last executing test programs: 14.957808855s ago: executing program 3 (id=1660): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x6, 0x40, 0x3, 0x18, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x999, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @multicast1}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004091}, 0x800) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x6, 0xffffffff, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 11.044402129s ago: executing program 3 (id=1674): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000001a40)="fb40e8", 0x3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r1, @target_ifindex, 0x81, 0x10000, @perf_event={0xffff}}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x2}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x1) socket(0x6, 0xa, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x10008, 0x2000000000002) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0xa0300, 0x0) r4 = epoll_create$auto(0x3f) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004055}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x25117c268d29b843, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) 9.502713832s ago: executing program 3 (id=1677): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x4e042, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x40008000) getpeername$auto(0x200000003, 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) close_range$auto(0x2, 0x8, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) 7.960491079s ago: executing program 3 (id=1682): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000740)={0x30, r0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x1a, 0x10d, "e2d1b2c3e0f4246df8a3901298f8aa701033e4ad8868"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/clock_name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x4) ioctl$auto_TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)="1805b2f79763463281d071125f9ea18a98d19b84fafbfe978dc3472ee82314c93d16f0a9ccb7c5368b036ed27358af92be6884bc6622963c627815c53ff24c619486b1f72920a6bcdb4efa656b46bf674ef29c1790f87beac6523f6998e82e816b0d61bd37d11c1123e65abe51821b1c70c126d5cdc7eafe6cd257ef8241e006bcaed928d99df8f93de59872b44836c10f3958d588cba567c008975eca7ecd19cde4c7106222125f5b81ae95735328be72b620") setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) 5.980846506s ago: executing program 2 (id=1688): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r1, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) pwritev2$auto(r2, &(0x7f0000000140)={&(0x7f0000000040)="5d40b061c29c4171301dc209583e16c4f7aa177b9ec4f2ce85be4f9bf64536cee64cbe4b4d23fb2c03d59dae1af2ba22741fb54209817622330589b0dafc56effeca2f419531993318e7f6e8f48e5221180a595c4a65938a23ab3f87353e922e6a85da1beb47cac0d4fff225ac657da1a123e5a056bc5a37c2767a3c31bba1badc42a100c77ee1a02a784e3a73b9b245f687bfad78246d065af4686baf53e2bafb84164865daa26a68040d77a7b8d75c887383fff543cd5be5180905bf6c8261765bd64585a00d", 0xf}, 0xac7, 0x3, 0x51ee6cc3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000500)={0x5, 0x0, [{0x80000002, 0xffff, 0x0, 0x9cc, 0x6b, 0x100005, 0x7ffffffd}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000004911db0ff6800", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r8, 0x2, 0x70bd29, 0x25dfdc01, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1ff}, @L2TP_ATTR_STATS={0x142, 0x1e, 0x0, 0x1, [@generic="ca3e7205a68561efceaa572572a8699ba45fb282239fcedeccdba978296717ff6392b7d5c56ebfe37d0d4e72eb2a05de413b3e3106e317521b818e44b2e3a93e9b8fdd5f9cf215118d0c12898ba773f90ab625f3cba4e58560088c07a1f9706abe973c9c0199d48e933104264bcef0a188ab27e1d6852e41f35f47d7489cd327f226b9643ce4b52206346bad1cd293b50906db00085135c4f1c964585e5e11ae5fd10750e5be6ab97310a4e6e03453fcdf9010edc8636f74", @generic="fef67291b0f3e1cddf9a3f8ca83f5df633f9553298d1345391e6bd28eb8989309937cf2351d08a138703c571703899d432422287e078f2abf81f1dca3a21ab22075988d94a29fae1ac6393c195c96fafbcf8ef89ad63280dfc2397ffc93e87564a64120c581360f08461b22786c708f57c405ea2ed1c3c1288520de815fd4820fe5942f68ba8"]}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) 5.249452845s ago: executing program 3 (id=1693): mmap$auto(0x0, 0x9, 0x10001, 0x9000000eb1, 0xfffffffffffffffa, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000280)='/\xff\xf2\x00\xc8\xe4\x85;\xe9\xd8\xff\x01S', 0x80000000) write$auto(r1, 0x0, 0x2) fdatasync$auto(0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop11\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x383101, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0xc3400, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) getcwd$auto(&(0x7f0000000180)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x9) mlockall$auto(0x7) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r4) mkdir$auto(&(0x7f00000001c0)='./cgroup\x00', 0xa) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.13/usb36/36-0:1.0/usb36-port8/location\x00', 0x103842, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup\x00') readv$auto(r5, &(0x7f0000000040)={0x0, 0x3ff}, 0x1) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 5.233971577s ago: executing program 0 (id=1694): r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000001a00), 0x801, 0x0) write$auto_nvmf_dev_fops_fabrics(r0, &(0x7f0000001a40)="fb40e8", 0x3) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_create={@map_fd=r1, @target_ifindex, 0x81, 0x10000, @perf_event={0xffff}}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x2}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0x4) socket(0x10, 0x2, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x10008, 0x2000000000002) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000180), 0xa0300, 0x0) r4 = epoll_create$auto(0x3f) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000080", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1801, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffd, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) 4.85502498s ago: executing program 2 (id=1696): syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYBLOB="230027bd7000fedbdf25090000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) getpgid$auto(0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) readv$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop10/queue/max_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x21, 0x4, 0x4) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8, 0x0) unshare$auto(0x40000080) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r2, 0x1, 0x803a, r2, 0x0) madvise$auto(0x110c230000, 0x46, 0x9) ioctl$auto(0xffffffffffffffff, 0x76, 0xffffffffffffffff) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x7fffffff, 0x3, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f0000000100)=0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_tid_address$auto(0x0) 4.020139844s ago: executing program 0 (id=1698): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x93f, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x800, 0x0, 0x0, [0x2, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) ioctl$auto(r0, 0x1, r0) 3.835738032s ago: executing program 0 (id=1700): write$auto(0xffffffffffffffff, 0x0, 0x80000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nicvf0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xf0, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2f}, @ETHTOOL_A_MODULE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}]}, 0xf0}}, 0x4000000) r11 = socket(0x10, 0x3, 0x15) write$auto(r11, &(0x7f0000000000)='-\x00', 0x2fb) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r11) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 3.675007652s ago: executing program 1 (id=1701): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(&(0x7f0000000180)="3b50ea6b7e3e528300dadce21e9b8ac6c95dce63d9019ff0401db82a5aa63540b6516f93e4cb399e9e7f69bef4b28d589344eaa6856fd56504c238f4a9d46c2b29bfb14602bdd9e71f1e639ef8f2050289c443811c04595b40d1ecb58d9736d5c219e55d5c790dcb73902bcfeb0b690008000000000000b2649f14025cf077707cfbb4183f0a9518f218a2f53baebd4d3b5b1a", 0xfffd, 0x0) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0xe, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x2, 0x0, 0xdd, 0x10, 0xfffffffffffffffe, 0x1000000000000002) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000300)=@token_create={0x7}, 0x5ff) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x6f29, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x3, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) 3.629296821s ago: executing program 2 (id=1702): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1b, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffb, 0x8000200008011, r2, 0x8000) r3 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0xc0, 0x0) write$auto(r3, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x7f, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x8000000000000018, 0xfffffffffffffffe, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2c0001, 0x0) mmap$auto(0x0, 0xfffffffffffffffb, 0xdb, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r4, 0x4068aea3, &(0x7f0000000080)={0xcc}) semctl$auto(0x1ff, 0x2, 0x13, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) setsockopt$auto(r0, 0x80000007, 0xfd, 0x0, 0x1000007) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x541b, 0x10000000000402) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(&(0x7f00000001c0)='\x00', 0x4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) 3.447212639s ago: executing program 3 (id=1703): write$auto(0xffffffffffffffff, 0x0, 0x80000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) timer_create$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r4, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'nicvf0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'geneve0\x00', 0x0}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="130026bd7000dddbdf250200000008000300", @ANYRES32=0x0, @ANYRESDEC=r7], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0xf0, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x101}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_MODULE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x2f}, @ETHTOOL_A_MODULE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}]}, 0xf0}}, 0x4000000) r11 = socket(0x10, 0x3, 0x15) write$auto(r11, &(0x7f0000000000)='-\x00', 0x2fb) r12 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r11) sendmsg$auto_ETHTOOL_MSG_MM_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01e46cb7b7e6831b0a1672b8d588"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) unshare$auto(0x40000080) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 3.205220515s ago: executing program 1 (id=1704): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r1, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) pwritev2$auto(r2, &(0x7f0000000140)={&(0x7f0000000040)="5d40b061c29c4171301dc209583e16c4f7aa177b9ec4f2ce85be4f9bf64536cee64cbe4b4d23fb2c03d59dae1af2ba22741fb54209817622330589b0dafc56effeca2f419531993318e7f6e8f48e5221180a595c4a65938a23ab3f87353e922e6a85da1beb47cac0d4fff225ac657da1a123e5a056bc5a37c2767a3c31bba1badc42a100c77ee1a02a784e3a73b9b245f687bfad78246d065af4686baf53e2bafb84164865daa26a68040d77a7b8d75c887383fff543cd5be5180905bf6c8261765bd64585a00d", 0xf}, 0xac7, 0x3, 0x51ee6cc3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000500)={0x5, 0x0, [{0x80000002, 0xffff, 0x0, 0x9cc, 0x6b, 0x100005, 0x7ffffffd}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000004911db0ff6800", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r8, 0x2, 0x70bd29, 0x25dfdc01, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1ff}, @L2TP_ATTR_STATS={0x142, 0x1e, 0x0, 0x1, [@generic="ca3e7205a68561efceaa572572a8699ba45fb282239fcedeccdba978296717ff6392b7d5c56ebfe37d0d4e72eb2a05de413b3e3106e317521b818e44b2e3a93e9b8fdd5f9cf215118d0c12898ba773f90ab625f3cba4e58560088c07a1f9706abe973c9c0199d48e933104264bcef0a188ab27e1d6852e41f35f47d7489cd327f226b9643ce4b52206346bad1cd293b50906db00085135c4f1c964585e5e11ae5fd10750e5be6ab97310a4e6e03453fcdf9010edc8636f74", @generic="fef67291b0f3e1cddf9a3f8ca83f5df633f9553298d1345391e6bd28eb8989309937cf2351d08a138703c571703899d432422287e078f2abf81f1dca3a21ab22075988d94a29fae1ac6393c195c96fafbcf8ef89ad63280dfc2397ffc93e87564a64120c581360f08461b22786c708f57c405ea2ed1c3c1288520de815fd4820fe5942f68ba8"]}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) 2.995686308s ago: executing program 2 (id=1705): r0 = waitid$auto(0x5, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0x8, 0x80}, {0x2, 0x6}, 0x1000000000000004, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x8000, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) r1 = prctl$auto(0x5, 0x80000000, r0, 0x78, 0x8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r3, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000e40)='\xe4\x00\x00o0\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="000129bd70000080000203000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc850) fcntl$auto_F_UNLCK(r4, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=&(0x7f0000000d80)="b623d2751b00fbfad2a6d1a6d09b5de74ab60bd7666cde9499615eb7a03982dfecd08c02032d0ff2dd", 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x3) r7 = socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000000440)={{0x2, 0xee01, 0xffffffffffffffff, 0x80000000, 0x17, 0x67d, 0x5}, 0xe6, 0x1, 0x4, 0x2, @inferred=r0, @raw, 0x6, 0x0, &(0x7f0000000240)="603e04dfb27ca425b28faad73f3164bd7b75e0fd5d47a0b77fd205729bbc40e4a99ea843f8a97aa4259aa427570be761a75f5c0b696b77729c8470f54b9abc1874f34b320e2faacc44953033ddb8fe2720dfff78a6357f250b946f349857888b69d6787e8b14a992abc14fb315f6bd324498e1079b96366c5e4329eb47357e1f4cb21fdf1140ddfc1400ef922cde871acf1b91deb932047a9ca581b0787e27c00ff3880c4390eb922a524d83ace80778cb1ed9a038bc7e8429c1614f58f7bec053a1e1dbaac93142b1ff3c345d62183c76fd6ab2ac30be75143d0d0722db596d999e3413f1febc75b74ccf02d96689f1286e69fcd70a07b291", &(0x7f0000000340)="4d42b779d5378606bc42ab1dedd3fabb388841ec2551ff125cecaf321d993294d73de01d31e68f5ff7c215cd1ec8429a750a3c8746a073879758dd62cb994651ce44a57613ed0c9fd35c057d31e02ed09535af345120e9149dd61c7bb72f7b740630c6b0e7218a1a1c0e97327daa848fa4c1712cbf939d32e01cf88ef773cd1060166c4a8c903284027d20c73eacefea0f75b9e1d2560d45e49f79d02595486957c734186c0d6d0ace42562ff20fbfa5b98bff4a"}) newfstatat$auto(r7, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)={0x10000000081, 0x7, 0x8001, 0xfffffbff, 0xffffffffffffffff, 0xee01, 0x0, 0x80, 0x6, 0x1f6, 0xffff, 0xfffffffffffffffa, 0x7, 0x15, 0xfffffffffffffffd, 0x49b, 0x2}, 0x0) 2.183840961s ago: executing program 1 (id=1706): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r1, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) pwritev2$auto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)="5d40b061c29c4171301dc209583e16c4f7aa177b9ec4f2ce85be4f9bf64536cee64cbe4b4d23fb2c03d59dae1af2ba22741fb54209817622330589b0dafc56effeca2f419531993318e7f6e8f48e5221180a595c4a65938a23ab3f87353e922e6a85da1beb47cac0d4fff225ac657da1a123e5a056bc5a37c2767a3c31bba1badc42a100c77ee1a02a784e3a73b9b245f687bfad78246d065af4686baf53e2bafb84164865daa26a68040d77a7b8d75c887383fff543cd5be5180905bf6c8261765bd64585a00d", 0xf}, 0xac7, 0x3, 0x51ee6cc3, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000500)={0x5, 0x0, [{0x80000002, 0xffff, 0x0, 0x9cc, 0x6b, 0x100005, 0x7ffffffd}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000004911db0ff6800", @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r7, 0x2, 0x70bd29, 0x25dfdc01, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1ff}, @L2TP_ATTR_STATS={0x142, 0x1e, 0x0, 0x1, [@generic="ca3e7205a68561efceaa572572a8699ba45fb282239fcedeccdba978296717ff6392b7d5c56ebfe37d0d4e72eb2a05de413b3e3106e317521b818e44b2e3a93e9b8fdd5f9cf215118d0c12898ba773f90ab625f3cba4e58560088c07a1f9706abe973c9c0199d48e933104264bcef0a188ab27e1d6852e41f35f47d7489cd327f226b9643ce4b52206346bad1cd293b50906db00085135c4f1c964585e5e11ae5fd10750e5be6ab97310a4e6e03453fcdf9010edc8636f74", @generic="fef67291b0f3e1cddf9a3f8ca83f5df633f9553298d1345391e6bd28eb8989309937cf2351d08a138703c571703899d432422287e078f2abf81f1dca3a21ab22075988d94a29fae1ac6393c195c96fafbcf8ef89ad63280dfc2397ffc93e87564a64120c581360f08461b22786c708f57c405ea2ed1c3c1288520de815fd4820fe5942f68ba8"]}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) 1.992777054s ago: executing program 0 (id=1707): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r1, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) pwritev2$auto(r2, &(0x7f0000000140)={&(0x7f0000000040)="5d40b061c29c4171301dc209583e16c4f7aa177b9ec4f2ce85be4f9bf64536cee64cbe4b4d23fb2c03d59dae1af2ba22741fb54209817622330589b0dafc56effeca2f419531993318e7f6e8f48e5221180a595c4a65938a23ab3f87353e922e6a85da1beb47cac0d4fff225ac657da1a123e5a056bc5a37c2767a3c31bba1badc42a100c77ee1a02a784e3a73b9b245f687bfad78246d065af4686baf53e2bafb84164865daa26a68040d77a7b8d75c887383fff543cd5be5180905bf6c8261765bd64585a00d", 0xf}, 0xac7, 0x3, 0x51ee6cc3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000500)={0x5, 0x0, [{0x80000002, 0xffff, 0x0, 0x9cc, 0x6b, 0x100005, 0x7ffffffd}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000004911db0ff6800", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r8, 0x2, 0x70bd29, 0x25dfdc01, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1ff}, @L2TP_ATTR_STATS={0x142, 0x1e, 0x0, 0x1, [@generic="ca3e7205a68561efceaa572572a8699ba45fb282239fcedeccdba978296717ff6392b7d5c56ebfe37d0d4e72eb2a05de413b3e3106e317521b818e44b2e3a93e9b8fdd5f9cf215118d0c12898ba773f90ab625f3cba4e58560088c07a1f9706abe973c9c0199d48e933104264bcef0a188ab27e1d6852e41f35f47d7489cd327f226b9643ce4b52206346bad1cd293b50906db00085135c4f1c964585e5e11ae5fd10750e5be6ab97310a4e6e03453fcdf9010edc8636f74", @generic="fef67291b0f3e1cddf9a3f8ca83f5df633f9553298d1345391e6bd28eb8989309937cf2351d08a138703c571703899d432422287e078f2abf81f1dca3a21ab22075988d94a29fae1ac6393c195c96fafbcf8ef89ad63280dfc2397ffc93e87564a64120c581360f08461b22786c708f57c405ea2ed1c3c1288520de815fd4820fe5942f68ba8"]}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) 1.565622261s ago: executing program 2 (id=1708): mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x44eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r3, 0x0, 0x20000000001, 0x7fff) ioctl$auto(0x3, 0xc008ae67, 0x38) 1.199532876s ago: executing program 1 (id=1709): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r0, 0x1, r0) 1.099190689s ago: executing program 1 (id=1710): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/rpc/auth.unix.gid/flush\x00', 0x1a9601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045035, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000)='veth1_vlan\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='hfs\x00\x81\xe2\xde\xa8\xb7\xc4G[*}\xaa{\xf1\x86\xf7d@\xe8Y\xea\xb1H\x01\xff\"^\'6\xba\xa9s\x1d\xf4\xe1i\xc5\xb6_B\xa7KFS\xc1\xa7\x8e*h\xe3\x8b\x7f\xca\xfcNEi\x84?