last executing test programs: 9.560798497s ago: executing program 0 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x00\x00', 0x2fb) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xd0080, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x1e3\n\xc0d\xb1!\x9bt\x97N\x8f\xcd\xee\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r4, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x2, 0x0, 0x2) pidfd_open$auto(0x1, 0x0) setns(r5, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = socket(0x2a, 0x2, 0x6) write$auto(r7, 0x0, 0x400000002d) setfsuid$auto(0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r8 = prctl$auto(0x3f, 0x6, 0x0, 0x3ff, 0x5) readv$auto(r8, 0x0, 0xaa) flistxattr$auto(r3, 0x0, 0x16) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r9, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 7.902851228s ago: executing program 3 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00'}) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae90, &(0x7f0000000140)={0x6}) close_range$auto(0x2, 0x8, 0x0) setgroups$auto(0xe32, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x19, 0x4, 0x4, 0x809, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mprotect$auto(0x200000000000, 0x806121, 0x8) mq_open$auto(0x0, 0x7, 0x4, &(0x7f0000000080)={0x7fffffffffffffff, 0x8, 0x2, 0x400}) pwrite64$auto(r4, &(0x7f0000000040)='+Dev/loop\xff\x0f\x00\x1bl\x00\xee\xb2g\xb8\x05\xaa\xa3\xe1\xfb\xc0/\xd9\x05\x98\x00\xb6!/?\xef\\y\x06\xfe\x90\x95\xd5\rJ\x7f\x80Lg\x9a\xa9\xfeE\xbb/~\xee\x8c*\f\xb3\x1cDT\x15JB\xf7\'\x8cq\xc1\xfd\x85]\a\xa7\x94\x98c1\x85\xbd\xde?\t\x89\xb5\xc4Nb\x9cg8h\xd9%\xd1\x06\x81\x00\x00\x00\xd2m\xbe\x12\xa9\xb6\x1bTL\xf0\x1f\xb3\xb7I\xe9\x00\xa5\x90\x94\x1ajm3V\x03{\x99(v\xe8y\xf5\xec\xe6\xe6\xdaj\xdb\xa9\xb5\xe6\x17D\x92\xdaOB& \x8c\xbf\xf2\xc4*\xbdvn!\x02\xc3\x96\x10ZN\x8d\xe8^\x14\x8c\xc0\xa1`\xb4_\x98\xa9M\xb2\x8e\tna,\x92\x94\x8a8\xdb\xd0\x91A\x8c\xc7\xf8m\xef>O\xe5\xd0x\xa7\xb4\xcf-\xd0\x1e\xdf\xe7p\x91m\x95\x17[\x8d\xe3\xc2t\xf4\xb9\x9d\xb1RY\xd8\xe8\x89\xb9\x10.S\x14\x1e\xbd\x19\x88=\xf8\x85m\xb0\xfe*Dl\r\xb2\\j\x8doJ\x87\xd1\'\x04O\x8cn\fB<8TL~l\xfcg\x03\x11&7J\xfbV\xda\x03\xdc\xdc5%\xe5p\\!8\xacp\xa7\xc5s\x87\x10\x87\x9c\xbf\xd4\xcb\xd8\x12', 0x80000001, 0x80000000006) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86"}, 0x6, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) r7 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000022c0), 0x89001, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2c810) 6.859710638s ago: executing program 2 (id=1953): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(&(0x7f00000000c0)={0x4}, 0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b49, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff07, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket(0x2, 0xa, 0xe) 6.749605161s ago: executing program 3 (id=1955): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0020200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x589a83943be6e6ed, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4020) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') lseek$auto(r1, 0x7, 0x3) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r3 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) read$auto(r3, &(0x7f0000000200)='ns/pid\x00', 0x400) r4 = prctl$auto_PR_SET_MM_START_STACK(0x61c1, 0x5, 0x0, 0x7, 0xf6) r5 = ioctl$auto_TUNDETACHFILTER(r4, 0x401054d6, &(0x7f0000000280)={0xfffa, &(0x7f0000000240)={0xfff, 0x1, 0x7, @raw=0x1ace}}) r6 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f00000002c0)=0xffffffff) recvmmsg$auto(r6, &(0x7f0000001480)={{&(0x7f0000000300)="7f511a1b13d424e4d10862142a49338f0cceacf1efc84d7c13548cdef0785ace84bb6c39e1164d332fec9397532275d36f13459c96770de40dbec6aab50aceeb06b40ed845165a483adcd147de8b4b7133ad1235481eb0f6cd139cdf9163b35197c63e1012b986d7c9827be7a7ed243bfbfd66082f9a6283edf33f", 0x10001, &(0x7f0000001380)={&(0x7f0000000380)="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", 0xffffffffffffffff}, 0x2b19, &(0x7f00000013c0)="65e01d84bc6f29eb5b09388179568e3de18a09b5f538bbdf78f23bbef4c71af4f35767b794457cd87da44b8cf1bde29db65d820036ea81b751629571ebe75f6fbec3320c4a838f14a74a6230011dfec5dfbcb38381debc6cbe3d00afd7a3827d2971d9b5085071864143edaa827fe4258f5295d62728476c54d1bc92206dac3e138ee8cde99781234083eee1", 0x7fffffff}, 0xc35}, 0x5, 0x6f, &(0x7f00000014c0)={0x8001, 0x7ff}) write$auto(r4, &(0x7f0000001500)='ns/pid\x00', 0x2) sendmmsg$auto(r3, &(0x7f0000001700)={{&(0x7f0000001540)="1d6a6ec959e4260b130d851eba62d93a49dc8bf3739a1f9f136142ddef91dba5575ffae6", 0x1, &(0x7f00000015c0)={&(0x7f0000001580)="d1", 0x7}, 0xc09d, &(0x7f0000001600)="724d38cc8a8958dfd742722da169c3b4cbe2bfbfe81c877b0d7515fad97443dd34199a7af024a99b308dedfd9c1f4a0cc61b7b8969b11647adaad66b381faaac744b5bd779ff5e5bceb207b90eb1edc954e9347279902e4f5e201b5d4a1b3b37df3a78998994636a268ffeb5daeccfead34b5e9199784d92488f7c8039710e5fc2db80a01adeb4b1eb86f2595ee81eb8e2126c25095d056370c45a8b1aa90eb9ed73ff1a78102894260e23e8e8ebfab06f56aecee7142c6403a94d9a3e4814e97b40eedbba36f662b12cccddaf152eb5", 0x80000001, 0x9}, 0x2}, 0x5, 0x2) getsockopt$auto_SO_RCVMARK(r2, 0x9, 0x4b, &(0x7f0000001740)='/dev/mISDNtimer\x00', &(0x7f0000001780)=0x7) recvfrom$auto(r6, &(0x7f00000017c0)="c82e900ecc5d9163857e2a3ca908e38a57b707d3a03acdbed35204860d549dbb00a2e2a7df709c92a773b4738967f5996e3433340652de5278d366bfab195e1c629de6f8983da19412269817092a928cc43ceb36c329379d49d28d6baec9", 0x3, 0x10, &(0x7f0000001840)=@llc={0x1a, 0xf, 0x1f, 0x7, 0x21, 0xe3, @remote}, &(0x7f0000001880)=0x7) ioctl$auto_XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f00000018c0)={0x8, 0x1a, 0x6a4, 0x9, 0x40, 0x3, 0x0, 0x2}) prctl$auto_PR_SET_MM(0x23, 0x0, 0xffffffffffffffff, 0x3, 0x3000000000000000) preadv$auto(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)="4c565d14bb67abceb5d45fc6396a520e7f0aa0ad3ad12fcd0df9767cd2f048d8b80677ba162581e1dcd4b802ba1d5b7d98f473b9f6304f5a1476ade33bdd13e7aec0eb79362c3fcfe9df902e9ac182ba41b37a82384f5acbe962dbf0dba17920a020e023000eb2a740559711b0f290fd892d71065f5f65a29382726306ae19d72cedec692c924c53ca5084db85ef62af85d8e32fcdc395e991093eb9e4af8be2b245638b6809a8410166c3c2aec636c7d21567"}, 0x8, 0xa, 0x42b) r7 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000001a00)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x800, 0x0) ioctl$auto_BLKDISCARD(r4, 0x1277, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x2402, 0x0) bind$auto(r7, &(0x7f0000001a80)=@l2tp={0x2, 0x0, @local, 0x2}, 0x9b0) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000001ac0)="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", 0x6) ioctl$auto_SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000002ac0)=0xc) ioctl$auto(0xffffffffffffffff, 0x8, r5) socketcall$auto(0xa0, &(0x7f0000002b00)=0x3) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002b80), r5) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000046c0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004680)={&(0x7f0000002bc0)={0x1ab4, r8, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NAME_TABLE={0x129, 0x8, 0x0, 0x1, [@nested={0x18, 0x13b, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @u32=0x5}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x5}]}, @generic="a17428bad043d6902ee150687a968a4940a66de2fa266b3d2fe32d9f089ad6c9e7a32ebcf44b160c22d659af27f540d66e60f987db85641e4590ea4e43dacc08682cfd798d30553a1ed7325112366b2b079f6d73f5110ee9502717f9d95b4a526ded39359cc459d38b95cb00d2fdc1924f791d1e2d773d32bb04e804090bfdd4a62951ffd8e46b1739a0489c2848f1be82ecce27e3c518558d0868e0a41e2b23db9299edb39b", @generic="e465a6361adc885a6c5371c809ed91ca0ea6206cf894fd6da17d0e98e7ddad392fa261e19f0a68d41297c6fa27519705bf90bb4fb3cb79ed88f6a6ecd600b8d3004d80948697504c95677637a92d00ec12ad5d3670722845c22def892f06c788c43584026e9f84"]}, @TIPC_NLA_LINK={0x518, 0x4, 0x0, 0x1, [@typed={0x14, 0x41, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x1f, 0x50a, 0x0, 0x1, [@generic="625f58a69441c7ae9097ee040f428abc20abd54d82ed926b077225"]}, @typed={0x5, 0x12a, 0x0, 0x0, @str='\x00'}, @nested={0x6b, 0x14b, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @fd=r6}, @generic="4582b080bc85da3c24960dc2e36e17f7132080c994260bce26dd26c03f896795e9733517fdbb6fb6dfe759a17f4573ca5feb772aa138b4805bcf8a9c28b085b5f94ba94ad3d2602833e96946bb6c59d5924e6473f43a2c0a05526068cb1323"]}, @nested={0x24, 0x75, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x4}, @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@private0}]}, @generic="c4a2a81008f47ace98e7d674460dd2bf0f00e790b5cff7865e9b225ef88426a56244dc96fef73e561ed5a2789cb11da3d849509573e521b9de18212aeddb7a629d4e03d8c43eba3ca4ab45acad13993df12c18f5996f96e684e65d612fe9afbc96219405eaf1028122d045e76a6d23c3db7a9d51e11fa08b4bda5485591fe0b50cb5c189b45252cdbc5bd2df29e8f591a099ff7b17459771db7acb549f3db76b2e65c8eed0aac9963e4d26aa3de518db6e5044b4a31632f3b057b3baddf9c3f1f08d9f711b254aa37062e090220a9c46", @generic="716a9a0913b04bea3c7271b0a922d33130731afabb2e4be05166de954cab5e7d00247e45acd7879d114938426f7e07f3dfb1d61bfd9fcd8977f14279a5de5d8986bd41231d2f7a87e0dc1a1f69860a283927ba8e8841ad4feed7e50d1c4c4f1add4ed1f88cd7b25c3ac9e947841910f27e965ff7cf1714889353339ea852267e0aa04d03f0c0a71ae5318a95039253c44b357d3edff579950362f700b1a7294e5857205161c91391a0b07303fd8ff6ddfdaa88b4e252f96bec735d2f233fc8d66c5e01d53f60276244043e1f5067bfa34030ad610439b260745ceef2dfd9c8128a0d242d91414feeab2ad3049e2da9", @nested={0x1f6, 