0x401, 0x8000) r0 = epoll_create$auto(0x4) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/radio6\x00', 0x41, 0x0) epoll_ctl$auto(r0, 0x1, r1, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) 3.669218091s ago: executing program 2 (id=1359): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyv8\x00', 0x8040, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000000)="352c8efa610cbd48e9e93412bb0f3500c845d683a4ebdb040000000000001021", 0x20) ioctl$auto(r0, 0x8912, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) bpf$auto(0x5, 0x0, 0x102) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r3, 0x4144, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu1\x00', 0x212000, 0x0) fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000340)={0x675d5294, 0x89f7b, 0xfffffff8, 0x105, 0x9, 0x4, "1ec4c2336d2dec8c400f6fdc12a84264800d0000d335a29cf6e9fef8cac285880000000000e2000000001000"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 3.566909302s ago: executing program 4 (id=1360): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x381502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x80003, 0x300) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c03", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x840000000002, 0x3, 0xff) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x401870c8, r3) 3.267186342s ago: executing program 0 (id=1361): socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioperm$auto(0x3, 0x5, 0x149) kill$auto(r0, 0x11) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) write$auto_bm_register_operations_binfmt_misc(r1, &(0x7f0000000100)="b5fcb5114c179410cc977d", 0xb) prctl$auto(0x6, 0x4000000000001, 0x0, 0x17e, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x64401, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) r3 = memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) r5 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r3, 0x8004b709, &(0x7f00000000c0)=0xb) prctl$auto(0x1, 0x8, r5, 0xb117, 0xd) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r6, 0x5522, r6) 3.021070978s ago: executing program 1 (id=1363): getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) readv$auto(0x3, 0x0, 0x9) r0 = socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop10/queue/max_sectors_kb\x00', 0x80000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x40c0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x2, 0x1, 0x0) unshare$auto(0x40000080) 2.909748953s ago: executing program 4 (id=1364): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) setsockopt$auto(r1, 0xa, 0x0, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x9, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x7, 0x8998d5c, 0x8000100, 0x57e, 0x101, 0x1000006, 0xffffffffffffffff}, {0xf, 0x1, 0x52, 0x8, 0xbd76, 0x3d, 0x8, 0x7, 0x100000000}}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r3, 0x0, 0xa8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x15, 0x5, 0x0) open_tree$auto(0xffffffffffffff9c, 0x0, 0x6) r4 = bpf$auto(0xfffffffe, 0x0, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x3ff, 0x3, 0x9, 0x10001, 0x12, 0xc05, 0xffffffffffffffff, [0x7ff, 0xfff, 0x8], {0x9, 0x1, 0x69, 0x0, 0x400, 0x3, 0x3fe0, 0x26c, 0x1000000000e8}, {0x2, 0x2, 0x54f1, 0x0, 0x101, 0xff, 0x8d8, 0xa, 0x3}}) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r5 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x422201, 0x0) sendfile$auto(r5, r4, &(0x7f00000004c0)=0x9, 0xffffffff) sendfile$auto(r5, 0xffffffffffffffff, &(0x7f0000000440)=0x400000000, 0x83fe) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r6, &(0x7f00000003c0)='7\x00\\\xa0\x04|\x00SeX\xc8cyBX\a\x00\x00\x00\x00\x00\x00\x00;R+I\x14O\'\xafQ\xde09\xea\x0f\x84\x0fg\xb7\x8b\xb1\xc6k\xc2\x06\xb7\x9f\xe13\xc4\xe9c\x0flt\xad\xb9\x16L`\n\x04\xe4f-~\xa2\xa3\xc7\xceh\x13\xe1\xb02a\x86\xe6\xf9>\x0ee\xa00\x1f\xf5\xd8\x1c!\x14\t,S\x86\x02\x00\x00\x00T\xb5', 0x80) socket(0x10, 0x2, 0x4) bpf$auto(0x10000008, &(0x7f0000000000)=@bpf_attr_4={0x0, 0xffffffffffffffff, 0xfff, r2}, 0xd561) 2.273537702s ago: executing program 1 (id=1365): r0 = socket(0x15, 0x1, 0x106) write$auto_hwsim_simulate_radar_(0xffffffffffffffff, &(0x7f00000000c0)="7cf10840262ca8d723de0edbfbc7f1957d890933fb448fc7a9925cbe2a63767a0200ffa56164498370f0af5224c6b187fcb8fc05aa4e0ec6f769139c9e6a80002c5e17151a811248d48c93383436cb7f345477a6d0cb894a9ac94254212703940411f788852085bd8a8a5f1567ae03852cdc57d7ce181eccc80ace5e0cf7b22cbee7c921db0a4d6adb5a8d", 0x8b) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) getsockopt$auto_SO_OOBINLINE(r0, 0x400, 0xa, &(0x7f0000000000)='/{\x00', &(0x7f0000000040)=0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.0/usb9/power/wakeup_active_count\x00', 0xc0202, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(r0, 0x1, 0x9, 0x0, 0xeb66) 2.244243392s ago: executing program 1 (id=1366): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x7fff, 0x0) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x100000000, 0x0) epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_rfkill_fops_core(r0, 0x4, &(0x7f0000000040)="f5c6e0b3e07f0716f4aa14114604c78725983e29722ea71b6cafed670511a60ed8f8f6fa782348173fac7bb11e64b758a6203319de00bd4bf300694f1bb1c67cd1f69ede9988a03de6e147fb05e1ef2e73273fe5101a5fc54e47a220f86403400d0d64e8e770343329e74be2a6cf417cece2ba0e220ed5eb8e085b8605413724c198de65ee87647831c3d737d8e537c916ef75544dba4c9c7b36ac12124789fe3118654b1d") epoll_ctl$auto(0x5, 0x1, r1, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x28201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) 2.137577278s ago: executing program 2 (id=1367): socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) (async) mmap$auto(0x0, 0xe983, 0x7, 0xeb2, 0xffffffffffffffff, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x10) socket(0x28, 0x801, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) mkdir$auto(0x0, 0x353) select$auto(0x6, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x101082, 0x0) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) ioctl$auto(r1, 0xc0045543, r2) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) (async) select$auto(0x4000, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x4fc, 0x80, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0xb67, 0x7, 0x5, 0xb, 0x8, 0xeea]}, 0x0) (async) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) r3 = socket(0x14, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x8, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x9, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) ioctl$auto_EVIOCGMASK(r4, 0x80104592, &(0x7f00000000c0)={0x4, 0x80, 0x200000000000001}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0x4, 0x5) socket(0xa, 0x1, 0xfffffeff) (async) socket(0x15, 0x5, 0x0) (async) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0xa0) 2.05134661s ago: executing program 1 (id=1368): sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0x0, 0x1, 0x37eb, 0x40eb2, 0x4, 0x300000000000) io_getevents$auto(0x26, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0x7fffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x802, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x7}, 0x5, 0xcad7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14c017120efc0d5bdf312f33551cdc35000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r1, 0x0, 0x400000003f2, 0x5fffffffffc) 1.926847679s ago: executing program 4 (id=1369): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa140, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x3) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) r3 = socket(0xa, 0x5, 0x84) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000500), r3) r5 = wait4$auto(0xffffffffffffffff, &(0x7f0000000540)=0x751, 0x100, &(0x7f0000000580)={{0x7fffffff, 0xffffffffffffffff}, {0xf7, 0x7306}, 0x9, 0x1, 0x200000000, 0x7, 0x1, 0x3, 0x6, 0x6ec6, 0xfffffffffffffffc, 0x2, 0x200000000, 0x4, 0x2, 0x6}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000002d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='d&\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000ce"], 0x2664}, 0x1, 0x0, 0x0, 0x80b1}, 0x801) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/i8042/serio1/firmware_id\x00', 0x800, 0x0) read$auto(r6, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) madvise$auto(0x0, 0x400053, 0x9) shmctl$auto_IPC_STAT(0xdd, 0x2, &(0x7f0000000200)={{0x4, 0xee01, 0xee01, 0xe, 0x7fffffff, 0xb, 0xffff}, 0x4, 0xfff, 0x3, 0x2, @raw=0xbb9d, @raw=0xe4d1, 0xa, 0x0, &(0x7f0000000040)="5e5051d6d95e7bfe94008876299b0aee102a80ebe782548b22d8df51eee84ffb2ca76d4da4cd1c93c2eeeb16dac2d82a51a01b3c0b264a5c1b5e7c5f1fba5f85dafb5117efdb453b7987738049de7d68a3185fbf9a59491a12b2cfe7f73e6ac158f6cde8406ab8b55245193e62dec7d75028ae4b7550c9b9839fa7a2cbb2dd1c938423aaa3630f567f9b77e52ca9dc83199b437a272f61bfdceaefe2b6815f7a07fa51505d4df8d536bc19c8727b69cb8b4d3e4c69cd0b17822fdf4b7a367adf96209f6f5bc96d815b5108c9c56cbdb2979376d6b7bf519923e4a9d5c2a393853ed1107b51f81bbbb640811850f456cb", &(0x7f0000000180)="ebed29ad290793de7ae7bc218f5b5164422c6877446e8dccff22b55e715c9bf13718474d88d3401de238ba4bf712e41aebe7c8b809d6c6f4b1d435e53441fcfc535ad3d9337bd6fa4b78c6cbd2d6c892f9ac2435fd0502f27080b7e22e19fbe4"}) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000340)={{0x9, 0xee01, 0xee00, 0x6, 0x8001, 0x4, 0x3ff}, 0x2, 0x74, 0x2, 0x200, @inferred=0x0, @raw=0xde, 0x1, 0x0, &(0x7f0000000280)="e8905e75935ab275c154d16034bcc353a217b82428166438dc9c5bb1b6326cf7c6526e41ccf3a67496fa1c96b482f949430ff68c50f2a2379efc32132a38c1dfa9bd1acbfcffdc167a7a767533dc3c74", &(0x7f0000000300)="8b118c83b9c4f50c091c674fc9a0a3654c48691a01d1b048141b1929a475d35828"}) madvise$auto(0x8000, 0x8, 0x5) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r10 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r10, 0x0, 0x8, 0xffff) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000440)={{0xc, r7, r8, 0x5, 0x2, 0x7ff, 0xf1d3}, &(0x7f00000003c0)=0x7, &(0x7f0000000400)=0x5, 0x6, 0x675, 0x3, 0x1, 0xc000000000000000, 0x2, 0x8, 0xf, @inferred=r9, @inferred=r9}) 1.719318177s ago: executing program 1 (id=1370): socket(0x28, 0x1, 0x0) sched_setaffinity$auto(0x0, 0xcf4d, &(0x7f00000000c0)=0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0xc, 0x0, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r1, 0x720, 0x0) socket(0x10, 0x2, 0x4) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x2226c0, 0x0) 893.99039ms ago: executing program 4 (id=1371): mmap$auto(0x0, 0x2020009, 0xa0e2, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x2, 0x3, 0x2) setsockopt$auto(r1, 0x0, 0xd4, 0xfffffffffffffffc, 0x9) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0102, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x46, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x40, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@nested={0x8, 0x18, 0x0, 0x1, [@typed={0x4, 0x91}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x2183, 0x0) (async, rerun: 64) socketpair$auto(0x9, 0x2, 0xb, 0x0) (async, rerun: 64) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r7, 0x5423, 0x0) 296.041507ms ago: executing program 2 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x4000000000000000, 0x0, 0x4000001}, 0x4008004) 256.801763ms ago: executing program 1 (id=1373): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) mmap$auto(0x7f, 0x40004022009, 0x3, 0x6dc4b6fc, 0x401, 0x9) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f00000001c0)={0x67, 0x4, 0x7fff, 0x5, 0x80000000007, 0x200001, 0x80000001, 0x80000000ff, 0x5, 0x7, 0xfbfffffe, 0x3, 0x1006c, 0x7, 0xc}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) syz_clone(0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000340), &(0x7f0000000480)="05bb2b88b26f25241288828e7f6be118abef367984968194596a0d5d5d5ad925fb3a0f3c38dfe07da3843e45a7af0bdcab0178fcf0b49d24855de1121071f99446de69c94c0c380ca834fa83adf51226d83a745dff80a7c567679815cde1e31cbd3938965480b62a7db6e2750c6c576977a9e6d3730c58c12423120771ad663e") r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000580), 0x101040, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0x0) 91.740682ms ago: executing program 2 (id=1374): getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) readv$auto(0x3, 0x0, 0x9) r0 = socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop10/queue/max_sectors_kb\x00', 0x80000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x40c0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) unshare$auto(0x40000080) 0s ago: executing program 4 (id=1375): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) pipe2$auto(&(0x7f00000001c0)=0xffffffffffffffff, 0x9) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r0, 0x10000, &(0x7f0000000280)='$/\x00', &(0x7f0000000340)="ce08e50caa274975c9a8743c6981e78c7f6591b5273f14e95baa0b9b877437461ca11238168b9ae0751fe99044bd653b4cfc60f30bf2b7f87e406296b9a558bc1646e8cd51100a44cb50d9ef6dfcc4cfd7165fce5498e19d97b6325b8fc3cd2dc3aedf7b06425e64fd74737640f564545cbf988b8916edb2717d848c08d1b90aa53396d7b6e43331a0fa910f3f76300eb95425e1bd5985043cb142dc9894a7d134b9a787b230d86101a276d0f36160483cb37e6cb3b5c6de4e37c65330da7c0baa1c44970923ba4ac3e1503e50f1c3679fda2b5f84aef68d85a2b6b6483d5ac4d36a9d4d4a1e", 0x40) socket(0x10, 0x2, 0x0) timer_settime$auto(0x10, 0x2, &(0x7f0000000000)={{0x5, 0x406}, {0x4, 0x59}}, &(0x7f0000000140)={{0x267, 0x7}, {0xa, 0x7fffffff}}) writev$auto(0xffffffffffffffff, 0x0, 0xa4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80582, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/plpmtud_probe_interval\x00', 0x88882, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x400000000008) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="010029"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='m'], 0x1ac}, 0x1, 0x0, 0x0, 0x4880}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x800) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/xfs/stats/stats_clear\x00', 0x121e81, 0x0) getpid() gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) getpid() openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) read$auto(r2, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) kernel console output (not intermixed with test programs): 9] __x64_sys_signalfd4+0x14b/0x1d0 [ 222.636063][ T9209] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 222.636086][ T9209] do_syscall_64+0xcd/0xfa0 [ 222.636104][ T9209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.636118][ T9209] RIP: 0033:0x7f491ad8f749 [ 222.636130][ T9209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.636149][ T9209] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 222.636163][ T9209] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 222.636173][ T9209] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 00000000ffffffff [ 222.636181][ T9209] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.636190][ T9209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.636198][ T9209] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 222.636217][ T9209] [ 222.843827][ C1] vkms_vblank_simulate: vblank timer overrun syzkaller syzkaller login: [ 223.118292][ T9233] input: f¬ as /devices/virtual/input/input29 [ 223.274761][ T9243] netlink: 342 bytes leftover after parsing attributes in process `syz.3.726'. [ 225.625679][ T9311] input: f¬ as /devices/virtual/input/input30 [ 226.848542][ T9345] ptrace attach of ""[9351] was attempted by "./syz-executor exec"[9345] [ 227.928177][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.757'. [ 228.036468][ T9380] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 228.036468][ T9380] The task syz.0.754 (9380) triggered the difference, watch for misbehavior. [ 228.079808][ T9379] veth1_macvtap: left promiscuous mode [ 228.277050][ T9388] nbd: must specify an index to disconnect [ 229.888082][ T9418] netlink: 'syz.0.764': attribute type 1 has an invalid length. [ 230.076924][ T9421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.109489][ T9421] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.139857][ T9421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.167725][ T9421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.192007][ T9421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.263718][ T9421] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 230.274548][ T9430] netlink: 330 bytes leftover after parsing attributes in process `syz.1.765'. [ 230.294087][ T9421] CPU0 is offline. [ 231.534674][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.771'. [ 231.573373][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.659626][ T9449] team0: Port device team_slave_0 removed [ 232.135445][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.215484][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.221570][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 