\x82\xff\xf2\xac\xd1\xee\xf4\x9a?\xac\x11\x88\aO\x84\xe6k\a\x9bY\xddx\xb8\xdf\vHv\xb5\f\xbc\b\xc0\xfa\xc0\xfe\xa6\xce\xbd\x03\x00\x93\xdc4\x97\xce\xd5&\x93\xae\x05q\xe9\xa8?\x00\xbdi\x88q\xd0w\xfd@\r\xce\xe4\xadrt`\xf8`b\xbf\xeci\x93a\xc6o\x9ej\xe4\xa3\x9d\xaa\xe1\xe1N\n\xbcq\n[\"5\xd4\xa6\x96#).\xbd\x8aD\x88>8J\v\xb5\x99H\xc5\a\xc9\xcf\xbc\x85\xbf\x85\x81\x0f\x7f8\x11\xdbK\xf3\xc2#\x18 \xdf\x05\xcd\xbb\xc03_\xb7Q@\xf2G', 0x7, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6a742, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) (fail_nth: 2) ioctl$auto(0x3, 0x541b, 0x38) close_range$auto(0x2, 0x8, 0x0) 392.352599ms ago: executing program 0 (id=1711): mmap$auto(0x0, 0xe983, 0x1000, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xc040aed4, 0xffffffffffffffff) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, 0xffffffffffffffff, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x6, 0xfffffffffffffff3, 0xffffffffffffffff}, 0x7ff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES64=r0], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) socket(0x2c, 0x3, 0x0) (async) read$auto(r3, 0x0, 0x25) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r7 = socket(0x2c, 0x3, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4000, 0x0) (async) accept$auto(r7, 0x0, 0x0) (async) read$auto(r6, 0x0, 0x2) mmap$auto(0xa, 0x2000c, 0x40000000df, 0xd4, r1, 0x8000) socket(0xa, 0x2, 0x73) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0xe) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000300)="6e05df076307f04618641343ba2b98fd02b61f546a6975b99fa0e23b98cd3ff65a5d49000000000000000000c5e67e423e0cfb8467d64c687493f35bac2a5258f02b0418402fda10") (async) r9 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) (async) mmap$auto(0x8, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) (async) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) 287.741327ms ago: executing program 1 (id=1712): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r6, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) r7 = socket(0xa, 0x2, 0x73) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24004001) bind$auto(0x3, &(0x7f0000000040), 0x69) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0x80002, 0x0) 525.715µs ago: executing program 0 (id=1713): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x200000, 0x20499d, 0x9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) r0 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x7) syz_genetlink_get_family_id$auto_nl802154(0x0, r1) write$auto(0x3, 0x0, 0xfffffdef) 0s ago: executing program 2 (id=1714): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') read$auto(r1, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) pwritev2$auto(r2, &(0x7f0000000140)={&(0x7f0000000040)="5d40b061c29c4171301dc209583e16c4f7aa177b9ec4f2ce85be4f9bf64536cee64cbe4b4d23fb2c03d59dae1af2ba22741fb54209817622330589b0dafc56effeca2f419531993318e7f6e8f48e5221180a595c4a65938a23ab3f87353e922e6a85da1beb47cac0d4fff225ac657da1a123e5a056bc5a37c2767a3c31bba1badc42a100c77ee1a02a784e3a73b9b245f687bfad78246d065af4686baf53e2bafb84164865daa26a68040d77a7b8d75c887383fff543cd5be5180905bf6c8261765bd64585a00d", 0xf}, 0xac7, 0x3, 0x51ee6cc3, 0x4) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000500)={0x5, 0x0, [{0x80000002, 0xffff, 0x0, 0x9cc, 0x6b, 0x100005, 0x7ffffffd}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000004911db0ff6800", @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf254900000019000d019bfcc642fb8222e81879d39dc6fd94f765ecdeabfd000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x178, r8, 0x2, 0x70bd29, 0x25dfdc01, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1ff}, @L2TP_ATTR_STATS={0x142, 0x1e, 0x0, 0x1, [@generic="ca3e7205a68561efceaa572572a8699ba45fb282239fcedeccdba978296717ff6392b7d5c56ebfe37d0d4e72eb2a05de413b3e3106e317521b818e44b2e3a93e9b8fdd5f9cf215118d0c12898ba773f90ab625f3cba4e58560088c07a1f9706abe973c9c0199d48e933104264bcef0a188ab27e1d6852e41f35f47d7489cd327f226b9643ce4b52206346bad1cd293b50906db00085135c4f1c964585e5e11ae5fd10750e5be6ab97310a4e6e03453fcdf9010edc8636f74", @generic="fef67291b0f3e1cddf9a3f8ca83f5df633f9553298d1345391e6bd28eb8989309937cf2351d08a138703c571703899d432422287e078f2abf81f1dca3a21ab22075988d94a29fae1ac6393c195c96fafbcf8ef89ad63280dfc2397ffc93e87564a64120c581360f08461b22786c708f57c405ea2ed1c3c1288520de815fd4820fe5942f68ba8"]}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1ff}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/014/001\x00', 0x802, 0x0) kernel console output (not intermixed with test programs): 403.481015][T12067] ? __kvmalloc_node_noprof+0x129/0xa50 [ 403.481054][T12067] should_failslab+0xc2/0x120 [ 403.481079][T12067] __kvmalloc_node_noprof+0x13c/0xa50 [ 403.481114][T12067] ? kfree+0x27d/0x6e0 [ 403.481141][T12067] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 403.481184][T12067] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 403.481216][T12067] snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 403.481258][T12067] snd_pcm_plug_alloc+0x146/0x330 [ 403.481294][T12067] snd_pcm_oss_change_params_locked+0x19bb/0x3a40 [ 403.481346][T12067] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 403.481381][T12067] ? snd_pcm_oss_ioctl+0x110e/0x37c0 [ 403.481439][T12067] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 403.481480][T12067] snd_pcm_oss_ioctl+0x2212/0x37c0 [ 403.481523][T12067] ? hook_file_ioctl_common+0x144/0x410 [ 403.481565][T12067] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 403.481605][T12067] ? __fget_files+0x20e/0x3c0 [ 403.481648][T12067] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 403.481684][T12067] __x64_sys_ioctl+0x18e/0x210 [ 403.481720][T12067] do_syscall_64+0xcd/0xf80 [ 403.481756][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.481782][T12067] RIP: 0033:0x7fdcf7d8f7c9 [ 403.481802][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.481826][T12067] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.481851][T12067] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 403.481868][T12067] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 403.481884][T12067] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.481899][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.481914][T12067] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 403.481951][T12067] [ 404.082250][T12085] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1350'. [ 404.094923][T12085] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1350'. [ 404.329000][T12091] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1351'. [ 404.375006][T12096] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1353'. [ 404.387773][T12096] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1353'. [ 404.463890][T12091] zswap: compressor 000 not available [ 404.481674][T12100] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 404.862122][T12105] zswap: compressor 000 not available [ 405.126325][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'. [ 405.596422][T12122] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1360'. [ 405.618980][T12122] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1360'. [ 405.765070][T12128] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 405.871613][T12130] FAULT_INJECTION: forcing a failure. [ 405.871613][T12130] name failslab, interval 1, probability 0, space 0, times 0 [ 405.912988][T12130] CPU: 1 UID: 0 PID: 12130 Comm: syz.1.1362 Not tainted syzkaller #0 PREEMPT(full) [ 405.913022][T12130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.913035][T12130] Call Trace: [ 405.913045][T12130] [ 405.913054][T12130] dump_stack_lvl+0x16c/0x1f0 [ 405.913091][T12130] should_fail_ex+0x512/0x640 [ 405.913130][T12130] ? fs_reclaim_acquire+0xae/0x150 [ 405.913158][T12130] should_failslab+0xc2/0x120 [ 405.913183][T12130] __kmalloc_noprof+0xdd/0x8f0 [ 405.913212][T12130] ? tomoyo_encode2+0x100/0x3e0 [ 405.913244][T12130] ? tomoyo_encode2+0x100/0x3e0 [ 405.913267][T12130] tomoyo_encode2+0x100/0x3e0 [ 405.913296][T12130] tomoyo_encode+0x29/0x50 [ 405.913320][T12130] tomoyo_realpath_from_path+0x18f/0x6e0 [ 405.913356][T12130] tomoyo_path_number_perm+0x245/0x580 [ 405.913391][T12130] ? tomoyo_path_number_perm+0x237/0x580 [ 405.913429][T12130] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 405.913465][T12130] ? find_held_lock+0x2b/0x80 [ 405.913531][T12130] ? find_held_lock+0x2b/0x80 [ 405.913564][T12130] ? hook_file_ioctl_common+0x144/0x410 [ 405.913608][T12130] ? __fget_files+0x20e/0x3c0 [ 405.913650][T12130] security_file_ioctl+0x9b/0x240 [ 405.913688][T12130] __x64_sys_ioctl+0xb7/0x210 [ 405.913724][T12130] do_syscall_64+0xcd/0xf80 [ 405.913758][T12130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.913783][T12130] RIP: 0033:0x7fcc4fb8f7c9 [ 405.913802][T12130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.913826][T12130] RSP: 002b:00007fcc50a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.913849][T12130] RAX: ffffffffffffffda RBX: 00007fcc4fde6090 RCX: 00007fcc4fb8f7c9 [ 405.913865][T12130] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000007 [ 405.913880][T12130] RBP: 00007fcc50a26090 R08: 0000000000000000 R09: 0000000000000000 [ 405.913895][T12130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.913909][T12130] R13: 00007fcc4fde6128 R14: 00007fcc4fde6090 R15: 00007ffd7288ca38 [ 405.913943][T12130] [ 406.137795][T12130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 406.355276][T12132] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1363'. [ 406.375241][T12132] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1363'. [ 406.660790][T12144] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 406.769153][T12151] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xfffffd12 [ 406.830250][T12147] FAULT_INJECTION: forcing a failure. [ 406.830250][T12147] name failslab, interval 1, probability 0, space 0, times 0 [ 406.887376][T12145] zswap: compressor 000 not available [ 406.898187][T12147] CPU: 0 UID: 0 PID: 12147 Comm: syz.0.1365 Not tainted syzkaller #0 PREEMPT(full) [ 406.898222][T12147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.898238][T12147] Call Trace: [ 406.898247][T12147] [ 406.898257][T12147] dump_stack_lvl+0x16c/0x1f0 [ 406.898298][T12147] should_fail_ex+0x512/0x640 [ 406.898334][T12147] ? kmem_cache_alloc_noprof+0x62/0x760 [ 406.898370][T12147] should_failslab+0xc2/0x120 [ 406.898396][T12147] kmem_cache_alloc_noprof+0x75/0x760 [ 406.898429][T12147] ? vm_area_dup+0x27/0x8d0 [ 406.898465][T12147] ? vm_area_dup+0x27/0x8d0 [ 406.898489][T12147] vm_area_dup+0x27/0x8d0 [ 406.898520][T12147] dup_mmap+0x86f/0x2250 [ 406.898557][T12147] ? __pfx_dup_mmap+0x10/0x10 [ 406.898603][T12147] copy_process+0x6476/0x74e0 [ 406.898637][T12147] ? preempt_schedule_thunk+0x16/0x30 [ 406.898697][T12147] ? __pfx_copy_process+0x10/0x10 [ 406.898738][T12147] ? find_held_lock+0x2b/0x80 [ 406.898776][T12147] ? futex_private_hash_put+0x160/0x1b0 [ 406.898812][T12147] kernel_clone+0xfc/0x910 [ 406.898850][T12147] ? __pfx_futex_wake+0x10/0x10 [ 406.898883][T12147] ? __pfx_kernel_clone+0x10/0x10 [ 406.898941][T12147] __do_sys_clone+0xce/0x120 [ 406.898977][T12147] ? __pfx___do_sys_clone+0x10/0x10 [ 406.899013][T12147] ? __sys_sendmsg+0x18c/0x220 [ 406.899061][T12147] ? xfd_validate_state+0x61/0x180 [ 406.899113][T12147] do_syscall_64+0xcd/0xf80 [ 406.899151][T12147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.899178][T12147] RIP: 0033:0x7efc6218f7c9 [ 406.899200][T12147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.899223][T12147] RSP: 002b:00007efc62f7bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 406.899247][T12147] RAX: ffffffffffffffda RBX: 00007efc623e6090 RCX: 00007efc6218f7c9 [ 406.899265][T12147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 406.899279][T12147] RBP: 00007efc62213f91 R08: 0000000000000000 R09: 0000000000000000 [ 406.899293][T12147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.899308][T12147] R13: 00007efc623e6128 R14: 00007efc623e6090 R15: 00007ffffba0bea8 [ 406.899347][T12147] [ 407.272394][T12155] zswap: compressor not available [ 407.351063][T12163] FAULT_INJECTION: forcing a failure. [ 407.351063][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 407.366116][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.2.1368 Not tainted syzkaller #0 PREEMPT(full) [ 407.366151][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.366165][T12163] Call Trace: [ 407.366174][T12163] [ 407.366185][T12163] dump_stack_lvl+0x16c/0x1f0 [ 407.366225][T12163] should_fail_ex+0x512/0x640 [ 407.366260][T12163] ? __kmalloc_noprof+0xca/0x8f0 [ 407.366293][T12163] should_failslab+0xc2/0x120 [ 407.366318][T12163] __kmalloc_noprof+0xdd/0x8f0 [ 407.366348][T12163] ? snd_pcm_plugin_build+0x434/0x650 [ 407.366389][T12163] ? snd_pcm_plugin_build+0x434/0x650 [ 407.366421][T12163] snd_pcm_plugin_build+0x434/0x650 [ 407.366459][T12163] snd_pcm_plugin_build_io+0x207/0x5f0 [ 407.366496][T12163] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 407.366537][T12163] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 407.366582][T12163] snd_pcm_oss_change_params_locked+0x2e6a/0x3a40 [ 407.366631][T12163] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 407.366665][T12163] ? snd_pcm_oss_ioctl+0x110e/0x37c0 [ 407.366716][T12163] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 407.366752][T12163] snd_pcm_oss_ioctl+0x2212/0x37c0 [ 407.366787][T12163] ? hook_file_ioctl_common+0x144/0x410 [ 407.366824][T12163] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 407.366860][T12163] ? __fget_files+0x20e/0x3c0 [ 407.366902][T12163] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 407.366947][T12163] __x64_sys_ioctl+0x18e/0x210 [ 407.366985][T12163] do_syscall_64+0xcd/0xf80 [ 407.367020][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.367044][T12163] RIP: 0033:0x7fdcf7d8f7c9 [ 407.367065][T12163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.367089][T12163] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.367114][T12163] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 407.367129][T12163] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 407.367143][T12163] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.367156][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.367170][T12163] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 407.367206][T12163] [ 408.222363][T12183] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 408.296081][T12189] FAULT_INJECTION: forcing a failure. [ 408.296081][T12189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.374599][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.3.1374 Not tainted syzkaller #0 PREEMPT(full) [ 408.374632][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.374646][T12189] Call Trace: [ 408.374654][T12189] [ 408.374664][T12189] dump_stack_lvl+0x16c/0x1f0 [ 408.374699][T12189] should_fail_ex+0x512/0x640 [ 408.374738][T12189] _copy_to_user+0x32/0xd0 [ 408.374780][T12189] ctl_ioctl+0x173/0xd70 [ 408.374820][T12189] ? __pfx_ctl_ioctl+0x10/0x10 [ 408.374890][T12189] ? __fget_files+0x20e/0x3c0 [ 408.374933][T12189] dm_ctl_ioctl+0x22/0x30 [ 408.374966][T12189] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 408.375000][T12189] __x64_sys_ioctl+0x18e/0x210 [ 408.375034][T12189] do_syscall_64+0xcd/0xf80 [ 408.375068][T12189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.375093][T12189] RIP: 0033:0x7f283898f7c9 [ 408.375113][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.375135][T12189] RSP: 002b:00007f283980b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.375159][T12189] RAX: ffffffffffffffda RBX: 00007f2838be6090 RCX: 00007f283898f7c9 [ 408.375175][T12189] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000007 [ 408.375191][T12189] RBP: 00007f283980b090 R08: 0000000000000000 R09: 0000000000000000 [ 408.375205][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.375220][T12189] R13: 00007f2838be6128 R14: 00007f2838be6090 R15: 00007ffc3fe67be8 [ 408.375255][T12189] [ 409.043177][T12194] zswap: compressor 000 not available [ 409.399569][T12208] __nla_validate_parse: 1 callbacks suppressed [ 409.399585][T12208] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1378'. [ 409.667719][T12208] zswap: compressor 000 not available [ 409.702601][T12220] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1382'. [ 409.732475][T12220] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1382'. [ 409.905708][T12218] bond0: no command found in slaves file - use +ifname or -ifname [ 409.972036][T12226] FAULT_INJECTION: forcing a failure. [ 409.972036][T12226] name failslab, interval 1, probability 0, space 0, times 0 [ 410.027997][T12226] CPU: 0 UID: 0 PID: 12226 Comm: syz.1.1383 Not tainted syzkaller #0 PREEMPT(full) [ 410.028019][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.028028][T12226] Call Trace: [ 410.028033][T12226] [ 410.028039][T12226] dump_stack_lvl+0x16c/0x1f0 [ 410.028063][T12226] should_fail_ex+0x512/0x640 [ 410.028082][T12226] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 410.028103][T12226] should_failslab+0xc2/0x120 [ 410.028117][T12226] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 410.028133][T12226] ? __dquot_initialize+0x299/0xd50 [ 410.028151][T12226] ? __d_alloc+0x35/0xa80 [ 410.028168][T12226] ? __d_alloc+0x35/0xa80 [ 410.028180][T12226] __d_alloc+0x35/0xa80 [ 410.028196][T12226] d_alloc_pseudo+0x1c/0xc0 [ 410.028213][T12226] alloc_file_pseudo+0xcf/0x230 [ 410.028231][T12226] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 410.028262][T12226] __shmem_file_setup+0x1a3/0x330 [ 410.028279][T12226] shmem_zero_setup+0x93/0x1a0 [ 410.028297][T12226] __mmap_region+0x2076/0x2770 [ 410.028316][T12226] ? __pfx___mmap_region+0x10/0x10 [ 410.028332][T12226] ? __lock_acquire+0x433/0x22f0 [ 410.028359][T12226] ? mark_held_locks+0x49/0x80 [ 410.028380][T12226] ? __schedule+0x114c/0x6150 [ 410.028422][T12226] ? rcu_is_watching+0x12/0xc0 [ 410.028448][T12226] mmap_region+0x1ab/0x3f0 [ 410.028465][T12226] ? __get_unmapped_area+0x267/0x440 [ 410.028487][T12226] do_mmap+0xa3e/0x1210 [ 410.028509][T12226] ? __pfx_do_mmap+0x10/0x10 [ 410.028529][T12226] ? __pfx_down_write_killable+0x10/0x10 [ 410.028553][T12226] vm_mmap_pgoff+0x29e/0x470 [ 410.028576][T12226] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 410.028594][T12226] ? __pfx_get_nodes+0x10/0x10 [ 410.028622][T12226] ? __x64_sys_futex+0x1e0/0x4c0 [ 410.028639][T12226] ? __x64_sys_futex+0x1e9/0x4c0 [ 410.028658][T12226] ksys_mmap_pgoff+0x7d/0x5c0 [ 410.028676][T12226] ? xfd_validate_state+0x61/0x180 [ 410.028696][T12226] ? __pfx_kernel_mbind+0x10/0x10 [ 410.028714][T12226] __x64_sys_mmap+0x125/0x190 [ 410.028729][T12226] do_syscall_64+0xcd/0xf80 [ 410.028748][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.028763][T12226] RIP: 0033:0x7fcc4fb8f7c9 [ 410.028774][T12226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.028788][T12226] RSP: 