0x14, 0x0, 0x1, [@generic="997e9e2d1523ad33ff93629a84836059b731a81460e21531a92370a999be20546f2d1f6002ba8bd2f25f6e868e36587b081649cc072e089d4c2e", @nested={0x4, 0x6a}, @nested={0x4, 0xd4}, @generic="b0e4b0eaef895547bf792e77a5b7150fd69e27b42a7b08364a68f151f08aa3b8fe286a313f95024a0e0d743a10e5f7866f0b2ffe8beede595ffa085e6b7b03624afa3687fe1b1b9cd8971b60f2034aa50379e3791b2d049c7b18d78d88899d62f584bf4c50967670376c8c2e51cd17dc47e08b50e2cb4292fb732458c8eec0cc7242a19aab193e79eba5d310589d7c117c7fb43db0c693e5ea9614905d0bab89006dcefd7c0f", @typed={0xce, 0x121, 0x0, 0x0, @binary="fa08612061fec0a77b33821b4f8b54ee9fd7ff86cd4fbd6d63ad494e49d14213dcfa5bc91bfeeb75ed5d5d0bda5c8428f08b369b899ebbac38743d94e3849a11bcd11ed040de22158ab040200ffb2f37230c827010b3d7b3c23ff8872bb6aba0551a84f89c0592a9b5a1e9556137e307ce9bcf253637822bb9583085d74f177c288eb08442d9d1ac1ebe735254768d63ebe1d4a7ec7e27e971f9a0e521e2bfd481f4c922384a175f78f87b126dd0af2bb20b34aab6464aca06af7395a5e9b110620e1e49224e2293a755"}, @generic="5f22b0da9a5aa78407778c669612f3f04c42e7ae09ff21068a059aeea10e6541cbeabaeea6895e809a77875dbd53b24fc6261dce707063f327e7", @generic]}, @generic="1503b4f72b94ef91b23e8e532b5bfed9d5c62d7620b168eb699fb090e6540ca7bccd54b04ce94a4c4febb42597b3fdb0632dcaeea95863474132102ec0533ba7d0b593d4fc78c54abebe3c1153e4570c16d2ab375b131bf6293040178db587c4a869459e50c909101675c1399e93a08d2f94bcc6b983346046cfa4564584c6dbde50a4aaa4f27adb7ef5ec287ec0104e17"]}, @TIPC_NLA_LINK={0x172, 0x4, 0x0, 0x1, [@typed={0x4, 0xf}, @generic="9022436ed7e0dd863de101ae3c1cf73a164ea4121b42a1a42093315b96cdb73b0f1fc13b1c39ea108f34fa54afe273f28fc9e10d29784b5d034be2963c677d08e494a48749bbe718bf8b21a1360e230025c0b3d7729c17bc933ea7ddf02178b5e3f993076146aa70d3a8fe281c845cde527eb1d1f5c50617184fb1d34a300a06687a1c30452304d33ba2b8ebc5dc4756f8d8eb22f4942f0d56b38f52250271b0df204bdb29c8b55c08cf763b4f30fbe0", @typed={0x8, 0xb4, 0x0, 0x0, @fd=r6}, @nested={0x10, 0xb7, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x8, 0xd8, 0x0, 0x0, @pid}]}, @generic="961bbd72b93555329beb7a25234c8b43815ecbf3727383cfe40bd436721c8a43691a24fba179e6c07211c8054b3c72b003bd75632c67944c7c126666203baaf226e7fa65dd7954410a9085ad2426fd0e91fc0d5be3c6a98358137189b58e1e416e964d62410f34e28f75b443d03a54ef91cf05d6eca7e681b8a50e71c33a81bb60dee2603b844639110714e6cd6683f6850b2e4f822f9310c3756471a11e37adb521"]}, @TIPC_NLA_SOCK={0x11c1, 0x2, 0x0, 0x1, [@nested={0x1071, 0xa7, 0x0, 0x1, [@typed={0x1004, 0xe2, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x35}, @generic="023f1c1961a8557c402090bcc2c4a446c9e0249537d2e7370adb3468c777c25b3f1d4041796ad52fa2fc78881fe38ff4f4a4bd9dfcacf136143b3d3bcad0dd5e2646acefe117e42057a78c171bb55403902b80cc2bdda6afa0f29c85a9dbd61408", @typed={0x4}]}, @typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0xc, 0xb7, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0xae}]}, @generic="4d7fe0af5a127c1bc9afc8d48616da1d41f0a4d48e1d6fe9011bb4a94bbe13670c6fee84e6e91c95d8103bec", @generic="156f17d8d62d593567499a1260797309f9150e6ed563a8a061b74cb79052bbfd37c36e63db36efea67f09d5e8500bb5231594c328862d175c50e2aaf720b22986e6fd855618227b1532fefca8b6fa23804b165d920fd09292ccde76b5552b38a7ea964734723dd5c45b9d1740b0d9e354494ecf4e7731cf9582ff5c8cab499f357ea989a134704cf6bae3333c75f51face9fd57849a801c4b39efe0032572ef792910230eb91262b060eac0fba7b7a0c7bf3ebcb2d8511b5b68e9ed94a877155be31329cf0261de155a3911bce85828e9c9bf1df1069a4c0e413cc04da2714c9410f07306e9d5c6d43d6091b9c1fb23f177df231f1", @typed={0x8, 0x55, 0x0, 0x0, @u32=0x5000000}]}, @TIPC_NLA_MEDIA={0x123, 0x5, 0x0, 0x1, [@typed={0x34, 0xd, 0x0, 0x0, @str='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00'}, @typed={0xc, 0xe1, 0x0, 0x0, @u64=0x10}, @nested={0xd3, 0xa8, 0x0, 0x1, [@nested={0x4, 0x59}, @generic="f8cbf1ea868d5b1cf9d29357d7646600e3836f3d82c69c97ce370a082238e8451860682edd4975bd857878", @typed={0xc, 0x148, 0x0, 0x0, @u64=0x302}, @generic="f708e6cdfa9bac66d8bba304c79310f5fc13ecf588ccb6d6df547d11c83b75f93d1e7398a86268c0a42d631a450e9603a0b4771877b96d2900066bc0dc8693ecc51ff676526da25289437d3d3997aaa622474e52ae6c434b92d1acef4e9bba27d570e7b2b0408b34eb8806275d5f6898fc533c06f42a138cc3580f952dd77ae656bdfe61038f4bf3aea5b12d74e7f8d3", @nested={0x4, 0x45}]}, @generic="fd0a70", @typed={0x8, 0x112, 0x0, 0x0, @u32=0x5}]}]}, 0x1ab4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008041) sendmsg$auto_NL80211_CMD_DISCONNECT(r6, &(0x7f00000047c0)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004780)={&(0x7f0000004740)={0x24, r0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x80}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000059c0)={&(0x7f0000004800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000005980)={&(0x7f0000004840)={0x1120, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_CQM={0x1100, 0x5e, 0x0, 0x1, [@typed={0xc, 0x9f, 0x0, 0x0, @u64=0x48}, @generic="cadd6e829848204e41bc943ad370a2ed9abb592c9fdf454142bb207dae322e6c0c785277ce4981e716deba496ac54bbb755330de2e541f35c1e7e3d5c29382187913a1fd4efe7010477b73d5cf37e9904f6cdd251f3a2a093374720ed5b53de0526df2733232c3ea30946cd30c268af23019a9ea6b7a332f0126ef810d6dcd12dcc3eef528401ecb798da586e99068c88f7275d12ad43d5959f440e9205f4df85a7f7ca6bb19d83be52d4f0b8da2134edc60f39c79c0f797094ab29c2ed15d904cb7adf4eeb10c98876dd45bb2bababef7665ef0a938eb96d200c601e680df26db3b41b7beaf478c", @generic="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", @nested={0x8, 0x21, 0x0, 0x1, [@nested={0x4, 0xe0}]}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x1120}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 6.672921706s ago: executing program 1 (id=1956): readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) mmap$auto(0x0, 0xfb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x10000, &(0x7f0000000300)={@siginfo_0_0={0x3, 0x1, 0x1, @_sigsys={&(0x7f0000000440)="1034913c394bf5be499eee7bad670e1fe186a3c728395d453c56cd47e9dd1c357f4720829fb0626366622091fa1ff09f02c50649b5b5c185003cc55984e2f620e70f3b8cc32ae961f6aab984d0d1b1e359aca996d510399babc727c116e83492c18ea0159802e008aa57d599aefb4f260775f618c145189af6b3e7c0888f7220edef0332c4f786ad5d12076f0702eedbd6c969473755e1fd27f9810ce9edd1fd97933d725f3c197a31dbdda0b400234380ae085ab00f634e5418baff167fcf14e27e7ab4728bb60d8d09770675c43501056df40aa3adc58e58929c5612388abc621418f3d94cb8b41ccfa15e17a7ad9a086847accad3e1c0b0d3", 0xfff, 0x1000}}}, 0x1, &(0x7f00000005c0)={{0x8, 0x3}, {0x2, 0xe}, 0x6a5d, 0x8, 0x2, 0x5, 0x9, 0x3, 0x2, 0x2, 0x1, 0xa, 0x0, 0x1, 0x40, 0x5}) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) geteuid() socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.637632962s ago: executing program 0 (id=1957): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2002, 0x0) ioctl$auto(0x3, 0x4020aed2, r0) 6.306211184s ago: executing program 3 (id=1958): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf25030000002c00038028000180240006801d0074804cfe4d808847d0000008000066000033800000000400038004000280"], 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="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", 0x159) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r3, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) semctl$auto_GETPID(0x0, 0x7ff, 0xb, 0xfffffffffffffffc) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setpriority$auto(0x0, 0x0, 0x9) keyctl$auto_KEYCTL_MOVE(0x1e, 0x8d2, 0x6, 0x4, 0x1ff) keyctl$auto_KEYCTL_MOVE(0x1e, 0xff, 0x7fffffffffffffff, 0x5, 0x4) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0x200007, 0x8) ioctl$auto(r4, 0x7fff, r4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon23\x00', 0x2c80, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x810) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity_list\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0xf34) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) 6.288178476s ago: executing program 1 (id=1959): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x290040, 0x18c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x80, 0x20009, 0xdf, 0xab1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x22281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x401, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r3, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x6, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) 5.675463398s ago: executing program 0 (id=1960): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x9, 0x2, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x7) r1 = socket(0x1, 0x0, 0x7) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x10) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x400f240, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xfffffffffffffe01, 0x4, 0x3, 0x17, r0, 0x9) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, 0x0) truncate$auto(&(0x7f0000000040)='./file0\x00', 0xa5) 5.572639168s ago: executing program 2 (id=1961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}, 0x1, 0x3f, 0x0, 0x40000}, 0xfdf31875370e1716) 4.762314176s ago: executing program 2 (id=1962): mmap$auto(0x3, 0x2020005, 0x1, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video6\x00', 0x10600, 0x0) prctl$auto(0x9, 0x2, 0x0, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x4, 0x9}, 0x9, 0x7) landlock_restrict_self$auto(r0, 0x0) socket(0xf, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) rename$auto(&(0x7f00000003c0)=':-.