232.293920][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 232.351786][ T9472] input: f¬ as /devices/virtual/input/input31 [ 232.465541][ T9377] delete_channel: no stack [ 233.141129][ T9498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.781'. [ 234.000256][ T9515] FAULT_INJECTION: forcing a failure. [ 234.000256][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 234.059834][ T9515] CPU: 1 UID: 0 PID: 9515 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 234.059871][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.059880][ T9515] Call Trace: [ 234.059885][ T9515] [ 234.059891][ T9515] dump_stack_lvl+0x16c/0x1f0 [ 234.059914][ T9515] should_fail_ex+0x512/0x640 [ 234.059935][ T9515] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 234.059953][ T9515] should_failslab+0xc2/0x120 [ 234.059972][ T9515] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 234.059987][ T9515] ? shmem_alloc_inode+0x25/0x50 [ 234.060008][ T9515] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 234.060024][ T9515] ? shmem_alloc_inode+0x25/0x50 [ 234.060040][ T9515] shmem_alloc_inode+0x25/0x50 [ 234.060056][ T9515] alloc_inode+0x64/0x240 [ 234.060074][ T9515] new_inode+0x22/0x1c0 [ 234.060094][ T9515] shmem_get_inode+0x19a/0xfb0 [ 234.060117][ T9515] shmem_mknod+0x1a8/0x450 [ 234.060140][ T9515] ? __pfx_shmem_create+0x10/0x10 [ 234.060157][ T9515] lookup_open.isra.0+0x11d3/0x1580 [ 234.060183][ T9515] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 234.060209][ T9515] ? find_held_lock+0x2b/0x80 [ 234.060229][ T9515] ? __pfx_down_write+0x10/0x10 [ 234.060253][ T9515] path_openat+0x893/0x2cb0 [ 234.060275][ T9515] ? __pfx_path_openat+0x10/0x10 [ 234.060291][ T9515] ? __lock_acquire+0xb8a/0x1c90 [ 234.060312][ T9515] do_filp_open+0x20b/0x470 [ 234.060327][ T9515] ? __pfx_do_filp_open+0x10/0x10 [ 234.060357][ T9515] ? alloc_fd+0x471/0x7d0 [ 234.060376][ T9515] do_sys_openat2+0x11b/0x1d0 [ 234.060396][ T9515] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.060423][ T9515] __x64_sys_openat+0x174/0x210 [ 234.060443][ T9515] ? __pfx___x64_sys_openat+0x10/0x10 [ 234.060472][ T9515] do_syscall_64+0xcd/0xfa0 [ 234.060490][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.060505][ T9515] RIP: 0033:0x7f491ad8f749 [ 234.060517][ T9515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.060530][ T9515] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.060544][ T9515] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 234.060553][ T9515] RDX: 0000000000020342 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 234.060562][ T9515] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 234.060569][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.060577][ T9515] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 234.060597][ T9515] [ 234.551459][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.560853][ T9519] Invalid ELF header magic: != ELF [ 234.965836][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'. [ 235.153391][ T9542] sd 0:0:1:0: PR command failed: 1026 [ 235.160294][ T9541] team0: Port device team_slave_1 removed [ 235.178304][ T9542] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 235.221910][ T9542] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 235.421833][ T9548] netlink: 56 bytes leftover after parsing attributes in process `syz.1.796'. [ 235.689318][ T9558] FAULT_INJECTION: forcing a failure. [ 235.689318][ T9558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.797866][ T9558] CPU: 1 UID: 0 PID: 9558 Comm: syz.1.799 Not tainted syzkaller #0 PREEMPT(full) [ 235.797888][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.797896][ T9558] Call Trace: [ 235.797901][ T9558] [ 235.797907][ T9558] dump_stack_lvl+0x16c/0x1f0 [ 235.797929][ T9558] should_fail_ex+0x512/0x640 [ 235.797954][ T9558] should_fail_alloc_page+0xe7/0x130 [ 235.797976][ T9558] prepare_alloc_pages+0x3c2/0x610 [ 235.797997][ T9558] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 235.798024][ T9558] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.798041][ T9558] ? validate_mm+0x403/0x560 [ 235.798064][ T9558] ? __pfx_validate_mm+0x10/0x10 [ 235.798083][ T9558] ? __vma_enter_locked+0x163/0x3f0 [ 235.798108][ T9558] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 235.798131][ T9558] ? policy_nodemask+0xea/0x4e0 [ 235.798151][ T9558] alloc_pages_mpol+0x1fb/0x550 [ 235.798170][ T9558] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 235.798194][ T9558] alloc_pages_noprof+0x131/0x390 [ 235.798213][ T9558] __pmd_alloc+0x3b/0x8b0 [ 235.798233][ T9558] move_page_tables+0x30b7/0x4230 [ 235.798252][ T9558] ? __pfx_copy_vma+0x10/0x10 [ 235.798269][ T9558] ? __pfx_move_page_tables+0x10/0x10 [ 235.798292][ T9558] ? rcu_is_watching+0x12/0xc0 [ 235.798307][ T9558] ? finish_task_switch.isra.0+0x221/0xc10 [ 235.798321][ T9558] ? lockdep_hardirqs_on+0x7c/0x110 [ 235.798341][ T9558] copy_vma_and_data+0x24e/0x790 [ 235.798356][ T9558] ? __pfx_copy_vma_and_data+0x10/0x10 [ 235.798375][ T9558] ? __vma_enter_locked+0x163/0x3f0 [ 235.798397][ T9558] ? find_held_lock+0x2b/0x80 [ 235.798412][ T9558] ? move_vma+0x52e/0x1770 [ 235.798423][ T9558] ? __vm_enough_memory+0x184/0x3f0 [ 235.798445][ T9558] move_vma+0x540/0x1770 [ 235.798462][ T9558] ? __pfx_move_vma+0x10/0x10 [ 235.798478][ T9558] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 235.798497][ T9558] ? cap_mmap_addr+0x4b/0x120 [ 235.798515][ T9558] ? bpf_lsm_mmap_addr+0x9/0x10 [ 235.798531][ T9558] ? security_mmap_addr+0x6c/0x1e0 [ 235.798546][ T9558] ? __get_unmapped_area+0x267/0x440 [ 235.798566][ T9558] ? vrm_set_new_addr+0x208/0x290 [ 235.798588][ T9558] mremap_to+0x1b7/0x450 [ 235.798604][ T9558] do_mremap+0x13a8/0x2020 [ 235.798620][ T9558] ? futex_private_hash_put+0x60/0x190 [ 235.798644][ T9558] ? __pfx_do_mremap+0x10/0x10 [ 235.798670][ T9558] __do_sys_mremap+0x119/0x170 [ 235.798691][ T9558] ? __pfx___do_sys_mremap+0x10/0x10 [ 235.798706][ T9558] ? find_held_lock+0x2b/0x80 [ 235.798723][ T9558] ? __x64_sys_futex+0x1e0/0x4c0 [ 235.798755][ T9558] do_syscall_64+0xcd/0xfa0 [ 235.798774][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.798790][ T9558] RIP: 0033:0x7ff9d478f749 [ 235.798802][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.798816][ T9558] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 235.798829][ T9558] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 235.798838][ T9558] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 235.798847][ T9558] RBP: 00007ff9d4813f91 R08: 0000000100000000 R09: 0000000000000000 [ 235.798860][ T9558] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 235.798868][ T9558] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 235.798888][ T9558] [ 236.689071][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.935393][ T9578] Console: switching to colour VGA+ 80x25 [ 238.664556][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.810'. [ 239.326471][ T9634] input: f¬ as /devices/virtual/input/input32 [ 239.444306][ T9636] netlink: 342 bytes leftover after parsing attributes in process `syz.1.815'. [ 239.785193][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 239.946350][ T9648] Console: switching to colour frame buffer device 128x48 [ 239.950419][ T9657] netlink: 342 bytes leftover after parsing attributes in process `syz.3.817'. [ 240.473175][ T9669] futex_wake_op: syz.3.822 tries to shift op by -2048; fix this program [ 240.849438][ T9675] sysfs_service_op_show: Client not running :-5: [ 241.243757][ T9675] sysfs_service_op_show: Client not running :-5: [ 241.617451][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 241.653494][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.685385][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.727153][ T9683] netlink: 186 bytes leftover after parsing attributes in process `syz.3.827'. [ 241.766487][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.781698][ T9683] netlink: 186 bytes leftover after parsing attributes in process `syz.3.827'. [ 241.814383][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.587032][ T9712] Console: switching to colour VGA+ 80x25 [ 243.430540][ T9722] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 244.710177][ T9739] Process accounting paused [ 244.749749][ T9764] input: f¬ as /devices/virtual/input/input33 [ 246.790434][ T9828] input: f¬ as /devices/virtual/input/input34 ü[ 247.247790][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 247.925472][ T9852] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 248.016245][ T9855] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1937339183.1919249199.795633006), cmd(15) [ 248.092394][ T9857] FAULT_INJECTION: forcing a failure. [ 248.092394][ T9857] name failslab, interval 1, probability 0, space 0, times 0 [ 248.153186][ T9857] CPU: 1 UID: 0 PID: 9857 Comm: syz.0.868 Not tainted syzkaller #0 PREEMPT(full) [ 248.153208][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.153216][ T9857] Call Trace: [ 248.153221][ T9857] [ 248.153227][ T9857] dump_stack_lvl+0x16c/0x1f0 [ 248.153250][ T9857] should_fail_ex+0x512/0x640 [ 248.153272][ T9857] ? __kmalloc_noprof+0xca/0x880 [ 248.153296][ T9857] should_failslab+0xc2/0x120 [ 248.153316][ T9857] __kmalloc_noprof+0xdd/0x880 [ 248.153337][ T9857] ? lsm_blob_alloc+0x68/0x90 [ 248.153358][ T9857] ? lsm_blob_alloc+0x68/0x90 [ 248.153381][ T9857] lsm_blob_alloc+0x68/0x90 [ 248.153399][ T9857] security_prepare_creds+0x30/0x270 [ 248.153418][ T9857] prepare_creds+0x56f/0x7d0 [ 248.153441][ T9857] __sys_setresgid+0x4af/0x1150 [ 248.153460][ T9857] do_syscall_64+0xcd/0xfa0 [ 248.153478][ T9857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.153492][ T9857] RIP: 0033:0x7f491ad8f749 [ 248.153503][ T9857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.153517][ T9857] RSP: 002b:00007f491bbe4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 248.153530][ T9857] RAX: ffffffffffffffda RBX: 00007f491afe6090 RCX: 00007f491ad8f749 [ 248.153539][ T9857] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 248.153547][ T9857] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 248.153555][ T9857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.153563][ T9857] R13: 00007f491afe6128 R14: 00007f491afe6090 R15: 00007ffe5a3d2c48 [ 248.153583][ T9857] [ 248.515765][ T9869] __vm_enough_memory: pid: 9869, comm: syz.3.872, bytes: 4398046511104 not enough memory for the allocation [ 248.821712][ T9881] netlink: 342 bytes leftover after parsing attributes in process `syz.1.875'. [ 249.524536][ T9894] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 249.977252][ T9896] Console: switching to colour frame buffer device 128x48 [ 250.765202][ T30] audit: type=1800 audit(4294967460.200:6): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.887" name="trace_pipe" dev="tracefs" ino=1286 res=0 errno=0 [ 250.955422][ T9926] GUP no longer grows the stack in syz.1.887 (9926): 14000-18000 (4000) [ 251.022859][ T9926] CPU: 1 UID: 0 PID: 9926 Comm: syz.1.887 Not tainted syzkaller #0 PREEMPT(full) [ 251.022881][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.022890][ T9926] Call Trace: [ 251.022895][ T9926] [ 251.022901][ T9926] dump_stack_lvl+0x16c/0x1f0 [ 251.022923][ T9926] gup_vma_lookup+0x1d2/0x220 [ 251.022943][ T9926] __get_user_pages+0x241/0x3530 [ 251.022969][ T9926] ? find_held_lock+0x2b/0x80 [ 251.022985][ T9926] ? __pfx___get_user_pages+0x10/0x10 [ 251.023010][ T9926] get_user_pages_remote+0x243/0xab0 [ 251.023032][ T9926] ? __pfx_get_user_pages_remote+0x10/0x10 [ 251.023064][ T9926] ? __pfx___might_resched+0x10/0x10 [ 251.023080][ T9926] ? noop_dirty_folio+0x5e/0xb0 [ 251.023101][ T9926] __access_remote_vm+0x250/0xaa0 [ 251.023124][ T9926] ? __pfx___access_remote_vm+0x10/0x10 [ 251.023148][ T9926] mem_rw+0x20e/0x640 [ 251.023163][ T9926] ? __pfx_mem_write+0x10/0x10 [ 251.023175][ T9926] vfs_write+0x2a0/0x11d0 [ 251.023193][ T9926] ? __pfx___mutex_lock+0x10/0x10 [ 251.023211][ T9926] ? __pfx_vfs_write+0x10/0x10 [ 251.023232][ T9926] ? __fget_files+0x20e/0x3c0 [ 251.023252][ T9926] ksys_write+0x12a/0x250 [ 251.023267][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 251.023288][ T9926] do_syscall_64+0xcd/0xfa0 [ 251.023307][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.023321][ T9926] RIP: 0033:0x7ff9d478f749 [ 251.023333][ T9926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.023347][ T9926] RSP: 002b:00007ff9d55b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.023360][ T9926] RAX: ffffffffffffffda RBX: 00007ff9d49e6180 RCX: 00007ff9d478f749 [ 251.023370][ T9926] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 251.023378][ T9926] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.023386][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.023394][ T9926] R13: 00007ff9d49e6218 R14: 00007ff9d49e6180 R15: 00007ffcb96dbb38 [ 251.023414][ T9926] [ 251.226448][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.470503][ T9928] FAULT_INJECTION: forcing a failure. [ 251.470503][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 251.583409][ T9928] CPU: 1 UID: 0 PID: 9928 Comm: syz.2.888 Not tainted syzkaller #0 PREEMPT(full) [ 251.583431][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.583441][ T9928] Call Trace: [ 251.583446][ T9928] [ 251.583451][ T9928] dump_stack_lvl+0x16c/0x1f0 [ 251.583475][ T9928] should_fail_ex+0x512/0x640 [ 251.583495][ T9928] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 251.583512][ T9928] should_failslab+0xc2/0x120 [ 251.583533][ T9928] kmem_cache_alloc_noprof+0x75/0x6e0 [ 251.583547][ T9928] ? getname_flags.part.0+0x4c/0x550 [ 251.583570][ T9928] ? getname_flags.part.0+0x4c/0x550 [ 251.583588][ T9928] getname_flags.part.0+0x4c/0x550 [ 251.583614][ T9928] getname_flags+0x93/0xf0 [ 251.583628][ T9928] do_sys_openat2+0xb8/0x1d0 [ 251.583648][ T9928] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.583677][ T9928] __x64_sys_openat+0x174/0x210 [ 251.583698][ T9928] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.583726][ T9928] do_syscall_64+0xcd/0xfa0 [ 251.583745][ T9928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.583759][ T9928] RIP: 0033:0x7efc1df8f749 [ 251.583771][ T9928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.583783][ T9928] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.583797][ T9928] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 251.583806][ T9928] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 251.583814][ T9928] RBP: 00007efc1e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 251.583823][ T9928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.583831][ T9928] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 251.583850][ T9928] [ 251.768365][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.303239][ T9981] zswap: compressor not available [ 254.656624][ T9988] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 255.655545][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661982][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.423344][T10029] usb usb36: usbfs: interface 0 claimed by hub while 'syz.2.911' sets config #6 [ 257.139485][T10045] FAULT_INJECTION: forcing a failure. [ 257.139485][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 257.233137][T10045] CPU: 1 UID: 0 PID: 10045 Comm: syz.1.914 Not tainted syzkaller #0 PREEMPT(full) [ 257.233160][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.233169][T10045] Call Trace: [ 257.233175][T10045] [ 257.233181][T10045] dump_stack_lvl+0x16c/0x1f0 [ 257.233203][T10045] should_fail_ex+0x512/0x640 [ 257.233224][T10045] ? __kmalloc_cache_noprof+0x5f/0x780 [ 257.233240][T10045] should_failslab+0xc2/0x120 [ 257.233260][T10045] __kmalloc_cache_noprof+0x72/0x780 [ 257.233274][T10045] ? alloc_fdtable+0xbd/0x2d0 [ 257.233290][T10045] ? alloc_fdtable+0xbd/0x2d0 [ 257.233302][T10045] alloc_fdtable+0xbd/0x2d0 [ 257.233317][T10045] dup_fd+0x83b/0xb90 [ 257.233333][T10045] ? apparmor_task_alloc+0x2c2/0x3b0 [ 257.233355][T10045] copy_process+0x2312/0x76a0 [ 257.233372][T10045] ? preempt_schedule_thunk+0x16/0x30 [ 257.233408][T10045] ? __pfx_copy_process+0x10/0x10 [ 257.233426][T10045] ? find_held_lock+0x2b/0x80 [ 257.233444][T10045] ? futex_private_hash_put+0xd5/0x190 [ 257.233466][T10045] kernel_clone+0xfc/0x930 [ 257.233484][T10045] ? __pfx_futex_wake+0x10/0x10 [ 257.233505][T10045] ? __pfx_kernel_clone+0x10/0x10 [ 257.233533][T10045] __do_sys_clone+0xce/0x120 [ 257.233550][T10045] ? __pfx___do_sys_clone+0x10/0x10 [ 257.233575][T10045] ? xfd_validate_state+0x61/0x180 [ 257.233594][T10045] ? __pfx_ksys_write+0x10/0x10 [ 257.233615][T10045] do_syscall_64+0xcd/0xfa0 [ 257.233633][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.233647][T10045] RIP: 0033:0x7ff9d478f749 [ 