002b:00007fcc50a05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 410.028801][T12226] RAX: ffffffffffffffda RBX: 00007fcc4fde6180 RCX: 00007fcc4fb8f7c9 [ 410.028810][T12226] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 410.028819][T12226] RBP: 00007fcc4fc13f91 R08: 0000000000000401 R09: 0000000000008000 [ 410.028827][T12226] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 410.028835][T12226] R13: 00007fcc4fde6218 R14: 00007fcc4fde6180 R15: 00007ffd7288ca38 [ 410.028854][T12226] [ 410.600733][T12236] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 410.696487][T12240] FAULT_INJECTION: forcing a failure. [ 410.696487][T12240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.742913][T12240] CPU: 0 UID: 0 PID: 12240 Comm: syz.2.1386 Not tainted syzkaller #0 PREEMPT(full) [ 410.742946][T12240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.742959][T12240] Call Trace: [ 410.742967][T12240] [ 410.742977][T12240] dump_stack_lvl+0x16c/0x1f0 [ 410.743006][T12240] should_fail_ex+0x512/0x640 [ 410.743029][T12240] _copy_from_user+0x2e/0xd0 [ 410.743049][T12240] ctl_ioctl+0x28a/0xd70 [ 410.743071][T12240] ? __pfx_dev_create+0x10/0x10 [ 410.743083][T12240] ? __pfx_ctl_ioctl+0x10/0x10 [ 410.743122][T12240] ? __fget_files+0x20e/0x3c0 [ 410.743151][T12240] dm_ctl_ioctl+0x22/0x30 [ 410.743170][T12240] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 410.743189][T12240] __x64_sys_ioctl+0x18e/0x210 [ 410.743210][T12240] do_syscall_64+0xcd/0xf80 [ 410.743230][T12240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.743245][T12240] RIP: 0033:0x7fdcf7d8f7c9 [ 410.743257][T12240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.743270][T12240] RSP: 002b:00007fdcf8c4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 410.743284][T12240] RAX: ffffffffffffffda RBX: 00007fdcf7fe6090 RCX: 00007fdcf7d8f7c9 [ 410.743293][T12240] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000007 [ 410.743301][T12240] RBP: 00007fdcf8c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.743309][T12240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.743318][T12240] R13: 00007fdcf7fe6128 R14: 00007fdcf7fe6090 R15: 00007fff3914ca28 [ 410.743336][T12240] [ 411.874420][T12249] zswap: compressor 000 not available [ 412.499028][T12276] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1392'. [ 412.511881][T12276] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1392'. [ 412.564134][T12278] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1393'. [ 412.574529][T12278] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1393'. [ 413.082270][T12291] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 413.216903][T12293] FAULT_INJECTION: forcing a failure. [ 413.216903][T12293] name failslab, interval 1, probability 0, space 0, times 0 [ 413.246834][T12293] CPU: 1 UID: 0 PID: 12293 Comm: syz.1.1399 Not tainted syzkaller #0 PREEMPT(full) [ 413.246867][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 413.246882][T12293] Call Trace: [ 413.246890][T12293] [ 413.246900][T12293] dump_stack_lvl+0x16c/0x1f0 [ 413.246936][T12293] should_fail_ex+0x512/0x640 [ 413.246969][T12293] ? __kvmalloc_node_noprof+0x129/0xa50 [ 413.247007][T12293] should_failslab+0xc2/0x120 [ 413.247031][T12293] __kvmalloc_node_noprof+0x13c/0xa50 [ 413.247067][T12293] ? dm_create+0x9f/0x15b0 [ 413.247106][T12293] ? dm_create+0x9f/0x15b0 [ 413.247136][T12293] dm_create+0x9f/0x15b0 [ 413.247171][T12293] dev_create+0x121/0x290 [ 413.247194][T12293] ? __pfx_dev_create+0x10/0x10 [ 413.247214][T12293] ? __might_fault+0x13b/0x190 [ 413.247252][T12293] ctl_ioctl+0x798/0xd70 [ 413.247287][T12293] ? __pfx_dev_create+0x10/0x10 [ 413.247308][T12293] ? __pfx_ctl_ioctl+0x10/0x10 [ 413.247376][T12293] ? __fget_files+0x20e/0x3c0 [ 413.247411][T12293] dm_ctl_ioctl+0x22/0x30 [ 413.247430][T12293] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 413.247449][T12293] __x64_sys_ioctl+0x18e/0x210 [ 413.247470][T12293] do_syscall_64+0xcd/0xf80 [ 413.247489][T12293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.247503][T12293] RIP: 0033:0x7fcc4fb8f7c9 [ 413.247515][T12293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.247528][T12293] RSP: 002b:00007fcc50a26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 413.247548][T12293] RAX: ffffffffffffffda RBX: 00007fcc4fde6090 RCX: 00007fcc4fb8f7c9 [ 413.247557][T12293] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000007 [ 413.247566][T12293] RBP: 00007fcc50a26090 R08: 0000000000000000 R09: 0000000000000000 [ 413.247574][T12293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.247582][T12293] R13: 00007fcc4fde6128 R14: 00007fcc4fde6090 R15: 00007ffd7288ca38 [ 413.247601][T12293] [ 413.453121][T12293] device-mapper: core: unable to allocate device, out of memory. [ 414.505387][T12310] zswap: compressor 000 not available [ 414.526717][T12321] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1404'. [ 414.537571][T12321] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1404'. [ 415.283229][T12338] FAULT_INJECTION: forcing a failure. [ 415.283229][T12338] name failslab, interval 1, probability 0, space 0, times 0 [ 415.320968][T12338] CPU: 0 UID: 0 PID: 12338 Comm: syz.0.1408 Not tainted syzkaller #0 PREEMPT(full) [ 415.321004][T12338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.321020][T12338] Call Trace: [ 415.321029][T12338] [ 415.321040][T12338] dump_stack_lvl+0x16c/0x1f0 [ 415.321081][T12338] should_fail_ex+0x512/0x640 [ 415.321114][T12338] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 415.321156][T12338] should_failslab+0xc2/0x120 [ 415.321179][T12338] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 415.321207][T12338] ? __alloc_skb+0x156/0x410 [ 415.321243][T12338] ? __alloc_skb+0x156/0x410 [ 415.321271][T12338] __alloc_skb+0x156/0x410 [ 415.321303][T12338] ? __alloc_skb+0x35d/0x410 [ 415.321332][T12338] ? __pfx___alloc_skb+0x10/0x10 [ 415.321366][T12338] ? rtnl_prop_list_size+0x295/0x2d0 [ 415.321392][T12338] ? if_nlmsg_size+0x4a7/0xb30 [ 415.321421][T12338] rtmsg_ifinfo_build_skb+0x81/0x280 [ 415.321460][T12338] rtmsg_ifinfo+0x9f/0x1a0 [ 415.321492][T12338] register_netdevice+0x1b60/0x21d0 [ 415.321522][T12338] ? __pfx_register_netdevice+0x10/0x10 [ 415.321556][T12338] __ip_tunnel_create+0x540/0x6b0 [ 415.321589][T12338] ? __pfx___ip_tunnel_create+0x10/0x10 [ 415.321627][T12338] ip_tunnel_init_net+0x22f/0x7d0 [ 415.321660][T12338] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 415.321699][T12338] ? ops_init+0x77/0x5f0 [ 415.321723][T12338] ? __pfx_erspan_init_net+0x10/0x10 [ 415.321745][T12338] ops_init+0x1e2/0x5f0 [ 415.321772][T12338] setup_net+0x11d/0x3a0 [ 415.321797][T12338] ? __pfx_setup_net+0x10/0x10 [ 415.321817][T12338] ? lockdep_init_map_type+0x5c/0x270 [ 415.321847][T12338] ? mutex_init_lockep+0x110/0x150 [ 415.321880][T12338] copy_net_ns+0x351/0x5d0 [ 415.321911][T12338] create_new_namespaces+0x3ea/0xab0 [ 415.321953][T12338] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 415.321993][T12338] ksys_unshare+0x45b/0xa40 [ 415.322019][T12338] ? __pfx_ksys_unshare+0x10/0x10 [ 415.322044][T12338] ? xfd_validate_state+0x61/0x180 [ 415.322089][T12338] __x64_sys_unshare+0x31/0x40 [ 415.322111][T12338] do_syscall_64+0xcd/0xf80 [ 415.322159][T12338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.322180][T12338] RIP: 0033:0x7efc6218f7c9 [ 415.322199][T12338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.322222][T12338] RSP: 002b:00007efc62f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 415.322246][T12338] RAX: ffffffffffffffda RBX: 00007efc623e5fa0 RCX: 00007efc6218f7c9 [ 415.322262][T12338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 415.322274][T12338] RBP: 00007efc62213f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.322285][T12338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.322299][T12338] R13: 00007efc623e6038 R14: 00007efc623e5fa0 R15: 00007ffffba0bea8 [ 415.322333][T12338] [ 415.792691][T12344] FAULT_INJECTION: forcing a failure. [ 415.792691][T12344] name failslab, interval 1, probability 0, space 0, times 0 [ 415.846373][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.2.1409 Not tainted syzkaller #0 PREEMPT(full) [ 415.846411][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.846426][T12344] Call Trace: [ 415.846434][T12344] [ 415.846444][T12344] dump_stack_lvl+0x16c/0x1f0 [ 415.846481][T12344] should_fail_ex+0x512/0x640 [ 415.846513][T12344] ? __kmalloc_cache_noprof+0x5f/0x800 [ 415.846547][T12344] should_failslab+0xc2/0x120 [ 415.846571][T12344] __kmalloc_cache_noprof+0x72/0x800 [ 415.846598][T12344] ? ipv6_add_dev+0x6af/0x1590 [ 415.846633][T12344] ? ipv6_add_dev+0x6af/0x1590 [ 415.846662][T12344] ipv6_add_dev+0x6af/0x1590 [ 415.846695][T12344] addrconf_notify+0x53e/0x19b0 [ 415.846729][T12344] ? ip6mr_device_event+0x1bc/0x230 [ 415.846757][T12344] notifier_call_chain+0xbc/0x3e0 [ 415.846778][T12344] ? __pfx_addrconf_notify+0x10/0x10 [ 415.846817][T12344] call_netdevice_notifiers_info+0xbe/0x110 [ 415.846848][T12344] register_netdevice+0x1792/0x21d0 [ 415.846879][T12344] ? __pfx_register_netdevice+0x10/0x10 [ 415.846913][T12344] __ip_tunnel_create+0x540/0x6b0 [ 415.846944][T12344] ? __pfx___ip_tunnel_create+0x10/0x10 [ 415.846982][T12344] ip_tunnel_init_net+0x22f/0x7d0 [ 415.847016][T12344] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 415.847054][T12344] ? ops_init+0x77/0x5f0 [ 415.847078][T12344] ? __pfx_erspan_init_net+0x10/0x10 [ 415.847103][T12344] ops_init+0x1e2/0x5f0 [ 415.847128][T12344] setup_net+0x11d/0x3a0 [ 415.847152][T12344] ? __pfx_setup_net+0x10/0x10 [ 415.847173][T12344] ? lockdep_init_map_type+0x5c/0x270 [ 415.847198][T12344] ? mutex_init_lockep+0x110/0x150 [ 415.847229][T12344] copy_net_ns+0x351/0x5d0 [ 415.847257][T12344] create_new_namespaces+0x3ea/0xab0 [ 415.847295][T12344] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 415.847329][T12344] ksys_unshare+0x45b/0xa40 [ 415.847351][T12344] ? __pfx_ksys_unshare+0x10/0x10 [ 415.847382][T12344] ? xfd_validate_state+0x61/0x180 [ 415.847427][T12344] __x64_sys_unshare+0x31/0x40 [ 415.847448][T12344] do_syscall_64+0xcd/0xf80 [ 415.847481][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.847503][T12344] RIP: 0033:0x7fdcf7d8f7c9 [ 415.847522][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.847542][T12344] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 415.847563][T12344] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 415.847579][T12344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 415.847592][T12344] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 415.847606][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.847619][T12344] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 415.847653][T12344] [ 416.462835][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1412'. [ 416.472661][T12371] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 416.875754][T12379] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1414'. [ 416.888507][T12379] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1414'. [ 416.992703][T12382] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1415'. [ 417.005321][T12382] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1415'. [ 417.443182][T12395] FAULT_INJECTION: forcing a failure. [ 417.443182][T12395] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.456384][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.3.1420 Not tainted syzkaller #0 PREEMPT(full) [ 417.456420][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.456435][T12395] Call Trace: [ 417.456444][T12395] [ 417.456453][T12395] dump_stack_lvl+0x16c/0x1f0 [ 417.456491][T12395] should_fail_ex+0x512/0x640 [ 417.456534][T12395] get_futex_key+0x1d0/0x15f0 [ 417.456568][T12395] ? __pfx_get_futex_key+0x10/0x10 [ 417.456599][T12395] ? find_held_lock+0x2b/0x80 [ 417.456637][T12395] ? snd_pcm_oss_get_active_substream+0x172/0x1d0 [ 417.456676][T12395] futex_wake+0xea/0x530 [ 417.456716][T12395] ? __pfx_futex_wake+0x10/0x10 [ 417.456758][T12395] ? find_held_lock+0x2b/0x80 [ 417.456791][T12395] ? __might_fault+0xe3/0x190 [ 417.456824][T12395] do_futex+0x1e3/0x350 [ 417.456856][T12395] ? __pfx_do_futex+0x10/0x10 [ 417.456887][T12395] ? snd_pcm_oss_ioctl+0x2c2/0x37c0 [ 417.456925][T12395] __x64_sys_futex+0x1e0/0x4c0 [ 417.456958][T12395] ? __fget_files+0x20e/0x3c0 [ 417.456993][T12395] ? __pfx___x64_sys_futex+0x10/0x10 [ 417.457024][T12395] ? xfd_validate_state+0x61/0x180 [ 417.457074][T12395] do_syscall_64+0xcd/0xf80 [ 417.457110][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.457135][T12395] RIP: 0033:0x7f283898f7c9 [ 417.457156][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.457181][T12395] RSP: 002b:00007f283982c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.457204][T12395] RAX: ffffffffffffffda RBX: 00007f2838be5fa8 RCX: 00007f283898f7c9 [ 417.457227][T12395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2838be5fac [ 417.457244][T12395] RBP: 00007f2838be5fa0 R08: 00007f283982d000 R09: 0000000000000000 [ 417.457261][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.457276][T12395] R13: 00007f2838be6038 R14: 00007ffc3fe67b00 R15: 00007ffc3fe67be8 [ 417.457313][T12395] [ 418.060614][T12408] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1424'. [ 418.070978][T12408] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1424'. [ 418.813838][T12426] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 419.325697][T12428] zswap: compressor 000 not available [ 419.633285][T12438] syz.3.1431: vmalloc error: size 4096, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 419.660116][T12438] CPU: 1 UID: 0 PID: 12438 Comm: syz.3.1431 Not tainted syzkaller #0 PREEMPT(full) [ 419.660150][T12438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 419.660164][T12438] Call Trace: [ 419.660172][T12438] [ 419.660181][T12438] dump_stack_lvl+0x16c/0x1f0 [ 419.660217][T12438] warn_alloc+0x248/0x3a0 [ 419.660250][T12438] ? __pfx_warn_alloc+0x10/0x10 [ 419.660282][T12438] ? alloc_pages_mpol+0x25a/0x550 [ 419.660308][T12438] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 419.660329][T12438] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 419.660362][T12438] ? __kmalloc_node_noprof+0x364/0x920 [ 419.660394][T12438] ? __get_vm_area_node+0x208/0x330 [ 419.660425][T12438] __vmalloc_node_range_noprof+0x119b/0x1480 [ 419.660463][T12438] ? n_tty_open+0x1a/0x170 [ 419.660499][T12438] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 419.660524][T12438] ? vc_allocate+0x663/0x880 [ 419.660552][T12438] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 419.660588][T12438] ? n_tty_open+0x1a/0x170 [ 419.660616][T12438] __vmalloc_node_noprof+0xad/0xf0 [ 419.660641][T12438] ? n_tty_open+0x1a/0x170 [ 419.660670][T12438] ? __pfx_n_tty_open+0x10/0x10 [ 419.660700][T12438] n_tty_open+0x1a/0x170 [ 419.660728][T12438] ? __pfx_n_tty_open+0x10/0x10 [ 419.660756][T12438] tty_ldisc_open+0x9f/0x120 [ 419.660793][T12438] tty_ldisc_setup+0x40/0x100 [ 419.660832][T12438] tty_init_dev.part.0+0x1ec/0x500 [ 419.660862][T12438] tty_open+0xa4f/0xf90 [ 419.660896][T12438] ? __pfx_tty_open+0x10/0x10 [ 419.660924][T12438] ? chrdev_open+0x10b/0x6a0 [ 419.660954][T12438] ? __pfx_tty_open+0x10/0x10 [ 419.660980][T12438] chrdev_open+0x234/0x6a0 [ 419.661014][T12438] ? __pfx_apparmor_file_open+0x10/0x10 [ 419.661050][T12438] ? __pfx_chrdev_open+0x10/0x10 [ 419.661074][T12438] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 419.661109][T12438] do_dentry_open+0x748/0x1590 [ 419.661133][T12438] ? __pfx_chrdev_open+0x10/0x10 [ 419.661169][T12438] vfs_open+0x82/0x3f0 [ 419.661202][T12438] path_openat+0x2078/0x3140 [ 419.661242][T12438] ? __pfx_path_openat+0x10/0x10 [ 419.661281][T12438] do_filp_open+0x20b/0x470 [ 419.661308][T12438] ? __pfx_do_filp_open+0x10/0x10 [ 419.661361][T12438] ? alloc_fd+0x471/0x7d0 [ 419.661408][T12438] do_sys_openat2+0x11f/0x280 [ 419.661440][T12438] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.661487][T12438] __x64_sys_openat+0x174/0x210 [ 419.661521][T12438] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.661556][T12438] ? syscall_user_dispatch+0x78/0x140 [ 419.661604][T12438] do_syscall_64+0xcd/0xf80 [ 419.661640][T12438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.661666][T12438] RIP: 0033:0x7f283898f7c9 [ 419.661688][T12438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.661712][T12438] RSP: 002b:00007f283982c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.661737][T12438] RAX: ffffffffffffffda RBX: 00007f2838be5fa0 RCX: 00007f283898f7c9 [ 419.661754][T12438] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 419.661771][T12438] RBP: 00007f2838a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 419.661786][T12438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.661801][T12438] R13: 00007f2838be6038 R14: 00007f2838be5fa0 R15: 00007ffc3fe67be8 [ 419.661837][T12438] [ 419.661846][T12438] Mem-Info: [ 420.050033][T12438] active_anon:15215 inactive_anon:0 isolated_anon:0 [ 420.050033][T12438] active_file:7228 inactive_file:57948 isolated_file:0 [ 420.050033][T12438] unevictable:785 dirty:667 writeback:0 [ 420.050033][T12438] slab_reclaimable:12214 slab_unreclaimable:93240 [ 420.050033][T12438] mapped:26493 shmem:1387 pagetables:1369 [ 420.050033][T12438] sec_pagetables:0 bounce:0 [ 420.050033][T12438] kernel_misc_reclaimable:0 [ 420.050033][T12438] free:1305397 free_pcp:15860 free_cma:0 [ 420.258437][T12447] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1434'. [ 420.268415][T12447] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1434'. [ 420.385339][T12438] Node 0 active_anon:55208kB inactive_anon:276kB active_file:27824kB inactive_file:245336kB unevictable:6616kB isolated(anon):0kB isolated(file):0kB mapped:105972kB dirty:14952kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13648kB pagetables:5240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.485098][T12438] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 420.575744][T12438] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.634688][T12438] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 420.663771][T12438] Node 0 DMA32 free:1303996kB boost:0kB min:34344kB low:42928kB high:51512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53900kB inactive_anon:276kB active_file:28024kB inactive_file:246704kB unevictable:10264kB writepending:16268kB zspages:500kB present:3129332kB managed:2542324kB mlocked:8728kB bounce:0kB free_pcp:33104kB local_pcp:17768kB free_cma:0kB [ 420.836783][T12438] lowmem_reserve[]: 0 0 1 1 1 [ 420.866695][T12438] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.953033][T12438] lowmem_reserve[]: 0 0 0 0 0 [ 420.968452][T12438] Node 1 Normal free:3884840kB boost:0kB min:55536kB low:69420kB high:83304kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29464kB local_pcp:19256kB free_cma:0kB [ 421.075821][T12438] lowmem_reserve[]: 0 0 0 0 0 [ 421.088150][T12438] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 