\x00', &(0x7f0000000000)=':-.\x00') r1 = socket(0x27, 0x1, 0x8000484) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00'}) name_to_handle_at$auto(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x72, 0x0, "97f19d0ddc974556de91b58c098dfd7cef75b61fcfbc76fc8f74200f6de4420747fe9ca9982e0a1ce5a9dfa8cd002c2b71849441f276ea866c1015cdd662a3d2722931ba5397725b8623170da031c564b1b9a508b104d70a076fdfd5ec6036a11a19dc4fc6f54c7efe58b9f37269ae30dcfe"}, 0x0, 0x1003) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x3, 0x2, 0x40eb1, 0xffffffffffffffff, 0xe9e) syz_clone(0x4b22000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop8/queue/optimal_io_size\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.11/usb32/devspec\x00', 0x0, 0x0) mmap$auto(0x0, 0x6d49, 0x8000000df, 0xeb1, 0x40000000000a5, 0x1) sysfs$auto(0x2, 0x46, 0x0) close_range$auto(0x2, 0x8, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x1, r1}) mmap$auto(0x100000001, 0x4, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.668536043s ago: executing program 1 (id=1963): r0 = prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x11, 0x80003, 0x300) bpf$auto(0x0, &(0x7f00000001c0)=@token_create={0x94, r0}, 0x6f3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) sendmsg$auto_TIPC_NL_MEDIA_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x5, r2, 0x701, 0x70bd2d, 0x25dfdbfd}, 0x13}, 0x1, 0x0, 0x0, 0x800}, 0x20048851) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pidfd_open$auto(0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r4, r5, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r5, 0xc, &(0x7f00000002c0)="f1823fb0725945f1e2b3fb53d2c159f4e6ba8f8a6c8a3ee17b12f024dbb46fa02fd155c428ef4b53e7497f5fa709630ea0f98669d98b7f3a6ca242a35152eeea9b6eb4bb4d05e1293d237c3b0a8e83d852182ce7e220d42a268964522a897562fa9e20c6635ad59b76da3b4c31bef7a9f2cc7ee1b03dd74b3df569c16fc82b42d57b906bc80204bcc5eb05a3d4fcba1eff1ce47c2a89bf42a4e92ec922670e0b5a3c400d7e45471091db49011c0381fd106f5455db5cbd330d144ae1d642ca2d08f3e1eeaad61882699618d1ad5c68d306a80f0a2e0604f14193dc9fa09c0cbecc1c50167fe0b5c4f3132b95d22179afa4216533", 0x9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) fsconfig$auto_FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x0, 0x302) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 4.518772391s ago: executing program 0 (id=1964): capget$auto(&(0x7f0000000000)={0x8000, 0xffffffffffffffff}, &(0x7f0000000040)={0xa5, 0x10000, 0x1000}) ptrace$auto_PTRACE_SETREGS(0xd, r0, 0x8000000000000001, 0x3) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8bb}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f00000001c0)=0x4) sendmsg$auto_NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0x9e, 0x4f, "4199426713202a113ef3f111c18e9a1ad7a8a3b3103bf1f5bd4beb699296fa6a90d0a8891c7f21dd5a52ef1af34366d2c9f3c138ebf563d24420217b9282cbd3a62763f390ac2a726f44d428b7144778b1fca7a4cef745cce4f184438e7cf00aa83512d3ed125e5780feb2c3a9651a6fef0e07c916b14fca08ec146e3b219bca37d268d7712469b546906f132900ecbc8f2d59aff87087d2072b"}]}, 0xb4}}, 0x40044) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x7}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1e}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3ff}]}, 0x2c}}, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/card1/pcm0c/xrun_debug\x00', 0x80040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000540), r2) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x28}}, 0x20008000) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1a}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r6 = pidfd_open$auto(r0, 0x2) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r1, 0x6717a900f0dc7ebe, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0xff}]}]}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x47}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004c050}, 0x4004000) statmount$auto(&(0x7f0000000900)={0x10, @raw=0x5, 0x8000000000000000, 0x1, 0x300000}, &(0x7f0000000940)={0x6, 0x80, 0x7fffffffffffffff, 0xc, 0x80000001, 0x1, 0x9, 0x7, 0x1, 0x1, 0x6, 0x59, 0x5ce, 0x81, 0x60c, 0x5, 0x7, 0x7, 0x400, 0x1, 0x3, 0x400, 0x231, 0x6, 0x5, 0x1, 0x9, 0x9, 0x2, 0x5, 0x6, [0x9, 0x8, 0xfff, 0x6, 0x886a, 0x8000, 0x0, 0x0, 0x4, 0x80000000, 0x9, 0x1ff, 0xffffff0000000000, 0xfffffffffffffffc, 0xffffffff00000001, 0x9, 0x2a79, 0x4cd0, 0x3, 0x1a5, 0x7a4, 0x9, 0x1, 0x0, 0x6, 0x6, 0x1000, 0x8, 0x1000, 0x7f, 0x9, 0x7, 0x41e0, 0x8, 0x9, 0xe3, 0x1000, 0x2, 0xb, 0x3, 0xce5, 0x8], "e4dc44b53967843213e1444fa9303db278fb26962bcb11122e0089eede57460ac2910b2a9fc91ede49fc0f92977c371bc887c48e2ef35bf4d690c5a3c59a49e17e"}, 0x7, 0x24a) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000d80)={{0x4, 0xee00, 0xffffffffffffffff, 0xd395, 0x7fff, 0x5, 0x7}, 0x57469fde, 0x7, 0x1, 0x5, @inferred=r0, @raw=0x7, 0x1, 0x0, &(0x7f0000000bc0)="076af680bc457e3d050af93256e971ef1cfd05b0f927cce7482d2ad7b1783b4a8fa5d6774453c0c137e16c72f1826a977654d6c64887d3cded55dacb3c6acd346c5ffe688ecc6f300b0a42e031bcca67a99d692014809db48772ee60c2b0114127fbaad8dacb658b5bb1a71f2417543b6ec49f52b71b65e2ad6cf16d56159d3feb99057f1fa390b488cd18df6be183359b3e65b1008a95d0b68e413b1c72b356e9068c8f0e48b9fe85296323f47c043908c2fb1d069260ebb3e764f19177022c4275b3692128e0663c2b945c1f46e385700ce615d3325f9de6397be6a63e75edae1977c3e46373bb", &(0x7f0000000cc0)="e1a1c64006a30c6f73e4caec536cab0aa579f31841b76743f737cdf3a980d4e98f56fe52b77d654117f7c22f098a212a86554e398ed667484a8a5aa3c97d6c5b3b7be85444e480f11b7c24451167ef3c5a238583b24dc54dfd2ae9c3fb13d23d7f4031ff6123844088cc866eeb2e6581c5055c8e6416d7c6d50ad65ac305e9f4143962eb852c20a5cb9f4bb067ff"}) shmctl$auto(0xe, 0x8, &(0x7f0000000f40)={{0x5, 0xee00, 0xffffffffffffffff, 0x58, 0x0, 0xfffffffc}, 0xe, 0x0, 0xffff, 0x4, @raw=0x800, @inferred=r0, 0x5, 0x0, &(0x7f0000000e00)="edb676e22d045938ea51849d28d6dfa1d10e52bb6482944b3da1a3bfaa355f5053c4972dbdc8f256d7e6ac0746c34200f611c0fba99fd41dc712748819de94f74d6d8cc480135683f482b757157e094d54", &(0x7f0000000e80)="b9529c7ca3f61c2f36d86e3a3f4efc3be876dd12a9acdc54efca377ea807b50e544859fde3dd1b7be7698e7bc1441204acf0395eb41cefcd7e8113dc76ce31a3410b3314cbc6b19e3614d2f71d10f30c719ee00718e61e4ccdc12f8749731fb4cac907d5d336807094c6132156cc4a7c1ff07fd3aeb30e1157bd357f00a38f7ff2c480ba3de71d196facdd024bce364ddfad2c37b0781a414ec912d56a0cadff205b9464e5cba8812d5772"}) fstat$auto(r3, &(0x7f0000000fc0)={0x1, 0xed5, 0x9, 0x9, r7, r8, 0x0, 0x5, 0x3c00000000, 0x9, 0x3, 0x7, 0x4cf, 0x0, 0x81, 0x100000000}) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001080), 0x400180, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(r2, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xcddd}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc0) r11 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/tty27\x00', 0x40481, 0x0) ioctl$auto_TIOCMSET2(r11, 0x5418, &(0x7f0000001200)="44d90a4272272e840a89d7fd5285dcb894f3a0d2a3459051a9a1967e9d4c7b5421d392ad641dff4c3e6d4b0889b21b638e7a872b02354f46b1419426000ab060ae0d18c50fd9d8c36306a18eb4591375e0b39c83e2e732fb23ce57046b43e1d2e1e9a45215f312e1c2c21795944df5591a") r12 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000012c0), r2) sendmsg$auto_NLBL_CALIPSO_C_ADD(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r12, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xe2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4800) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f0000001540)={{0x8, r9, r10, 0x4, 0x8, 0x10, 0x401}, 0x2, 0x4, 0x9, 0x3, @inferred=r0, @raw=0x2, 0x5, 0x0, &(0x7f00000013c0)="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", &(0x7f00000014c0)="1767ae0c71c3790d347a39c9e9a9c76f5a41063cfadd8bd9cfe45f79b9c2bacb62cf5d19a48e524b5119e19b03e7a65d316ec2529a74fb84e06ed6de70a3f15f6e91ec14076803a02b455597d8fac9d15370"}) write$auto_tracing_free_buffer_fops_trace(r6, &(0x7f00000015c0)="d8560c64fbc38a6857e0069c6f962736cbb87cbc5373", 0x16) msync$auto(0x3, 0xf, 0x4) r13 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001640), r6) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x60, r13, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x400}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_SRC_HW_ADDR={0xc, 0xc, 0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0xb116}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x1) 4.093700681s ago: executing program 0 (id=1965): mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x2000c, 0x4000000000e2, 0x100000000000eb1, 0xffffffffffffffff, 0x8000) (async) unshare$auto(0x40000080) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r1, @ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x400, &(0x7f0000000000)={0x0, 0xc7}, 0x1, 0x0, 0xd, 0x8}, 0xffffffff}, 0x2, 0xfffffffd) (async, rerun: 32) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x810) (async) fchmod$auto(0xffffffffffffffff, 0x4) (async) mmap$auto(0x0, 0x80000000000e983, 0xdf, 0x80000000eb1, 0x401, 0x7fff) (async) io_uring_setup$auto(0x1, 0x0) (async, rerun: 64) r2 = socket(0x11, 0x80003, 0x300) (rerun: 64) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000003900)="fb", 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) 3.59615394s ago: executing program 2 (id=1966): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='\x00\x00', 0x2fb) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xd0080, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x1e3\n\xc0d\xb1!