257.233659][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.233672][T10045] RSP: 002b:00007ff9d55fafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 257.233686][T10045] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 257.233695][T10045] RDX: 0000000000000000 RSI: 484479b075c33d10 RDI: 0000000002a41200 [ 257.233704][T10045] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 257.233712][T10045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.233720][T10045] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 257.233739][T10045] [ 257.468638][T10047] input: f¬ as /devices/virtual/input/input36 [ 258.295530][T10064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.917'. [ 258.995644][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 260.532428][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 261.583231][T10160] bond0: no command found in slaves file - use +ifname or -ifname [ 262.219720][T10178] ERROR: Out of memory at tomoyo_memory_ok. [ 262.260927][T10178] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/212/file0' not defined. [ 262.947145][T10155] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 264.197365][T10225] zswap: compressor not available [ 264.750819][T10248] can: request_module (can-proto-0) failed. [ 265.226019][T10267] __vm_enough_memory: pid: 10267, comm: syz.3.949, bytes: 4398046511104 not enough memory for the allocation [ 265.433592][T10271] input: f¬ as /devices/virtual/input/input37 [ 265.652373][T10275] FAULT_INJECTION: forcing a failure. [ 265.652373][T10275] name failslab, interval 1, probability 0, space 0, times 0 [ 265.718999][T10275] CPU: 1 UID: 0 PID: 10275 Comm: syz.2.951 Not tainted syzkaller #0 PREEMPT(full) [ 265.719020][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.719028][T10275] Call Trace: [ 265.719033][T10275] [ 265.719039][T10275] dump_stack_lvl+0x16c/0x1f0 [ 265.719061][T10275] should_fail_ex+0x512/0x640 [ 265.719082][T10275] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 265.719100][T10275] should_failslab+0xc2/0x120 [ 265.719119][T10275] kmem_cache_alloc_node_noprof+0x78/0x770 [ 265.719134][T10275] ? __alloc_skb+0x2b2/0x380 [ 265.719160][T10275] ? __alloc_skb+0x2b2/0x380 [ 265.719180][T10275] __alloc_skb+0x2b2/0x380 [ 265.719201][T10275] ? __pfx___alloc_skb+0x10/0x10 [ 265.719226][T10275] ? netlink_has_listeners+0x20f/0x430 [ 265.719243][T10275] alloc_uevent_skb+0x7d/0x210 [ 265.719266][T10275] kobject_uevent_env+0xca4/0x1870 [ 265.719295][T10275] kvm_uevent_notify_change.part.0+0x3ae/0x450 [ 265.719316][T10275] ? __pfx_kvm_vm_release+0x10/0x10 [ 265.719331][T10275] kvm_put_kvm+0xe3/0xb00 [ 265.719346][T10275] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.719363][T10275] ? _raw_spin_unlock_irq+0x2e/0x50 [ 265.719381][T10275] ? __pfx_kvm_vm_release+0x10/0x10 [ 265.719395][T10275] kvm_vm_release+0x3c/0x50 [ 265.719410][T10275] __fput+0x402/0xb70 [ 265.719434][T10275] task_work_run+0x150/0x240 [ 265.719457][T10275] ? __pfx_task_work_run+0x10/0x10 [ 265.719478][T10275] ? __pfx___do_sys_close_range+0x10/0x10 [ 265.719499][T10275] exit_to_user_mode_loop+0xec/0x130 [ 265.719527][T10275] do_syscall_64+0x426/0xfa0 [ 265.719546][T10275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.719560][T10275] RIP: 0033:0x7efc1df8f749 [ 265.719572][T10275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.719586][T10275] RSP: 002b:00007efc1ee79038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 265.719599][T10275] RAX: 0000000000000000 RBX: 00007efc1e1e6180 RCX: 00007efc1df8f749 [ 265.719608][T10275] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 265.719616][T10275] RBP: 00007efc1e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.719624][T10275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.719632][T10275] R13: 00007efc1e1e6218 R14: 00007efc1e1e6180 R15: 00007fff7656e028 [ 265.719652][T10275] [ 266.230915][T10279] netlink: 'syz.1.952': attribute type 21 has an invalid length. [ 266.280902][T10279] netlink: 326 bytes leftover after parsing attributes in process `syz.1.952'. [ 267.529800][T10302] netlink: NAT attribute type 6 has unexpected length (4 != 2) [ 268.486850][T10316] zswap: compressor not available [ 268.542080][T10321] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 268.633392][T10316] FAULT_INJECTION: forcing a failure. [ 268.633392][T10316] name failslab, interval 1, probability 0, space 0, times 0 [ 268.702849][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.1.960 Not tainted syzkaller #0 PREEMPT(full) [ 268.702871][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.702880][T10316] Call Trace: [ 268.702885][T10316] [ 268.702891][T10316] dump_stack_lvl+0x16c/0x1f0 [ 268.702913][T10316] should_fail_ex+0x512/0x640 [ 268.702938][T10316] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 268.702955][T10316] should_failslab+0xc2/0x120 [ 268.702980][T10316] kmem_cache_alloc_noprof+0x75/0x6e0 [ 268.702995][T10316] ? mas_preallocate+0xe6a/0x11f0 [ 268.703017][T10316] ? mas_preallocate+0xe6a/0x11f0 [ 268.703033][T10316] mas_preallocate+0xe6a/0x11f0 [ 268.703055][T10316] ? __pfx_mas_preallocate+0x10/0x10 [ 268.703072][T10316] ? find_held_lock+0x2b/0x80 [ 268.703094][T10316] ? __pfx___might_resched+0x10/0x10 [ 268.703111][T10316] vma_link+0x12e/0x6a0 [ 268.703124][T10316] ? anon_vma_clone+0x3fe/0x5c0 [ 268.703145][T10316] ? __pfx_vma_link+0x10/0x10 [ 268.703163][T10316] ? anon_vma_clone+0x405/0x5c0 [ 268.703196][T10316] copy_vma+0x6b7/0xa90 [ 268.703214][T10316] ? __pfx_copy_vma+0x10/0x10 [ 268.703244][T10316] ? rcu_is_watching+0x12/0xc0 [ 268.703259][T10316] ? finish_task_switch.isra.0+0x221/0xc10 [ 268.703274][T10316] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.703294][T10316] copy_vma_and_data+0x1cf/0x790 [ 268.703310][T10316] ? __pfx_copy_vma_and_data+0x10/0x10 [ 268.703329][T10316] ? __vma_enter_locked+0x163/0x3f0 [ 268.703351][T10316] ? find_held_lock+0x2b/0x80 [ 268.703366][T10316] ? move_vma+0x52e/0x1770 [ 268.703378][T10316] ? __vm_enough_memory+0x184/0x3f0 [ 268.703400][T10316] move_vma+0x540/0x1770 [ 268.703417][T10316] ? __pfx_move_vma+0x10/0x10 [ 268.703433][T10316] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 268.703452][T10316] ? cap_mmap_addr+0x4b/0x120 [ 268.703470][T10316] ? bpf_lsm_mmap_addr+0x9/0x10 [ 268.703486][T10316] ? security_mmap_addr+0x6c/0x1e0 [ 268.703501][T10316] ? __get_unmapped_area+0x267/0x440 [ 268.703520][T10316] ? vrm_set_new_addr+0x208/0x290 [ 268.703535][T10316] mremap_to+0x1b7/0x450 [ 268.703550][T10316] do_mremap+0x13a8/0x2020 [ 268.703565][T10316] ? futex_private_hash_put+0x60/0x190 [ 268.703588][T10316] ? __pfx_do_mremap+0x10/0x10 [ 268.703612][T10316] __do_sys_mremap+0x119/0x170 [ 268.703626][T10316] ? __pfx___do_sys_mremap+0x10/0x10 [ 268.703641][T10316] ? find_held_lock+0x2b/0x80 [ 268.703657][T10316] ? __x64_sys_futex+0x1e0/0x4c0 [ 268.703688][T10316] do_syscall_64+0xcd/0xfa0 [ 268.703706][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.703721][T10316] RIP: 0033:0x7ff9d478f749 [ 268.703732][T10316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.703746][T10316] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 268.703759][T10316] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 268.703768][T10316] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 268.703777][T10316] RBP: 00007ff9d4813f91 R08: 0000000100000000 R09: 0000000000000000 [ 268.703785][T10316] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 268.703793][T10316] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 268.703813][T10316] [ 271.632116][T10371] FAULT_INJECTION: forcing a failure. [ 271.632116][T10371] name fail_futex, interval 1, probability 0, space 0, times 0 [ 271.713033][T10371] CPU: 1 UID: 0 PID: 10371 Comm: syz.2.971 Not tainted syzkaller #0 PREEMPT(full) [ 271.713057][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.713066][T10371] Call Trace: [ 271.713071][T10371] [ 271.713076][T10371] dump_stack_lvl+0x16c/0x1f0 [ 271.713098][T10371] should_fail_ex+0x512/0x640 [ 271.713123][T10371] get_futex_key+0xff0/0x1560 [ 271.713144][T10371] ? __pfx_get_futex_key+0x10/0x10 [ 271.713162][T10371] ? __mutex_trylock_common+0xe9/0x250 [ 271.713187][T10371] futex_wake+0xea/0x530 [ 271.713211][T10371] ? __pfx_futex_wake+0x10/0x10 [ 271.713230][T10371] ? __lock_acquire+0xb8a/0x1c90 [ 271.713258][T10371] do_futex+0x1e3/0x350 [ 271.713277][T10371] ? __pfx_do_futex+0x10/0x10 [ 271.713294][T10371] ? __might_fault+0xe3/0x190 [ 271.713314][T10371] mm_release+0x24e/0x300 [ 271.713330][T10371] do_exit+0x68e/0x2bf0 [ 271.713354][T10371] ? __pfx_do_exit+0x10/0x10 [ 271.713372][T10371] ? do_raw_spin_lock+0x12c/0x2b0 [ 271.713393][T10371] ? find_held_lock+0x2b/0x80 [ 271.713410][T10371] do_group_exit+0xd3/0x2a0 [ 271.713431][T10371] get_signal+0x2671/0x26d0 [ 271.713455][T10371] ? __pfx_get_signal+0x10/0x10 [ 271.713470][T10371] ? do_futex+0x122/0x350 [ 271.713489][T10371] ? __pfx_do_futex+0x10/0x10 [ 271.713509][T10371] arch_do_signal_or_restart+0x8f/0x790 [ 271.713528][T10371] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 271.713552][T10371] ? __pfx___do_sys_close_range+0x10/0x10 [ 271.713573][T10371] exit_to_user_mode_loop+0x85/0x130 [ 271.713595][T10371] do_syscall_64+0x426/0xfa0 [ 271.713614][T10371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.713628][T10371] RIP: 0033:0x7efc1df8f749 [ 271.713640][T10371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.713653][T10371] RSP: 002b:00007efc1ee370e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 271.713666][T10371] RAX: fffffffffffffe00 RBX: 00007efc1e1e6368 RCX: 00007efc1df8f749 [ 271.713676][T10371] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc1e1e6368 [ 271.713684][T10371] RBP: 00007efc1e1e6360 R08: 0000000000000000 R09: 0000000000000000 [ 271.713692][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.713700][T10371] R13: 00007efc1e1e63f8 R14: 00007fff7656df40 R15: 00007fff7656e028 [ 271.713720][T10371] [ 274.019210][T10407] random: crng reseeded on system resumption [ 274.370611][ T52] block nbd0: Receive control failed (result -107) [ 274.394790][T10418] input: f¬ as /devices/virtual/input/input39 [ 274.917914][T10426] Process accounting resumed [ 275.823850][T10458] FAULT_INJECTION: forcing a failure. [ 275.823850][T10458] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 275.913145][T10458] CPU: 1 UID: 0 PID: 10458 Comm: syz.2.994 Not tainted syzkaller #0 PREEMPT(full) [ 275.913166][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.913175][T10458] Call Trace: [ 275.913179][T10458] [ 275.913185][T10458] dump_stack_lvl+0x16c/0x1f0 [ 275.913207][T10458] should_fail_ex+0x512/0x640 [ 275.913232][T10458] should_fail_alloc_page+0xe7/0x130 [ 275.913254][T10458] prepare_alloc_pages+0x3c2/0x610 [ 275.913273][T10458] ? arch_stack_walk+0xa6/0x100 [ 275.913290][T10458] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 275.913310][T10458] ? stack_trace_save+0x8e/0xc0 [ 275.913327][T10458] ? __pfx_stack_trace_save+0x10/0x10 [ 275.913343][T10458] ? stack_depot_save_flags+0x29/0x9c0 [ 275.913364][T10458] ? trace_mm_page_alloc+0x11f/0x1a0 [ 275.913383][T10458] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 275.913405][T10458] ? kasan_save_stack+0x42/0x60 [ 275.913420][T10458] ? kasan_save_stack+0x33/0x60 [ 275.913435][T10458] ? kasan_save_track+0x14/0x30 [ 275.913450][T10458] ? __kasan_slab_alloc+0x89/0x90 [ 275.913466][T10458] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 275.913480][T10458] ? __pmd_alloc+0xbf/0x8b0 [ 275.913497][T10458] ? __handle_mm_fault+0xada/0x2aa0 [ 275.913520][T10458] ? _copy_to_user+0xbb/0xd0 [ 275.913531][T10458] ? simple_read_from_buffer+0xcb/0x170 [ 275.913552][T10458] ? proc_fail_nth_read+0x197/0x240 [ 275.913566][T10458] ? vfs_readv+0x5c1/0x8b0 [ 275.913579][T10458] ? do_readv+0x132/0x340 [ 275.913591][T10458] ? do_syscall_64+0xcd/0xfa0 [ 275.913612][T10458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.913628][T10458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 275.913653][T10458] ? policy_nodemask+0xea/0x4e0 [ 275.913674][T10458] alloc_pages_mpol+0x1fb/0x550 [ 275.913694][T10458] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 275.913713][T10458] ? __lock_acquire+0xb8a/0x1c90 [ 275.913735][T10458] ? __pfx_filemap_map_pages+0x10/0x10 [ 275.913749][T10458] alloc_pages_noprof+0x131/0x390 [ 275.913768][T10458] pte_alloc_one+0x1e/0x350 [ 275.913785][T10458] __do_fault+0x320/0x490 [ 275.913798][T10458] ? do_raw_spin_lock+0x12c/0x2b0 [ 275.913821][T10458] ? __pfx_filemap_map_pages+0x10/0x10 [ 275.913833][T10458] do_pte_missing+0x1a6/0x3ba0 [ 275.913855][T10458] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 275.913878][T10458] ? __pmd_alloc+0x64f/0x8b0 [ 275.913898][T10458] __handle_mm_fault+0x1556/0x2aa0 [ 275.913923][T10458] ? mt_find+0x3e2/0xa20 [ 275.913942][T10458] ? __pfx___handle_mm_fault+0x10/0x10 [ 275.913962][T10458] ? __pfx_mt_find+0x10/0x10 [ 275.913991][T10458] ? find_vma+0xbf/0x140 [ 275.914007][T10458] ? __pfx_find_vma+0x10/0x10 [ 275.914025][T10458] handle_mm_fault+0x589/0xd10 [ 275.914047][T10458] ? __pkru_allows_pkey+0x21/0xb0 [ 275.914071][T10458] do_user_addr_fault+0x7a6/0x1370 [ 275.914091][T10458] ? rcu_is_watching+0x12/0xc0 [ 275.914109][T10458] exc_page_fault+0x64/0xc0 [ 275.914126][T10458] asm_exc_page_fault+0x26/0x30 [ 275.914139][T10458] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 275.914162][T10458] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 275.914176][T10458] RSP: 0018:ffffc90004affb58 EFLAGS: 00050202 [ 275.914188][T10458] RAX: 0000000000000034 RBX: 0000000000000002 RCX: 0000000000000002 [ 275.914197][T10458] RDX: fffff5200095ff82 RSI: ffffc90004affc08 RDI: 0000000000000000 [ 275.914205][T10458] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200095ff81 [ 275.914214][T10458] R10: ffffc90004affc09 R11: 0000000000000001 R12: ffffc90004affc08 [ 275.914223][T10458] R13: 0000000000000002 R14: 00007ffffffff000 R15: 0000000000000000 [ 275.914242][T10458] _copy_to_user+0xbb/0xd0 [ 275.914257][T10458] simple_read_from_buffer+0xcb/0x170 [ 275.914280][T10458] proc_fail_nth_read+0x197/0x240 [ 275.914296][T10458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.914313][T10458] ? rw_verify_area+0xcf/0x6c0 [ 275.914327][T10458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.914341][T10458] vfs_readv+0x5c1/0x8b0 [ 275.914359][T10458] ? __pfx_vfs_readv+0x10/0x10 [ 275.914372][T10458] ? __mutex_lock+0x1c5/0x1060 [ 275.914401][T10458] ? __pfx___mutex_lock+0x10/0x10 [ 275.914426][T10458] ? __fget_files+0x20e/0x3c0 [ 275.914446][T10458] ? do_readv+0x132/0x340 [ 275.914458][T10458] do_readv+0x132/0x340 [ 275.914472][T10458] ? __pfx_do_readv+0x10/0x10 [ 275.914491][T10458] do_syscall_64+0xcd/0xfa0 [ 275.914510][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.914523][T10458] RIP: 0033:0x7efc1df8f749 [ 275.914534][T10458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.914547][T10458] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 275.914560][T10458] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 275.914569][T10458] RDX: 000000000000006f RSI: 00002000000000c0 RDI: 0000000000000003 [ 275.914577][T10458] RBP: 00007efc1e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 275.914585][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.914593][T10458] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 275.914613][T10458] [ 279.562308][T10503] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1005'. [ 279.659271][T10495] zswap: compressor not available [ 280.385554][T10534] input: f¬ as /devices/virtual/input/input41 [ 281.908202][T10464] kexec: Could not allocate control_code_buffer [ 282.765872][ T52] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 283.776662][T10629] input: f¬ as /devices/virtual/input/input42 [ 284.853664][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.013746][T10659] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1039'. [ 285.187812][T10657] sp0: Synchronizing with TNC [ 285.747694][T10688] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 285.818476][T10688] ep_00: uevent: failed to send synthetic uevent: -22 [ 285.887348][T10688] FAULT_INJECTION: forcing a failure. [ 285.887348][T10688] name failslab, interval 1, probability 0, space 0, times 0 [ 285.924429][T10688] CPU: 1 UID: 0 PID: 10688 Comm: syz.2.1044 Not tainted syzkaller #0 PREEMPT(full) [ 285.924450][T10688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.924459][T10688] Call Trace: [ 285.924464][T10688] [ 285.924470][T10688] dump_stack_lvl+0x16c/0x1f0 [ 285.924492][T10688] should_fail_ex+0x512/0x640 [ 285.924514][T10688] ? fs_reclaim_acquire+0xae/0x150 [ 285.924534][T10688] should_failslab+0xc2/0x120 [ 285.924554][T10688] __kmalloc_cache_noprof+0x72/0x780 [ 