421.103303][T12438] Node 0 DMA32: 3283*4kB (UME) 1777*8kB (UME) 1221*16kB (UME) 847*32kB (UME) 717*64kB (UME) 263*128kB (UME) 184*256kB (UME) 62*512kB (UME) 72*1024kB (UM) 1*2048kB (U) 242*4096kB (UM) = 1299396kB [ 421.124318][T12438] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 421.137912][T12438] Node 1 Normal: 16*4kB (UME) 11*8kB (UE) 19*16kB (UME) 33*32kB (UME) 17*64kB (UME) 12*128kB (UE) 11*256kB (UME) 4*512kB (UM) 5*1024kB (UM) 4*2048kB (UE) 943*4096kB (UM) = 3884840kB [ 421.159974][T12438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.170147][T12438] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 421.190406][T12438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.207804][T12438] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.218416][T12438] 70619 total pagecache pages [ 421.223273][T12438] 15 pages in swap cache [ 421.228574][T12438] Free swap = 124796kB [ 421.232733][T12438] Total swap = 124996kB [ 421.237163][T12438] 2097051 pages RAM [ 421.241087][T12438] 0 pages HighMem/MovableOnly [ 421.245758][T12438] 429444 pages reserved [ 421.251244][T12438] 0 pages cma reserved [ 421.258141][T12438] tty tty17: ldisc open failed (-12), clearing slot 16 [ 421.268512][T12446] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 421.806201][T12469] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1438'. [ 422.111132][T12469] zswap: compressor 000 not available [ 422.821602][T12506] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1444'. [ 422.967490][T12509] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1444'. [ 424.106833][T12534] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1449'. [ 424.117570][T12534] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1449'. [ 424.490419][T12545] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 427.319915][T12598] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1469'. [ 427.657477][T12598] zswap: compressor 000 not available [ 428.939686][T12634] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1468'. [ 429.186277][T12634] zswap: compressor 000 not available [ 429.384652][T12633] zswap: compressor 000 not available [ 429.777870][T12648] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1473'. [ 429.837143][T12648] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1473'. [ 430.190274][T12655] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 430.838849][T12669] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1480'. [ 431.170481][T12669] zswap: compressor 000 not available [ 431.438099][T12679] zswap: compressor 000 not available [ 431.775429][T12689] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1485'. [ 431.796938][T12689] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1485'. [ 431.930475][T12693] random: crng reseeded on system resumption [ 432.011345][T12693] hub 1-0:1.0: USB hub found [ 432.018377][T12693] hub 1-0:1.0: 1 port detected [ 434.472491][T12737] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1495'. [ 434.492199][T12737] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1495'. [ 434.893628][T12740] svc: failed to register nfsdv3 RPC service (errno 111). [ 434.997281][T12740] svc: failed to register nfsaclv3 RPC service (errno 111). [ 435.249352][T12750] FAULT_INJECTION: forcing a failure. [ 435.249352][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 435.346919][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.2.1499 Not tainted syzkaller #0 PREEMPT(full) [ 435.346955][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.346971][T12750] Call Trace: [ 435.346979][T12750] [ 435.346990][T12750] dump_stack_lvl+0x16c/0x1f0 [ 435.347029][T12750] should_fail_ex+0x512/0x640 [ 435.347062][T12750] ? __kmalloc_noprof+0xca/0x8f0 [ 435.347090][T12750] should_failslab+0xc2/0x120 [ 435.347112][T12750] __kmalloc_noprof+0xdd/0x8f0 [ 435.347139][T12750] ? __register_sysctl_table+0xea2/0x1900 [ 435.347189][T12750] ? __register_sysctl_table+0xea2/0x1900 [ 435.347227][T12750] __register_sysctl_table+0xea2/0x1900 [ 435.347269][T12750] ? __pfx___register_sysctl_table+0x10/0x10 [ 435.347304][T12750] ? is_module_address+0x69/0xf0 [ 435.347335][T12750] ? register_net_sysctl_sz+0x222/0x3d0 [ 435.347383][T12750] neigh_sysctl_register+0x31f/0x670 [ 435.347409][T12750] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 435.347445][T12750] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 435.347467][T12750] ? inetdev_init+0x245/0x580 [ 435.347499][T12750] ? inetdev_event+0xc32/0x1840 [ 435.347529][T12750] ? notifier_call_chain+0xbc/0x3e0 [ 435.347559][T12750] ? copy_net_ns+0x351/0x5d0 [ 435.347584][T12750] ? create_new_namespaces+0x3ea/0xab0 [ 435.347614][T12750] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 435.347646][T12750] ? ksys_unshare+0x45b/0xa40 [ 435.347667][T12750] ? __x64_sys_unshare+0x31/0x40 [ 435.347689][T12750] ? do_syscall_64+0xcd/0xf80 [ 435.347721][T12750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.347750][T12750] devinet_sysctl_register+0xb6/0x200 [ 435.347788][T12750] inetdev_init+0x2b8/0x580 [ 435.347825][T12750] inetdev_event+0xc32/0x1840 [ 435.347862][T12750] ? ib_netdevice_event+0xfc/0x330 [ 435.347888][T12750] ? __pfx_inetdev_event+0x10/0x10 [ 435.347929][T12750] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 435.347973][T12750] notifier_call_chain+0xbc/0x3e0 [ 435.347994][T12750] ? __pfx_inetdev_event+0x10/0x10 [ 435.348030][T12750] call_netdevice_notifiers_info+0xbe/0x110 [ 435.348063][T12750] register_netdevice+0x1792/0x21d0 [ 435.348098][T12750] ? __pfx_register_netdevice+0x10/0x10 [ 435.348138][T12750] __ip_tunnel_create+0x540/0x6b0 [ 435.348181][T12750] ? __pfx___ip_tunnel_create+0x10/0x10 [ 435.348228][T12750] ip_tunnel_init_net+0x22f/0x7d0 [ 435.348268][T12750] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 435.348310][T12750] ? ops_init+0x77/0x5f0 [ 435.348335][T12750] ? __pfx_erspan_init_net+0x10/0x10 [ 435.348363][T12750] ops_init+0x1e2/0x5f0 [ 435.348390][T12750] setup_net+0x11d/0x3a0 [ 435.348413][T12750] ? __pfx_setup_net+0x10/0x10 [ 435.348433][T12750] ? lockdep_init_map_type+0x5c/0x270 [ 435.348459][T12750] ? mutex_init_lockep+0x110/0x150 [ 435.348493][T12750] copy_net_ns+0x351/0x5d0 [ 435.348524][T12750] create_new_namespaces+0x3ea/0xab0 [ 435.348568][T12750] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 435.348607][T12750] ksys_unshare+0x45b/0xa40 [ 435.348632][T12750] ? __pfx_ksys_unshare+0x10/0x10 [ 435.348656][T12750] ? xfd_validate_state+0x61/0x180 [ 435.348705][T12750] __x64_sys_unshare+0x31/0x40 [ 435.348728][T12750] do_syscall_64+0xcd/0xf80 [ 435.348775][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.348802][T12750] RIP: 0033:0x7fdcf7d8f7c9 [ 435.348823][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.348847][T12750] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 435.348869][T12750] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 435.348886][T12750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 435.348901][T12750] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.348916][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.348929][T12750] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 435.348961][T12750] [ 435.896652][T12750] sysctl could not get directory: /net/ipv4/neigh/erspan0 -12 [ 436.747118][T12767] ecryptfs_miscdev_write: Error while inspecting packet size [ 436.776683][T12767] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 437.154124][T12773] FAULT_INJECTION: forcing a failure. [ 437.154124][T12773] name failslab, interval 1, probability 0, space 0, times 0 [ 437.202293][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.0.1504 Not tainted syzkaller #0 PREEMPT(full) [ 437.202316][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.202325][T12773] Call Trace: [ 437.202331][T12773] [ 437.202337][T12773] dump_stack_lvl+0x16c/0x1f0 [ 437.202361][T12773] should_fail_ex+0x512/0x640 [ 437.202380][T12773] ? __kmalloc_noprof+0xca/0x8f0 [ 437.202399][T12773] should_failslab+0xc2/0x120 [ 437.202413][T12773] __kmalloc_noprof+0xdd/0x8f0 [ 437.202428][T12773] ? __register_sysctl_table+0xe8e/0x1900 [ 437.202448][T12773] ? __register_sysctl_table+0xea2/0x1900 [ 437.202470][T12773] ? __register_sysctl_table+0xea2/0x1900 [ 437.202488][T12773] __register_sysctl_table+0xea2/0x1900 [ 437.202511][T12773] ? __pfx___register_sysctl_table+0x10/0x10 [ 437.202530][T12773] ? is_module_address+0x69/0xf0 [ 437.202547][T12773] ? register_net_sysctl_sz+0x222/0x3d0 [ 437.202571][T12773] neigh_sysctl_register+0x31f/0x670 [ 437.202585][T12773] ? __pfx_ndisc_ifinfo_sysctl_change+0x10/0x10 [ 437.202608][T12773] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 437.202625][T12773] ? lockdep_init_map_type+0x5c/0x270 [ 437.202640][T12773] ? mld_in_v1_mode+0x2b2/0x3a0 [ 437.202671][T12773] addrconf_sysctl_register+0xb9/0x1f0 [ 437.202706][T12773] ipv6_add_dev+0xb31/0x1590 [ 437.202740][T12773] addrconf_notify+0x53e/0x19b0 [ 437.202776][T12773] ? ip6mr_device_event+0x1bc/0x230 [ 437.202805][T12773] notifier_call_chain+0xbc/0x3e0 [ 437.202829][T12773] ? __pfx_addrconf_notify+0x10/0x10 [ 437.202876][T12773] call_netdevice_notifiers_info+0xbe/0x110 [ 437.202913][T12773] register_netdevice+0x1792/0x21d0 [ 437.202949][T12773] ? __pfx_register_netdevice+0x10/0x10 [ 437.202989][T12773] __ip_tunnel_create+0x540/0x6b0 [ 437.203024][T12773] ? __pfx___ip_tunnel_create+0x10/0x10 [ 437.203070][T12773] ip_tunnel_init_net+0x22f/0x7d0 [ 437.203109][T12773] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 437.203154][T12773] ? ops_init+0x77/0x5f0 [ 437.203183][T12773] ? __pfx_erspan_init_net+0x10/0x10 [ 437.203211][T12773] ops_init+0x1e2/0x5f0 [ 437.203241][T12773] setup_net+0x11d/0x3a0 [ 437.203276][T12773] ? __pfx_setup_net+0x10/0x10 [ 437.203300][T12773] ? lockdep_init_map_type+0x5c/0x270 [ 437.203332][T12773] ? mutex_init_lockep+0x110/0x150 [ 437.203368][T12773] copy_net_ns+0x351/0x5d0 [ 437.203401][T12773] create_new_namespaces+0x3ea/0xab0 [ 437.203446][T12773] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 437.203486][T12773] ksys_unshare+0x45b/0xa40 [ 437.203512][T12773] ? __pfx_ksys_unshare+0x10/0x10 [ 437.203538][T12773] ? xfd_validate_state+0x61/0x180 [ 437.203587][T12773] __x64_sys_unshare+0x31/0x40 [ 437.203607][T12773] do_syscall_64+0xcd/0xf80 [ 437.203644][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.203669][T12773] RIP: 0033:0x7efc6218f7c9 [ 437.203691][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.203715][T12773] RSP: 002b:00007efc62f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 437.203739][T12773] RAX: ffffffffffffffda RBX: 00007efc623e5fa0 RCX: 00007efc6218f7c9 [ 437.203757][T12773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 437.203772][T12773] RBP: 00007efc62213f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.203787][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.203801][T12773] R13: 00007efc623e6038 R14: 00007efc623e5fa0 R15: 00007ffffba0bea8 [ 437.203834][T12773] [ 437.641619][T12773] sysctl could not get directory: /net/ipv6/neigh/erspan0 -12 [ 438.171362][T12786] FAULT_INJECTION: forcing a failure. [ 438.171362][T12786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.213544][T12785] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1507'. [ 438.213922][T12786] CPU: 1 UID: 0 PID: 12786 Comm: syz.2.1506 Not tainted syzkaller #0 PREEMPT(full) [ 438.213952][T12786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.213966][T12786] Call Trace: [ 438.213973][T12786] [ 438.213983][T12786] dump_stack_lvl+0x16c/0x1f0 [ 438.214020][T12786] should_fail_ex+0x512/0x640 [ 438.214057][T12786] _copy_from_user+0x2e/0xd0 [ 438.214089][T12786] sk_setsockopt+0x64b/0x3d50 [ 438.214113][T12786] ? find_held_lock+0x2b/0x80 [ 438.214148][T12786] ? __pfx_sk_setsockopt+0x10/0x10 [ 438.214175][T12786] ? aa_sk_perm+0x2f2/0xae0 [ 438.214213][T12786] ? __pfx_aa_sk_perm+0x10/0x10 [ 438.214249][T12786] ? find_held_lock+0x2b/0x80 [ 438.214283][T12786] ? aa_sock_opt_perm+0xfd/0x1b0 [ 438.214318][T12786] do_sock_setsockopt+0x193/0x1d0 [ 438.214349][T12786] __sys_setsockopt+0x120/0x1a0 [ 438.214388][T12786] __x64_sys_setsockopt+0xbd/0x160 [ 438.214420][T12786] ? do_syscall_64+0x91/0xf80 [ 438.214450][T12786] ? lockdep_hardirqs_on+0x7c/0x110 [ 438.214480][T12786] do_syscall_64+0xcd/0xf80 [ 438.214512][T12786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.214536][T12786] RIP: 0033:0x7fdcf7d8f7c9 [ 438.214555][T12786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.214577][T12786] RSP: 002b:00007fdcf8c2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.214598][T12786] RAX: ffffffffffffffda RBX: 00007fdcf7fe6180 RCX: 00007fdcf7d8f7c9 [ 438.214614][T12786] RDX: 0000000000000020 RSI: 0000000000000001 RDI: 0000000000000003 [ 438.214628][T12786] RBP: 00007fdcf8c2b090 R08: 0000000000000007 R09: 0000000000000000 [ 438.214642][T12786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.214656][T12786] R13: 00007fdcf7fe6218 R14: 00007fdcf7fe6180 R15: 00007fff3914ca28 [ 438.214691][T12786] [ 438.444370][T12788] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1507'. [ 439.033346][T12799] zswap: compressor 000 not available [ 439.821952][T12816] svc: failed to register nfsdv3 RPC service (errno 111). [ 439.833744][T12816] svc: failed to register nfsaclv3 RPC service (errno 111). [ 440.703908][T12839] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1518'. [ 440.718066][T12839] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1518'. [ 440.854308][T12845] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 441.238620][T12855] FAULT_INJECTION: forcing a failure. [ 441.238620][T12855] name failslab, interval 1, probability 0, space 0, times 0 [ 441.251734][T12855] CPU: 0 UID: 0 PID: 12855 Comm: syz.1.1522 Not tainted syzkaller #0 PREEMPT(full) [ 441.251757][T12855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.251766][T12855] Call Trace: [ 441.251772][T12855] [ 441.251779][T12855] dump_stack_lvl+0x16c/0x1f0 [ 441.251811][T12855] should_fail_ex+0x512/0x640 [ 441.251832][T12855] ? kmem_cache_alloc_noprof+0x62/0x760 [ 441.251853][T12855] should_failslab+0xc2/0x120 [ 441.251867][T12855] kmem_cache_alloc_noprof+0x75/0x760 [ 441.251884][T12855] ? __kernfs_new_node+0xd2/0x8d0 [ 441.251905][T12855] ? __kernfs_new_node+0xd2/0x8d0 [ 441.251921][T12855] __kernfs_new_node+0xd2/0x8d0 [ 441.251940][T12855] ? __pfx___kernfs_new_node+0x10/0x10 [ 441.251962][T12855] ? find_held_lock+0x2b/0x80 [ 441.251982][T12855] ? kernfs_root+0xee/0x2a0 [ 441.252002][T12855] kernfs_new_node+0x13c/0x1e0 [ 441.252021][T12855] ? current_in_userns+0xc0/0x190 [ 441.252043][T12855] __kernfs_create_file+0x53/0x350 [ 441.252060][T12855] sysfs_add_file_mode_ns+0x207/0x3c0 [ 441.252081][T12855] internal_create_group+0x578/0xf20 [ 441.252102][T12855] ? kobject_init_and_add+0x123/0x190 [ 441.252123][T12855] ? __pfx_internal_create_group+0x10/0x10 [ 441.252139][T12855] ? __pfx_kobject_init_and_add+0x10/0x10 [ 441.252158][T12855] ? ops_init+0x1e2/0x5f0 [ 441.252172][T12855] ? ksys_unshare+0x45b/0xa40 [ 441.252183][T12855] ? __x64_sys_unshare+0x31/0x40 [ 441.252194][T12855] ? do_syscall_64+0xcd/0xf80 [ 441.252211][T12855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.252228][T12855] internal_create_groups+0x9d/0x150 [ 441.252248][T12855] netdev_queue_update_kobjects+0x115/0x710 [ 441.252271][T12855] netdev_register_kobject+0x2b3/0x3d0 [ 441.252290][T12855] register_netdevice+0x13ac/0x21d0 [ 441.252310][T12855] ? __pfx_register_netdevice+0x10/0x10 [ 441.252330][T12855] __ip_tunnel_create+0x540/0x6b0 [ 441.252349][T12855] ? __pfx___ip_tunnel_create+0x10/0x10 [ 441.252372][T12855] ip_tunnel_init_net+0x22f/0x7d0 [ 441.252392][T12855] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 441.252415][T12855] ? ops_init+0x77/0x5f0 [ 441.252429][T12855] ? __pfx_erspan_init_net+0x10/0x10 [ 441.252444][T12855] ops_init+0x1e2/0x5f0 [ 441.252459][T12855] setup_net+0x11d/0x3a0 [ 441.252473][T12855] ? __pfx_setup_net+0x10/0x10 [ 441.252485][T12855] ? lockdep_init_map_type+0x5c/0x270 [ 441.252501][T12855] ? mutex_init_lockep+0x110/0x150 [ 441.252519][T12855] copy_net_ns+0x351/0x5d0 [ 441.252535][T12855] create_new_namespaces+0x3ea/0xab0 [ 441.252568][T12855] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 441.252589][T12855] ksys_unshare+0x45b/0xa40 [ 441.252602][T12855] ? __pfx_ksys_unshare+0x10/0x10 [ 441.252617][T12855] ? xfd_validate_state+0x61/0x180 [ 441.252642][T12855] __x64_sys_unshare+0x31/0x40 [ 441.252654][T12855] do_syscall_64+0xcd/0xf80 [ 441.252673][T12855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.252686][T12855] RIP: 0033:0x7fcc4fb8f7c9 [ 441.252699][T12855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.252711][T12855] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 441.252725][T12855] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 441.252734][T12855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 441.252743][T12855] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 441.252752][T12855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.252761][T12855] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 441.252780][T12855] [ 442.325467][T12863] zswap: compressor 000 not available [ 444.425158][T12919] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 444.526325][T12924] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 444.539939][T12915] zswap: compressor 000 not available [ 445.316819][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.323180][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.658270][T12947] FAULT_INJECTION: forcing a failure. [ 445.658270][T12947] name failslab, interval 1, probability 0, space 0, times 0 [ 445.686013][T12947] CPU: 0 UID: 0 PID: 12947 Comm: syz.2.1547 Not tainted syzkaller #0 PREEMPT(full) [ 445.686064][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.686091][T12947] Call Trace: [ 445.686102][T12947] [ 445.686114][T12947] dump_stack_lvl+0x16c/0x1f0 [ 445.686154][T12947] should_fail_ex+0x512/0x640 [ 445.686198][T12947] ? __kmalloc_noprof+0xca/0x8f0 [ 445.686232][T12947] should_failslab+0xc2/0x120 [ 445.686260][T12947] __kmalloc_noprof+0xdd/0x8f0 [ 445.686291][T12947] ? __register_sysctl_table+0xea2/0x1900 [ 445.686334][T12947] ? __register_sysctl_table+0xea2/0x1900 [ 445.686373][T12947] __register_sysctl_table+0xea2/0x1900 [ 445.686419][T12947] ? __pfx___register_sysctl_table+0x10/0x10 [ 445.686456][T12947] ? is_module_address+0x69/0xf0 [ 445.686488][T12947] ? register_net_sysctl_sz+0x222/0x3d0 [ 445.686532][T12947] neigh_sysctl_register+0x31f/0x670 [ 445.686553][T12947] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 445.686588][T12947] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 445.686611][T12947] ? inetdev_init+0x245/0x580 [ 445.686638][T12947] ? inetdev_event+0xc32/0x1840 [ 445.686657][T12947] ? notifier_call_chain+0xbc/0x3e0 [ 445.686673][T12947] ? copy_net_ns+0x351/0x5d0 [ 445.686686][T12947] ? create_new_namespaces+0x3ea/0xab0 [ 