\x9bt\x97N\x8f\xcd\xee\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r4, 0x7fd, 0x1) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x2, 0x0, 0x2) pidfd_open$auto(0x1, 0x0) setns(r5, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = socket(0x2a, 0x2, 0x6) write$auto(r7, 0x0, 0x400000002d) setfsuid$auto(0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r8 = prctl$auto(0x3f, 0x6, 0x0, 0x3ff, 0x5) readv$auto(r8, 0x0, 0xaa) flistxattr$auto(r3, 0x0, 0x16) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r9, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3.447123504s ago: executing program 1 (id=1967): connect$auto(0x3, 0x0, 0x50) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0xfffffffffffffffd, 0x729, 0x9, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b73, 0x7, 0x28000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x100000000001, 0x4000200000ae7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x3, &(0x7f0000000140)={0x4, 0x1, 0x400, 0x538, 0x7ff, 0x3, r0, [0xf55, 0x0, 0x1], {0x3, 0x3, 0x80, 0x2, 0x5, 0x400, 0x1, 0x7, 0xffffffffffffffff}, {0x7, 0x622, 0x48000, 0x3, 0xb, 0x0, 0x2a, 0x3, 0x1}}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x3, 0x10001, 0x3, 0x5e, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x63, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xca002, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x200000000080003) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0xffffffffffffffff, 0xfffffffffffefffb, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x20) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 3.373470586s ago: executing program 3 (id=1968): readlinkat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591083, 0x408) mmap$auto(0x0, 0xfb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x10000, &(0x7f0000000300)={@siginfo_0_0={0x3, 0x1, 0x1, @_sigsys={&(0x7f0000000440)="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", 0xfff, 0x1000}}}, 0x1, &(0x7f00000005c0)={{0x8, 0x3}, {0x2, 0xe}, 0x6a5d, 0x8, 0x2, 0x5, 0x9, 0x3, 0x2, 0x2, 0x1, 0xa, 0x0, 0x1, 0x40, 0x5}) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) geteuid() socket(0x10, 0x2, 0x4) socket(0x25, 0x1, 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.114733159s ago: executing program 3 (id=1969): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd7\x00', 0xc4100, 0x0) ioctl$auto_IOC_PR_RELEASE(r0, 0x401070ca, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xfffffffffffffe01, 0x4, 0x3, 0x17, r1, 0x9) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) write$auto(0xffffffffffffffff, 0x0, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, 0x0, 0x4004040) truncate$auto(&(0x7f0000000040)='./file0\x00', 0xa5) 2.063210465s ago: executing program 1 (id=1970): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x5c}, 0x1, 0x106, 0x0, 0x40000}, 0xfdf31875370e1716) 1.795039909s ago: executing program 2 (id=1971): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) socketcall$auto(0x6, &(0x7f0000000080)) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x40202, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f00000020c0)=""/4093, 0xffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 71.306831ms ago: executing program 3 (id=1972): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x2, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x290040, 0x18c) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x80, 0x20009, 0xdf, 0xab1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3a) bind$auto(0x3, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x3}}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101181, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x22281, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x401, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x509a40, 0x0) write$auto(r3, &(0x7f00000010c0)='/dev/audio1\x00\x02\xd6\xa49\'.\xda&\xc2\x01\xb7|\xbb\xaa\xa4\xa5\x12i/(b\x91\xbb', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x6, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) 68.948939ms ago: executing program 1 (id=1980): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x48401, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r1, 0x40045702, &(0x7f0000000080)=0x6) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x7, 0x5, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TUNGETIFF2(r3, 0x800454d2, &(0x7f00000000c0)=0x5) r4 = socket(0x11, 0x3, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) mmap$auto(0xfffffffffffffe01, 0x4, 0x3, 0x17, r4, 0x9) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="acb7997214fb46ae0979a4d5de4c1bbedf6d87bda7f8db08e316398bbb274ecf5f8a7ab0359a6e8c0a9c7a11993f66a35540adb6722e0d63adf0f8505fa52aedbe0b7262379718e50c488b65017a92ecbeacae25b82d6b8a8f97c44751fcb2580cf7", @ANYRES16=r5, @ANYBLOB="130026bd7000fddbdf2502000000050059000200000008000300", @ANYRES32=r7, @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x48050) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r8, 0x0) truncate$auto(&(0x7f0000000040)='./file0\x00', 0xa5) 52.01555ms ago: executing program 2 (id=1973): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0xa, 0x2, 0x73) (async) socket(0x18, 0x5, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="24051c27c100dedbdf250307cc0008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000006000700050000000a00050000000000000000000a00010000000000000000000a0001000000000000000000060006000d00000006000600070000000a"], 0x6c}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044040}, 0x24008890) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) (async) mq_open$auto(0x0, 0x7e, 0x9, 0x0) (async) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) 0s ago: executing program 0 (id=1974): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x8, 0x7, 0xfffffffe) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000340), r0) sendmsg$auto_BATADV_CMD_GET_VLAN(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2144080}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x5}, @BATADV_ATTR_BLA_ADDRESS={0xa}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @remote}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'veth0_to_hsr\x00'}, @BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x3}, @BATADV_ATTR_NEIGH_ADDRESS={0xa, 0x18, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x814}, 0x801) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKID={0xff, 0x55, "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"}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0xb, 0x2020005, 0x1, 0xfffffffffffff593, 0xffffffffffffffff, 0xffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) connect$auto(0x3, 0x0, 0x55) kernel console output (not intermixed with test programs): ey+0x10/0x10 [ 428.753898][T11715] futex_wake+0xea/0x530 [ 428.753945][T11715] ? kasan_quarantine_put+0x10a/0x240 [ 428.753992][T11715] ? __pfx_futex_wake+0x10/0x10 [ 428.754043][T11715] ? putname+0xf5/0x1a0 [ 428.754081][T11715] do_futex+0x1e3/0x350 [ 428.754118][T11715] ? __pfx_do_futex+0x10/0x10 [ 428.754167][T11715] ? __pfx___might_resched+0x10/0x10 [ 428.754214][T11715] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 428.754264][T11715] __x64_sys_futex+0x1e0/0x4c0 [ 428.754304][T11715] ? __x64_sys_openat+0x174/0x210 [ 428.754342][T11715] ? __pfx___x64_sys_futex+0x10/0x10 [ 428.754395][T11715] do_syscall_64+0xcd/0xf80 [ 428.754439][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.754471][T11715] RIP: 0033:0x7ff7f818f7c9 [ 428.754496][T11715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.754527][T11715] RSP: 002b:00007ff7f8ffc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.754558][T11715] RAX: ffffffffffffffda RBX: 00007ff7f83e5fa8 RCX: 00007ff7f818f7c9 [ 428.754577][T11715] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff7f83e5fac [ 428.754596][T11715] RBP: 00007ff7f83e5fa0 R08: 00007ff7f8ffd000 R09: 0000000000000000 [ 428.754615][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.754634][T11715] R13: 00007ff7f83e6038 R14: 00007fff36d6e8e0 