285.924567][T10688] ? __pfx_tomoyo_init_log+0x10/0x10 [ 285.924583][T10688] ? tomoyo_write_log2+0x33d/0xc10 [ 285.924601][T10688] ? tomoyo_write_log2+0x33d/0xc10 [ 285.924616][T10688] tomoyo_write_log2+0x33d/0xc10 [ 285.924635][T10688] tomoyo_supervisor+0x15e/0x13b0 [ 285.924656][T10688] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 285.924673][T10688] ? __pfx_vsnprintf+0x10/0x10 [ 285.924702][T10688] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 285.924730][T10688] tomoyo_path_number_perm+0x448/0x580 [ 285.924754][T10688] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.924796][T10688] ? find_held_lock+0x2b/0x80 [ 285.924811][T10688] ? hook_file_ioctl_common+0x145/0x410 [ 285.924830][T10688] ? __fget_files+0x20e/0x3c0 [ 285.924848][T10688] security_file_ioctl+0x9b/0x240 [ 285.924863][T10688] __x64_sys_ioctl+0xb7/0x210 [ 285.924884][T10688] do_syscall_64+0xcd/0xfa0 [ 285.924903][T10688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.924917][T10688] RIP: 0033:0x7efc1df8f749 [ 285.924929][T10688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.924943][T10688] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.924956][T10688] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 285.924965][T10688] RDX: 00002000000000c0 RSI: 000000004400ae8f RDI: 0000000000000005 [ 285.924974][T10688] RBP: 00007efc1e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 285.924982][T10688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.924990][T10688] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 285.925011][T10688] [ 286.145263][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.201958][T10696] FAULT_INJECTION: forcing a failure. [ 286.201958][T10696] name failslab, interval 1, probability 0, space 0, times 0 [ 286.214645][T10696] CPU: 1 UID: 0 PID: 10696 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT(full) [ 286.214665][T10696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.214674][T10696] Call Trace: [ 286.214679][T10696] [ 286.214684][T10696] dump_stack_lvl+0x16c/0x1f0 [ 286.214705][T10696] should_fail_ex+0x512/0x640 [ 286.214726][T10696] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 286.214744][T10696] should_failslab+0xc2/0x120 [ 286.214763][T10696] kmem_cache_alloc_noprof+0x75/0x6e0 [ 286.214777][T10696] ? ptlock_alloc+0x1f/0x70 [ 286.214801][T10696] ? ptlock_alloc+0x1f/0x70 [ 286.214820][T10696] ptlock_alloc+0x1f/0x70 [ 286.214840][T10696] pte_alloc_one+0x84/0x350 [ 286.214856][T10696] do_pte_missing+0x1acf/0x3ba0 [ 286.214877][T10696] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 286.214899][T10696] ? __pmd_alloc+0x64f/0x8b0 [ 286.214919][T10696] __handle_mm_fault+0x1556/0x2aa0 [ 286.214946][T10696] ? __pfx___handle_mm_fault+0x10/0x10 [ 286.214966][T10696] ? __pfx_walk_pgd_range+0x10/0x10 [ 286.214998][T10696] handle_mm_fault+0x589/0xd10 [ 286.215023][T10696] __get_user_pages+0x54e/0x3530 [ 286.215050][T10696] ? __pfx___get_user_pages+0x10/0x10 [ 286.215074][T10696] populate_vma_page_range+0x267/0x3f0 [ 286.215095][T10696] ? __pfx_populate_vma_page_range+0x10/0x10 [ 286.215114][T10696] ? __pfx_find_vma_intersection+0x10/0x10 [ 286.215133][T10696] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 286.215150][T10696] __mm_populate+0x1d8/0x380 [ 286.215170][T10696] ? __pfx___mm_populate+0x10/0x10 [ 286.215192][T10696] ? up_write+0x1b2/0x520 [ 286.215214][T10696] do_mlock+0x441/0x800 [ 286.215227][T10696] ? __pfx___might_resched+0x10/0x10 [ 286.215244][T10696] ? __pfx_do_mlock+0x10/0x10 [ 286.215256][T10696] ? __x64_sys_futex+0x1e0/0x4c0 [ 286.215274][T10696] ? __x64_sys_futex+0x1e9/0x4c0 [ 286.215300][T10696] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 286.215321][T10696] ? xfd_validate_state+0x61/0x180 [ 286.215347][T10696] __x64_sys_mlock+0x59/0x80 [ 286.215362][T10696] do_syscall_64+0xcd/0xfa0 [ 286.215382][T10696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.215396][T10696] RIP: 0033:0x7f491ad8f749 [ 286.215408][T10696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.215422][T10696] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 286.215435][T10696] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 286.215444][T10696] RDX: 0000000000000000 RSI: 00000000000085fc RDI: 0000000000000800 [ 286.215453][T10696] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.215461][T10696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.215470][T10696] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 286.215490][T10696] [ 286.498711][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.052852][T10700] writes to the poll attribute are ignored. [ 287.083516][T10700] please use driver specific parameters instead. [ 287.234637][T10707] ERROR: Out of memory at tomoyo_memory_ok. [ 287.999426][T10727] netlink: 3864 bytes leftover after parsing attributes in process `syz.0.1056'. [ 288.295059][T10742] random: crng reseeded on system resumption [ 289.040835][T10741] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.153424][T10763] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 289.670706][T10770] Invalid ELF header magic: != ELF [ 289.757352][T10770] Invalid ELF header magic: != ELF [ 289.791504][T10770] Invalid ELF header magic: != ELF [ 289.824538][T10770] Invalid ELF header magic: != ELF [ 289.876003][T10770] Invalid ELF header magic: != ELF [ 289.919502][T10770] Invalid ELF header magic: != ELF [ 289.982063][T10770] Invalid ELF header magic: != ELF [ 290.025349][T10770] Invalid ELF header magic: != ELF [ 290.064850][T10770] Invalid ELF header magic: != ELF [ 290.101521][T10770] Invalid ELF header magic: != ELF [ 290.145785][T10770] Invalid ELF header magic: != ELF [ 290.177953][T10770] Invalid ELF header magic: != ELF [ 290.211258][T10770] Invalid ELF header magic: != ELF [ 290.248145][T10770] Invalid ELF header magic: != ELF [ 290.291738][T10770] Invalid ELF header magic: != ELF [ 290.322552][T10770] Invalid ELF header magic: != ELF [ 290.362883][T10770] Invalid ELF header magic: != ELF [ 290.407940][T10770] Invalid ELF header magic: != ELF [ 290.442827][T10770] Invalid ELF header magic: != ELF [ 290.592643][T10783] queue_state_write: unsupported operation '' [ 290.612077][T10783] queue_state_write: use 'run', 'start' or 'kick' [ 291.335179][ T52] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 291.405681][T10809] input: f¬ as /devices/virtual/input/input44 [ 291.435607][ T5183] ERROR: Out of memory at tomoyo_memory_ok. [ 292.164752][T10827] random: crng reseeded on system resumption [ 292.481134][T10836] FAULT_INJECTION: forcing a failure. [ 292.481134][T10836] name failslab, interval 1, probability 0, space 0, times 0 [ 292.546100][T10836] CPU: 1 UID: 0 PID: 10836 Comm: syz.0.1080 Not tainted syzkaller #0 PREEMPT(full) [ 292.546123][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.546132][T10836] Call Trace: [ 292.546137][T10836] [ 292.546143][T10836] dump_stack_lvl+0x16c/0x1f0 [ 292.546165][T10836] should_fail_ex+0x512/0x640 [ 292.546187][T10836] ? __kmalloc_noprof+0xca/0x880 [ 292.546212][T10836] should_failslab+0xc2/0x120 [ 292.546232][T10836] __kmalloc_noprof+0xdd/0x880 [ 292.546252][T10836] ? lockdep_init_map_type+0x5c/0x280 [ 292.546271][T10836] ? udpv6_init_sock+0x24e/0x450 [ 292.546289][T10836] ? udpv6_init_sock+0x24e/0x450 [ 292.546302][T10836] udpv6_init_sock+0x24e/0x450 [ 292.546318][T10836] udplitev6_sk_init+0x15/0x60 [ 292.546332][T10836] ? __pfx_udplitev6_sk_init+0x10/0x10 [ 292.546347][T10836] inet6_create+0xb30/0x12b0 [ 292.546365][T10836] ? inet6_create+0x7f/0x12b0 [ 292.546384][T10836] __sock_create+0x338/0x8d0 [ 292.546406][T10836] __sys_socket+0x14d/0x260 [ 292.546424][T10836] ? __pfx___sys_socket+0x10/0x10 [ 292.546443][T10836] ? xfd_validate_state+0x61/0x180 [ 292.546461][T10836] ? __pfx_ksys_write+0x10/0x10 [ 292.546481][T10836] __x64_sys_socket+0x72/0xb0 [ 292.546497][T10836] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.546514][T10836] do_syscall_64+0xcd/0xfa0 [ 292.546532][T10836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.546547][T10836] RIP: 0033:0x7f491ad8f749 [ 292.546558][T10836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.546572][T10836] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 292.546586][T10836] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 292.546596][T10836] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 292.546605][T10836] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 292.546613][T10836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.546621][T10836] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 292.546650][T10836] [ 293.121976][T10840] input: f¬ as /devices/virtual/input/input45 [ 293.771829][T10865] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1087'. [ 294.474588][ T30] audit: type=1806 audit(4294968526.905:7): xattr="10" res=-22 [ 294.559188][T10881] openvswitch: netlink: IP tunnel dst address not specified [ 295.131879][T10890] mkiss: ax0: crc mode is auto. [ 295.182270][T10895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1092'. [ 295.423975][T10905] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1095'. [ 295.471812][T10890] ptp ptp0: new virtual clock ptp1 [ 295.491433][T10890] ptp ptp0: new virtual clock ptp2 [ 295.493755][T10890] ptp ptp0: new virtual clock ptp3 [ 295.493769][T10890] ptp ptp0: guarantee physical clock free running [ 295.528604][T10910] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1095'. [ 295.541261][T10910] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1095'. [ 300.174125][T11002] FAULT_INJECTION: forcing a failure. [ 300.174125][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 300.217415][T11002] CPU: 1 UID: 0 PID: 11002 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT(full) [ 300.217437][T11002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.217446][T11002] Call Trace: [ 300.217451][T11002] [ 300.217457][T11002] dump_stack_lvl+0x16c/0x1f0 [ 300.217479][T11002] should_fail_ex+0x512/0x640 [ 300.217501][T11002] ? __kmalloc_noprof+0xca/0x880 [ 300.217528][T11002] should_failslab+0xc2/0x120 [ 300.217547][T11002] __kmalloc_noprof+0xdd/0x880 [ 300.217567][T11002] ? lockdep_init_map_type+0x5c/0x280 [ 300.217587][T11002] ? udpv6_init_sock+0x24e/0x450 [ 300.217605][T11002] ? udpv6_init_sock+0x24e/0x450 [ 300.217617][T11002] udpv6_init_sock+0x24e/0x450 [ 300.217633][T11002] udplitev6_sk_init+0x15/0x60 [ 300.217648][T11002] ? __pfx_udplitev6_sk_init+0x10/0x10 [ 300.217664][T11002] inet6_create+0xb30/0x12b0 [ 300.217681][T11002] ? inet6_create+0x7f/0x12b0 [ 300.217700][T11002] __sock_create+0x338/0x8d0 [ 300.217722][T11002] __sys_socket+0x14d/0x260 [ 300.217741][T11002] ? __pfx___sys_socket+0x10/0x10 [ 300.217759][T11002] ? xfd_validate_state+0x61/0x180 [ 300.217777][T11002] ? __pfx_ksys_write+0x10/0x10 [ 300.217803][T11002] __x64_sys_socket+0x72/0xb0 [ 300.217821][T11002] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.217839][T11002] do_syscall_64+0xcd/0xfa0 [ 300.217857][T11002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.217872][T11002] RIP: 0033:0x7ff9d478f749 [ 300.217883][T11002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.217897][T11002] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 300.217910][T11002] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 300.217921][T11002] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 000000000000000a [ 300.217929][T11002] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.217938][T11002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.217947][T11002] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 300.217966][T11002] [ 300.705933][T11004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 300.861727][T11004] veth1_macvtap: left promiscuous mode [ 301.408262][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 302.230884][T11038] ptrace attach of ""[11039] was attempted by "./syz-executor exec"[11038] [ 302.658073][T11049] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 304.084765][T11075] queue_state_write: operation too long [ 304.114290][T11075] queue_state_write: use 'run', 'start' or 'kick' [ 304.866356][T11076] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1132'. [ 304.969175][T11073] Process accounting paused [ 305.118484][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 305.439258][T11094] Unable to find swap-space signature [ 306.614107][T11130] FAULT_INJECTION: forcing a failure. [ 306.614107][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 306.700950][T11130] CPU: 1 UID: 0 PID: 11130 Comm: syz.1.1146 Not tainted syzkaller #0 PREEMPT(full) [ 306.700973][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.700982][T11130] Call Trace: [ 306.700987][T11130] [ 306.700993][T11130] dump_stack_lvl+0x16c/0x1f0 [ 306.701018][T11130] should_fail_ex+0x512/0x640 [ 306.701040][T11130] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 306.701061][T11130] should_failslab+0xc2/0x120 [ 306.701080][T11130] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 306.701097][T11130] ? kobject_init_and_add+0xe7/0x190 [ 306.701122][T11130] ? netdev_queue_update_kobjects+0x32d/0x720 [ 306.701141][T11130] ? kstrdup_const+0x63/0x80 [ 306.701155][T11130] ? register_netdevice+0x13dc/0x2270 [ 306.701175][T11130] ? kstrdup+0x53/0x100 [ 306.701188][T11130] kstrdup+0x53/0x100 [ 306.701204][T11130] kstrdup_const+0x63/0x80 [ 306.701219][T11130] __kernfs_new_node+0x9b/0x8e0 [ 306.701238][T11130] ? __pfx_number+0x10/0x10 [ 306.701258][T11130] ? __pfx___kernfs_new_node+0x10/0x10 [ 306.701280][T11130] ? find_held_lock+0x2b/0x80 [ 306.701296][T11130] ? kernfs_root+0xee/0x2a0 [ 306.701317][T11130] kernfs_new_node+0x13c/0x1e0 [ 306.701340][T11130] kernfs_create_dir_ns+0x4c/0x1a0 [ 306.701363][T11130] sysfs_create_dir_ns+0x13a/0x2b0 [ 306.701381][T11130] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 306.701397][T11130] ? find_held_lock+0x2b/0x80 [ 306.701415][T11130] ? do_raw_spin_unlock+0x172/0x230 [ 306.701429][T11130] kobject_add_internal+0x2c4/0x9b0 [ 306.701446][T11130] ? kfree_const+0x41/0x60 [ 306.701463][T11130] kobject_init_and_add+0x11b/0x190 [ 306.701483][T11130] ? __pfx_kobject_init_and_add+0x10/0x10 [ 306.701501][T11130] ? ops_init+0x1e2/0x5f0 [ 306.701515][T11130] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 306.701531][T11130] ? ksys_unshare+0x45b/0xa40 [ 306.701548][T11130] ? __x64_sys_unshare+0x31/0x40 [ 306.701564][T11130] ? do_syscall_64+0xcd/0xfa0 [ 306.701580][T11130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.701601][T11130] netdev_queue_update_kobjects+0x32d/0x720 [ 306.701625][T11130] netdev_register_kobject+0x2b3/0x3d0 [ 306.701645][T11130] register_netdevice+0x13dc/0x2270 [ 306.701665][T11130] ? __pfx_register_netdevice+0x10/0x10 [ 306.701686][T11130] __ip_tunnel_create+0x540/0x6e0 [ 306.701705][T11130] ? __pfx___ip_tunnel_create+0x10/0x10 [ 306.701728][T11130] ip_tunnel_init_net+0x22f/0x7d0 [ 306.701748][T11130] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 306.701771][T11130] ? ops_init+0x77/0x5f0 [ 306.701786][T11130] ? __pfx_erspan_init_net+0x10/0x10 [ 306.701801][T11130] ops_init+0x1e2/0x5f0 [ 306.701817][T11130] setup_net+0x100/0x390 [ 306.701832][T11130] ? __pfx_setup_net+0x10/0x10 [ 306.701847][T11130] ? debug_mutex_init+0x37/0x70 [ 306.701864][T11130] copy_net_ns+0x2f8/0x690 [ 306.701882][T11130] create_new_namespaces+0x3ea/0xa90 [ 306.701903][T11130] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 306.701921][T11130] ksys_unshare+0x45b/0xa40 [ 306.701939][T11130] ? __pfx_ksys_unshare+0x10/0x10 [ 306.701957][T11130] ? xfd_validate_state+0x61/0x180 [ 306.701983][T11130] __x64_sys_unshare+0x31/0x40 [ 306.702000][T11130] do_syscall_64+0xcd/0xfa0 [ 306.702018][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.702032][T11130] RIP: 0033:0x7ff9d478f749 [ 306.702045][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.702058][T11130] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 306.702072][T11130] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 306.702081][T11130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 306.702090][T11130] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 306.702098][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.702115][T11130] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 306.702136][T11130] [ 306.702145][T11130] kobject: kobject_add_internal failed for tx-0 (error: -12 parent: queues) [ 308.345308][T11139] ERROR: Out of memory at tomoyo_memory_ok. [ 308.835216][T11167] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 309.242720][T11168] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 309.733471][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 312.523010][T11225] netlink: 'syz.1.1162': attribute type 23 has an invalid length. [ 312.555222][T11218] bond0: invalid ARP target