445.686703][T12947] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 445.686721][T12947] ? ksys_unshare+0x45b/0xa40 [ 445.686732][T12947] ? __x64_sys_unshare+0x31/0x40 [ 445.686744][T12947] ? do_syscall_64+0xcd/0xf80 [ 445.686761][T12947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.686778][T12947] devinet_sysctl_register+0xb6/0x200 [ 445.686798][T12947] inetdev_init+0x2b8/0x580 [ 445.686817][T12947] inetdev_event+0xc32/0x1840 [ 445.686836][T12947] ? ib_netdevice_event+0xfc/0x330 [ 445.686851][T12947] ? __pfx_inetdev_event+0x10/0x10 [ 445.686870][T12947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 445.686893][T12947] notifier_call_chain+0xbc/0x3e0 [ 445.686906][T12947] ? __pfx_inetdev_event+0x10/0x10 [ 445.686927][T12947] call_netdevice_notifiers_info+0xbe/0x110 [ 445.686946][T12947] register_netdevice+0x1792/0x21d0 [ 445.686965][T12947] ? __pfx_register_netdevice+0x10/0x10 [ 445.686985][T12947] __ip_tunnel_create+0x540/0x6b0 [ 445.687003][T12947] ? __pfx___ip_tunnel_create+0x10/0x10 [ 445.687026][T12947] ip_tunnel_init_net+0x22f/0x7d0 [ 445.687046][T12947] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 445.687077][T12947] ? ops_init+0x77/0x5f0 [ 445.687093][T12947] ? __pfx_erspan_init_net+0x10/0x10 [ 445.687108][T12947] ops_init+0x1e2/0x5f0 [ 445.687125][T12947] setup_net+0x11d/0x3a0 [ 445.687139][T12947] ? __pfx_setup_net+0x10/0x10 [ 445.687151][T12947] ? lockdep_init_map_type+0x5c/0x270 [ 445.687168][T12947] ? mutex_init_lockep+0x110/0x150 [ 445.687186][T12947] copy_net_ns+0x351/0x5d0 [ 445.687203][T12947] create_new_namespaces+0x3ea/0xab0 [ 445.687225][T12947] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 445.687246][T12947] ksys_unshare+0x45b/0xa40 [ 445.687259][T12947] ? __pfx_ksys_unshare+0x10/0x10 [ 445.687272][T12947] ? xfd_validate_state+0x61/0x180 [ 445.687298][T12947] __x64_sys_unshare+0x31/0x40 [ 445.687312][T12947] do_syscall_64+0xcd/0xf80 [ 445.687332][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.687345][T12947] RIP: 0033:0x7fdcf7d8f7c9 [ 445.687359][T12947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.687372][T12947] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 445.687386][T12947] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 445.687395][T12947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 445.687404][T12947] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.687412][T12947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.687421][T12947] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 445.687441][T12947] [ 446.303795][T12947] sysctl could not get directory: /net/ipv4/neigh/erspan0 -12 [ 447.009477][T12952] FAULT_INJECTION: forcing a failure. [ 447.009477][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 447.024276][T12952] CPU: 0 UID: 0 PID: 12952 Comm: syz.0.1548 Not tainted syzkaller #0 PREEMPT(full) [ 447.024321][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.024337][T12952] Call Trace: [ 447.024347][T12952] [ 447.024358][T12952] dump_stack_lvl+0x16c/0x1f0 [ 447.024398][T12952] should_fail_ex+0x512/0x640 [ 447.024432][T12952] ? kmem_cache_alloc_noprof+0x62/0x760 [ 447.024468][T12952] should_failslab+0xc2/0x120 [ 447.024494][T12952] kmem_cache_alloc_noprof+0x75/0x760 [ 447.024525][T12952] ? __kernfs_new_node+0xd2/0x8d0 [ 447.024563][T12952] ? __kernfs_new_node+0xd2/0x8d0 [ 447.024592][T12952] __kernfs_new_node+0xd2/0x8d0 [ 447.024628][T12952] ? __pfx___kernfs_new_node+0x10/0x10 [ 447.024667][T12952] ? find_held_lock+0x2b/0x80 [ 447.024698][T12952] ? kernfs_root+0xee/0x2a0 [ 447.024735][T12952] kernfs_new_node+0x13c/0x1e0 [ 447.024773][T12952] __kernfs_create_file+0x53/0x350 [ 447.024804][T12952] sysfs_add_file_mode_ns+0x207/0x3c0 [ 447.024845][T12952] internal_create_group+0x578/0xf20 [ 447.024888][T12952] ? __pfx_internal_create_group+0x10/0x10 [ 447.024918][T12952] ? __x64_sys_unshare+0x31/0x40 [ 447.024940][T12952] ? do_syscall_64+0xcd/0xf80 [ 447.024971][T12952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.025010][T12952] netdev_queue_update_kobjects+0x17a/0x710 [ 447.025050][T12952] netdev_register_kobject+0x2b3/0x3d0 [ 447.025087][T12952] register_netdevice+0x13ac/0x21d0 [ 447.025121][T12952] ? __pfx_register_netdevice+0x10/0x10 [ 447.025159][T12952] __ip_tunnel_create+0x540/0x6b0 [ 447.025190][T12952] ? __pfx___ip_tunnel_create+0x10/0x10 [ 447.025230][T12952] ip_tunnel_init_net+0x22f/0x7d0 [ 447.025265][T12952] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 447.025317][T12952] ? ops_init+0x77/0x5f0 [ 447.025343][T12952] ? __pfx_erspan_init_net+0x10/0x10 [ 447.025370][T12952] ops_init+0x1e2/0x5f0 [ 447.025396][T12952] setup_net+0x11d/0x3a0 [ 447.025420][T12952] ? __pfx_setup_net+0x10/0x10 [ 447.025441][T12952] ? lockdep_init_map_type+0x5c/0x270 [ 447.025470][T12952] ? mutex_init_lockep+0x110/0x150 [ 447.025503][T12952] copy_net_ns+0x351/0x5d0 [ 447.025533][T12952] create_new_namespaces+0x3ea/0xab0 [ 447.025577][T12952] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 447.025613][T12952] ksys_unshare+0x45b/0xa40 [ 447.025635][T12952] ? __pfx_ksys_unshare+0x10/0x10 [ 447.025667][T12952] __x64_sys_unshare+0x31/0x40 [ 447.025688][T12952] do_syscall_64+0xcd/0xf80 [ 447.025723][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.025749][T12952] RIP: 0033:0x7efc6218f7c9 [ 447.025771][T12952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.025795][T12952] RSP: 002b:00007efc62f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 447.025820][T12952] RAX: ffffffffffffffda RBX: 00007efc623e5fa0 RCX: 00007efc6218f7c9 [ 447.025838][T12952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 447.025853][T12952] RBP: 00007efc62213f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.025869][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.025884][T12952] R13: 00007efc623e6038 R14: 00007efc623e5fa0 R15: 00007ffffba0bea8 [ 447.025922][T12952] [ 447.027110][T12954] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1549'. [ 447.449515][T12963] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1549'. [ 447.461585][T12958] zswap: compressor 000 not available [ 447.540033][T12965] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 448.929030][T12986] svc: failed to register nfsdv3 RPC service (errno 111). [ 448.949613][T12986] svc: failed to register nfsaclv3 RPC service (errno 111). [ 450.701496][T13016] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1561'. [ 450.752058][T13016] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1561'. [ 451.239401][T13019] zswap: compressor 000 not available [ 451.743110][T13031] svc: failed to register nfsdv3 RPC service (errno 111). [ 451.794321][T13031] svc: failed to register nfsaclv3 RPC service (errno 111). [ 453.327040][ T5843] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 453.327075][ T5843] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 453.342229][ T5843] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 453.381918][T13045] svc: failed to register nfsdv3 RPC service (errno 111). [ 453.418238][T13045] svc: failed to register nfsaclv3 RPC service (errno 512). [ 454.994136][T13097] netlink: 50 bytes leftover after parsing attributes in process `syz.0.1575'. [ 455.276935][T13097] zswap: compressor 000 not available [ 455.707725][T13105] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1577'. [ 455.750697][T13105] netlink: 496 bytes leftover after parsing attributes in process `syz.1.1577'. [ 457.061417][T13120] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1580'. [ 457.511014][T13120] zswap: compressor 000 not available [ 457.712268][T13137] zswap: compressor 000 not available [ 457.802666][T13148] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1586'. [ 458.102877][T13148] zswap: compressor 000 not available [ 459.374376][T13177] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1593'. [ 459.619785][T13183] svc: failed to register nfsdv3 RPC service (errno 111). [ 459.634919][T13183] svc: failed to register nfsaclv3 RPC service (errno 111). [ 460.204613][T13195] FAULT_INJECTION: forcing a failure. [ 460.204613][T13195] name failslab, interval 1, probability 0, space 0, times 0 [ 460.228746][T13195] CPU: 0 UID: 0 PID: 13195 Comm: syz.0.1596 Not tainted syzkaller #0 PREEMPT(full) [ 460.228785][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.228802][T13195] Call Trace: [ 460.228812][T13195] [ 460.228823][T13195] dump_stack_lvl+0x16c/0x1f0 [ 460.228866][T13195] should_fail_ex+0x512/0x640 [ 460.228903][T13195] ? fs_reclaim_acquire+0xae/0x150 [ 460.228932][T13195] should_failslab+0xc2/0x120 [ 460.228969][T13195] __kmalloc_noprof+0xdd/0x8f0 [ 460.229002][T13195] ? tomoyo_encode2+0x100/0x3e0 [ 460.229040][T13195] ? tomoyo_encode2+0x100/0x3e0 [ 460.229063][T13195] tomoyo_encode2+0x100/0x3e0 [ 460.229096][T13195] tomoyo_encode+0x29/0x50 [ 460.229132][T13195] tomoyo_realpath_from_path+0x18f/0x6e0 [ 460.229160][T13195] ? tomoyo_profile+0x47/0x60 [ 460.229195][T13195] tomoyo_path_number_perm+0x245/0x580 [ 460.229231][T13195] ? tomoyo_path_number_perm+0x237/0x580 [ 460.229271][T13195] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 460.229308][T13195] ? futex_wake+0x1ad/0x530 [ 460.229392][T13195] ? find_held_lock+0x2b/0x80 [ 460.229428][T13195] ? hook_file_ioctl_common+0x144/0x410 [ 460.229479][T13195] ? __fget_files+0x20e/0x3c0 [ 460.229524][T13195] security_file_ioctl+0x9b/0x240 [ 460.229566][T13195] __x64_sys_ioctl+0xb7/0x210 [ 460.229602][T13195] do_syscall_64+0xcd/0xf80 [ 460.229637][T13195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.229668][T13195] RIP: 0033:0x7efc6218f7c9 [ 460.229690][T13195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.229717][T13195] RSP: 002b:00007efc62f9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.229742][T13195] RAX: ffffffffffffffda RBX: 00007efc623e5fa0 RCX: 00007efc6218f7c9 [ 460.229765][T13195] RDX: 0000000000000038 RSI: 000000000000541b RDI: 0000000000000003 [ 460.229780][T13195] RBP: 00007efc62213f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.229796][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.229811][T13195] R13: 00007efc623e6038 R14: 00007efc623e5fa0 R15: 00007ffffba0bea8 [ 460.229849][T13195] [ 460.229979][T13195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.825521][T13206] FAULT_INJECTION: forcing a failure. [ 461.825521][T13206] name failslab, interval 1, probability 0, space 0, times 0 [ 461.866693][T13206] CPU: 1 UID: 0 PID: 13206 Comm: syz.3.1597 Not tainted syzkaller #0 PREEMPT(full) [ 461.866731][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.866745][T13206] Call Trace: [ 461.866754][T13206] [ 461.866763][T13206] dump_stack_lvl+0x16c/0x1f0 [ 461.866802][T13206] should_fail_ex+0x512/0x640 [ 461.866832][T13206] ? __kmalloc_noprof+0xca/0x8f0 [ 461.866862][T13206] should_failslab+0xc2/0x120 [ 461.866884][T13206] __kmalloc_noprof+0xdd/0x8f0 [ 461.866909][T13206] ? process_preds+0x48b/0x1c50 [ 461.866942][T13206] ? process_preds+0x48b/0x1c50 [ 461.866969][T13206] process_preds+0x48b/0x1c50 [ 461.867003][T13206] ? create_filter_start.constprop.0+0x56/0x300 [ 461.867036][T13206] create_filter+0x140/0x210 [ 461.867066][T13206] ? __pfx_create_filter+0x10/0x10 [ 461.867093][T13206] ? __pfx___mutex_lock+0x10/0x10 [ 461.867125][T13206] ? find_held_lock+0x2b/0x80 [ 461.867158][T13206] apply_event_filter+0x220/0x500 [ 461.867188][T13206] ? __pfx_apply_event_filter+0x10/0x10 [ 461.867227][T13206] event_filter_write+0x16d/0x290 [ 461.867250][T13206] ? __pfx_event_filter_write+0x10/0x10 [ 461.867270][T13206] vfs_write+0x2a0/0x11d0 [ 461.867304][T13206] ? __pfx___mutex_lock+0x10/0x10 [ 461.867336][T13206] ? __pfx_vfs_write+0x10/0x10 [ 461.867376][T13206] ? __fget_files+0x20e/0x3c0 [ 461.867417][T13206] ksys_write+0x12a/0x250 [ 461.867448][T13206] ? __pfx_ksys_write+0x10/0x10 [ 461.867490][T13206] do_syscall_64+0xcd/0xf80 [ 461.867530][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.867553][T13206] RIP: 0033:0x7f283898f7c9 [ 461.867571][T13206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.867592][T13206] RSP: 002b:00007f283982c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.867613][T13206] RAX: ffffffffffffffda RBX: 00007f2838be5fa0 RCX: 00007f283898f7c9 [ 461.867628][T13206] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 461.867641][T13206] RBP: 00007f2838a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 461.867655][T13206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.867669][T13206] R13: 00007f2838be6038 R14: 00007f2838be5fa0 R15: 00007ffc3fe67be8 [ 461.867702][T13206] [ 461.877739][T13212] Unable to find swap-space signature [ 462.377839][T13219] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1602'. [ 462.408248][T13219] netlink: 496 bytes leftover after parsing attributes in process `syz.2.1602'. [ 462.736650][T13226] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1604'. [ 462.777382][T13226] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1604'. [ 463.101612][T13233] FAULT_INJECTION: forcing a failure. [ 463.101612][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 463.115141][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.0.1605 Not tainted syzkaller #0 PREEMPT(full) [ 463.115173][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.115187][T13233] Call Trace: [ 463.115196][T13233] [ 463.115205][T13233] dump_stack_lvl+0x16c/0x1f0 [ 463.115242][T13233] should_fail_ex+0x512/0x640 [ 463.115275][T13233] ? fs_reclaim_acquire+0xae/0x150 [ 463.115302][T13233] should_failslab+0xc2/0x120 [ 463.115327][T13233] __kmalloc_noprof+0xdd/0x8f0 [ 463.115355][T13233] ? tomoyo_encode2+0x100/0x3e0 [ 463.115386][T13233] ? tomoyo_encode2+0x100/0x3e0 [ 463.115417][T13233] tomoyo_encode2+0x100/0x3e0 [ 463.115446][T13233] tomoyo_encode+0x29/0x50 [ 463.115469][T13233] tomoyo_realpath_from_path+0x18f/0x6e0 [ 463.115493][T13233] ? tomoyo_profile+0x47/0x60 [ 463.115521][T13233] tomoyo_path_number_perm+0x245/0x580 [ 463.115550][T13233] ? tomoyo_path_number_perm+0x237/0x580 [ 463.115586][T13233] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 463.115627][T13233] ? find_held_lock+0x2b/0x80 [ 463.115691][T13233] ? rcu_is_watching+0x12/0xc0 [ 463.115727][T13233] ? hook_file_ioctl_common+0x144/0x410 [ 463.115780][T13233] security_file_ioctl+0x9b/0x240 [ 463.115817][T13233] __x64_sys_ioctl+0xb7/0x210 [ 463.115853][T13233] do_syscall_64+0xcd/0xf80 [ 463.115887][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.115912][T13233] RIP: 0033:0x7efc6218f7c9 [ 463.115932][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.115955][T13233] RSP: 002b:00007efc62f7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.115978][T13233] RAX: ffffffffffffffda RBX: 00007efc623e6090 RCX: 00007efc6218f7c9 [ 463.115995][T13233] RDX: 0000000000000038 RSI: 000000004038ae7a RDI: 0000000000000003 [ 463.116010][T13233] RBP: 00007efc62f7c090 R08: 0000000000000000 R09: 0000000000000000 [ 463.116025][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.116040][T13233] R13: 00007efc623e6128 R14: 00007efc623e6090 R15: 00007ffffba0bea8 [ 463.116075][T13233] [ 463.116308][T13233] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.259960][ T5843] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 464.259996][ T5843] Bluetooth: hci3: unexpected subevent 0x0e length: 725 > 15 [ 464.286123][ T5843] Bluetooth: hci3: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 464.400797][T13243] program syz.1.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 466.094307][T13252] zswap: compressor 000 not available [ 466.196190][T13265] FAULT_INJECTION: forcing a failure. [ 466.196190][T13265] name failslab, interval 1, probability 0, space 0, times 0 [ 466.386986][T13265] CPU: 0 UID: 0 PID: 13265 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT(full) [ 466.387021][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.387036][T13265] Call Trace: [ 466.387045][T13265] [ 466.387055][T13265] dump_stack_lvl+0x16c/0x1f0 [ 466.387092][T13265] should_fail_ex+0x512/0x640 [ 466.387127][T13265] ? __kmalloc_cache_noprof+0x5f/0x800 [ 466.387162][T13265] should_failslab+0xc2/0x120 [ 466.387187][T13265] __kmalloc_cache_noprof+0x72/0x800 [ 466.387217][T13265] ? queue_work_on+0x12a/0x1f0 [ 466.387247][T13265] ? inetdev_init+0x66/0x580 [ 466.387280][T13265] ? queue_work_on+0x8b/0x1f0 [ 466.387312][T13265] ? inetdev_init+0x66/0x580 [ 466.387344][T13265] inetdev_init+0x66/0x580 [ 466.387389][T13265] inetdev_event+0xc32/0x1840 [ 466.387428][T13265] ? ib_netdevice_event+0xfc/0x330 [ 466.387455][T13265] ? __pfx_inetdev_event+0x10/0x10 [ 466.387494][T13265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 466.387539][T13265] notifier_call_chain+0xbc/0x3e0 [ 466.387563][T13265] ? __pfx_inetdev_event+0x10/0x10 [ 466.387606][T13265] call_netdevice_notifiers_info+0xbe/0x110 [ 466.387642][T13265] register_netdevice+0x1792/0x21d0 [ 466.387677][T13265] ? __pfx_register_netdevice+0x10/0x10 [ 466.387717][T13265] __ip_tunnel_create+0x540/0x6b0 [ 466.387753][T13265] ? __pfx___ip_tunnel_create+0x10/0x10 [ 466.387798][T13265] ip_tunnel_init_net+0x22f/0x7d0 [ 466.387831][T13265] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 466.387873][T13265] ? ops_init+0x77/0x5f0 [ 466.387901][T13265] ? __pfx_erspan_init_net+0x10/0x10 [ 466.387929][T13265] ops_init+0x1e2/0x5f0 [ 466.387959][T13265] setup_net+0x11d/0x3a0 [ 466.387986][T13265] ? __pfx_setup_net+0x10/0x10 [ 466.388009][T13265] ? lockdep_init_map_type+0x5c/0x270 [ 466.388037][T13265] ? mutex_init_lockep+0x110/0x150 [ 466.388071][T13265] copy_net_ns+0x351/0x5d0 [ 466.388104][T13265] create_new_namespaces+0x3ea/0xab0 [ 466.388149][T13265] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 466.388187][T13265] ksys_unshare+0x45b/0xa40 [ 466.388212][T13265] ? __pfx_ksys_unshare+0x10/0x10 [ 466.388237][T13265] ? xfd_validate_state+0x61/0x180 [ 466.388286][T13265] __x64_sys_unshare+0x31/0x40 [ 466.388310][T13265] do_syscall_64+0xcd/0xf80 [ 466.388347][T13265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.388380][T13265] RIP: 0033:0x7fcc4fb8f7c9 [ 466.388402][T13265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.388427][T13265] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.388452][T13265] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 466.388470][T13265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 466.388485][T13265] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 466.388502][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.388518][T13265] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 466.388556][T13265] [ 468.559811][T13276] FAULT_INJECTION: forcing a failure. [ 468.559811][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 468.595919][T13276] CPU: 0 UID: 0 PID: 13276 Comm: syz.1.1617 Not tainted syzkaller #0 PREEMPT(full) [ 468.595955][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 468.595969][T13276] Call Trace: [ 468.595977][T13276] [ 468.595987][T13276] dump_stack_lvl+0x16c/0x1f0 [ 468.596029][T13276] should_fail_ex+0x512/0x640 [ 468.596071][T13276] should_failslab+0xc2/0x120 [ 468.596100][T13276] __kmalloc_cache_noprof+0x72/0x800 [ 468.596129][T13276] ? __pfx_batadv_hardif_get_by_netdev+0x10/0x10 [ 468.596161][T13276] ? cfusbl_device_notify+0x75c/0x900 [ 468.596192][T13276] ? net_generic+0xf4/0x2a0 [ 468.596220][T13276] ? batadv_hard_if_event+0xb13/0x14f0 [ 468.596252][T13276] ? caif_device_notify+0x21b/0x12c0 [ 468.596287][T13276] ? batadv_hard_if_event+0xb13/0x14f0 [ 468.596320][T13276] batadv_hard_if_event+0xb13/0x14f0 [ 468.596362][T13276] notifier_call_chain+0xbc/0x3e0 [ 468.596387][T13276] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 468.596428][T13276] call_netdevice_notifiers_info+0xbe/0x110 [ 468.596464][T13276] register_netdevice+0x1792/0x21d0 [ 468.596499][T13276] ? __pfx_register_netdevice+0x10/0x10 [ 468.596541][T13276] __ip_tunnel_create+0x540/0x6b0 [ 468.596575][T13276] ? __pfx___ip_tunnel_create+0x10/0x10 [ 468.596615][T13276] ip_tunnel_init_net+0x22f/0x7d0 [ 468.596653][T13276] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 468.596697][T13276] ? ops_init+0x77/0x5f0 [ 468.596725][T13276] ? __pfx_erspan_init_net+0x10/0x10 [ 468.596754][T13276] ops_init+0x1e2/0x5f0 [ 468.596783][T13276] setup_net+0x11d/0x3a0 [ 468.596810][T13276] ? __pfx_setup_net+0x10/0x10 [ 468.596833][T13276] ? lockdep_init_map_type+0x5c/0x270 [ 468.596864][T13276] ? mutex_init_lockep+0x110/0x150 [ 468.596910][T13276] copy_net_ns+0x351/0x5d0 [ 468.596944][T13276] create_new_namespaces+0x3ea/0xab0 [ 468.596988][T13276] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 468.597028][T13276] ksys_unshare+0x45b/0xa40 [ 468.597052][T13276] ? __pfx_ksys_unshare+0x10/0x10 [ 468.597075][T13276] ? xfd_validate_state+0x61/0x180 [ 468.597124][T13276] __x64_sys_unshare+0x31/0x40 [ 468.597146][T13276] do_syscall_64+0xcd/0xf80 [ 468.597183][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.597209][T13276] RIP: 0033:0x7fcc4fb8f7c9 [ 468.597230][T13276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.597254][T13276] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 468.597279][T13276] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 468.597296][T13276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 468.597312][T13276] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 468.597328][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.597343][T13276] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 468.597379][T13276] [ 469.597864][T13289] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1620'. [ 469.637733][T13289] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1620'. [ 472.123810][T13330] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1630'. [ 472.160823][T13330] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1630'. [ 472.618556][T13336] svc: failed to register nfsdv3 RPC service (errno 111). [ 472.648322][T13336] svc: failed to register nfsaclv3 RPC service (errno 111). [ 473.481294][T13355] FAULT_INJECTION: forcing a failure. [ 473.481294][T13355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.514705][T13355] CPU: 1 UID: 0 PID: 13355 Comm: syz.2.1634 Not tainted syzkaller #0 PREEMPT(full) [ 473.514726][T13355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.514736][T13355] Call Trace: [ 473.514741][T13355] [ 473.514748][T13355] dump_stack_lvl+0x16c/0x1f0 [ 473.514772][T13355] should_fail_ex+0x512/0x640 [ 473.514794][T13355] should_fail_alloc_page+0xe7/0x130 [ 473.514811][T13355] prepare_alloc_pages+0x3c2/0x610 [ 473.514828][T13355] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 473.514850][T13355] ? find_held_lock+0x2b/0x80 [ 473.514874][T13355] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 473.514894][T13355] ? look_up_lock_class+0x59/0x130 [ 473.514916][T13355] ? lock_acquire+0x179/0x330 [ 473.514933][T13355] ? __lock_acquire+0x433/0x22f0 [ 473.514947][T13355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.514970][T13355] ? policy_nodemask+0xea/0x4e0 [ 473.514984][T13355] alloc_pages_mpol+0x1fb/0x550 [ 473.514998][T13355] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 473.515011][T13355] ? __pfx___mutex_lock+0x10/0x10 [ 473.515034][T13355] alloc_pages_noprof+0x12d/0x180 [ 473.515048][T13355] __pmd_alloc+0x3b/0x8b0 [ 473.515071][T13355] huge_pte_alloc+0x384/0x4f0 [ 473.515091][T13355] hugetlb_fault+0x373/0x2f30 [ 473.515111][T13355] ? __pfx_hugetlb_fault+0x10/0x10 [ 473.515135][T13355] ? find_vma+0xbf/0x140 [ 473.515153][T13355] ? __pfx_find_vma+0x10/0x10 [ 473.515173][T13355] handle_mm_fault+0x95d/0xad0 [ 473.515191][T13355] do_user_addr_fault+0x2e4/0xda0 [ 473.515209][T13355] ? rcu_is_watching+0x12/0xc0 [ 473.515232][T13355] exc_page_fault+0x64/0xc0 [ 473.515250][T13355] asm_exc_page_fault+0x26/0x30 [ 473.515264][T13355] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 473.515280][T13355] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 473.515293][T13355] RSP: 0018:ffffc9000c6974b8 EFLAGS: 00050206 [ 473.515305][T13355] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000038 [ 473.515313][T13355] RDX: fffff520018d2ed2 RSI: 0000000000000038 RDI: ffffc9000c697658 [ 473.515322][T13355] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520018d2ed1 [ 473.515330][T13355] R10: ffffc9000c69768f R11: 00000000ffffffff R12: 0000000000000000 [ 473.515338][T13355] R13: ffffc9000c697658 R14: 0000000000000000 R15: ffffc9000c697728 [ 473.515357][T13355] _copy_from_user+0x98/0xd0 [ 473.515380][T13355] kvm_arch_vm_ioctl+0xa1d/0x18b0 [ 473.515400][T13355] ? ima_match_policy+0x8c4/0x23e0 [ 473.515421][T13355] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 473.515442][T13355] ? __lock_acquire+0x433/0x22f0 [ 473.515458][T13355] ? __lock_acquire+0x433/0x22f0 [ 473.515478][T13355] ? __lock_acquire+0x433/0x22f0 [ 473.515496][T13355] ? __lock_acquire+0x433/0x22f0 [ 473.515526][T13355] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 473.515541][T13355] ? is_bpf_text_address+0x94/0x1a0 [ 473.515559][T13355] ? kernel_text_address+0x8d/0x100 [ 473.515576][T13355] ? __kernel_text_address+0xd/0x40 [ 473.515591][T13355] ? unwind_get_return_address+0x59/0xa0 [ 473.515608][T13355] ? arch_stack_walk+0xa6/0x100 [ 473.515639][T13355] ? stack_trace_save+0x8e/0xc0 [ 473.515652][T13355] ? __pfx_stack_trace_save+0x10/0x10 [ 473.515665][T13355] ? kasan_save_track+0x14/0x30 [ 473.515685][T13355] ? stack_depot_save_flags+0x29/0x9b0 [ 473.515708][T13355] ? kasan_save_stack+0x42/0x60 [ 473.515726][T13355] ? kasan_save_stack+0x33/0x60 [ 473.515743][T13355] ? kasan_save_track+0x14/0x30 [ 473.515760][T13355] ? __kasan_save_free_info+0x3b/0x60 [ 473.515776][T13355] ? __kasan_slab_free+0x5f/0x80 [ 473.515795][T13355] ? kfree+0x2f8/0x6e0 [ 473.515808][T13355] ? tomoyo_path_number_perm+0x470/0x580 [ 473.515828][T13355] ? security_file_ioctl+0x9b/0x240 [ 473.515848][T13355] ? __x64_sys_ioctl+0xb7/0x210 [ 473.515868][T13355] kvm_vm_ioctl+0x1a91/0x3fa0 [ 473.515892][T13355] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 473.515919][T13355] ? kasan_quarantine_put+0x10a/0x240 [ 473.515938][T13355] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.515962][T13355] ? find_held_lock+0x2b/0x80 [ 473.515981][T13355] ? tomoyo_path_number_perm+0x295/0x580 [ 473.516003][T13355] ? tomoyo_path_number_perm+0x18d/0x580 [ 473.516025][T13355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.516046][T13355] ? find_held_lock+0x2b/0x80 [ 473.516068][T13355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.516090][T13355] ? do_vfs_ioctl+0x128/0x14f0 [ 473.516107][T13355] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 473.516132][T13355] ? hook_file_ioctl_common+0x144/0x410 [ 473.516161][T13355] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 473.516178][T13355] __x64_sys_ioctl+0x18e/0x210 [ 473.516197][T13355] do_syscall_64+0xcd/0xf80 [ 473.516216][T13355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.516230][T13355] RIP: 0033:0x7fdcf7d8f7c9 [ 473.516241][T13355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.516254][T13355] RSP: 002b:00007fdcf8c4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.516267][T13355] RAX: ffffffffffffffda RBX: 00007fdcf7fe6090 RCX: 00007fdcf7d8f7c9 [ 473.516276][T13355] RDX: 0000000000000038 RSI: 000000004038ae7a RDI: 0000000000000003 [ 473.516283][T13355] RBP: 00007fdcf8c4c090 R08: 0000000000000000 R09: 0000000000000000 [ 473.516291][T13355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.516299][T13355] R13: 00007fdcf7fe6128 R14: 00007fdcf7fe6090 R15: 00007fff3914ca28 [ 473.516319][T13355] [ 474.518954][T13367] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1638'. [ 474.528982][T13367] FAULT_INJECTION: forcing a failure. [ 474.528982][T13367] name failslab, interval 1, probability 0, space 0, times 0 [ 474.541706][T13367] CPU: 1 UID: 0 PID: 13367 Comm: syz.2.1638 Not tainted syzkaller #0 PREEMPT(full) [ 474.541736][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.541747][T13367] Call Trace: [ 474.541755][T13367] [ 474.541765][T13367] dump_stack_lvl+0x16c/0x1f0 [ 474.541798][T13367] should_fail_ex+0x512/0x640 [ 474.541827][T13367] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 474.541859][T13367] should_failslab+0xc2/0x120 [ 474.541881][T13367] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 474.541911][T13367] ? __alloc_skb+0x156/0x410 [ 474.541953][T13367] ? __alloc_skb+0x156/0x410 [ 474.541984][T13367] __alloc_skb+0x156/0x410 [ 474.542014][T13367] ? __alloc_skb+0x35d/0x410 [ 474.542039][T13367] ? __pfx___alloc_skb+0x10/0x10 [ 474.542069][T13367] ? netlink_autobind.isra.0+0x158/0x370 [ 474.542102][T13367] netlink_alloc_large_skb+0x69/0x140 [ 474.542131][T13367] netlink_sendmsg+0x698/0xdd0 [ 474.542165][T13367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.542197][T13367] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 474.542236][T13367] ____sys_sendmsg+0xa5d/0xc30 [ 474.542265][T13367] ? copy_msghdr_from_user+0x10a/0x160 [ 474.542301][T13367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.542334][T13367] ? __pfx__kstrtoull+0x10/0x10 [ 474.542366][T13367] ___sys_sendmsg+0x134/0x1d0 [ 474.542404][T13367] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.542457][T13367] ? find_held_lock+0x2b/0x80 [ 474.542517][T13367] __sys_sendmmsg+0x200/0x420 [ 474.542543][T13367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 474.542573][T13367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.542621][T13367] ? fput+0x70/0xf0 [ 474.542646][T13367] ? ksys_write+0x1ac/0x250 [ 474.542680][T13367] ? __pfx_ksys_write+0x10/0x10 [ 474.542720][T13367] __x64_sys_sendmmsg+0x9c/0x100 [ 474.542743][T13367] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.542774][T13367] do_syscall_64+0xcd/0xf80 [ 474.542807][T13367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.542831][T13367] RIP: 0033:0x7fdcf7d8f7c9 [ 474.542851][T13367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.542872][T13367] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.542896][T13367] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 474.542912][T13367] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 474.542926][T13367] RBP: 00007fdcf8c6d090 R08: 0000000000000000 R09: 0000000000000000 [ 474.542940][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.542954][T13367] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 474.542987][T13367] [ 475.535070][T13374] netlink: 50 bytes leftover after parsing attributes in process `syz.2.1640'. [ 475.988007][T13374] zswap: compressor 000 not available [ 477.068947][ T5928] Process accounting resumed [ 477.076048][ T5928] Process accounting resumed [ 477.204343][T13410] FAULT_INJECTION: forcing a failure. [ 477.204343][T13410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 477.239365][T13410] CPU: 1 UID: 0 PID: 13410 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) [ 477.239399][T13410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.239413][T13410] Call Trace: [ 477.239421][T13410] [ 477.239430][T13410] dump_stack_lvl+0x16c/0x1f0 [ 477.239467][T13410] should_fail_ex+0x512/0x640 [ 477.239507][T13410] should_fail_alloc_page+0xe7/0x130 [ 477.239532][T13410] prepare_alloc_pages+0x3c2/0x610 [ 477.239562][T13410] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 477.239613][T13410] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 477.239647][T13410] ? look_up_lock_class+0x59/0x130 [ 477.239685][T13410] ? lock_acquire+0x179/0x330 [ 477.239715][T13410] ? __lock_acquire+0x433/0x22f0 [ 477.239741][T13410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 477.239780][T13410] ? policy_nodemask+0xea/0x4e0 [ 477.239807][T13410] alloc_pages_mpol+0x1fb/0x550 [ 477.239840][T13410] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 477.239863][T13410] ? __pfx___mutex_lock+0x10/0x10 [ 477.239904][T13410] alloc_pages_noprof+0x12d/0x180 [ 477.239929][T13410] __pmd_alloc+0x3b/0x8b0 [ 477.239975][T13410] huge_pte_alloc+0x384/0x4f0 [ 477.240015][T13410] hugetlb_fault+0x373/0x2f30 [ 477.240053][T13410] ? __pfx_hugetlb_fault+0x10/0x10 [ 477.240103][T13410] ? find_vma+0xbf/0x140 [ 477.240134][T13410] ? __pfx_find_vma+0x10/0x10 [ 477.240170][T13410] handle_mm_fault+0x95d/0xad0 [ 477.240199][T13410] do_user_addr_fault+0x2e4/0xda0 [ 477.240228][T13410] ? rcu_is_watching+0x12/0xc0 [ 477.240274][T13410] exc_page_fault+0x64/0xc0 [ 477.240306][T13410] asm_exc_page_fault+0x26/0x30 [ 477.240327][T13410] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 477.240352][T13410] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 477.240374][T13410] RSP: 0018:ffffc9000c5874b8 EFLAGS: 00050206 [ 477.240395][T13410] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000038 [ 477.240410][T13410] RDX: fffff520018b0ed2 RSI: 0000000000000038 RDI: ffffc9000c587658 [ 477.240425][T13410] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520018b0ed1 [ 477.240440][T13410] R10: ffffc9000c58768f R11: 00000000ffffffff R12: 0000000000000000 [ 477.240455][T13410] R13: ffffc9000c587658 R14: 0000000000000000 R15: ffffc9000c587728 [ 477.240489][T13410] _copy_from_user+0x98/0xd0 [ 477.240524][T13410] kvm_arch_vm_ioctl+0xa1d/0x18b0 [ 477.240554][T13410] ? __page_table_check_zero+0x2f2/0x4a0 [ 477.240592][T13410] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 477.240622][T13410] ? __pfx___page_table_check_zero+0x10/0x10 [ 477.240663][T13410] ? __lock_acquire+0x433/0x22f0 [ 477.240693][T13410] ? __lock_acquire+0x433/0x22f0 [ 477.240730][T13410] ? __lock_acquire+0x433/0x22f0 [ 477.240763][T13410] ? __lock_acquire+0x433/0x22f0 [ 477.240818][T13410] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.240844][T13410] ? is_bpf_text_address+0x94/0x1a0 [ 477.240876][T13410] ? kernel_text_address+0x8d/0x100 [ 477.240904][T13410] ? __kernel_text_address+0xd/0x40 [ 477.240932][T13410] ? unwind_get_return_address+0x59/0xa0 [ 477.240962][T13410] ? arch_stack_walk+0xa6/0x100 [ 477.241012][T13410] ? stack_trace_save+0x8e/0xc0 [ 477.241037][T13410] ? __pfx_stack_trace_save+0x10/0x10 [ 477.241060][T13410] ? kasan_save_track+0x14/0x30 [ 477.241094][T13410] ? stack_depot_save_flags+0x29/0x9b0 [ 477.241135][T13410] ? kasan_save_stack+0x42/0x60 [ 477.241165][T13410] ? kasan_save_stack+0x33/0x60 [ 477.241196][T13410] ? kasan_save_track+0x14/0x30 [ 477.241226][T13410] ? __kasan_save_free_info+0x3b/0x60 [ 477.241253][T13410] ? __kasan_slab_free+0x5f/0x80 [ 477.241284][T13410] ? kfree+0x2f8/0x6e0 [ 477.241308][T13410] ? tomoyo_path_number_perm+0x470/0x580 [ 477.241340][T13410] ? security_file_ioctl+0x9b/0x240 [ 477.241369][T13410] ? __x64_sys_ioctl+0xb7/0x210 [ 477.241399][T13410] kvm_vm_ioctl+0x1a91/0x3fa0 [ 477.241437][T13410] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 477.241481][T13410] ? kasan_quarantine_put+0x10a/0x240 [ 477.241509][T13410] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.241543][T13410] ? find_held_lock+0x2b/0x80 [ 477.241573][T13410] ? tomoyo_path_number_perm+0x295/0x580 [ 477.241609][T13410] ? tomoyo_path_number_perm+0x18d/0x580 [ 477.241645][T13410] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 477.241679][T13410] ? find_held_lock+0x2b/0x80 [ 477.241715][T13410] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 477.241751][T13410] ? do_vfs_ioctl+0x128/0x14f0 [ 477.241781][T13410] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 477.241822][T13410] ? find_held_lock+0x2b/0x80 [ 477.241852][T13410] ? hook_file_ioctl_common+0x144/0x410 [ 477.241895][T13410] ? __fget_files+0x20e/0x3c0 [ 477.241933][T13410] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 477.241963][T13410] __x64_sys_ioctl+0x18e/0x210 [ 477.242007][T13410] do_syscall_64+0xcd/0xf80 [ 477.242042][T13410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.242066][T13410] RIP: 0033:0x7fdcf7d8f7c9 [ 477.242086][T13410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.242107][T13410] RSP: 002b:00007fdcf8c2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.242129][T13410] RAX: ffffffffffffffda RBX: 00007fdcf7fe6180 RCX: 00007fdcf7d8f7c9 [ 477.242145][T13410] RDX: 0000000000000038 RSI: 000000004038ae7a RDI: 0000000000000003 [ 477.242160][T13410] RBP: 00007fdcf8c2b090 R08: 0000000000000000 R09: 0000000000000000 [ 477.242172][T13410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.242187][T13410] R13: 00007fdcf7fe6218 R14: 00007fdcf7fe6180 R15: 00007fff3914ca28 [ 477.242223][T13410] [ 477.244763][T13406] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1648'. [ 477.972172][T13406] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1648'. [ 478.190995][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 478.925770][T13423] svc: failed to register nfsdv3 RPC service (errno 111). [ 478.938470][T13423] svc: failed to register nfsaclv3 RPC service (errno 111). [ 479.127506][ T30] audit: type=1800 audit(4294976399.550:13): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1655" name="features" dev="configfs" ino=48983 res=0 errno=0 [ 479.325260][T13430] FAULT_INJECTION: forcing a failure. [ 479.325260][T13430] name failslab, interval 1, probability 0, space 0, times 0 [ 479.417895][T13430] CPU: 0 UID: 0 PID: 13430 Comm: syz.3.1653 Not tainted syzkaller #0 PREEMPT(full) [ 479.417934][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.417950][T13430] Call Trace: [ 479.417959][T13430] [ 479.417970][T13430] dump_stack_lvl+0x16c/0x1f0 [ 479.418014][T13430] should_fail_ex+0x512/0x640 [ 479.418049][T13430] ? fs_reclaim_acquire+0xae/0x150 [ 479.418077][T13430] should_failslab+0xc2/0x120 [ 479.418103][T13430] __kmalloc_noprof+0xdd/0x8f0 [ 479.418130][T13430] ? tomoyo_encode2+0x100/0x3e0 [ 479.418159][T13430] ? tomoyo_encode2+0x100/0x3e0 [ 479.418182][T13430] tomoyo_encode2+0x100/0x3e0 [ 479.418209][T13430] tomoyo_encode+0x29/0x50 [ 479.418234][T13430] tomoyo_realpath_from_path+0x18f/0x6e0 [ 479.418265][T13430] ? tomoyo_profile+0x47/0x60 [ 479.418297][T13430] tomoyo_path_number_perm+0x245/0x580 [ 479.418333][T13430] ? tomoyo_path_number_perm+0x237/0x580 [ 479.418369][T13430] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 