R15: 00007fff36d6e9c8 [ 428.754677][T11715] [ 431.987697][T11765] FAULT_INJECTION: forcing a failure. [ 431.987697][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 432.014686][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.2.1162 Tainted: G U L syzkaller #0 PREEMPT(full) [ 432.014738][T11765] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 432.014749][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.014767][T11765] Call Trace: [ 432.014778][T11765] [ 432.014789][T11765] dump_stack_lvl+0x16c/0x1f0 [ 432.014844][T11765] should_fail_ex+0x512/0x640 [ 432.014880][T11765] ? kmem_cache_alloc_noprof+0x62/0x770 [ 432.014924][T11765] should_failslab+0xc2/0x120 [ 432.014974][T11765] kmem_cache_alloc_noprof+0x83/0x770 [ 432.015014][T11765] ? __proc_create+0x2c8/0x8d0 [ 432.015065][T11765] ? __proc_create+0x2c8/0x8d0 [ 432.015105][T11765] __proc_create+0x2c8/0x8d0 [ 432.015150][T11765] ? __pfx___proc_create+0x10/0x10 [ 432.015199][T11765] ? _raw_write_unlock+0x28/0x50 [ 432.015257][T11765] ? proc_register+0x559/0x8b0 [ 432.015306][T11765] proc_create_reg+0x7d/0x180 [ 432.015354][T11765] proc_create_seq_private+0x8e/0x180 [ 432.015415][T11765] ? __pfx_proc_create_seq_private+0x10/0x10 [ 432.015474][T11765] xt_proto_init+0x5b8/0xc10 [ 432.015515][T11765] ? __pfx_xt_proto_init+0x10/0x10 [ 432.015552][T11765] ? kasan_save_track+0x14/0x30 [ 432.015594][T11765] ? ops_init+0x77/0x5f0 [ 432.015642][T11765] ? __pfx_arp_tables_net_init+0x10/0x10 [ 432.015689][T11765] ops_init+0x1e2/0x5f0 [ 432.015743][T11765] setup_net+0x11d/0x3a0 [ 432.015789][T11765] ? __pfx_setup_net+0x10/0x10 [ 432.015830][T11765] ? lockdep_init_map_type+0x5c/0x270 [ 432.015863][T11765] ? mutex_init_lockep+0x110/0x150 [ 432.015901][T11765] copy_net_ns+0x351/0x7c0 [ 432.015932][T11765] create_new_namespaces+0x3ea/0xab0 [ 432.015982][T11765] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 432.016026][T11765] ksys_unshare+0x45b/0xa40 [ 432.016054][T11765] ? __pfx_ksys_unshare+0x10/0x10 [ 432.016082][T11765] ? xfd_validate_state+0x61/0x180 [ 432.016140][T11765] __x64_sys_unshare+0x31/0x40 [ 432.016167][T11765] do_syscall_64+0xcd/0xf80 [ 432.016199][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.016237][T11765] RIP: 0033:0x7ff7f818f7c9 [ 432.016261][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.016291][T11765] RSP: 002b:00007ff7f8fdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 432.016320][T11765] RAX: ffffffffffffffda RBX: 00007ff7f83e6090 RCX: 00007ff7f818f7c9 [ 432.016340][T11765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 432.016357][T11765] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 432.016381][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.016399][T11765] R13: 00007ff7f83e6128 R14: 00007ff7f83e6090 R15: 00007fff36d6e9c8 [ 432.016441][T11765] [ 432.725920][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 434.211030][T11788] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 434.328250][T11792] zram0: detected capacity change from 16 to 0 [ 434.700351][T11792] zram: Removed device: zram0 [ 435.169305][T11810] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1172'. [ 436.539713][T11813] FAULT_INJECTION: forcing a failure. [ 436.539713][T11813] name failslab, interval 1, probability 0, space 0, times 0 [ 436.557319][T11813] CPU: 0 UID: 0 PID: 11813 Comm: syz.1.1174 Tainted: G U L syzkaller #0 PREEMPT(full) [ 436.557371][T11813] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 436.557384][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.557402][T11813] Call Trace: [ 436.557412][T11813] [ 436.557424][T11813] dump_stack_lvl+0x16c/0x1f0 [ 436.557479][T11813] should_fail_ex+0x512/0x640 [ 436.557516][T11813] ? kmem_cache_alloc_noprof+0x62/0x770 [ 436.557557][T11813] should_failslab+0xc2/0x120 [ 436.557606][T11813] kmem_cache_alloc_noprof+0x83/0x770 [ 436.557643][T11813] ? __pfx_acct_collect+0x10/0x10 [ 436.557685][T11813] ? taskstats_exit+0x654/0xbe0 [ 436.557735][T11813] ? taskstats_exit+0x654/0xbe0 [ 436.557777][T11813] taskstats_exit+0x654/0xbe0 [ 436.557824][T11813] ? __pfx_taskstats_exit+0x10/0x10 [ 436.557894][T11813] ? exit_signals+0x388/0xb00 [ 436.557942][T11813] do_exit+0x5e4/0x2bd0 [ 436.557979][T11813] ? __pfx_do_exit+0x10/0x10 [ 436.558008][T11813] ? do_raw_spin_lock+0x12c/0x2b0 [ 436.558042][T11813] ? find_held_lock+0x2b/0x80 [ 436.558090][T11813] do_group_exit+0xd3/0x2a0 [ 436.558123][T11813] get_signal+0x2671/0x26d0 [ 436.558180][T11813] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.558212][T11813] ? __pfx_get_signal+0x10/0x10 [ 436.558258][T11813] ? do_futex+0x122/0x350 [ 436.558297][T11813] arch_do_signal_or_restart+0x8f/0x7a0 [ 436.558340][T11813] ? __do_sys_getcwd+0x4d1/0x930 [ 436.558377][T11813] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 436.558435][T11813] ? __pfx___x64_sys_futex+0x10/0x10 [ 436.558478][T11813] exit_to_user_mode_loop+0x8c/0x540 [ 436.558523][T11813] do_syscall_64+0x4ee/0xf80 [ 436.558555][T11813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.558586][T11813] RIP: 0033:0x7fd33af8f7c9 [ 436.558610][T11813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.558641][T11813] RSP: 002b:00007fd33be890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 436.558670][T11813] RAX: fffffffffffffe00 RBX: 00007fd33b1e5fa8 RCX: 00007fd33af8f7c9 [ 436.558689][T11813] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd33b1e5fa8 [ 436.558707][T11813] RBP: 00007fd33b1e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 436.558725][T11813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.558742][T11813] R13: 00007fd33b1e6038 R14: 00007ffc2183ab60 R15: 00007ffc2183ac48 [ 436.558782][T11813] [ 437.124881][T11833] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 437.200026][T11833] File: /dev/ram5 PID: 11833 Comm: syz.0.1179 [ 437.402853][T11843] FAULT_INJECTION: forcing a failure. [ 437.402853][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 437.477971][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.1.1182 Tainted: G U L syzkaller #0 PREEMPT(full) [ 437.478010][T11843] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 437.478018][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.478031][T11843] Call Trace: [ 437.478038][T11843] [ 437.478047][T11843] dump_stack_lvl+0x16c/0x1f0 [ 437.478093][T11843] should_fail_ex+0x512/0x640 [ 437.478120][T11843] ? __kmalloc_noprof+0xca/0x910 [ 437.478147][T11843] should_failslab+0xc2/0x120 [ 437.478183][T11843] __kmalloc_noprof+0xeb/0x910 [ 437.478208][T11843] ? lsm_blob_alloc+0x68/0x90 [ 437.478247][T11843] ? lsm_blob_alloc+0x68/0x90 [ 437.478279][T11843] lsm_blob_alloc+0x68/0x90 [ 437.478314][T11843] security_sk_alloc+0x2f/0x270 [ 437.478340][T11843] sk_prot_alloc+0xfb/0x2a0 [ 437.478363][T11843] sk_alloc+0x36/0xe30 [ 437.478393][T11843] unix_create1+0xa6/0x700 [ 437.478420][T11843] unix_create+0x110/0x270 [ 437.478445][T11843] __sock_create+0x339/0x8a0 [ 437.478473][T11843] __sys_socketpair+0x25c/0x5a0 [ 437.478499][T11843] ? __pfx___sys_socketpair+0x10/0x10 [ 437.478523][T11843] ? fput+0x70/0xf0 [ 437.478546][T11843] ? xfd_validate_state+0x61/0x180 [ 437.478566][T11843] ? __pfx_do_writev+0x10/0x10 [ 437.478601][T11843] __x64_sys_socketpair+0x96/0x100 [ 437.478626][T11843] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.478646][T11843] do_syscall_64+0xcd/0xf80 [ 437.478669][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.478692][T11843] RIP: 0033:0x7fd33af8f7c9 [ 437.478709][T11843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.478731][T11843] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 437.478752][T11843] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 437.478766][T11843] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 437.478779][T11843] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.478793][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.478806][T11843] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 437.478834][T11843] [ 439.115111][T11883] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1194'. [ 440.654455][T11917] syz.0.1200: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 440.683298][T11917] CPU: 1 UID: 0 PID: 11917 Comm: syz.0.1200 Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.683344][T11917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.683352][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.683366][T11917] Call Trace: [ 440.683373][T11917] [ 440.683381][T11917] dump_stack_lvl+0x16c/0x1f0 [ 440.683424][T11917] warn_alloc+0x248/0x3a0 [ 440.683454][T11917] ? __pfx_warn_alloc+0x10/0x10 [ 440.683484][T11917] ? __lock_acquire+0x436/0x2890 [ 440.683519][T11917] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 440.683544][T11917] __vmalloc_node_range_noprof+0x12c2/0x16b0 [ 440.683597][T11917] ? __pfx___might_resched+0x10/0x10 [ 440.683647][T11917] ? rcu_is_watching+0x12/0xc0 [ 440.683686][T11917] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 440.683709][T11917] ? find_held_lock+0x2b/0x80 [ 