specified [ 313.319299][T11248] input: f¬ as /devices/virtual/input/input49 [ 313.517157][T11254] kfence: disabled [ 313.996935][T11261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1172'. [ 314.427285][T11271] input: f¬ as /devices/virtual/input/input50 [ 314.493750][T11272] FAULT_INJECTION: forcing a failure. [ 314.493750][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 314.562130][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.2.1176 Not tainted syzkaller #0 PREEMPT(full) [ 314.562151][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.562160][T11272] Call Trace: [ 314.562165][T11272] [ 314.562171][T11272] dump_stack_lvl+0x16c/0x1f0 [ 314.562192][T11272] should_fail_ex+0x512/0x640 [ 314.562214][T11272] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 314.562231][T11272] should_failslab+0xc2/0x120 [ 314.562250][T11272] kmem_cache_alloc_noprof+0x75/0x6e0 [ 314.562273][T11272] ? __kernfs_new_node+0xd2/0x8e0 [ 314.562296][T11272] ? __kernfs_new_node+0xd2/0x8e0 [ 314.562313][T11272] __kernfs_new_node+0xd2/0x8e0 [ 314.562334][T11272] ? __pfx___kernfs_new_node+0x10/0x10 [ 314.562357][T11272] ? find_held_lock+0x2b/0x80 [ 314.562373][T11272] ? kernfs_root+0xee/0x2a0 [ 314.562395][T11272] kernfs_new_node+0x13c/0x1e0 [ 314.562415][T11272] ? current_in_userns+0x150/0x190 [ 314.562438][T11272] __kernfs_create_file+0x53/0x350 [ 314.562456][T11272] sysfs_add_file_mode_ns+0x207/0x3c0 [ 314.562477][T11272] internal_create_group+0x578/0xf30 [ 314.562499][T11272] ? kobject_init_and_add+0x123/0x190 [ 314.562519][T11272] ? __pfx_internal_create_group+0x10/0x10 [ 314.562536][T11272] ? __pfx_kobject_init_and_add+0x10/0x10 [ 314.562554][T11272] ? ops_init+0x1e2/0x5f0 [ 314.562570][T11272] ? ksys_unshare+0x45b/0xa40 [ 314.562587][T11272] ? __x64_sys_unshare+0x31/0x40 [ 314.562603][T11272] ? do_syscall_64+0xcd/0xfa0 [ 314.562619][T11272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.562637][T11272] internal_create_groups+0x9d/0x150 [ 314.562657][T11272] netdev_queue_update_kobjects+0x115/0x720 [ 314.562682][T11272] netdev_register_kobject+0x2b3/0x3d0 [ 314.562702][T11272] register_netdevice+0x13dc/0x2270 [ 314.562722][T11272] ? __pfx_register_netdevice+0x10/0x10 [ 314.562746][T11272] __ip_tunnel_create+0x540/0x6e0 [ 314.562765][T11272] ? __pfx___ip_tunnel_create+0x10/0x10 [ 314.562788][T11272] ip_tunnel_init_net+0x22f/0x7d0 [ 314.562809][T11272] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 314.562831][T11272] ? ops_init+0x77/0x5f0 [ 314.562847][T11272] ? __pfx_erspan_init_net+0x10/0x10 [ 314.562861][T11272] ops_init+0x1e2/0x5f0 [ 314.562877][T11272] setup_net+0x100/0x390 [ 314.562893][T11272] ? __pfx_setup_net+0x10/0x10 [ 314.562908][T11272] ? debug_mutex_init+0x37/0x70 [ 314.562925][T11272] copy_net_ns+0x2f8/0x690 [ 314.562944][T11272] create_new_namespaces+0x3ea/0xa90 [ 314.562964][T11272] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 314.562982][T11272] ksys_unshare+0x45b/0xa40 [ 314.563000][T11272] ? __pfx_ksys_unshare+0x10/0x10 [ 314.563018][T11272] ? xfd_validate_state+0x61/0x180 [ 314.563044][T11272] __x64_sys_unshare+0x31/0x40 [ 314.563061][T11272] do_syscall_64+0xcd/0xfa0 [ 314.563079][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.563093][T11272] RIP: 0033:0x7efc1df8f749 [ 314.563105][T11272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.563118][T11272] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 314.563132][T11272] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 314.563141][T11272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 314.563150][T11272] RBP: 00007efc1e013f91 R08: 0000000000000000 R09: 0000000000000000 [ 314.563158][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.563166][T11272] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 314.563187][T11272] [ 314.906315][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.700152][T11273] ERROR: Out of memory at tomoyo_memory_ok. [ 316.128772][T11283] No such timeout policy "" [ 316.133611][T11283] netlink: Failed to associated timeout policy '' [ 317.112379][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.118814][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.833252][T11306] Console: switching to colour VGA+ 80x25 [ 317.913366][T11305] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1183'. [ 318.811610][T11321] input: f¬ as /devices/virtual/input/input51 [ 319.367198][T11328] sysfs_service_op_show: Client not running :-5: [ 319.732075][T11328] sysfs_service_op_show: Client not running :-5: [ 320.969447][T11355] random: crng reseeded on system resumption [ 322.271267][T10545] netdevsim netdevsim511 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.342021][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.359602][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.367201][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.375223][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.382811][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 322.437661][ T7102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.580580][ T7102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.675925][ T7102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.785254][ T7102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.929273][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1204'. [ 323.785706][T11424] netlink: 'syz.2.1212': attribute type 4 has an invalid length. [ 323.932941][T11424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1212'. [ 323.960733][ T7102] erspan0 (unregistering): left allmulticast mode [ 324.470417][ T52] Bluetooth: hci2: command tx timeout [ 324.590628][ T7102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.638760][ T7102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.703083][ T7102] bond0 (unregistering): Released all slaves [ 324.772400][T11387] chnl_net:caif_netlink_parms(): no params data found [ 324.873707][T11449] program syz.0.1217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.909074][T11449] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 325.844474][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.884426][T11387] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.925645][T11387] bridge_slave_0: entered allmulticast mode [ 325.984955][T11387] bridge_slave_0: entered promiscuous mode [ 326.070335][T11387] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.108268][T11387] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.170876][T11387] bridge_slave_1: entered allmulticast mode [ 326.230730][T11387] bridge_slave_1: entered promiscuous mode [ 326.507347][T11387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.550794][ T52] Bluetooth: hci2: command tx timeout [ 326.672790][ T7102] hsr_slave_0: left promiscuous mode [ 326.695457][ T7102] hsr_slave_1: left promiscuous mode [ 326.722710][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.742884][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.766424][ T7102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.793425][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.839711][ T7102] veth1_macvtap: left promiscuous mode [ 326.858540][ T7102] veth0_macvtap: left promiscuous mode [ 326.881151][ T7102] veth1_vlan: left promiscuous mode [ 326.896189][ T7102] veth0_vlan: left promiscuous mode [ 328.067682][T11522] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input52 [ 328.199819][T11525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input53 [ 328.275037][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 328.422752][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 328.633569][ T52] Bluetooth: hci2: command tx timeout [ 329.155102][T11387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.198173][T11520] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1233'. [ 329.363388][T11387] team0: Port device team_slave_0 added [ 329.426308][T11387] team0: Port device team_slave_1 added [ 329.656600][T11387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.682346][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.817187][T11387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.043153][T11387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.092889][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.197474][T11387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.629571][T11387] hsr_slave_0: entered promiscuous mode [ 330.645841][T11387] hsr_slave_1: entered promiscuous mode [ 330.696994][T11387] debugfs: 'hsr0' already exists in 'hsr' [ 330.702723][T11387] Cannot create hsr debugfs directory [ 330.712929][ T52] Bluetooth: hci2: command tx timeout [ 331.017203][T11561] Invalid ELF header magic: != ELF [ 331.614659][T11387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.642292][T11573] i2c i2c-0: delete_device: Can't find device in list [ 331.675406][T11387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.859608][T11387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.884347][T11584] input: f¬ as /devices/virtual/input/input54 [ 332.044434][T11387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.124853][T11585] FAULT_INJECTION: forcing a failure. [ 332.124853][T11585] name failslab, interval 1, probability 0, space 0, times 0 [ 332.216041][T11585] CPU: 1 UID: 0 PID: 11585 Comm: syz.1.1243 Not tainted syzkaller #0 PREEMPT(full) [ 332.216065][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 332.216073][T11585] Call Trace: [ 332.216079][T11585] [ 332.216084][T11585] dump_stack_lvl+0x16c/0x1f0 [ 332.216105][T11585] should_fail_ex+0x512/0x640 [ 332.216126][T11585] ? fs_reclaim_acquire+0xae/0x150 [ 332.216147][T11585] should_failslab+0xc2/0x120 [ 332.216167][T11585] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 332.216186][T11585] ? kasprintf+0xc7/0x100 [ 332.216203][T11585] ? kvasprintf+0xbc/0x160 [ 332.216215][T11585] kvasprintf+0xbc/0x160 [ 332.216228][T11585] ? __pfx_kvasprintf+0x10/0x10 [ 332.216240][T11585] ? sysfs_remove_group+0xc6/0x180 [ 332.216259][T11585] ? evdev_disconnect+0x40/0xb0 [ 332.216274][T11585] ? __input_unregister_device+0x226/0x4d0 [ 332.216290][T11585] ? input_unregister_device+0xb9/0x100 [ 332.216306][T11585] ? uinput_destroy_device+0x1f4/0x260 [ 332.216325][T11585] ? uinput_release+0x34/0x50 [ 332.216343][T11585] ? __fput+0x402/0xb70 [ 332.216360][T11585] ? task_work_run+0x150/0x240 [ 332.216386][T11585] ? get_signal+0x1d0/0x26d0 [ 332.216405][T11585] kasprintf+0xc7/0x100 [ 332.216418][T11585] ? __pfx_kasprintf+0x10/0x10 [ 332.216439][T11585] ? __pfx_input_devnode+0x10/0x10 [ 332.216460][T11585] device_get_devnode+0x166/0x2c0 [ 332.216476][T11585] devtmpfs_delete_node+0xc5/0x160 [ 332.216497][T11585] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 332.216529][T11585] ? kobject_put+0xab/0x5a0 [ 332.216547][T11585] ? __pfx_klist_children_put+0x10/0x10 [ 332.216562][T11585] ? klist_children_put+0x44/0x60 [ 332.216576][T11585] ? klist_put+0xfc/0x1b0 [ 332.216593][T11585] device_del+0x734/0x9f0 [ 332.216613][T11585] ? __pfx_device_del+0x10/0x10 [ 332.216633][T11585] ? find_held_lock+0x2b/0x80 [ 332.216650][T11585] cdev_device_del+0x1d/0x110 [ 332.216668][T11585] evdev_disconnect+0x40/0xb0 [ 332.216683][T11585] __input_unregister_device+0x226/0x4d0 [ 332.216702][T11585] input_unregister_device+0xb9/0x100 [ 332.216719][T11585] uinput_destroy_device+0x1f4/0x260 [ 332.216742][T11585] ? __pfx_uinput_release+0x10/0x10 [ 332.216761][T11585] uinput_release+0x34/0x50 [ 332.216779][T11585] __fput+0x402/0xb70 [ 332.216802][T11585] task_work_run+0x150/0x240 [ 332.216824][T11585] ? __pfx_task_work_run+0x10/0x10 [ 332.216852][T11585] get_signal+0x1d0/0x26d0 [ 332.216869][T11585] ? task_work_add+0x1d5/0x360 [ 332.216890][T11585] ? __pfx_task_work_add+0x10/0x10 [ 332.216913][T11585] ? __pfx_get_signal+0x10/0x10 [ 332.216931][T11585] ? __fput_deferred+0x213/0x480 [ 332.216952][T11585] arch_do_signal_or_restart+0x8f/0x790 [ 332.216969][T11585] ? __fget_files+0x20e/0x3c0 [ 332.216982][T11585] ? __fget_files+0x130/0x3c0 [ 332.216996][T11585] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 332.217019][T11585] ? __pfx_do_readv+0x10/0x10 [ 332.217037][T11585] exit_to_user_mode_loop+0x85/0x130 [ 332.217059][T11585] do_syscall_64+0x426/0xfa0 [ 332.217078][T11585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.217092][T11585] RIP: 0033:0x7ff9d478f749 [ 332.217104][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.217117][T11585] RSP: 002b:00007ff9d55da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 332.217132][T11585] RAX: fffffffffffffe00 RBX: 00007ff9d49e6090 RCX: 00007ff9d478f749 [ 332.217141][T11585] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 332.217150][T11585] RBP: 00007ff9d55da090 R08: 0000000000000000 R09: 0000000000000000 [ 332.217158][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.217166][T11585] R13: 00007ff9d49e6128 R14: 00007ff9d49e6090 R15: 00007ffcb96dbb38 [ 332.217186][T11585] [ 333.635218][T11625] FAULT_INJECTION: forcing a failure. [ 333.635218][T11625] name failslab, interval 1, probability 0, space 0, times 0 [ 333.662105][T11625] CPU: 1 UID: 0 PID: 11625 Comm: syz.0.1248 Not tainted syzkaller #0 PREEMPT(full) [ 333.662125][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.662134][T11625] Call Trace: [ 333.662140][T11625] [ 333.662147][T11625] dump_stack_lvl+0x16c/0x1f0 [ 333.662169][T11625] should_fail_ex+0x512/0x640 [ 333.662191][T11625] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 333.662209][T11625] should_failslab+0xc2/0x120 [ 333.662236][T11625] kmem_cache_alloc_noprof+0x75/0x6e0 [ 333.662251][T11625] ? __kernfs_new_node+0xd2/0x8e0 [ 333.662273][T11625] ? __kernfs_new_node+0xd2/0x8e0 [ 333.662289][T11625] __kernfs_new_node+0xd2/0x8e0 [ 333.662310][T11625] ? __pfx___kernfs_new_node+0x10/0x10 [ 333.662333][T11625] ? find_held_lock+0x2b/0x80 [ 333.662348][T11625] ? kernfs_root+0xee/0x2a0 [ 333.662370][T11625] kernfs_new_node+0x13c/0x1e0 [ 333.662393][T11625] kernfs_create_dir_ns+0x4c/0x1a0 [ 333.662415][T11625] internal_create_group+0x34d/0xf30 [ 333.662434][T11625] ? kobject_init_and_add+0x123/0x190 [ 333.662454][T11625] ? __pfx_internal_create_group+0x10/0x10 [ 333.662471][T11625] ? __pfx_kobject_init_and_add+0x10/0x10 [ 333.662492][T11625] ? __pfx_internal_create_group+0x10/0x10 [ 333.662509][T11625] ? __x64_sys_unshare+0x31/0x40 [ 333.662527][T11625] ? do_syscall_64+0xcd/0xfa0 [ 333.662543][T11625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.662564][T11625] netdev_queue_update_kobjects+0x17a/0x720 [ 333.662588][T11625] netdev_register_kobject+0x2b3/0x3d0 [ 333.662608][T11625] register_netdevice+0x13dc/0x2270 [ 333.662628][T11625] ? __pfx_register_netdevice+0x10/0x10 [ 333.662650][T11625] __ip_tunnel_create+0x540/0x6e0 [ 333.662668][T11625] ? __pfx___ip_tunnel_create+0x10/0x10 [ 333.662691][T11625] ip_tunnel_init_net+0x22f/0x7d0 [ 333.662711][T11625] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 333.662737][T11625] ? ops_init+0x77/0x5f0 [ 333.662753][T11625] ? __pfx_erspan_init_net+0x10/0x10 [ 333.662768][T11625] ops_init+0x1e2/0x5f0 [ 333.662784][T11625] setup_net+0x100/0x390 [ 333.662799][T11625] ? __pfx_setup_net+0x10/0x10 [ 333.662815][T11625] ? debug_mutex_init+0x37/0x70 [ 333.662831][T11625] copy_net_ns+0x2f8/0x690 [ 333.662849][T11625] create_new_namespaces+0x3ea/0xa90 [ 333.662870][T11625] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 333.662888][T11625] ksys_unshare+0x45b/0xa40 [ 333.662906][T11625] ? __pfx_ksys_unshare+0x10/0x10 [ 333.662925][T11625] ? xfd_validate_state+0x61/0x180 [ 333.662950][T11625] __x64_sys_unshare+0x31/0x40 [ 333.662967][T11625] do_syscall_64+0xcd/0xfa0 [ 333.662985][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.662999][T11625] RIP: 0033:0x7f491ad8f749 [ 333.663011][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.663025][T11625] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 333.663039][T11625] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 333.663048][T11625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 333.663056][T11625] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.663064][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.663073][T11625] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 333.663093][T11625] [ 334.047032][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.061165][T11387] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.088781][T11387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.099165][T11387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.116905][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.123998][ T7087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.134783][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.141848][ T7087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.648795][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.902148][T11647] ERROR: Out of memory at tomoyo_memory_ok. [ 335.022237][T11648] Console: switching to colour frame buffer device 128x48 [ 335.408384][T11387] veth0_vlan: entered promiscuous mode [ 335.490006][T11639] Process accounting resumed [ 335.578178][T11387] veth1_vlan: entered promiscuous mode [ 335.687370][T11387] veth0_macvtap: entered promiscuous mode [ 335.723255][T11387] veth1_macvtap: entered promiscuous mode [ 335.799773][T11387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.847302][T11387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.884003][ T7102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.903798][ T7102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.933945][ T7102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.962675][ T7102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.050197][ T7090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.072791][ T7090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.150803][ T7602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.177450][ T7602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.652759][T11678] FAULT_INJECTION: forcing a failure. [ 336.652759][T11678] name failslab, interval 1, probability 0, space 0, times 0 [ 336.731175][T11678] CPU: 1 UID: 0 PID: 11678 Comm: syz.0.1255 Not tainted syzkaller #0 PREEMPT(full) [ 336.731197][T11678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.731206][T11678] Call Trace: [ 336.731212][T11678] [ 336.731218][T11678] dump_stack_lvl+0x16c/0x1f0 [ 336.731240][T11678] should_fail_ex+0x512/0x640 [ 336.731263][T11678] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 336.731280][T11678] should_failslab+0xc2/0x120 [ 336.731300][T11678] kmem_cache_alloc_noprof+0x75/0x6e0 [ 336.731314][T11678] ? alloc_empty_file+0x55/0x1e0 [ 336.731339][T11678] ? alloc_empty_file+0x55/0x1e0 [ 336.731356][T11678] ? _raw_spin_unlock+0x28/0x50 [ 336.731370][T11678] alloc_empty_file+0x55/0x1e0 [ 336.731391][T11678] alloc_file_pseudo+0x13a/0x230 [ 336.731411][T11678] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 336.731433][T11678] ? do_raw_spin_unlock+0x172/0x230 [ 336.731449][T11678] __anon_inode_getfile+0xe8/0x280 [ 336.731468][T11678] anon_inode_getfile_fmode+0x37/0xa0 [ 336.731486][T11678] __do_sys_fanotify_init+0x9da/0xc80 [ 336.731510][T11678] do_syscall_64+0xcd/0xfa0 [ 336.731529][T11678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.731543][T11678] RIP: 0033:0x7f491ad8f749 [ 336.731554][T11678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.731568][T11678] RSP: 002b:00007f491bc05038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 336.731581][T11678] RAX: ffffffffffffffda RBX: 00007f491afe5fa0 RCX: 00007f491ad8f749 [ 336.731591][T11678] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 336.731599][T11678] RBP: 00007f491ae13f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.731607][T11678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.731615][T11678] R13: 00007f491afe6038 R14: 00007f491afe5fa0 R15: 00007ffe5a3d2c48 [ 336.731634][T11678] [ 336.921993][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.247594][T11690] FAULT_INJECTION: forcing a failure. [ 337.247594][T11690] name failslab, interval 1, probability 0, space 0, times 0 [ 337.306149][T11690] CPU: 1 UID: 0 PID: 11690 Comm: syz.2.1258 Not tainted syzkaller #0 PREEMPT(full) [ 337.306170][T11690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.306179][T11690] Call Trace: [ 337.306184][T11690] [ 337.306190][T11690] dump_stack_lvl+0x16c/0x1f0 [ 337.306211][T11690] should_fail_ex+0x512/0x640 [ 337.306233][T11690] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 337.306248][T11690] should_failslab+0xc2/0x120 [ 337.306268][T11690] kmem_cache_alloc_noprof+0x75/0x6e0 [ 337.306283][T11690] ? skb_clone+0x190/0x3f0 [ 337.306301][T11690] ? skb_clone+0x190/0x3f0 [ 337.306313][T11690] skb_clone+0x190/0x3f0 [ 337.306328][T11690] netlink_deliver_tap+0xabd/0xd30 [ 337.306347][T11690] netlink_unicast+0x64c/0x870 [ 337.306365][T11690] ? __pfx_netlink_unicast+0x10/0x10 [ 337.306380][T11690] ? __pfx___might_resched+0x10/0x10 [ 337.306402][T11690] netlink_sendmsg+0x8c8/0xdd0 [ 337.306421][T11690] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.306439][T11690] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 337.306463][T11690] ____sys_sendmsg+0xa98/0xc70 [ 337.306482][T11690] ? copy_msghdr_from_user+0x10a/0x160 [ 337.306496][T11690] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.306524][T11690] ___sys_sendmsg+0x134/0x1d0 [ 337.306539][T11690] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.306551][T11690] ? __lock_acquire+0x622/0x1c90 [ 337.306596][T11690] __sys_sendmsg+0x16d/0x220 [ 337.306610][T11690] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.306637][T11690] do_syscall_64+0xcd/0xfa0 [ 337.306656][T11690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.306671][T11690] RIP: 0033:0x7efc1df8f749 [ 337.306682][T11690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.306696][T11690] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.306709][T11690] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 337.306719][T11690] RDX: 0000000004008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 337.306727][T11690] RBP: 00007efc1eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 337.306736][T11690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.306744][T11690] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 337.306764][T11690] [ 337.540584][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.911065][T11733] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 339.220805][T11743] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1275'. [ 339.668233][T11754] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.1278'. [ 340.019181][T11763] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 340.040053][T11763] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 340.060185][T11763] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 340.075397][T11763] page_type: f5(slab) [ 340.085631][T11763] raw: 00fff00000000040 ffff88813ffa7140 ffffea0000c7e000 dead000000000002 [ 340.104556][T11763] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 340.123155][T11763] head: 00fff00000000040 ffff88813ffa7140 ffffea0000c7e000 dead000000000002 [ 340.152064][T11763] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 340.166656][T11763] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 340.186407][T11763] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 340.210873][T11763] page dumped because: unmovable page [ 340.222167][T11763] page_owner tracks the page as allocated [ 340.231033][ T5180] ERROR: Out of memory at tomoyo_memory_ok. [ 340.244936][T11763] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7600, tgid 7600 (kworker/u8:37), ts 209973898600, free_ts 209861840993 [ 340.312889][T11763] post_alloc_hook+0x1af/0x220 [ 340.326555][T11763] get_page_from_freelist+0x10a3/0x3a30 [ 340.337724][T11763] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 340.350182][T11763] alloc_pages_mpol+0x1fb/0x550 [ 340.360269][T11763] new_slab+0x24a/0x360 [ 340.368802][T11763] ___slab_alloc+0xd79/0x1a50 [ 340.380762][T11763] __slab_alloc.constprop.0+0x63/0x110 [ 340.392861][T11763] __kmalloc_node_track_caller_noprof+0x4db/0x8a0 [ 340.410931][T11763] kmalloc_reserve+0xef/0x2c0 [ 340.421017][T11763] __alloc_skb+0x166/0x380 [ 340.430092][T11763] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 340.447818][T11763] process_one_work+0x9cf/0x1b70 [ 340.461583][T11763] worker_thread+0x6c8/0xf10 [ 340.478064][T11763] kthread+0x3c5/0x780 [ 340.493896][T11763] ret_from_fork+0x675/0x7d0 [ 340.505590][T11763] ret_from_fork_asm+0x1a/0x30 [ 340.515685][T11763] page last free pid 5835 tgid 5835 stack trace: [ 340.529544][T11763] __free_frozen_pages+0x7df/0x1160 [ 340.540267][T11763] qlist_free_all+0x4d/0x120 [ 340.550360][T11763] kasan_quarantine_reduce+0x195/0x1e0 [ 340.561715][T11763] __kasan_slab_alloc+0x69/0x90 [ 340.567585][T11763] kmem_cache_alloc_noprof+0x250/0x6e0 [ 340.573450][T11763] ptlock_alloc+0x1f/0x70 [ 340.578014][T11763] pte_alloc_one+0x84/0x350 [ 340.582569][T11763] __pte_alloc+0x6d/0x380 [ 340.586955][T11763] copy_page_range+0x44a1/0x6930 [ 340.592288][T11763] dup_mmap+0xe80/0x2280 [ 340.597259][T11763] copy_process+0x3f0c/0x76a0 [ 340.606017][T11757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 340.612845][T11763] kernel_clone+0xfc/0x930 [ 340.617366][T11757] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 340.625538][T11775] sd 0:0:1:0: PR command failed: 1026 [ 340.631253][T11763] __do_sys_clone+0xce/0x120 [ 340.636469][T11775] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 340.644345][T11763] do_syscall_64+0xcd/0xfa0 [ 340.649156][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.655098][T11775] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 340.665108][T11757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 340.687562][T11757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 340.706445][T11757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 340.720942][T11757] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 340.764834][T11757] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 340.775887][T11757] CPU0 is offline. [ 341.054528][ T7092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.219387][ T7092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.343271][ T7092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.736386][T11794] random: crng reseeded on system resumption [ 341.869434][T11797] hub 1-0:1.0: USB hub found [ 341.893922][ T7092] netdevsim netdevsim511 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.940069][T11797] hub 1-0:1.0: 1 port detected [ 341.989660][T11794] Restarting kernel threads ... [ 342.049891][T11794] Done restarting kernel threads. [ 342.280634][ T7092] hsr0: left allmulticast mode [ 342.307294][ T7092] hsr_slave_0: left allmulticast mode [ 342.340295][T11807] FAULT_INJECTION: forcing a failure. [ 342.340295][T11807] name failslab, interval 1, probability 0, space 0, times 0 [ 342.371504][ T7092] hsr_slave_1: left allmulticast mode [ 342.389568][T11808] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 342.415803][ T7092] hsr0: left promiscuous mode [ 342.430999][T11807] CPU: 1 UID: 0 PID: 11807 Comm: syz.4.1292 Not tainted syzkaller #0 PREEMPT(full) [ 342.431018][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.431027][T11807] Call Trace: [ 342.431032][T11807] [ 342.431038][T11807] dump_stack_lvl+0x16c/0x1f0 [ 342.431061][T11807] should_fail_ex+0x512/0x640 [ 342.431082][T11807] ? __kmalloc_cache_noprof+0x5f/0x780 [ 342.431097][T11807] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 342.431117][T11807] should_failslab+0xc2/0x120 [ 342.431135][T11807] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 342.431153][T11807] __kmalloc_cache_noprof+0x72/0x780 [ 342.431167][T11807] ? ioam6_genl_dumpsc_start+0x13a/0x1c0 [ 342.431187][T11807] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 342.431206][T11807] ? ioam6_genl_dumpsc_start+0x13a/0x1c0 [ 342.431225][T11807] ioam6_genl_dumpsc_start+0x13a/0x1c0 [ 342.431245][T11807] genl_start+0x5ff/0x980 [ 342.431266][T11807] __netlink_dump_start+0x60e/0x990 [ 342.431284][T11807] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 342.431304][T11807] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 342.431334][T11807] ? aa_get_newest_label+0xd2/0x250 [ 342.431355][T11807] ? __pfx_genl_start+0x10/0x10 [ 342.431370][T11807] ? __pfx_genl_dumpit+0x10/0x10 [ 342.431386][T11807] ? __pfx_genl_done+0x10/0x10 [ 342.431403][T11807] ? bpf_lsm_capable+0x9/0x10 [ 342.431422][T11807] ? security_capable+0x7e/0x260 [ 342.431446][T11807] genl_rcv_msg+0x46e/0x800 [ 342.431466][T11807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.431487][T11807] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 342.431505][T11807] ? __pfx_ioam6_genl_dumpsc+0x10/0x10 [ 342.431523][T11807] ? __pfx_ioam6_genl_dumpsc_done+0x10/0x10 [ 342.431549][T11807] netlink_rcv_skb+0x158/0x420 [ 342.431565][T11807] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.431583][T11807] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.431607][T11807] ? netlink_deliver_tap+0x1ae/0xd30 [ 342.431625][T11807] genl_rcv+0x28/0x40 [ 342.431640][T11807] netlink_unicast+0x5aa/0x870 [ 342.431658][T11807] ? __pfx_netlink_unicast+0x10/0x10 [ 342.431673][T11807] ? __pfx___might_resched+0x10/0x10 [ 342.431695][T11807] netlink_sendmsg+0x8c8/0xdd0 [ 342.431714][T11807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.431732][T11807] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 342.431756][T11807] ____sys_sendmsg+0xa98/0xc70 [ 342.431776][T11807] ? copy_msghdr_from_user+0x10a/0x160 [ 342.431790][T11807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.431818][T11807] ___sys_sendmsg+0x134/0x1d0 [ 342.431833][T11807] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.431846][T11807] ? __lock_acquire+0x622/0x1c90 [ 342.431890][T11807] __sys_sendmsg+0x16d/0x220 [ 342.431905][T11807] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.431937][T11807] do_syscall_64+0xcd/0xfa0 [ 342.431957][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.431972][T11807] RIP: 0033:0x7ffbcdf8f749 [ 342.431983][T11807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.431997][T11807] RSP: 002b:00007ffbceeeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.432011][T11807] RAX: ffffffffffffffda RBX: 00007ffbce1e5fa0 RCX: 00007ffbcdf8f749 [ 342.432020][T11807] RDX: 0000000004008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 342.432029][T11807] RBP: 00007ffbceeeb090 R08: 0000000000000000 R09: 0000000000000000 [ 342.432037][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.432045][T11807] R13: 00007ffbce1e6038 R14: 00007ffbce1e5fa0 R15: 00007ffd98dcd2f8 [ 342.432065][T11807] [ 342.432508][ T7092] bridge0: port 3(hsr0) entered disabled state [ 342.809805][T11810] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 342.886347][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 342.893640][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 342.900657][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 342.918495][T11808] IPVS: length: 131 != 8 [ 343.143800][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.234259][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.261957][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.315282][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.355293][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.625389][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 343.735088][ T7092] bridge_slave_1: left allmulticast mode [ 343.757847][T11842] Console: switching to colour VGA+ 80x25 [ 343.771893][ T7092] bridge_slave_1: left promiscuous mode [ 343.772060][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.775606][ T7092] bridge_slave_0: left allmulticast mode [ 343.775622][ T7092] bridge_slave_0: left promiscuous mode [ 343.775770][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.094831][T11841] Console: switching to colour frame buffer device 128x48 [ 344.233193][ T7092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.245738][ T7092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.255711][ T7092] bond0 (unregistering): Released all slaves [ 344.511475][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'. [ 344.960223][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 345.111790][T11856] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input55 [ 345.522325][ T52] Bluetooth: hci0: command tx timeout [ 345.859497][ T7092] hsr_slave_0: left promiscuous mode [ 345.937306][ T7092] hsr_slave_1: left promiscuous mode [ 345.956059][ T7092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.007986][ T7092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.127946][ T7092] veth1_macvtap: left promiscuous mode [ 346.147976][ T7092] veth0_macvtap: left promiscuous mode [ 346.660103][ T7092] team0 (unregistering): Port device team_slave_1 removed [ 347.041679][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 347.311833][T11811] chnl_net:caif_netlink_parms(): no params data found [ 347.603030][ T52] Bluetooth: hci0: command tx timeout [ 347.720254][T11916] zswap: compressor 000 not available [ 347.786517][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.809105][ T30] audit: type=1800 audit(4294968580.218:8): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1317" name="lu_gp_id" dev="configfs" ino=43312 res=0 errno=0 [ 347.863751][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.899942][T11811] bridge_slave_0: entered allmulticast