479.418402][T13430] ? futex_wake+0x1ad/0x530 [ 479.418468][T13430] ? find_held_lock+0x2b/0x80 [ 479.418502][T13430] ? hook_file_ioctl_common+0x144/0x410 [ 479.418546][T13430] ? __fget_files+0x20e/0x3c0 [ 479.418590][T13430] security_file_ioctl+0x9b/0x240 [ 479.418628][T13430] __x64_sys_ioctl+0xb7/0x210 [ 479.418663][T13430] do_syscall_64+0xcd/0xf80 [ 479.418698][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.418722][T13430] RIP: 0033:0x7f283898f7c9 [ 479.418743][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.418769][T13430] RSP: 002b:00007f283982c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.418795][T13430] RAX: ffffffffffffffda RBX: 00007f2838be5fa0 RCX: 00007f283898f7c9 [ 479.418811][T13430] RDX: 0000000000000038 RSI: 000000000000541b RDI: 0000000000000003 [ 479.418826][T13430] RBP: 00007f2838a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.418841][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.418856][T13430] R13: 00007f2838be6038 R14: 00007f2838be5fa0 R15: 00007ffc3fe67be8 [ 479.418892][T13430] [ 479.418915][T13430] ERROR: Out of memory at tomoyo_realpath_from_path. [ 482.773884][T13473] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1666'. [ 483.101853][T13480] FAULT_INJECTION: forcing a failure. [ 483.101853][T13480] name failslab, interval 1, probability 0, space 0, times 0 [ 483.167373][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.1.1669 Not tainted syzkaller #0 PREEMPT(full) [ 483.167395][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 483.167405][T13480] Call Trace: [ 483.167410][T13480] [ 483.167416][T13480] dump_stack_lvl+0x16c/0x1f0 [ 483.167444][T13480] should_fail_ex+0x512/0x640 [ 483.167463][T13480] ? __kmalloc_cache_noprof+0x5f/0x800 [ 483.167484][T13480] should_failslab+0xc2/0x120 [ 483.167498][T13480] __kmalloc_cache_noprof+0x72/0x800 [ 483.167514][T13480] ? rfkill_fop_open+0x1b6/0x750 [ 483.167532][T13480] ? rfkill_fop_open+0x1b6/0x750 [ 483.167546][T13480] rfkill_fop_open+0x1b6/0x750 [ 483.167563][T13480] ? __pfx_rfkill_fop_open+0x10/0x10 [ 483.167577][T13480] misc_open+0x26d/0x450 [ 483.167596][T13480] ? __pfx_misc_open+0x10/0x10 [ 483.167614][T13480] chrdev_open+0x234/0x6a0 [ 483.167627][T13480] ? __pfx_apparmor_file_open+0x10/0x10 [ 483.167645][T13480] ? __pfx_chrdev_open+0x10/0x10 [ 483.167660][T13480] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 483.167689][T13480] do_dentry_open+0x748/0x1590 [ 483.167702][T13480] ? __pfx_chrdev_open+0x10/0x10 [ 483.167721][T13480] vfs_open+0x82/0x3f0 [ 483.167741][T13480] path_openat+0x2078/0x3140 [ 483.167761][T13480] ? __pfx_path_openat+0x10/0x10 [ 483.167782][T13480] do_filp_open+0x20b/0x470 [ 483.167796][T13480] ? __pfx_do_filp_open+0x10/0x10 [ 483.167825][T13480] ? alloc_fd+0x471/0x7d0 [ 483.167843][T13480] do_sys_openat2+0x11f/0x280 [ 483.167858][T13480] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.167882][T13480] __x64_sys_openat+0x174/0x210 [ 483.167898][T13480] ? __pfx___x64_sys_openat+0x10/0x10 [ 483.167923][T13480] do_syscall_64+0xcd/0xf80 [ 483.167941][T13480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.167956][T13480] RIP: 0033:0x7fcc4fb8f7c9 [ 483.167967][T13480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.167980][T13480] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 483.167994][T13480] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 483.168004][T13480] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 483.168013][T13480] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 483.168021][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.168029][T13480] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 483.168048][T13480] [ 484.000521][T13497] FAULT_INJECTION: forcing a failure. [ 484.000521][T13497] name failslab, interval 1, probability 0, space 0, times 0 [ 484.044676][T13497] CPU: 1 UID: 0 PID: 13497 Comm: syz.2.1673 Not tainted syzkaller #0 PREEMPT(full) [ 484.044714][T13497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.044730][T13497] Call Trace: [ 484.044738][T13497] [ 484.044749][T13497] dump_stack_lvl+0x16c/0x1f0 [ 484.044790][T13497] should_fail_ex+0x512/0x640 [ 484.044826][T13497] ? __kmalloc_noprof+0xca/0x8f0 [ 484.044860][T13497] should_failslab+0xc2/0x120 [ 484.044886][T13497] __kmalloc_noprof+0xdd/0x8f0 [ 484.044916][T13497] ? __register_sysctl_table+0xea2/0x1900 [ 484.044959][T13497] ? __register_sysctl_table+0xea2/0x1900 [ 484.044993][T13497] __register_sysctl_table+0xea2/0x1900 [ 484.045036][T13497] ? __pfx___register_sysctl_table+0x10/0x10 [ 484.045071][T13497] ? is_module_address+0x69/0xf0 [ 484.045104][T13497] ? register_net_sysctl_sz+0x222/0x3d0 [ 484.045151][T13497] neigh_sysctl_register+0x31f/0x670 [ 484.045176][T13497] ? __pfx_neigh_proc_base_reachable_time+0x10/0x10 [ 484.045215][T13497] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 484.045239][T13497] ? inetdev_init+0x245/0x580 [ 484.045270][T13497] ? inetdev_event+0xc32/0x1840 [ 484.045312][T13497] ? notifier_call_chain+0xbc/0x3e0 [ 484.045342][T13497] ? copy_net_ns+0x351/0x5d0 [ 484.045369][T13497] ? create_new_namespaces+0x3ea/0xab0 [ 484.045401][T13497] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 484.045435][T13497] ? ksys_unshare+0x45b/0xa40 [ 484.045457][T13497] ? __x64_sys_unshare+0x31/0x40 [ 484.045479][T13497] ? do_syscall_64+0xcd/0xf80 [ 484.045510][T13497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.045542][T13497] devinet_sysctl_register+0xb6/0x200 [ 484.045579][T13497] inetdev_init+0x2b8/0x580 [ 484.045615][T13497] inetdev_event+0xc32/0x1840 [ 484.045652][T13497] ? ib_netdevice_event+0xfc/0x330 [ 484.045678][T13497] ? __pfx_inetdev_event+0x10/0x10 [ 484.045720][T13497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.045766][T13497] notifier_call_chain+0xbc/0x3e0 [ 484.045792][T13497] ? __pfx_inetdev_event+0x10/0x10 [ 484.045833][T13497] call_netdevice_notifiers_info+0xbe/0x110 [ 484.045869][T13497] register_netdevice+0x1792/0x21d0 [ 484.045905][T13497] ? __pfx_register_netdevice+0x10/0x10 [ 484.045945][T13497] __ip_tunnel_create+0x540/0x6b0 [ 484.045980][T13497] ? __pfx___ip_tunnel_create+0x10/0x10 [ 484.046024][T13497] ip_tunnel_init_net+0x22f/0x7d0 [ 484.046062][T13497] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 484.046101][T13497] ? ops_init+0x77/0x5f0 [ 484.046127][T13497] ? __pfx_erspan_init_net+0x10/0x10 [ 484.046155][T13497] ops_init+0x1e2/0x5f0 [ 484.046184][T13497] setup_net+0x11d/0x3a0 [ 484.046211][T13497] ? __pfx_setup_net+0x10/0x10 [ 484.046234][T13497] ? lockdep_init_map_type+0x5c/0x270 [ 484.046265][T13497] ? mutex_init_lockep+0x110/0x150 [ 484.046307][T13497] copy_net_ns+0x351/0x5d0 [ 484.046341][T13497] create_new_namespaces+0x3ea/0xab0 [ 484.046387][T13497] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 484.046427][T13497] ksys_unshare+0x45b/0xa40 [ 484.046452][T13497] ? __pfx_ksys_unshare+0x10/0x10 [ 484.046478][T13497] ? xfd_validate_state+0x61/0x180 [ 484.046527][T13497] __x64_sys_unshare+0x31/0x40 [ 484.046550][T13497] do_syscall_64+0xcd/0xf80 [ 484.046586][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.046612][T13497] RIP: 0033:0x7fdcf7d8f7c9 [ 484.046632][T13497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.046655][T13497] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 484.046680][T13497] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 484.046698][T13497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 484.046714][T13497] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.046730][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.046745][T13497] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 484.046783][T13497] [ 484.046889][T13497] sysctl could not get directory: [ 484.307052][T13503] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 484.308777][T13497] /net/ipv4/neigh/erspan0 -12 [ 484.487902][T13492] zswap: compressor 000 not available [ 484.939613][T13513] random: crng reseeded on system resumption [ 485.821325][T13524] input: jJǸ-9%vJ86 as /devices/virtual/input/input20 [ 487.090732][T13536] FAULT_INJECTION: forcing a failure. [ 487.090732][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 487.110481][T13536] CPU: 1 UID: 0 PID: 13536 Comm: syz.2.1680 Not tainted syzkaller #0 PREEMPT(full) [ 487.110515][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.110528][T13536] Call Trace: [ 487.110536][T13536] [ 487.110547][T13536] dump_stack_lvl+0x16c/0x1f0 [ 487.110585][T13536] should_fail_ex+0x512/0x640 [ 487.110619][T13536] ? __kmalloc_node_track_caller_noprof+0xcb/0x910 [ 487.110659][T13536] should_failslab+0xc2/0x120 [ 487.110684][T13536] __kmalloc_node_track_caller_noprof+0xde/0x910 [ 487.110719][T13536] ? neigh_parms_alloc+0x85/0x5e0 [ 487.110755][T13536] ? kmemdup_noprof+0x29/0x60 [ 487.110781][T13536] kmemdup_noprof+0x29/0x60 [ 487.110808][T13536] neigh_parms_alloc+0x85/0x5e0 [ 487.110841][T13536] inetdev_init+0x13c/0x580 [ 487.110872][T13536] inetdev_event+0xc32/0x1840 [ 487.110906][T13536] ? ib_netdevice_event+0xfc/0x330 [ 487.110932][T13536] ? __pfx_inetdev_event+0x10/0x10 [ 487.110968][T13536] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.111025][T13536] notifier_call_chain+0xbc/0x3e0 [ 487.111051][T13536] ? __pfx_inetdev_event+0x10/0x10 [ 487.111093][T13536] call_netdevice_notifiers_info+0xbe/0x110 [ 487.111127][T13536] register_netdevice+0x1792/0x21d0 [ 487.111163][T13536] ? __pfx_register_netdevice+0x10/0x10 [ 487.111203][T13536] __ip_tunnel_create+0x540/0x6b0 [ 487.111245][T13536] ? __pfx___ip_tunnel_create+0x10/0x10 [ 487.111292][T13536] ip_tunnel_init_net+0x22f/0x7d0 [ 487.111332][T13536] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 487.111375][T13536] ? ops_init+0x77/0x5f0 [ 487.111402][T13536] ? __pfx_erspan_init_net+0x10/0x10 [ 487.111426][T13536] ops_init+0x1e2/0x5f0 [ 487.111453][T13536] setup_net+0x11d/0x3a0 [ 487.111476][T13536] ? __pfx_setup_net+0x10/0x10 [ 487.111499][T13536] ? lockdep_init_map_type+0x5c/0x270 [ 487.111534][T13536] ? mutex_init_lockep+0x110/0x150 [ 487.111565][T13536] copy_net_ns+0x351/0x5d0 [ 487.111593][T13536] create_new_namespaces+0x3ea/0xab0 [ 487.111638][T13536] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 487.111679][T13536] ksys_unshare+0x45b/0xa40 [ 487.111704][T13536] ? __pfx_ksys_unshare+0x10/0x10 [ 487.111725][T13536] ? xfd_validate_state+0x61/0x180 [ 487.111770][T13536] __x64_sys_unshare+0x31/0x40 [ 487.111790][T13536] do_syscall_64+0xcd/0xf80 [ 487.111825][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.111850][T13536] RIP: 0033:0x7fdcf7d8f7c9 [ 487.111870][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.111896][T13536] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 487.111921][T13536] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 487.111939][T13536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 487.111954][T13536] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.111970][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.111984][T13536] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 487.112034][T13536] [ 487.594792][T13545] block nbd2: NBD_DISCONNECT [ 489.536442][T13569] zswap: compressor 000 not available [ 489.585653][T13579] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1691'. [ 489.808383][T13585] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 490.298972][T13592] FAULT_INJECTION: forcing a failure. [ 490.298972][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 490.314027][T13592] CPU: 0 UID: 0 PID: 13592 Comm: syz.2.1696 Not tainted syzkaller #0 PREEMPT(full) [ 490.314064][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.314080][T13592] Call Trace: [ 490.314089][T13592] [ 490.314100][T13592] dump_stack_lvl+0x16c/0x1f0 [ 490.314140][T13592] should_fail_ex+0x512/0x640 [ 490.314175][T13592] ? kmem_cache_alloc_noprof+0x62/0x760 [ 490.314213][T13592] should_failslab+0xc2/0x120 [ 490.314240][T13592] kmem_cache_alloc_noprof+0x75/0x760 [ 490.314273][T13592] ? __kernfs_new_node+0xd2/0x8d0 [ 490.314315][T13592] ? __kernfs_new_node+0xd2/0x8d0 [ 490.314346][T13592] __kernfs_new_node+0xd2/0x8d0 [ 490.314380][T13592] ? __pfx___kernfs_new_node+0x10/0x10 [ 490.314436][T13592] ? find_held_lock+0x2b/0x80 [ 490.314475][T13592] ? kernfs_root+0xee/0x2a0 [ 490.314518][T13592] kernfs_new_node+0x13c/0x1e0 [ 490.314562][T13592] __kernfs_create_file+0x53/0x350 [ 490.314594][T13592] sysfs_add_file_mode_ns+0x207/0x3c0 [ 490.314636][T13592] internal_create_group+0x578/0xf20 [ 490.314676][T13592] ? __pfx_internal_create_group+0x10/0x10 [ 490.314706][T13592] ? __x64_sys_unshare+0x31/0x40 [ 490.314730][T13592] ? do_syscall_64+0xcd/0xf80 [ 490.314759][T13592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.314797][T13592] netdev_queue_update_kobjects+0x17a/0x710 [ 490.314842][T13592] netdev_register_kobject+0x2b3/0x3d0 [ 490.314880][T13592] register_netdevice+0x13ac/0x21d0 [ 490.314926][T13592] ? __pfx_register_netdevice+0x10/0x10 [ 490.314967][T13592] __ip_tunnel_create+0x540/0x6b0 [ 490.315002][T13592] ? __pfx___ip_tunnel_create+0x10/0x10 [ 490.315050][T13592] ip_tunnel_init_net+0x22f/0x7d0 [ 490.315089][T13592] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 490.315134][T13592] ? ops_init+0x77/0x5f0 [ 490.315163][T13592] ? __pfx_erspan_init_net+0x10/0x10 [ 490.315191][T13592] ops_init+0x1e2/0x5f0 [ 490.315221][T13592] setup_net+0x11d/0x3a0 [ 490.315248][T13592] ? __pfx_setup_net+0x10/0x10 [ 490.315271][T13592] ? lockdep_init_map_type+0x5c/0x270 [ 490.315301][T13592] ? mutex_init_lockep+0x110/0x150 [ 490.315336][T13592] copy_net_ns+0x351/0x5d0 [ 490.315369][T13592] create_new_namespaces+0x3ea/0xab0 [ 490.315414][T13592] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 490.315454][T13592] ksys_unshare+0x45b/0xa40 [ 490.315479][T13592] ? __pfx_ksys_unshare+0x10/0x10 [ 490.315505][T13592] ? xfd_validate_state+0x61/0x180 [ 490.315554][T13592] __x64_sys_unshare+0x31/0x40 [ 490.315578][T13592] do_syscall_64+0xcd/0xf80 [ 490.315616][T13592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.315640][T13592] RIP: 0033:0x7fdcf7d8f7c9 [ 490.315661][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.315688][T13592] RSP: 002b:00007fdcf8c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 490.315713][T13592] RAX: ffffffffffffffda RBX: 00007fdcf7fe5fa0 RCX: 00007fdcf7d8f7c9 [ 490.315730][T13592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 490.315745][T13592] RBP: 00007fdcf7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.315760][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.315774][T13592] R13: 00007fdcf7fe6038 R14: 00007fdcf7fe5fa0 R15: 00007fff3914ca28 [ 490.315812][T13592] [ 490.702994][T13595] FAULT_INJECTION: forcing a failure. [ 490.702994][T13595] name failslab, interval 1, probability 0, space 0, times 0 [ 490.715876][T13595] CPU: 1 UID: 0 PID: 13595 Comm: syz.1.1697 Not tainted syzkaller #0 PREEMPT(full) [ 490.715897][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.715906][T13595] Call Trace: [ 490.715910][T13595] [ 490.715916][T13595] dump_stack_lvl+0x16c/0x1f0 [ 490.715938][T13595] should_fail_ex+0x512/0x640 [ 490.715958][T13595] ? fs_reclaim_acquire+0xae/0x150 [ 490.715973][T13595] should_failslab+0xc2/0x120 [ 490.715987][T13595] __kmalloc_noprof+0xdd/0x8f0 [ 490.716004][T13595] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 490.716023][T13595] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 490.716036][T13595] tomoyo_realpath_from_path+0xc2/0x6e0 [ 490.716052][T13595] ? tomoyo_profile+0x47/0x60 [ 490.716070][T13595] tomoyo_path_number_perm+0x245/0x580 [ 490.716089][T13595] ? tomoyo_path_number_perm+0x237/0x580 [ 490.716110][T13595] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.716131][T13595] ? find_held_lock+0x2b/0x80 [ 490.716167][T13595] ? find_held_lock+0x2b/0x80 [ 490.716185][T13595] ? hook_file_ioctl_common+0x144/0x410 [ 490.716210][T13595] ? __fget_files+0x20e/0x3c0 [ 490.716233][T13595] security_file_ioctl+0x9b/0x240 [ 490.716255][T13595] __x64_sys_ioctl+0xb7/0x210 [ 490.716274][T13595] do_syscall_64+0xcd/0xf80 [ 490.716294][T13595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.716308][T13595] RIP: 0033:0x7fcc4fb8f7c9 [ 490.716321][T13595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.716333][T13595] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.716346][T13595] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 490.716356][T13595] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 490.716364][T13595] RBP: 00007fcc50a47090 R08: 0000000000000000 R09: 0000000000000000 [ 490.716372][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.716380][T13595] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 490.716399][T13595] [ 490.716406][T13595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 490.938619][T12944] syz.3.1546 (12944) used greatest stack depth: 18080 bytes left [ 491.252812][T13602] svc: failed to register nfsdv3 RPC service (errno 111). [ 491.284990][T13602] svc: failed to register nfsaclv3 RPC service (errno 111). [ 491.421347][T13606] Invalid ELF header magic: != ELF [ 492.105094][T13616] svc: failed to register nfsdv3 RPC service (errno 111). [ 492.172312][T13616] svc: failed to register nfsaclv3 RPC service (errno 111). [ 492.360428][T13624] zswap: compressor 000 not available [ 493.198829][T13645] zswap: compressor 000 not available [ 493.595424][T13651] zswap: compressor 000 not available [ 493.929678][T13620] syz.3.1703 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 493.940126][T13664] FAULT_INJECTION: forcing a failure. [ 493.940126][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 493.940167][T13664] CPU: 0 UID: 0 PID: 13664 Comm: syz.1.1710 Not tainted syzkaller #0 PREEMPT(full) [ 493.940192][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.940205][T13664] Call Trace: [ 493.940212][T13664] [ 493.940220][T13664] dump_stack_lvl+0x16c/0x1f0 [ 493.940254][T13664] should_fail_ex+0x512/0x640 [ 493.940282][T13664] ? fs_reclaim_acquire+0xae/0x150 [ 493.940308][T13664] should_failslab+0xc2/0x120 [ 493.940330][T13664] __kmalloc_noprof+0xdd/0x8f0 [ 493.940358][T13664] ? tomoyo_encode2+0x100/0x3e0 [ 493.940389][T13664] ? tomoyo_encode2+0x100/0x3e0 [ 493.940409][T13664] tomoyo_encode2+0x100/0x3e0 [ 493.940438][T13664] tomoyo_encode+0x29/0x50 [ 493.940460][T13664] tomoyo_realpath_from_path+0x18f/0x6e0 [ 493.940496][T13664] tomoyo_path_number_perm+0x245/0x580 [ 493.940539][T13664] ? tomoyo_path_number_perm+0x237/0x580 [ 493.940576][T13664] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 493.940611][T13664] ? find_held_lock+0x2b/0x80 [ 493.940675][T13664] ? find_held_lock+0x2b/0x80 [ 493.940706][T13664] ? hook_file_ioctl_common+0x144/0x410 [ 493.940748][T13664] ? __fget_files+0x20e/0x3c0 [ 493.940797][T13664] security_file_ioctl+0x9b/0x240 [ 493.940834][T13664] __x64_sys_ioctl+0xb7/0x210 [ 493.940868][T13664] do_syscall_64+0xcd/0xf80 [ 493.940902][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.940926][T13664] RIP: 