440.683737][T11917] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 440.683760][T11917] ? tomoyo_path_number_perm+0x295/0x580 [ 440.683790][T11917] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 440.683812][T11917] ? __pfx___mutex_lock+0x10/0x10 [ 440.683839][T11917] ? tomoyo_path_number_perm+0x18d/0x580 [ 440.683870][T11917] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 440.683903][T11917] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 440.683954][T11917] __vmalloc_node_noprof+0xad/0xf0 [ 440.683990][T11917] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 440.684017][T11917] dvb_dvr_do_ioctl+0x15d/0x290 [ 440.684046][T11917] dvb_usercopy+0x167/0x340 [ 440.684067][T11917] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 440.684093][T11917] ? __pfx_dvb_usercopy+0x10/0x10 [ 440.684126][T11917] ? __fget_files+0x20e/0x3c0 [ 440.684164][T11917] dvb_dvr_ioctl+0x29/0x40 [ 440.684185][T11917] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 440.684208][T11917] __x64_sys_ioctl+0x18e/0x210 [ 440.684238][T11917] do_syscall_64+0xcd/0xf80 [ 440.684262][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.684285][T11917] RIP: 0033:0x7ff85758f7c9 [ 440.684303][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.684325][T11917] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.684345][T11917] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 440.684361][T11917] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 440.684375][T11917] RBP: 00007ff857613f91 R08: 0000000000000000 R09: 0000000000000000 [ 440.684388][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.684402][T11917] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 440.684431][T11917] [ 440.684499][T11917] Mem-Info: [ 441.094022][T11917] active_anon:36550 inactive_anon:572 isolated_anon:0 [ 441.094022][T11917] active_file:17219 inactive_file:41315 isolated_file:0 [ 441.094022][T11917] unevictable:768 dirty:594 writeback:0 [ 441.094022][T11917] slab_reclaimable:12860 slab_unreclaimable:97479 [ 441.094022][T11917] mapped:30565 shmem:25768 pagetables:1287 [ 441.094022][T11917] sec_pagetables:0 bounce:0 [ 441.094022][T11917] kernel_misc_reclaimable:0 [ 441.094022][T11917] free:1285419 free_pcp:15657 free_cma:0 [ 441.200525][T11917] Node 0 active_anon:149040kB inactive_anon:2288kB active_file:68876kB inactive_file:165120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123060kB dirty:2372kB writeback:0kB shmem:98136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:10240kB kernel_stack:12892kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.298394][T11917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 441.346197][T11928] FAULT_INJECTION: forcing a failure. [ 441.346197][T11928] name failslab, interval 1, probability 0, space 0, times 0 [ 441.359577][T11928] CPU: 0 UID: 0 PID: 11928 Comm: syz.2.1203 Tainted: G U L syzkaller #0 PREEMPT(full) [ 441.359627][T11928] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 441.359648][T11928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.359669][T11928] Call Trace: [ 441.359681][T11928] [ 441.359694][T11928] dump_stack_lvl+0x16c/0x1f0 [ 441.359756][T11928] should_fail_ex+0x512/0x640 [ 441.359801][T11928] should_failslab+0xc2/0x120 [ 441.359853][T11928] kmem_cache_alloc_node_noprof+0x86/0x800 [ 441.359896][T11928] ? __alloc_skb+0x156/0x410 [ 441.359950][T11928] ? __alloc_skb+0x156/0x410 [ 441.359986][T11928] __alloc_skb+0x156/0x410 [ 441.360022][T11928] ? __alloc_skb+0x35d/0x410 [ 441.360061][T11928] ? __pfx___alloc_skb+0x10/0x10 [ 441.360098][T11928] ? kasan_quarantine_put+0x10a/0x240 [ 441.360142][T11928] ? lockdep_hardirqs_on+0x10/0x110 [ 441.360192][T11928] __pskb_copy_fclone+0xef/0xb50 [ 441.360253][T11928] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 441.360309][T11928] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 441.360375][T11928] ? find_held_lock+0x2b/0x80 [ 441.360419][T11928] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 441.360465][T11928] tipc_mcast_xmit+0x711/0xfe0 [ 441.360504][T11928] ? __pfx__copy_from_iter+0x10/0x10 [ 441.360541][T11928] ? __pfx___alloc_skb+0x10/0x10 [ 441.360585][T11928] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 441.360625][T11928] ? __lock_acquire+0x436/0x2890 [ 441.360704][T11928] ? tipc_send_group_bcast+0x803/0xa50 [ 441.360736][T11928] tipc_send_group_bcast+0x803/0xa50 [ 441.360786][T11928] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 441.360827][T11928] ? __pfx_woken_wake_function+0x10/0x10 [ 441.360872][T11928] ? __pfx_css_rstat_updated+0x10/0x10 [ 441.360917][T11928] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 441.360969][T11928] __tipc_sendmsg+0x4ab/0x1970 [ 441.361023][T11928] ? __pfx___tipc_sendmsg+0x10/0x10 [ 441.361063][T11928] ? __lock_acquire+0x436/0x2890 [ 441.361130][T11928] ? __local_bh_enable_ip+0xa4/0x120 [ 441.361181][T11928] tipc_sendmsg+0x4f/0x70 [ 441.361223][T11928] sock_write_iter+0x566/0x610 [ 441.361257][T11928] ? __pfx_sock_write_iter+0x10/0x10 [ 441.361305][T11928] ? __futex_wait+0x24b/0x2f0 [ 441.361350][T11928] ? copy_iovec_from_user+0x131/0x170 [ 441.361391][T11928] do_iter_readv_writev+0x662/0x9e0 [ 441.361439][T11928] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 441.361483][T11928] ? common_file_perm+0x1b1/0x500 [ 441.361528][T11928] ? bpf_lsm_file_permission+0x9/0x10 [ 441.361567][T11928] ? security_file_permission+0x71/0x210 [ 441.361612][T11928] ? rw_verify_area+0xcf/0x6c0 [ 441.361670][T11928] vfs_writev+0x35f/0xde0 [ 441.361717][T11928] ? __lock_acquire+0x436/0x2890 [ 441.361748][T11928] ? __pfx_vfs_writev+0x10/0x10 [ 441.361829][T11928] ? __fget_files+0x20e/0x3c0 [ 441.361883][T11928] ? do_writev+0x28c/0x340 [ 441.361922][T11928] do_writev+0x28c/0x340 [ 441.361964][T11928] ? __pfx_do_writev+0x10/0x10 [ 441.362019][T11928] do_syscall_64+0xcd/0xf80 [ 441.362052][T11928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.362082][T11928] RIP: 0033:0x7ff7f818f7c9 [ 441.362108][T11928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.362138][T11928] RSP: 002b:00007ff7f8ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 441.362167][T11928] RAX: ffffffffffffffda RBX: 00007ff7f83e5fa0 RCX: 00007ff7f818f7c9 [ 441.362187][T11928] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 441.362206][T11928] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 441.362225][T11928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.362243][T11928] R13: 00007ff7f83e6038 R14: 00007ff7f83e5fa0 R15: 00007fff36d6e9c8 [ 441.362285][T11928] [ 441.362350][T11928] tipc: Failed to clone mcast rcv buffer [ 441.773627][T11917] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 441.947510][T11917] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 441.963884][T11917] Node 0 DMA32 free:1227912kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148180kB inactive_anon:2288kB active_file:68876kB inactive_file:165120kB unevictable:1536kB writepending:2572kB zspages:428kB present:3129332kB managed:2540988kB mlocked:0kB bounce:0kB free_pcp:53000kB local_pcp:21040kB free_cma:0kB [ 442.066802][T11917] lowmem_reserve[]: 0 0 1 1 1 [ 442.096311][T11917] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.157567][T11917] lowmem_reserve[]: 0 0 0 0 0 [ 442.162478][T11917] Node 1 Normal free:3905916kB boost:0kB min:55548kB low:69432kB high:83316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 442.293225][T11917] lowmem_reserve[]: 0 0 0 0 0 [ 442.304667][T11917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 442.332529][T11917] Node 0 DMA32: 9036*4kB (UM) 3228*8kB (UME) 2504*16kB (UM) 1520*32kB (UME) 1241*64kB (UME) 977*128kB (UME) 494*256kB (UM) 257*512kB (UM) 206*1024kB (UME) 8*2048kB (UME) 96*4096kB (UM) = 1233744kB [ 442.408263][T11917] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 442.449284][T11917] Node 1 Normal: 215*4kB (UM) 60*8kB (UME) 48*16kB (UME) 226*32kB (UME) 100*64kB (UME) 36*128kB (UME) 16*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (ME) 945*4096kB (UM) = 3905916kB [ 442.511276][T11917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.558032][T11917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=1 hugepages_size=2048kB [ 442.600316][T11917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 442.641390][T11917] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 442.691183][T11917] 79870 total pagecache pages [ 442.710352][T11917] 16 pages in swap cache [ 442.734779][T11917] Free swap = 124788kB [ 442.756770][T11917] Total swap = 124996kB [ 442.768514][T11917] 2097051 pages RAM [ 442.776668][T11917] 0 pages HighMem/MovableOnly [ 442.789378][T11917] 429778 pages reserved [ 442.806821][T11917] 0 pages cma reserved [ 445.401362][T11981] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1214'. [ 447.876598][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 447.904165][T12022] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1222'. [ 448.481946][T12027] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1232'. [ 