mode [ 347.948448][T11811] bridge_slave_0: entered promiscuous mode [ 347.994853][T11935] mkiss: ax0: crc mode is auto. [ 348.003154][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.061603][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.106557][T11811] bridge_slave_1: entered allmulticast mode [ 348.139988][T11811] bridge_slave_1: entered promiscuous mode [ 348.297876][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.411580][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.558099][T11956] FAULT_INJECTION: forcing a failure. [ 348.558099][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 348.611907][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.1.1320 Not tainted syzkaller #0 PREEMPT(full) [ 348.611927][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.611936][T11956] Call Trace: [ 348.611941][T11956] [ 348.611947][T11956] dump_stack_lvl+0x16c/0x1f0 [ 348.611969][T11956] should_fail_ex+0x512/0x640 [ 348.611991][T11956] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 348.612007][T11956] should_failslab+0xc2/0x120 [ 348.612026][T11956] kmem_cache_alloc_noprof+0x75/0x6e0 [ 348.612042][T11956] ? skb_clone+0x190/0x3f0 [ 348.612061][T11956] ? skb_clone+0x190/0x3f0 [ 348.612073][T11956] skb_clone+0x190/0x3f0 [ 348.612088][T11956] netlink_deliver_tap+0xabd/0xd30 [ 348.612108][T11956] netlink_dump+0x881/0xd30 [ 348.612124][T11956] ? __pfx_netlink_dump+0x10/0x10 [ 348.612149][T11956] ? genl_start+0x67f/0x980 [ 348.612169][T11956] __netlink_dump_start+0x6d6/0x990 [ 348.612187][T11956] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 348.612206][T11956] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 348.612229][T11956] ? aa_get_newest_label+0xd2/0x250 [ 348.612250][T11956] ? __pfx_genl_start+0x10/0x10 [ 348.612265][T11956] ? __pfx_genl_dumpit+0x10/0x10 [ 348.612281][T11956] ? __pfx_genl_done+0x10/0x10 [ 348.612299][T11956] ? bpf_lsm_capable+0x9/0x10 [ 348.612317][T11956] ? security_capable+0x7e/0x260 [ 348.612341][T11956] genl_rcv_msg+0x46e/0x800 [ 348.612360][T11956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.612378][T11956] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 348.612397][T11956] ? __pfx_ioam6_genl_dumpsc+0x10/0x10 [ 348.612415][T11956] ? __pfx_ioam6_genl_dumpsc_done+0x10/0x10 [ 348.612441][T11956] netlink_rcv_skb+0x158/0x420 [ 348.612456][T11956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.612475][T11956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.612499][T11956] ? netlink_deliver_tap+0x1ae/0xd30 [ 348.612516][T11956] genl_rcv+0x28/0x40 [ 348.612531][T11956] netlink_unicast+0x5aa/0x870 [ 348.612549][T11956] ? __pfx_netlink_unicast+0x10/0x10 [ 348.612564][T11956] ? __pfx___might_resched+0x10/0x10 [ 348.612588][T11956] netlink_sendmsg+0x8c8/0xdd0 [ 348.612606][T11956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.612624][T11956] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 348.612648][T11956] ____sys_sendmsg+0xa98/0xc70 [ 348.612667][T11956] ? copy_msghdr_from_user+0x10a/0x160 [ 348.612685][T11956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.612713][T11956] ___sys_sendmsg+0x134/0x1d0 [ 348.612732][T11956] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.612744][T11956] ? __lock_acquire+0x622/0x1c90 [ 348.612789][T11956] __sys_sendmsg+0x16d/0x220 [ 348.612803][T11956] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.612831][T11956] do_syscall_64+0xcd/0xfa0 [ 348.612850][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.612865][T11956] RIP: 0033:0x7ff9d478f749 [ 348.612877][T11956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.612891][T11956] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.612905][T11956] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 348.612914][T11956] RDX: 0000000004008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 348.612923][T11956] RBP: 00007ff9d55fb090 R08: 0000000000000000 R09: 0000000000000000 [ 348.612931][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.612942][T11956] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 348.612962][T11956] [ 348.617331][T11811] team0: Port device team_slave_0 added [ 349.081823][T11943] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 349.517750][T11811] team0: Port device team_slave_1 added [ 349.685219][ T52] Bluetooth: hci0: command tx timeout [ 349.982214][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.023558][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.142433][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.190065][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.238347][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.281952][T11991] syz.1.1324 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 350.314899][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.501525][T11811] hsr_slave_0: entered promiscuous mode [ 350.523792][T11811] hsr_slave_1: entered promiscuous mode [ 351.578214][T12029] FAULT_INJECTION: forcing a failure. [ 351.578214][T12029] name failslab, interval 1, probability 0, space 0, times 0 [ 351.578254][T12029] CPU: 1 UID: 0 PID: 12029 Comm: syz.2.1330 Not tainted syzkaller #0 PREEMPT(full) [ 351.578271][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.578280][T12029] Call Trace: [ 351.578285][T12029] [ 351.578290][T12029] dump_stack_lvl+0x16c/0x1f0 [ 351.578313][T12029] should_fail_ex+0x512/0x640 [ 351.578335][T12029] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 351.578351][T12029] should_failslab+0xc2/0x120 [ 351.578378][T12029] kmem_cache_alloc_noprof+0x75/0x6e0 [ 351.578393][T12029] ? skb_clone+0x190/0x3f0 [ 351.578412][T12029] ? skb_clone+0x190/0x3f0 [ 351.578424][T12029] skb_clone+0x190/0x3f0 [ 351.578439][T12029] netlink_deliver_tap+0xabd/0xd30 [ 351.578459][T12029] netlink_dump+0x881/0xd30 [ 351.578475][T12029] ? __pfx_netlink_dump+0x10/0x10 [ 351.578500][T12029] ? genl_start+0x67f/0x980 [ 351.578520][T12029] __netlink_dump_start+0x6d6/0x990 [ 351.578537][T12029] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 351.578557][T12029] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 351.578580][T12029] ? aa_get_newest_label+0xd2/0x250 [ 351.578601][T12029] ? __pfx_genl_start+0x10/0x10 [ 351.578616][T12029] ? __pfx_genl_dumpit+0x10/0x10 [ 351.578632][T12029] ? __pfx_genl_done+0x10/0x10 [ 351.578650][T12029] ? bpf_lsm_capable+0x9/0x10 [ 351.578668][T12029] ? security_capable+0x7e/0x260 [ 351.578692][T12029] genl_rcv_msg+0x46e/0x800 [ 351.578712][T12029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.578730][T12029] ? __pfx_ioam6_genl_dumpsc_start+0x10/0x10 [ 351.578748][T12029] ? __pfx_ioam6_genl_dumpsc+0x10/0x10 [ 351.578769][T12029] ? __pfx_ioam6_genl_dumpsc_done+0x10/0x10 [ 351.578796][T12029] netlink_rcv_skb+0x158/0x420 [ 351.578811][T12029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.578829][T12029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.578853][T12029] ? netlink_deliver_tap+0x1ae/0xd30 [ 351.578871][T12029] genl_rcv+0x28/0x40 [ 351.578885][T12029] netlink_unicast+0x5aa/0x870 [ 351.578903][T12029] ? __pfx_netlink_unicast+0x10/0x10 [ 351.578918][T12029] ? __pfx___might_resched+0x10/0x10 [ 351.578941][T12029] netlink_sendmsg+0x8c8/0xdd0 [ 351.578960][T12029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.578978][T12029] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 351.579002][T12029] ____sys_sendmsg+0xa98/0xc70 [ 351.579021][T12029] ? copy_msghdr_from_user+0x10a/0x160 [ 351.579035][T12029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.579063][T12029] ___sys_sendmsg+0x134/0x1d0 [ 351.579078][T12029] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.579090][T12029] ? __lock_acquire+0x622/0x1c90 [ 351.579135][T12029] __sys_sendmsg+0x16d/0x220 [ 351.579149][T12029] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.579177][T12029] do_syscall_64+0xcd/0xfa0 [ 351.579196][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.579210][T12029] RIP: 0033:0x7efc1df8f749 [ 351.579222][T12029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.579237][T12029] RSP: 002b:00007efc1eebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.579250][T12029] RAX: ffffffffffffffda RBX: 00007efc1e1e5fa0 RCX: 00007efc1df8f749 [ 351.579259][T12029] RDX: 0000000004008004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 351.579268][T12029] RBP: 00007efc1eebb090 R08: 0000000000000000 R09: 0000000000000000 [ 351.579276][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.579284][T12029] R13: 00007efc1e1e6038 R14: 00007efc1e1e5fa0 R15: 00007fff7656e028 [ 351.579304][T12029] [ 351.697888][T12010] zswap: compressor 000 not available [ 351.763482][ T52] Bluetooth: hci0: command tx timeout [ 352.076729][T11811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.096098][T11811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.099234][T11811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.101480][T11811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.292043][T12051] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 352.351130][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.398438][T11811] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.429404][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.429492][ T7098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.430668][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.430728][ T7098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.062671][T11811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.145498][T11811] veth0_vlan: entered promiscuous mode [ 353.167990][T11811] veth1_vlan: entered promiscuous mode [ 353.212853][T11811] veth0_macvtap: entered promiscuous mode [ 353.237743][T11811] veth1_macvtap: entered promiscuous mode [ 353.283456][T11811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.298556][T11811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.317588][ T7092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.317620][ T7092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.317644][ T7092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.317668][ T7092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.501529][T10542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.501563][T10542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.588203][T10542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.588220][T10542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.803956][T12083] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 354.495657][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 355.035837][T12109] __vm_enough_memory: pid: 12109, comm: syz.4.1341, bytes: 4398046511104 not enough memory for the allocation [ 355.453288][T12095] Console: switching to colour VGA+ 80x25 [ 355.520733][T12099] Console: switching to colour frame buffer device 128x48 [ 355.940468][T12129] FAULT_INJECTION: forcing a failure. [ 355.940468][T12129] name failslab, interval 1, probability 0, space 0, times 0 [ 356.025566][T12129] CPU: 1 UID: 0 PID: 12129 Comm: syz.1.1344 Not tainted syzkaller #0 PREEMPT(full) [ 356.025588][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.025597][T12129] Call Trace: [ 356.025602][T12129] [ 356.025608][T12129] dump_stack_lvl+0x16c/0x1f0 [ 356.025631][T12129] should_fail_ex+0x512/0x640 [ 356.025653][T12129] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 356.025672][T12129] should_failslab+0xc2/0x120 [ 356.025691][T12129] kmem_cache_alloc_node_noprof+0x78/0x770 [ 356.025705][T12129] ? find_held_lock+0x2b/0x80 [ 356.025719][T12129] ? __alloc_skb+0x2b2/0x380 [ 356.025745][T12129] ? __alloc_skb+0x2b2/0x380 [ 356.025764][T12129] __alloc_skb+0x2b2/0x380 [ 356.025784][T12129] ? __pfx___alloc_skb+0x10/0x10 [ 356.025809][T12129] ? __pfx___register_sysctl_table+0x10/0x10 [ 356.025829][T12129] ? is_module_address+0x69/0xf0 [ 356.025857][T12129] inet_netconf_notify_devconf+0x8b/0x1f0 [ 356.025880][T12129] __devinet_sysctl_register+0x227/0x360 [ 356.025900][T12129] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 356.025914][T12129] ? inetdev_init+0x245/0x5a0 [ 356.025931][T12129] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 356.025951][T12129] ? copy_net_ns+0x2f8/0x690 [ 356.025966][T12129] ? create_new_namespaces+0x3ea/0xa90 [ 356.025980][T12129] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 356.025995][T12129] ? ksys_unshare+0x45b/0xa40 [ 356.026011][T12129] ? __x64_sys_unshare+0x31/0x40 [ 356.026028][T12129] ? do_syscall_64+0xcd/0xfa0 [ 356.026044][T12129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.026061][T12129] devinet_sysctl_register+0x17b/0x200 [ 356.026080][T12129] inetdev_init+0x2b8/0x5a0 [ 356.026099][T12129] inetdev_event+0xc5f/0x18a0 [ 356.026118][T12129] ? ib_netdevice_event+0xfc/0x330 [ 356.026132][T12129] ? __pfx_inetdev_event+0x10/0x10 [ 356.026151][T12129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.026177][T12129] notifier_call_chain+0xbc/0x410 [ 356.026194][T12129] ? __pfx_inetdev_event+0x10/0x10 [ 356.026216][T12129] call_netdevice_notifiers_info+0xbe/0x140 [ 356.026235][T12129] register_netdevice+0x182e/0x2270 [ 356.026255][T12129] ? __pfx_register_netdevice+0x10/0x10 [ 356.026277][T12129] __ip_tunnel_create+0x540/0x6e0 [ 356.026296][T12129] ? __pfx___ip_tunnel_create+0x10/0x10 [ 356.026319][T12129] ip_tunnel_init_net+0x22f/0x7d0 [ 356.026339][T12129] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 356.026362][T12129] ? ops_init+0x77/0x5f0 [ 356.026377][T12129] ? __pfx_erspan_init_net+0x10/0x10 [ 356.026392][T12129] ops_init+0x1e2/0x5f0 [ 356.026408][T12129] setup_net+0x100/0x390 [ 356.026423][T12129] ? __pfx_setup_net+0x10/0x10 [ 356.026439][T12129] ? debug_mutex_init+0x37/0x70 [ 356.026456][T12129] copy_net_ns+0x2f8/0x690 [ 356.026474][T12129] create_new_namespaces+0x3ea/0xa90 [ 356.026494][T12129] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 356.026512][T12129] ksys_unshare+0x45b/0xa40 [ 356.026530][T12129] ? __pfx_ksys_unshare+0x10/0x10 [ 356.026549][T12129] ? xfd_validate_state+0x61/0x180 [ 356.026574][T12129] __x64_sys_unshare+0x31/0x40 [ 356.026592][T12129] do_syscall_64+0xcd/0xfa0 [ 356.026613][T12129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.026627][T12129] RIP: 0033:0x7ff9d478f749 [ 356.026640][T12129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.026654][T12129] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.026668][T12129] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 356.026677][T12129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 356.026686][T12129] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.026695][T12129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.026703][T12129] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 356.026723][T12129] [ 356.409378][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.583142][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1348'. [ 356.665218][T12148] FAULT_INJECTION: forcing a failure. [ 356.665218][T12148] name failslab, interval 1, probability 0, space 0, times 0 [ 356.677884][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.0.1349 Not tainted syzkaller #0 PREEMPT(full) [ 356.677904][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.677913][T12148] Call Trace: [ 356.677918][T12148] [ 356.677924][T12148] dump_stack_lvl+0x16c/0x1f0 [ 356.677946][T12148] should_fail_ex+0x512/0x640 [ 356.677967][T12148] ? fs_reclaim_acquire+0xae/0x150 [ 356.677989][T12148] should_failslab+0xc2/0x120 [ 356.678008][T12148] __kmalloc_cache_noprof+0x72/0x780 [ 356.678022][T12148] ? __pfx_widen_string+0x10/0x10 [ 356.678042][T12148] ? tomoyo_init_log+0x197/0x2140 [ 356.678061][T12148] ? tomoyo_init_log+0x197/0x2140 [ 356.678076][T12148] tomoyo_init_log+0x197/0x2140 [ 356.678090][T12148] ? format_decode+0x1ad/0xd40 [ 356.678112][T12148] ? __pfx_format_decode+0x10/0x10 [ 356.678140][T12148] ? __pfx_tomoyo_init_log+0x10/0x10 [ 356.678161][T12148] tomoyo_write_log2+0x2f7/0xc10 [ 356.678181][T12148] tomoyo_supervisor+0x15e/0x13b0 [ 356.678202][T12148] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 356.678229][T12148] ? lockdep_hardirqs_on+0x7c/0x110 [ 356.678249][T12148] ? kfree+0x2b8/0x6d0 [ 356.678259][T12148] ? tomoyo_check_path_acl+0xad/0x210 [ 356.678282][T12148] ? tomoyo_check_acl+0x1f7/0x410 [ 356.678304][T12148] tomoyo_path_permission+0x270/0x3b0 [ 356.678328][T12148] tomoyo_check_open_permission+0x349/0x3c0 [ 356.678342][T12148] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 356.678375][T12148] ? __fget_files+0x204/0x3c0 [ 356.678396][T12148] tomoyo_file_fcntl+0x9e/0xc0 [ 356.678415][T12148] security_file_fcntl+0x211/0x240 [ 356.678432][T12148] __x64_sys_fcntl+0x108/0x200 [ 356.678453][T12148] do_syscall_64+0xcd/0xfa0 [ 356.678471][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.678486][T12148] RIP: 