0033:0x7fcc4fb8f7c9 [ 493.940946][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.940967][T13664] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.941001][T13664] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 493.941015][T13664] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000007 [ 493.941029][T13664] RBP: 00007fcc50a47090 R08: 0000000000000000 R09: 0000000000000000 [ 493.941043][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.941057][T13664] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 493.941091][T13664] [ 493.941118][T13664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 494.154801][T13620] CPU: 1 UID: 0 PID: 13620 Comm: syz.3.1703 Not tainted syzkaller #0 PREEMPT(full) [ 494.154836][T13620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.154850][T13620] Call Trace: [ 494.154858][T13620] [ 494.154868][T13620] dump_stack_lvl+0x16c/0x1f0 [ 494.154907][T13620] dump_header+0x101/0x930 [ 494.154940][T13620] oom_kill_process+0x272/0xa40 [ 494.154974][T13620] out_of_memory+0x350/0x1700 [ 494.155009][T13620] ? __pfx_out_of_memory+0x10/0x10 [ 494.155048][T13620] mem_cgroup_out_of_memory+0x118/0x130 [ 494.155084][T13620] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 494.155124][T13620] ? do_raw_spin_unlock+0x172/0x230 [ 494.155161][T13620] try_charge_memcg+0x689/0xd40 [ 494.155193][T13620] ? __pfx_try_charge_memcg+0x10/0x10 [ 494.155217][T13620] ? __print_lock_name+0xc1/0xe0 [ 494.155253][T13620] ? rcu_read_unlock+0x17/0x60 [ 494.155287][T13620] charge_memcg+0x8a/0x230 [ 494.155311][T13620] __mem_cgroup_charge+0x2b/0x1e0 [ 494.155341][T13620] shmem_alloc_and_add_folio+0x50c/0xc20 [ 494.155379][T13620] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 494.155409][T13620] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 494.155446][T13620] shmem_get_folio_gfp+0x67f/0x1610 [ 494.155483][T13620] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 494.155509][T13620] ? __schedule+0x114c/0x6150 [ 494.155544][T13620] ? inode_maybe_inc_iversion+0x169/0x220 [ 494.155587][T13620] shmem_fault+0x1fe/0xa00 [ 494.155618][T13620] ? __pfx_shmem_fault+0x10/0x10 [ 494.155646][T13620] ? __lock_acquire+0x433/0x22f0 [ 494.155688][T13620] ? __pfx_filemap_map_pages+0x10/0x10 [ 494.155714][T13620] __do_fault+0x10d/0x490 [ 494.155748][T13620] ? __pfx_filemap_map_pages+0x10/0x10 [ 494.155774][T13620] do_pte_missing+0x1a6/0x4000 [ 494.155805][T13620] ? __handle_mm_fault+0x151e/0x2ad0 [ 494.155837][T13620] __handle_mm_fault+0x154b/0x2ad0 [ 494.155871][T13620] ? mark_held_locks+0x49/0x80 [ 494.155898][T13620] ? __pfx___handle_mm_fault+0x10/0x10 [ 494.155921][T13620] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.155955][T13620] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 494.155985][T13620] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 494.156031][T13620] ? follow_page_pte+0x611/0x1390 [ 494.156075][T13620] handle_mm_fault+0x3fe/0xad0 [ 494.156108][T13620] __get_user_pages+0x605/0x33c0 [ 494.156157][T13620] ? down_read_killable+0x313/0x4c0 [ 494.156195][T13620] ? __pfx___get_user_pages+0x10/0x10 [ 494.156242][T13620] faultin_page_range+0x338/0x940 [ 494.156273][T13620] madvise_do_behavior+0x34c/0x530 [ 494.156302][T13620] ? __pfx_madvise_do_behavior+0x10/0x10 [ 494.156329][T13620] ? down_read+0x13d/0x460 [ 494.156383][T13620] do_madvise+0x176/0x240 [ 494.156407][T13620] ? __pfx_do_madvise+0x10/0x10 [ 494.156429][T13620] ? do_futex+0x122/0x350 [ 494.156467][T13620] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 494.156526][T13620] ? xfd_validate_state+0x61/0x180 [ 494.156572][T13620] __x64_sys_madvise+0xa9/0x110 [ 494.156596][T13620] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.156627][T13620] do_syscall_64+0xcd/0xf80 [ 494.156664][T13620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.156689][T13620] RIP: 0033:0x7f283898f7c9 [ 494.156710][T13620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.156733][T13620] RSP: 002b:00007f283980b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 494.156757][T13620] RAX: ffffffffffffffda RBX: 00007f2838be6090 RCX: 00007f283898f7c9 [ 494.156774][T13620] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 494.156790][T13620] RBP: 00007f2838a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.156804][T13620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.156818][T13620] R13: 00007f2838be6128 R14: 00007f2838be6090 R15: 00007ffc3fe67be8 [ 494.156855][T13620] [ 494.156950][T13620] memory: usage 3072kB, limit 3072kB, failcnt 43442 [ 494.704390][T13620] memory+swap: usage 7464kB, limit 9007199254740988kB, failcnt 0 [ 494.715193][T13620] kmem: usage 2488kB, limit 9007199254740988kB, failcnt 0 [ 494.735105][T13620] Memory cgroup stats for /syz3: [ 494.735296][T13620] cache 307200 [ 494.780505][T13620] rss 0 [ 494.783426][T13620] rss_huge 0 [ 494.789531][T13620] shmem 204800 [ 494.792933][T13620] mapped_file 307200 [ 494.796885][T13620] dirty 102400 [ 494.800248][T13620] writeback 0 [ 494.809449][T13620] workingset_refault_anon 7852 [ 494.814749][T13620] workingset_refault_file 11202 [ 494.825387][T13620] swap 4509696 [ 494.830593][T13620] swapcached 98304 [ 494.834294][T13620] pgpgin 315412 [ 494.839525][T13620] pgpgout 318441 [ 494.843393][T13620] pgfault 470331 [ 494.848346][T13620] pgmajfault 2835 [ 494.851979][T13620] inactive_anon 98304 [ 494.859527][T13620] active_anon 0 [ 494.863580][T13620] inactive_file 0 [ 494.867677][T13620] active_file 0 [ 494.871136][T13620] unevictable 307200 [ 494.875025][T13620] hierarchical_memory_limit 3145728 [ 494.904767][T13620] hierarchical_memsw_limit 9223372036854771712 [ 494.912855][T13620] total_cache 307200 [ 494.921768][T13620] total_rss 0 [ 494.927229][T13620] total_rss_huge 0 [ 494.931114][T13620] total_shmem 204800 [ 494.939526][T13620] total_mapped_file 307200 [ 494.943959][T13620] total_dirty 102400 [ 494.950227][T13620] total_writeback 0 [ 494.954044][T13620] total_workingset_refault_anon 7852 [ 494.977518][T13620] total_workingset_refault_file 11202 [ 494.982920][T13620] total_swap 4509696 [ 495.025684][T13620] total_swapcached 98304 [ 495.079978][T13620] total_pgpgin 315412 [ 495.093961][T13620] total_pgpgout 318441 [ 495.093980][T13620] total_pgfault 470331 [ 495.093989][T13620] total_pgmajfault 2835 [ 495.093998][T13620] total_inactive_anon 98304 [ 495.094006][T13620] total_active_anon 0 [ 495.094012][T13620] total_inactive_file 0 [ 495.094018][T13620] total_active_file 0 [ 495.094024][T13620] total_unevictable 307200 [ 495.094030][T13620] anon_cost 0 [ 495.094035][T13620] file_cost 0 [ 495.094042][T13620] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1703,pid=13615,uid=0 [ 495.095832][T13620] Memory cgroup out of memory: Killed process 13615 (syz.3.1703) total-vm:141480kB, anon-rss:1140kB, file-rss:26492kB, shmem-rss:256kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 495.129915][T13671] ================================================================== [ 495.129935][T13671] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 495.129981][T13671] Read of size 256 at addr ffff88802b170860 by task syz.1.1712/13671 [ 495.130004][T13671] [ 495.130017][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.1.1712 Not tainted syzkaller #0 PREEMPT(full) [ 495.130047][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.130063][T13671] Call Trace: [ 495.130071][T13671] [ 495.130081][T13671] dump_stack_lvl+0x116/0x1f0 [ 495.130117][T13671] print_report+0xcd/0x630 [ 495.130140][T13671] ? __virt_addr_valid+0x81/0x610 [ 495.130180][T13671] ? __phys_addr+0xe8/0x180 [ 495.130218][T13671] ? fbcon_prepare_logo+0xa03/0xc70 [ 495.130247][T13671] kasan_report+0xe0/0x110 [ 495.130270][T13671] ? fbcon_prepare_logo+0xa03/0xc70 [ 495.130308][T13671] kasan_check_range+0x100/0x1b0 [ 495.130338][T13671] __asan_memcpy+0x23/0x60 [ 495.130373][T13671] fbcon_prepare_logo+0xa03/0xc70 [ 495.130413][T13671] fbcon_init+0xd77/0x1900 [ 495.130452][T13671] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 495.130494][T13671] visual_init+0x320/0x620 [ 495.130530][T13671] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 495.130577][T13671] store_bind+0x61d/0x760 [ 495.130602][T13671] ? sysfs_file_kobj+0xe4/0x290 [ 495.130631][T13671] ? __pfx_store_bind+0x10/0x10 [ 495.130652][T13671] dev_attr_store+0x58/0x80 [ 495.130684][T13671] ? __pfx_dev_attr_store+0x10/0x10 [ 495.130715][T13671] sysfs_kf_write+0xf2/0x150 [ 495.130743][T13671] kernfs_fop_write_iter+0x3af/0x570 [ 495.130767][T13671] ? __pfx_sysfs_kf_write+0x10/0x10 [ 495.130797][T13671] iter_file_splice_write+0xa24/0x12b0 [ 495.130829][T13671] ? copy_splice_read+0x89c/0xc20 [ 495.130864][T13671] ? __pfx_iter_file_splice_write+0x10/0x10 [ 495.130893][T13671] ? __pfx_copy_splice_read+0x10/0x10 [ 495.130939][T13671] ? __pfx_iter_file_splice_write+0x10/0x10 [ 495.130965][T13671] direct_splice_actor+0x192/0x6c0 [ 495.131004][T13671] splice_direct_to_actor+0x345/0xa30 [ 495.131044][T13671] ? __pfx_direct_splice_actor+0x10/0x10 [ 495.131096][T13671] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 495.131135][T13671] do_splice_direct+0x174/0x240 [ 495.131168][T13671] ? __pfx_do_splice_direct+0x10/0x10 [ 495.131199][T13671] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 495.131238][T13671] ? rw_verify_area+0xcf/0x6c0 [ 495.131273][T13671] do_sendfile+0xb06/0xe50 [ 495.131311][T13671] ? __pfx_do_sendfile+0x10/0x10 [ 495.131349][T13671] ? __x64_sys_futex+0x1e0/0x4c0 [ 495.131379][T13671] ? __x64_sys_futex+0x1e9/0x4c0 [ 495.131416][T13671] __x64_sys_sendfile64+0x1d8/0x220 [ 495.131443][T13671] ? ksys_write+0x1ac/0x250 [ 495.131497][T13671] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 495.131535][T13671] do_syscall_64+0xcd/0xf80 [ 495.131573][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.131599][T13671] RIP: 0033:0x7fcc4fb8f7c9 [ 495.131620][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.131645][T13671] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 495.131670][T13671] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 495.131689][T13671] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 495.131704][T13671] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.131721][T13671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 495.131735][T13671] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 495.131761][T13671] [ 495.131771][T13671] [ 495.131777][T13671] Allocated by task 5839: [ 495.131790][T13671] kasan_save_stack+0x33/0x60 [ 495.131827][T13671] kasan_save_track+0x14/0x30 [ 495.131862][T13671] __kasan_kmalloc+0xaa/0xb0 [ 495.131895][T13671] __kmalloc_noprof+0x32f/0x8f0 [ 495.131923][T13671] tomoyo_realpath_from_path+0xc2/0x6e0 [ 495.131950][T13671] tomoyo_path_perm+0x274/0x460 [ 495.131984][T13671] security_inode_getattr+0x116/0x290 [ 495.132019][T13671] vfs_statx+0x121/0x3f0 [ 495.132043][T13671] vfs_fstatat+0x7b/0xf0 [ 495.132068][T13671] __do_sys_newfstatat+0x97/0x120 [ 495.132094][T13671] do_syscall_64+0xcd/0xf80 [ 495.132125][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.132148][T13671] [ 495.132153][T13671] Freed by task 5839: [ 495.132165][T13671] kasan_save_stack+0x33/0x60 [ 495.132197][T13671] kasan_save_track+0x14/0x30 [ 495.132230][T13671] __kasan_save_free_info+0x3b/0x60 [ 495.132301][T13671] __kasan_slab_free+0x5f/0x80 [ 495.132324][T13671] kfree+0x2f8/0x6e0 [ 495.132337][T13671] tomoyo_realpath_from_path+0x19f/0x6e0 [ 495.132352][T13671] tomoyo_path_perm+0x274/0x460 [ 495.132372][T13671] security_inode_getattr+0x116/0x290 [ 495.132402][T13671] vfs_statx+0x121/0x3f0 [ 495.132423][T13671] vfs_fstatat+0x7b/0xf0 [ 495.132447][T13671] __do_sys_newfstatat+0x97/0x120 [ 495.132470][T13671] do_syscall_64+0xcd/0xf80 [ 495.132502][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.132527][T13671] [ 495.132534][T13671] The buggy address belongs to the object at ffff88802b170000 [ 495.132534][T13671] which belongs to the cache kmalloc-4k of size 4096 [ 495.132555][T13671] The buggy address is located 2144 bytes inside of [ 495.132555][T13671] freed 4096-byte region [ffff88802b170000, ffff88802b171000) [ 495.132582][T13671] [ 495.132590][T13671] The buggy address belongs to the physical page: [ 495.132612][T13671] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b170 [ 495.132637][T13671] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 495.132658][T13671] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 495.132679][T13671] page_type: f5(slab) [ 495.132701][T13671] raw: 00fff00000000040 ffff88813ff27140 ffffea0001efce00 dead000000000002 [ 495.132726][T13671] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 495.132751][T13671] head: 00fff00000000040 ffff88813ff27140 ffffea0001efce00 dead000000000002 [ 495.132775][T13671] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 495.132800][T13671] head: 00fff00000000003 ffffea0000ac5c01 00000000ffffffff 00000000ffffffff [ 495.132824][T13671] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 495.132838][T13671] page dumped because: kasan: bad access detected [ 495.132851][T13671] page_owner tracks the page as allocated [ 495.132860][T13671] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6551, tgid 6548 (syz.2.130), ts 133478716888, free_ts 127918552763 [ 495.132904][T13671] post_alloc_hook+0x1af/0x220 [ 495.132932][T13671] get_page_from_freelist+0xd0b/0x31a0 [ 495.132961][T13671] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 495.132992][T13671] alloc_pages_mpol+0x1fb/0x550 [ 495.133012][T13671] new_slab+0x2c3/0x430 [ 495.133035][T13671] ___slab_alloc+0xe18/0x1c90 [ 495.133060][T13671] __slab_alloc.constprop.0+0x63/0x110 [ 495.133087][T13671] __kmalloc_cache_noprof+0x477/0x800 [ 495.133114][T13671] kobject_uevent_env+0x265/0x1870 [ 495.133136][T13671] netdev_queue_update_kobjects+0x1a7/0x710 [ 495.133167][T13671] netdev_register_kobject+0x2b3/0x3d0 [ 495.133270][T13671] register_netdevice+0x13ac/0x21d0 [ 495.133303][T13671] register_netdev+0x34/0x50 [ 495.133329][T13671] ip6gre_init_net+0x2bd/0x440 [ 495.133362][T13671] ops_init+0x1e2/0x5f0 [ 495.133383][T13671] setup_net+0x11d/0x3a0 [ 495.133404][T13671] page last free pid 6439 tgid 6438 stack trace: [ 495.133419][T13671] __free_frozen_pages+0x7df/0x1160 [ 495.133444][T13671] __put_partials+0x130/0x170 [ 495.133517][T13671] qlist_free_all+0x4c/0xf0 [ 495.133551][T13671] kasan_quarantine_reduce+0x195/0x1e0 [ 495.133586][T13671] __kasan_slab_alloc+0x69/0x90 [ 495.133622][T13671] __kmalloc_noprof+0x2e8/0x8f0 [ 495.133649][T13671] ops_init+0x77/0x5f0 [ 495.133671][T13671] setup_net+0x11d/0x3a0 [ 495.133693][T13671] copy_net_ns+0x351/0x5d0 [ 495.133717][T13671] create_new_namespaces+0x3ea/0xab0 [ 495.133749][T13671] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 495.133783][T13671] ksys_unshare+0x45b/0xa40 [ 495.133804][T13671] __x64_sys_unshare+0x31/0x40 [ 495.133826][T13671] do_syscall_64+0xcd/0xf80 [ 495.133857][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.133882][T13671] [ 495.133889][T13671] Memory state around the buggy address: [ 495.133903][T13671] ffff88802b170700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.133922][T13671] ffff88802b170780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.133941][T13671] >ffff88802b170800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.133955][T13671] ^ [ 495.133970][T13671] ffff88802b170880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.133989][T13671] ffff88802b170900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 495.134003][T13671] ================================================================== [ 495.134019][T13671] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 495.134037][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.1.1712 Not tainted syzkaller #0 PREEMPT(full) [ 495.134069][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.134086][T13671] Call Trace: [ 495.134096][T13671] [ 495.134107][T13671] dump_stack_lvl+0x3d/0x1f0 [ 495.134143][T13671] vpanic+0x640/0x6f0 [ 495.134166][T13671] panic+0xca/0xd0 [ 495.134215][T13671] ? __pfx_panic+0x10/0x10 [ 495.134250][T13671] check_panic_on_warn+0xab/0xb0 [ 495.134281][T13671] end_report+0x107/0x160 [ 495.134304][T13671] kasan_report+0xee/0x110 [ 495.134330][T13671] ? fbcon_prepare_logo+0xa03/0xc70 [ 495.134370][T13671] kasan_check_range+0x100/0x1b0 [ 495.134442][T13671] __asan_memcpy+0x23/0x60 [ 495.134477][T13671] fbcon_prepare_logo+0xa03/0xc70 [ 495.134519][T13671] fbcon_init+0xd77/0x1900 [ 495.134553][T13671] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 495.134597][T13671] visual_init+0x320/0x620 [ 495.134633][T13671] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 495.134678][T13671] store_bind+0x61d/0x760 [ 495.134704][T13671] ? sysfs_file_kobj+0xe4/0x290 [ 495.134734][T13671] ? __pfx_store_bind+0x10/0x10 [ 495.134755][T13671] dev_attr_store+0x58/0x80 [ 495.134787][T13671] ? __pfx_dev_attr_store+0x10/0x10 [ 495.134819][T13671] sysfs_kf_write+0xf2/0x150 [ 495.134849][T13671] kernfs_fop_write_iter+0x3af/0x570 [ 495.134873][T13671] ? __pfx_sysfs_kf_write+0x10/0x10 [ 495.134905][T13671] iter_file_splice_write+0xa24/0x12b0 [ 495.134953][T13671] ? copy_splice_read+0x89c/0xc20 [ 495.134993][T13671] ? __pfx_iter_file_splice_write+0x10/0x10 [ 495.135024][T13671] ? __pfx_copy_splice_read+0x10/0x10 [ 495.135071][T13671] ? __pfx_iter_file_splice_write+0x10/0x10 [ 495.135100][T13671] direct_splice_actor+0x192/0x6c0 [ 495.135142][T13671] splice_direct_to_actor+0x345/0xa30 [ 495.135181][T13671] ? __pfx_direct_splice_actor+0x10/0x10 [ 495.135223][T13671] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 495.135268][T13671] do_splice_direct+0x174/0x240 [ 495.135306][T13671] ? __pfx_do_splice_direct+0x10/0x10 [ 495.135346][T13671] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 495.135401][T13671] ? rw_verify_area+0xcf/0x6c0 [ 495.135443][T13671] do_sendfile+0xb06/0xe50 [ 495.135484][T13671] ? __pfx_do_sendfile+0x10/0x10 [ 495.135528][T13671] ? __x64_sys_futex+0x1e0/0x4c0 [ 495.135564][T13671] ? __x64_sys_futex+0x1e9/0x4c0 [ 495.135593][T13671] __x64_sys_sendfile64+0x1d8/0x220 [ 495.135618][T13671] ? ksys_write+0x1ac/0x250 [ 495.135655][T13671] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 495.135689][T13671] do_syscall_64+0xcd/0xf80 [ 495.135723][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.135751][T13671] RIP: 0033:0x7fcc4fb8f7c9 [ 495.135774][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.135802][T13671] RSP: 002b:00007fcc50a47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 495.135830][T13671] RAX: ffffffffffffffda RBX: 00007fcc4fde5fa0 RCX: 00007fcc4fb8f7c9 [ 495.135849][T13671] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 495.135866][T13671] RBP: 00007fcc4fc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.135883][T13671] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 495.135900][T13671] R13: 00007fcc4fde6038 R14: 00007fcc4fde5fa0 R15: 00007ffd7288ca38 [ 495.135928][T13671] [ 495.136432][T13671] Kernel Offset: disabled