450.287144][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.293596][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.083305][T12081] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1236'. [ 451.529062][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 451.642314][T12092] binder: 12090:12092 ioctl c018620c 0 returned -1 [ 453.008772][T12104] zswap: compressor not available [ 454.321488][T12138] binder: BINDER_SET_CONTEXT_MGR already set [ 454.366487][T12138] binder: 12137:12138 ioctl 4018620d 9 returned -16 [ 455.148207][T12144] FAULT_INJECTION: forcing a failure. [ 455.148207][T12144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.175599][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.3.1249 Tainted: G U L syzkaller #0 PREEMPT(full) [ 455.175664][T12144] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 455.175678][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 455.175698][T12144] Call Trace: [ 455.175721][T12144] [ 455.175732][T12144] dump_stack_lvl+0x16c/0x1f0 [ 455.175791][T12144] should_fail_ex+0x512/0x640 [ 455.175834][T12144] should_fail_alloc_page+0xe7/0x130 [ 455.175888][T12144] prepare_alloc_pages+0x401/0x670 [ 455.175945][T12144] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 455.175987][T12144] ? __lock_acquire+0x436/0x2890 [ 455.176034][T12144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.176074][T12144] ? find_held_lock+0x2b/0x80 [ 455.176129][T12144] ? __lock_acquire+0x436/0x2890 [ 455.176162][T12144] ? __lock_acquire+0x436/0x2890 [ 455.176188][T12144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 455.176239][T12144] ? policy_nodemask+0xea/0x4e0 [ 455.176290][T12144] alloc_pages_mpol+0x1fb/0x550 [ 455.176340][T12144] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 455.176400][T12144] alloc_pages_noprof+0x131/0x390 [ 455.176452][T12144] pte_alloc_one+0x1e/0x3d0 [ 455.176497][T12144] __pte_alloc+0x6d/0x3f0 [ 455.176541][T12144] ? __pfx___pte_alloc+0x10/0x10 [ 455.176584][T12144] ? __pfx___might_resched+0x10/0x10 [ 455.176627][T12144] ? copy_page_range+0x22fb/0x6780 [ 455.176703][T12144] copy_page_range+0x3f3e/0x6780 [ 455.176787][T12144] ? __pfx_copy_page_range+0x10/0x10 [ 455.176837][T12144] ? __pfx___might_resched+0x10/0x10 [ 455.176879][T12144] ? __pfx_mas_store+0x10/0x10 [ 455.176922][T12144] ? dup_mmap+0xba4/0x20e0 [ 455.176961][T12144] ? down_write+0x14d/0x200 [ 455.176999][T12144] ? up_write+0x282/0x4e0 [ 455.177039][T12144] dup_mmap+0xbea/0x20e0 [ 455.177081][T12144] ? __pfx_dup_mmap+0x10/0x10 [ 455.177137][T12144] copy_process+0x3b9f/0x7430 [ 455.177185][T12144] ? __pfx___futex_wait+0x10/0x10 [ 455.177226][T12144] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 455.177288][T12144] ? __pfx_copy_process+0x10/0x10 [ 455.177334][T12144] ? find_held_lock+0x2b/0x80 [ 455.177381][T12144] ? futex_private_hash_put+0x160/0x1b0 [ 455.177423][T12144] kernel_clone+0xfc/0x910 [ 455.177473][T12144] ? __pfx_kernel_clone+0x10/0x10 [ 455.177544][T12144] __do_sys_clone+0xce/0x120 [ 455.177591][T12144] ? __pfx___do_sys_clone+0x10/0x10 [ 455.177667][T12144] ? xfd_validate_state+0x61/0x180 [ 455.177695][T12144] ? __pfx_do_writev+0x10/0x10 [ 455.177748][T12144] do_syscall_64+0xcd/0xf80 [ 455.177778][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.177809][T12144] RIP: 0033:0x7f0abdf8f7c9 [ 455.177835][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.177865][T12144] RSP: 002b:00007f0abee5efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 455.177895][T12144] RAX: ffffffffffffffda RBX: 00007f0abe1e5fa0 RCX: 00007f0abdf8f7c9 [ 455.177917][T12144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 455.177935][T12144] RBP: 00007f0abe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 455.177953][T12144] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 455.177969][T12144] R13: 00007f0abe1e6038 R14: 00007f0abe1e5fa0 R15: 00007ffc7633b9e8 [ 455.178029][T12144] [ 456.234218][T12169] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1255'. [ 456.662456][T12175] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1257'. [ 456.923167][T12185] FAULT_INJECTION: forcing a failure. [ 456.923167][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 456.982494][T12189] FAULT_INJECTION: forcing a failure. [ 456.982494][T12189] name failslab, interval 1, probability 0, space 0, times 0 [ 456.995850][T12189] CPU: 0 UID: 0 PID: 12189 Comm: syz.2.1260 Tainted: G U L syzkaller #0 PREEMPT(full) [ 456.995890][T12189] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 456.995899][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.995913][T12189] Call Trace: [ 456.995920][T12189] [ 456.995929][T12189] dump_stack_lvl+0x16c/0x1f0 [ 456.995971][T12189] should_fail_ex+0x512/0x640 [ 456.995998][T12189] ? __kmalloc_noprof+0xca/0x910 [ 456.996026][T12189] should_failslab+0xc2/0x120 [ 456.996063][T12189] __kmalloc_noprof+0xeb/0x910 [ 456.996089][T12189] ? lsm_blob_alloc+0x68/0x90 [ 456.996128][T12189] ? lsm_blob_alloc+0x68/0x90 [ 456.996161][T12189] lsm_blob_alloc+0x68/0x90 [ 456.996196][T12189] security_sk_alloc+0x2f/0x270 [ 456.996223][T12189] sk_prot_alloc+0x1c7/0x2a0 [ 456.996248][T12189] sk_alloc+0x36/0xe30 [ 456.996277][T12189] __netlink_create+0x5e/0x2c0 [ 456.996319][T12189] ? __wake_up+0x3f/0x60 [ 456.996353][T12189] netlink_create+0x39e/0x620 [ 456.996383][T12189] ? __pfx_genl_bind+0x10/0x10 [ 456.996402][T12189] ? __pfx_genl_unbind+0x10/0x10 [ 456.996425][T12189] ? __pfx_genl_release+0x10/0x10 [ 456.996450][T12189] __sock_create+0x339/0x8a0 [ 456.996477][T12189] __sys_socket+0x14d/0x260 [ 456.996499][T12189] ? __x64_sys_openat+0x174/0x210 [ 456.996534][T12189] ? __pfx___sys_socket+0x10/0x10 [ 456.996558][T12189] ? xfd_validate_state+0x61/0x180 [ 456.996585][T12189] __x64_sys_socket+0x72/0xb0 [ 456.996635][T12189] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.996658][T12189] do_syscall_64+0xcd/0xf80 [ 456.996682][T12189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.996705][T12189] RIP: 0033:0x7ff7f818f7c9 [ 456.996723][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.996745][T12189] RSP: 002b:00007ff7f8ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 456.996767][T12189] RAX: ffffffffffffffda RBX: 00007ff7f83e5fa0 RCX: 00007ff7f818f7c9 [ 456.996782][T12189] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 456.996795][T12189] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.996809][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.996822][T12189] R13: 00007ff7f83e6038 R14: 00007ff7f83e5fa0 R15: 00007fff36d6e9c8 [ 456.996852][T12189] [ 457.233008][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.3.1259 Tainted: G U L syzkaller #0 PREEMPT(full) [ 457.233062][T12185] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 457.233073][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.233090][T12185] Call Trace: [ 457.233099][T12185] [ 457.233109][T12185] dump_stack_lvl+0x16c/0x1f0 [ 457.233203][T12185] should_fail_ex+0x512/0x640 [ 457.233238][T12185] ? fs_reclaim_acquire+0xae/0x150 [ 457.233291][T12185] should_failslab+0xc2/0x120 [ 457.233339][T12185] __kmalloc_noprof+0xeb/0x910 [ 457.233375][T12185] ? tomoyo_encode2+0x100/0x3e0 [ 457.233426][T12185] ? tomoyo_encode2+0x100/0x3e0 [ 457.233467][T12185] tomoyo_encode2+0x100/0x3e0 [ 457.233518][T12185] tomoyo_encode+0x29/0x50 [ 457.233570][T12185] tomoyo_realpath_from_path+0x18f/0x6e0 [ 457.233635][T12185] tomoyo_check_open_permission+0x2ab/0x3c0 [ 457.233677][T12185] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 457.233765][T12185] ? do_raw_spin_lock+0x12c/0x2b0 [ 457.233816][T12185] tomoyo_file_open+0x6b/0x90 [ 457.233849][T12185] security_file_open+0x84/0x1e0 [ 457.233896][T12185] do_dentry_open+0x597/0x1590 [ 457.233946][T12185] ? security_inode_permission+0xbf/0x260 [ 457.233994][T12185] vfs_open+0x82/0x3f0 [ 457.234035][T12185] path_openat+0x2078/0x3140 [ 457.234097][T12185] ? __pfx_path_openat+0x10/0x10 [ 457.234165][T12185] do_filp_open+0x20b/0x470 [ 457.234215][T12185] ? __pfx_do_filp_open+0x10/0x10 [ 457.234296][T12185] ? alloc_fd+0x471/0x7d0 [ 457.234353][T12185] do_sys_openat2+0x121/0x290 [ 457.234390][T12185] ? __pfx_do_sys_openat2+0x10/0x10 [ 457.234443][T12185] __x64_sys_openat+0x174/0x210 [ 457.234482][T12185] ? __pfx___x64_sys_openat+0x10/0x10 [ 457.234544][T12185] do_syscall_64+0xcd/0xf80 [ 457.234578][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.234610][T12185] RIP: 0033:0x7f0abdf8f7c9 [ 457.234636][T12185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.234667][T12185] RSP: 002b:00007f0abee5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 457.234697][T12185] RAX: ffffffffffffffda RBX: 00007f0abe1e5fa0 RCX: 00007f0abdf8f7c9 [ 457.234718][T12185] RDX: 0000000000000500 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 457.234738][T12185] RBP: 00007f0abe013f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.234757][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.234776][T12185] R13: 00007f0abe1e6038 R14: 00007f0abe1e5fa0 R15: 00007ffc7633b9e8 [ 457.234820][T12185] [ 