0033:0x7f75aeb8f749 [ 356.678497][T12148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.678511][T12148] RSP: 002b:00007f75afa6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 356.678525][T12148] RAX: ffffffffffffffda RBX: 00007f75aede5fa0 RCX: 00007f75aeb8f749 [ 356.678534][T12148] RDX: fffffffffffffffc RSI: 0000000000000004 RDI: ff80000000000000 [ 356.678542][T12148] RBP: 00007f75aec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 356.678551][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.678559][T12148] R13: 00007f75aede6038 R14: 00007f75aede5fa0 R15: 00007ffe9937bc88 [ 356.678579][T12148] [ 356.927233][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.936381][T12146] bridge0: port 3(team0) entered blocking state [ 356.942665][T12146] bridge0: port 3(team0) entered disabled state [ 356.949052][T12146] team0: entered allmulticast mode [ 356.954160][T12146] team_slave_0: entered allmulticast mode [ 356.959883][T12146] team_slave_1: entered allmulticast mode [ 356.967111][T12146] team0: entered promiscuous mode [ 356.972140][T12146] team_slave_0: entered promiscuous mode [ 356.977875][T12146] team_slave_1: entered promiscuous mode [ 357.160156][T12138] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 357.757731][T12169] FAULT_INJECTION: forcing a failure. [ 357.757731][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 357.803580][T12174] random: crng reseeded on system resumption [ 357.856896][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.0.1350 Not tainted syzkaller #0 PREEMPT(full) [ 357.856918][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.856927][T12169] Call Trace: [ 357.856932][T12169] [ 357.856938][T12169] dump_stack_lvl+0x16c/0x1f0 [ 357.856961][T12169] should_fail_ex+0x512/0x640 [ 357.856982][T12169] ? __kmalloc_noprof+0xca/0x880 [ 357.857007][T12169] should_failslab+0xc2/0x120 [ 357.857025][T12169] __kmalloc_noprof+0xdd/0x880 [ 357.857047][T12169] ? __register_sysctl_table+0xea2/0x1900 [ 357.857072][T12169] ? __register_sysctl_table+0xea2/0x1900 [ 357.857092][T12169] __register_sysctl_table+0xea2/0x1900 [ 357.857117][T12169] ? __pfx___register_sysctl_table+0x10/0x10 [ 357.857136][T12169] ? is_module_address+0x69/0xf0 [ 357.857156][T12169] ? register_net_sysctl_sz+0x228/0x3e0 [ 357.857185][T12169] neigh_sysctl_register+0x31f/0x670 [ 357.857200][T12169] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 357.857222][T12169] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 357.857235][T12169] ? inetdev_init+0x245/0x5a0 [ 357.857253][T12169] ? inetdev_event+0xc5f/0x18a0 [ 357.857269][T12169] ? notifier_call_chain+0xbc/0x410 [ 357.857290][T12169] ? copy_net_ns+0x2f8/0x690 [ 357.857305][T12169] ? create_new_namespaces+0x3ea/0xa90 [ 357.857319][T12169] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 357.857334][T12169] ? ksys_unshare+0x45b/0xa40 [ 357.857351][T12169] ? __x64_sys_unshare+0x31/0x40 [ 357.857367][T12169] ? do_syscall_64+0xcd/0xfa0 [ 357.857383][T12169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.857400][T12169] devinet_sysctl_register+0xb6/0x200 [ 357.857420][T12169] inetdev_init+0x2b8/0x5a0 [ 357.857439][T12169] inetdev_event+0xc5f/0x18a0 [ 357.857458][T12169] ? ib_netdevice_event+0xfc/0x330 [ 357.857472][T12169] ? __pfx_inetdev_event+0x10/0x10 [ 357.857491][T12169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.857517][T12169] notifier_call_chain+0xbc/0x410 [ 357.857534][T12169] ? __pfx_inetdev_event+0x10/0x10 [ 357.857555][T12169] call_netdevice_notifiers_info+0xbe/0x140 [ 357.857574][T12169] register_netdevice+0x182e/0x2270 [ 357.857594][T12169] ? __pfx_register_netdevice+0x10/0x10 [ 357.857616][T12169] __ip_tunnel_create+0x540/0x6e0 [ 357.857634][T12169] ? __pfx___ip_tunnel_create+0x10/0x10 [ 357.857678][T12169] ip_tunnel_init_net+0x22f/0x7d0 [ 357.857699][T12169] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 357.857722][T12169] ? ops_init+0x77/0x5f0 [ 357.857739][T12169] ? __pfx_erspan_init_net+0x10/0x10 [ 357.857754][T12169] ops_init+0x1e2/0x5f0 [ 357.857771][T12169] setup_net+0x100/0x390 [ 357.857786][T12169] ? __pfx_setup_net+0x10/0x10 [ 357.857801][T12169] ? debug_mutex_init+0x37/0x70 [ 357.857818][T12169] copy_net_ns+0x2f8/0x690 [ 357.857837][T12169] create_new_namespaces+0x3ea/0xa90 [ 357.857857][T12169] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 357.857875][T12169] ksys_unshare+0x45b/0xa40 [ 357.857893][T12169] ? __pfx_ksys_unshare+0x10/0x10 [ 357.857912][T12169] ? xfd_validate_state+0x61/0x180 [ 357.857937][T12169] __x64_sys_unshare+0x31/0x40 [ 357.857954][T12169] do_syscall_64+0xcd/0xfa0 [ 357.857972][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.857986][T12169] RIP: 0033:0x7f75aeb8f749 [ 357.857999][T12169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.858012][T12169] RSP: 002b:00007f75afa6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 357.858026][T12169] RAX: ffffffffffffffda RBX: 00007f75aede5fa0 RCX: 00007f75aeb8f749 [ 357.858036][T12169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 357.858045][T12169] RBP: 00007f75aec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.858054][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.858062][T12169] R13: 00007f75aede6038 R14: 00007f75aede5fa0 R15: 00007ffe9937bc88 [ 357.858083][T12169] [ 358.276630][T12169] sysctl could not get directory: /net/ipv4/neigh/erspan0 -12 [ 358.973026][T12183] zswap: compressor 000 not available [ 359.955012][T12211] Process accounting resumed [ 360.071415][T12220] sd 0:0:1:0: PR command failed: 1026 [ 360.119902][T12220] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 360.147283][T12220] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 360.495380][T12236] FAULT_INJECTION: forcing a failure. [ 360.495380][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 360.508640][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.1.1363 Not tainted syzkaller #0 PREEMPT(full) [ 360.508660][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.508669][T12236] Call Trace: [ 360.508674][T12236] [ 360.508680][T12236] dump_stack_lvl+0x16c/0x1f0 [ 360.508702][T12236] should_fail_ex+0x512/0x640 [ 360.508727][T12236] should_failslab+0xc2/0x120 [ 360.508746][T12236] __kmalloc_cache_noprof+0x72/0x780 [ 360.508760][T12236] ? __lock_acquire+0xb8a/0x1c90 [ 360.508778][T12236] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 360.508800][T12236] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 360.508817][T12236] __hw_addr_add_ex+0x3c9/0x7c0 [ 360.508838][T12236] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 360.508856][T12236] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.508876][T12236] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.508897][T12236] dev_mc_add+0xb6/0x110 [ 360.508917][T12236] igmp6_group_added+0x3e4/0x4c0 [ 360.508933][T12236] ? __pfx_igmp6_group_added+0x10/0x10 [ 360.508949][T12236] ? mld_del_delrec+0x82/0xe20 [ 360.508974][T12236] __ipv6_dev_mc_inc+0x6f9/0xbc0 [ 360.508994][T12236] ipv6_add_dev+0xbc6/0x15f0 [ 360.509014][T12236] addrconf_notify+0x53e/0x19e0 [ 360.509034][T12236] ? ip6mr_device_event+0x1bc/0x230 [ 360.509050][T12236] notifier_call_chain+0xbc/0x410 [ 360.509068][T12236] ? __pfx_addrconf_notify+0x10/0x10 [ 360.509092][T12236] call_netdevice_notifiers_info+0xbe/0x140 [ 360.509111][T12236] register_netdevice+0x182e/0x2270 [ 360.509131][T12236] ? __pfx_register_netdevice+0x10/0x10 [ 360.509152][T12236] __ip_tunnel_create+0x540/0x6e0 [ 360.509170][T12236] ? __pfx___ip_tunnel_create+0x10/0x10 [ 360.509193][T12236] ip_tunnel_init_net+0x22f/0x7d0 [ 360.509213][T12236] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 360.509236][T12236] ? ops_init+0x77/0x5f0 [ 360.509252][T12236] ? __pfx_erspan_init_net+0x10/0x10 [ 360.509266][T12236] ops_init+0x1e2/0x5f0 [ 360.509283][T12236] setup_net+0x100/0x390 [ 360.509297][T12236] ? __pfx_setup_net+0x10/0x10 [ 360.509313][T12236] ? debug_mutex_init+0x37/0x70 [ 360.509329][T12236] copy_net_ns+0x2f8/0x690 [ 360.509347][T12236] create_new_namespaces+0x3ea/0xa90 [ 360.509376][T12236] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 360.509394][T12236] ksys_unshare+0x45b/0xa40 [ 360.509414][T12236] ? __pfx_ksys_unshare+0x10/0x10 [ 360.509433][T12236] ? xfd_validate_state+0x61/0x180 [ 360.509458][T12236] __x64_sys_unshare+0x31/0x40 [ 360.509476][T12236] do_syscall_64+0xcd/0xfa0 [ 360.509494][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.509508][T12236] RIP: 0033:0x7ff9d478f749 [ 360.509520][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.509534][T12236] RSP: 002b:00007ff9d55fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 360.509547][T12236] RAX: ffffffffffffffda RBX: 00007ff9d49e5fa0 RCX: 00007ff9d478f749 [ 360.509557][T12236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 360.509565][T12236] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 360.509574][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.509582][T12236] R13: 00007ff9d49e6038 R14: 00007ff9d49e5fa0 R15: 00007ffcb96dbb38 [ 360.509602][T12236] [ 360.831977][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.478579][T12258] FAULT_INJECTION: forcing a failure. [ 361.478579][T12258] name failslab, interval 1, probability 0, space 0, times 0 [ 361.569986][T12258] CPU: 1 UID: 0 PID: 12258 Comm: syz.4.1369 Not tainted syzkaller #0 PREEMPT(full) [ 361.570009][T12258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.570018][T12258] Call Trace: [ 361.570023][T12258] [ 361.570029][T12258] dump_stack_lvl+0x16c/0x1f0 [ 361.570052][T12258] should_fail_ex+0x512/0x640 [ 361.570073][T12258] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 361.570091][T12258] should_failslab+0xc2/0x120 [ 361.570109][T12258] kmem_cache_alloc_noprof+0x75/0x6e0 [ 361.570124][T12258] ? mas_dup_build+0x6f9/0x1e80 [ 361.570145][T12258] ? mas_dup_build+0x6f9/0x1e80 [ 361.570160][T12258] mas_dup_build+0x6f9/0x1e80 [ 361.570181][T12258] ? __lock_acquire+0xb8a/0x1c90 [ 361.570204][T12258] __mt_dup+0xeb/0x1f0 [ 361.570220][T12258] ? __pfx___mt_dup+0x10/0x10 [ 361.570263][T12258] dup_mmap+0x36c/0x2280 [ 361.570292][T12258] ? __pfx_dup_mmap+0x10/0x10 [ 361.570326][T12258] copy_process+0x3f0c/0x76a0 [ 361.570344][T12258] ? __pfx___futex_wait+0x10/0x10 [ 361.570366][T12258] ? __pfx_copy_process+0x10/0x10 [ 361.570387][T12258] ? futex_private_hash_put+0xd5/0x190 [ 361.570408][T12258] kernel_clone+0xfc/0x930 [ 361.570426][T12258] ? __pfx_kernel_clone+0x10/0x10 [ 361.570455][T12258] __do_sys_clone+0xce/0x120 [ 361.570472][T12258] ? __pfx___do_sys_clone+0x10/0x10 [ 361.570499][T12258] ? xfd_validate_state+0x61/0x180 [ 361.570517][T12258] ? __pfx_do_writev+0x10/0x10 [ 361.570541][T12258] do_syscall_64+0xcd/0xfa0 [ 361.570559][T12258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.570573][T12258] RIP: 0033:0x7ffbcdf8f749 [ 361.570586][T12258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.570600][T12258] RSP: 002b:00007ffbceeeafe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 361.570613][T12258] RAX: ffffffffffffffda RBX: 00007ffbce1e5fa0 RCX: 00007ffbcdf8f749 [ 361.570623][T12258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 361.570631][T12258] RBP: 00007ffbce013f91 R08: 0000000000000000 R09: 0000000000000000 [ 361.570640][T12258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.570648][T12258] R13: 00007ffbce1e6038 R14: 00007ffbce1e5fa0 R15: 00007ffd98dcd2f8 [ 361.570669][T12258] [ 362.540356][ T30] audit: type=1800 audit(4294968594.921:9): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 362.645510][ T30] audit: type=1800 audit(4294968594.921:10): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 362.775876][ T30] audit: type=1800 audit(4294968594.921:11): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 362.944463][ T30] audit: type=1800 audit(4294968594.921:12): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 363.097448][ T30] audit: type=1800 audit(4294968594.921:13): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 363.162045][T12279] input: f¬ as /devices/virtual/input/input56 [ 363.199898][ T5183] ERROR: Out of memory at tomoyo_memory_ok. [ 363.269256][ T30] audit: type=1800 audit(4294968594.991:14): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1371" name="lu_gp_id" dev="configfs" ino=45204 res=0 errno=0 [ 363.311268][T12279] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 363.319596][T12279] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 363.327372][T12279] #PF: supervisor instruction fetch in kernel mode [ 363.333842][T12279] #PF: error_code(0x0011) - permissions violation [ 363.340226][T12279] PGD 800000003ead3067 P4D 800000003ead3067 PUD 79ba4067 PMD 372008e7 [ 363.348454][T12279] Oops: Oops: 0011 [#1] SMP KASAN PTI [ 363.353804][T12279] CPU: 1 UID: 0 PID: 12279 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(full) [ 363.363147][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.373177][T12279] RIP: 0010:0x0 [ 363.376617][T12279] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 363.383960][T12279] RSP: 0018:ffffc90004a1f9a0 EFLAGS: 00010283 [ 363.390017][T12279] RAX: 0000000000001edf RBX: 0000000000000000 RCX: ffffc900133c0000 [ 363.397973][T12279] RDX: 0000000000080000 RSI: ffffea0001d10300 RDI: ffff88807526a380 [ 363.405925][T12279] RBP: ffffea0001d10300 R08: 0000000000000007 R09: 0000000000000000 [ 363.413875][T12279] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000943f35 [ 363.421825][T12279] R13: ffff88807526a380 R14: 0000000000000000 R15: dffffc0000000000 [ 363.429778][T12279] FS: 00007ff9d55da6c0(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 363.438687][T12279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.445250][T12279] CR2: ffffffffffffffd6 CR3: 0000000054704000 CR4: 00000000003526f0 [ 363.453199][T12279] Call Trace: [ 363.456456][T12279] [ 363.459364][T12279] filemap_read_folio+0xc8/0x2a0 [ 363.464284][T12279] ? __pfx_filemap_read_folio+0x10/0x10 [ 363.469810][T12279] ? __filemap_get_folio+0x32b/0xc30 [ 363.475074][T12279] ? down_read+0x13d/0x480 [ 363.479478][T12279] do_read_cache_folio+0x263/0x5c0 [ 363.484570][T12279] freader_get_folio+0x337/0x930 [ 363.489487][T12279] freader_fetch+0xc2/0x5e0 [ 363.493967][T12279] ? query_matching_vma+0x345/0x7d0 [ 363.499149][T12279] __build_id_parse.isra.0+0xec/0x7a0 [ 363.504498][T12279] ? query_matching_vma+0x48e/0x7d0 [ 363.509674][T12279] ? __pfx___build_id_parse.isra.0+0x10/0x10 [ 363.515640][T12279] do_procmap_query+0xb0e/0x1080 [ 363.520560][T12279] ? __pfx_do_procmap_query+0x10/0x10 [ 363.525913][T12279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.531793][T12279] ? do_vfs_ioctl+0x128/0x14f0 [ 363.536548][T12279] ? __fget_files+0x20e/0x3c0 [ 363.541204][T12279] procfs_procmap_ioctl+0x9d/0xe0 [ 363.546206][T12279] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 363.551904][T12279] __x64_sys_ioctl+0x18e/0x210 [ 363.556650][T12279] do_syscall_64+0xcd/0xfa0 [ 363.561134][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.567002][T12279] RIP: 0033:0x7ff9d478f749 [ 363.571397][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.590991][T12279] RSP: 002b:00007ff9d55da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.599387][T12279] RAX: ffffffffffffffda RBX: 00007ff9d49e6090 RCX: 00007ff9d478f749 [ 363.607340][T12279] RDX: 00002000000001c0 RSI: 00000000c0686611 RDI: 0000000000000005 [ 363.615289][T12279] RBP: 00007ff9d4813f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.623237][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.631189][T12279] R13: 00007ff9d49e6128 R14: 00007ff9d49e6090 R15: 00007ffcb96dbb38 [ 363.639148][T12279] [ 363.642148][T12279] Modules linked in: [ 363.646036][T12279] CR2: 0000000000000000 [ 363.650169][T12279] ---[ end trace 0000000000000000 ]--- [ 363.655598][T12279] RIP: 0010:0x0 [ 363.659044][T12279] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 363.666382][T12279] RSP: 0018:ffffc90004a1f9a0 EFLAGS: 00010283 [ 363.672424][T12279] RAX: 0000000000001edf RBX: 0000000000000000 RCX: ffffc900133c0000 [ 363.680372][T12279] RDX: 0000000000080000 RSI: ffffea0001d10300 RDI: ffff88807526a380 [ 363.688319][T12279] RBP: ffffea0001d10300 R08: 0000000000000007 R09: 0000000000000000 [ 363.696269][T12279] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000943f35 [ 363.704216][T12279] R13: ffff88807526a380 R14: 0000000000000000 R15: dffffc0000000000 [ 363.712165][T12279] FS: 00007ff9d55da6c0(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 363.721072][T12279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.727636][T12279] CR2: ffffffffffffffd6 CR3: 0000000054704000 CR4: 00000000003526f0 [ 363.735591][T12279] Kernel panic - not syncing: Fatal exception [ 363.741689][T12279] Kernel Offset: disabled [ 363.745987][T12279] Rebooting in 86400 seconds..