457.234851][T12185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.940955][T12223] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1268'. [ 459.228461][T12234] FAULT_INJECTION: forcing a failure. [ 459.228461][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 459.263391][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1271'. [ 459.273571][T12234] CPU: 0 UID: 0 PID: 12234 Comm: syz.2.1270 Tainted: G U L syzkaller #0 PREEMPT(full) [ 459.273623][T12234] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 459.273636][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.273654][T12234] Call Trace: [ 459.273664][T12234] [ 459.273677][T12234] dump_stack_lvl+0x16c/0x1f0 [ 459.273743][T12234] should_fail_ex+0x512/0x640 [ 459.273778][T12234] ? kmem_cache_alloc_noprof+0x62/0x770 [ 459.273819][T12234] should_failslab+0xc2/0x120 [ 459.273869][T12234] kmem_cache_alloc_noprof+0x83/0x770 [ 459.273907][T12234] ? prepare_creds+0x2c/0x940 [ 459.273948][T12234] ? prepare_creds+0x2c/0x940 [ 459.273985][T12234] prepare_creds+0x2c/0x940 [ 459.274024][T12234] copy_creds+0xa7/0xa50 [ 459.274069][T12234] copy_process+0x130f/0x7430 [ 459.274118][T12234] ? __pfx___futex_wait+0x10/0x10 [ 459.274189][T12234] ? __pfx_copy_process+0x10/0x10 [ 459.274242][T12234] ? futex_private_hash_put+0x160/0x1b0 [ 459.274284][T12234] kernel_clone+0xfc/0x910 [ 459.274334][T12234] ? __pfx_kernel_clone+0x10/0x10 [ 459.274402][T12234] __do_sys_clone+0xce/0x120 [ 459.274449][T12234] ? __pfx___do_sys_clone+0x10/0x10 [ 459.274519][T12234] ? xfd_validate_state+0x61/0x180 [ 459.274545][T12234] ? __pfx_do_writev+0x10/0x10 [ 459.274601][T12234] do_syscall_64+0xcd/0xf80 [ 459.274633][T12234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.274663][T12234] RIP: 0033:0x7ff7f818f7c9 [ 459.274684][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.274725][T12234] RSP: 002b:00007ff7f8ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 459.274754][T12234] RAX: ffffffffffffffda RBX: 00007ff7f83e5fa0 RCX: 00007ff7f818f7c9 [ 459.274774][T12234] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 459.274791][T12234] RBP: 00007ff7f8213f91 R08: 0000000000000009 R09: 0000000000000000 [ 459.274806][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.274822][T12234] R13: 00007ff7f83e6038 R14: 00007ff7f83e5fa0 R15: 00007fff36d6e9c8 [ 459.274866][T12234] [ 459.715964][T12230] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 459.734050][T12230] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1269'. [ 459.743168][T12230] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.812094][T12244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1274'. [ 460.062160][T12252] futex_wake_op: syz.2.1277 tries to shift op by -2048; fix this program [ 460.071307][T12252] futex_wake_op: syz.2.1277 tries to shift op by -2048; fix this program [ 460.393069][T12262] MTRR 1 not used [ 460.401258][T12262] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 460.831017][ T31] audit: type=1326 audit(2147483691.635:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12270 comm="syz.0.1281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85758f7c9 code=0x0 [ 461.233856][T12281] FAULT_INJECTION: forcing a failure. [ 461.233856][T12281] name failslab, interval 1, probability 0, space 0, times 0 [ 461.260438][T12281] CPU: 1 UID: 0 PID: 12281 Comm: syz.1.1282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 461.260494][T12281] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 461.260507][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.260525][T12281] Call Trace: [ 461.260542][T12281] [ 461.260554][T12281] dump_stack_lvl+0x16c/0x1f0 [ 461.260610][T12281] should_fail_ex+0x512/0x640 [ 461.260645][T12281] ? __kmalloc_noprof+0xca/0x910 [ 461.260684][T12281] should_failslab+0xc2/0x120 [ 461.260732][T12281] __kmalloc_noprof+0xeb/0x910 [ 461.260767][T12281] ? lsm_blob_alloc+0x68/0x90 [ 461.260820][T12281] ? lsm_blob_alloc+0x68/0x90 [ 461.260866][T12281] lsm_blob_alloc+0x68/0x90 [ 461.260913][T12281] security_prepare_creds+0x2f/0x270 [ 461.260963][T12281] prepare_creds+0x5d6/0x940 [ 461.261002][T12281] copy_creds+0xa7/0xa50 [ 461.261041][T12281] copy_process+0x130f/0x7430 [ 461.261086][T12281] ? preempt_schedule_thunk+0x16/0x30 [ 461.261133][T12281] ? __pfx_copy_process+0x10/0x10 [ 461.261178][T12281] ? find_held_lock+0x2b/0x80 [ 461.261224][T12281] ? futex_private_hash_put+0x160/0x1b0 [ 461.261265][T12281] kernel_clone+0xfc/0x910 [ 461.261312][T12281] ? __pfx_futex_wake+0x10/0x10 [ 461.261352][T12281] ? __pfx_kernel_clone+0x10/0x10 [ 461.261394][T12281] ? __pfx_vfs_writev+0x10/0x10 [ 461.261464][T12281] __do_sys_clone+0xce/0x120 [ 461.261511][T12281] ? __pfx___do_sys_clone+0x10/0x10 [ 461.261584][T12281] ? xfd_validate_state+0x61/0x180 [ 461.261613][T12281] ? __pfx_do_writev+0x10/0x10 [ 461.261667][T12281] do_syscall_64+0xcd/0xf80 [ 461.261700][T12281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.261732][T12281] RIP: 0033:0x7fd33af8f7c9 [ 461.261759][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.261789][T12281] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 461.261820][T12281] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 461.261839][T12281] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 461.261857][T12281] RBP: 00007fd33b013f91 R08: 0000000000000009 R09: 0000000000000000 [ 461.261875][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.261893][T12281] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 461.261934][T12281] [ 461.875238][T12298] overlayfs: "check_copy_up" module option is obsolete [ 462.592142][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 462.721466][T12322] binder: BINDER_SET_CONTEXT_MGR already set [ 462.727569][T12322] binder: 12321:12322 ioctl 4018620d 9 returned -16 [ 462.827220][T12328] FAULT_INJECTION: forcing a failure. [ 462.827220][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 462.842145][T12328] CPU: 1 UID: 0 PID: 12328 Comm: syz.0.1296 Tainted: G U L syzkaller #0 PREEMPT(full) [ 462.842183][T12328] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 462.842191][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.842205][T12328] Call Trace: [ 462.842212][T12328] [ 462.842220][T12328] dump_stack_lvl+0x16c/0x1f0 [ 462.842261][T12328] should_fail_ex+0x512/0x640 [ 462.842288][T12328] ? kmem_cache_alloc_noprof+0x62/0x770 [ 462.842319][T12328] should_failslab+0xc2/0x120 [ 462.842353][T12328] kmem_cache_alloc_noprof+0x83/0x770 [ 462.842381][T12328] ? prepare_creds+0x2c/0x940 [ 462.842412][T12328] ? prepare_creds+0x2c/0x940 [ 462.842445][T12328] prepare_creds+0x2c/0x940 [ 462.842474][T12328] copy_creds+0xa7/0xa50 [ 462.842503][T12328] copy_process+0x130f/0x7430 [ 462.842538][T12328] ? __pfx___futex_wait+0x10/0x10 [ 462.842580][T12328] ? __pfx_copy_process+0x10/0x10 [ 462.842620][T12328] ? futex_private_hash_put+0x160/0x1b0 [ 462.842649][T12328] kernel_clone+0xfc/0x910 [ 462.842684][T12328] ? __pfx_kernel_clone+0x10/0x10 [ 462.842733][T12328] __do_sys_clone+0xce/0x120 [ 462.842767][T12328] ? __pfx___do_sys_clone+0x10/0x10 [ 462.842832][T12328] ? xfd_validate_state+0x61/0x180 [ 462.842852][T12328] ? __pfx_do_writev+0x10/0x10 [ 462.842892][T12328] do_syscall_64+0xcd/0xf80 [ 462.842916][T12328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.842941][T12328] RIP: 0033:0x7ff85758f7c9 [ 462.842959][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.842982][T12328] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 462.843003][T12328] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 462.843018][T12328] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 462.843031][T12328] RBP: 00007ff857613f91 R08: 0000000000000009 R09: 0000000000000000 [ 462.843045][T12328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.843058][T12328] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 462.843087][T12328] [ 463.255981][T12319] zswap: compressor not available [ 463.504238][ T1336] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.938906][T12355] FAULT_INJECTION: forcing a failure. [ 463.938906][T12355] name failslab, interval 1, probability 0, space 0, times 0 [ 464.019403][T12355] CPU: 1 UID: 0 PID: 12355 Comm: syz.2.1302 Tainted: G U L syzkaller #0 PREEMPT(full) [ 464.019457][T12355] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 464.019469][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.019486][T12355] Call Trace: [ 464.019495][T12355] [ 464.019506][T12355] dump_stack_lvl+0x16c/0x1f0 [ 464.019565][T12355] should_fail_ex+0x512/0x640 [ 464.019602][T12355] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 464.019648][T12355] should_failslab+0xc2/0x120 [ 464.019696][T12355] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 464.019734][T12355] ? __lock_acquire+0x436/0x2890 [ 464.019764][T12355] ? shmem_alloc_inode+0x25/0x50 [ 464.019812][T12355] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 464.019854][T12355] ? shmem_alloc_inode+0x25/0x50 [ 464.019896][T12355] shmem_alloc_inode+0x25/0x50 [ 464.019938][T12355] alloc_inode+0x64/0x240 [ 464.019975][T12355] new_inode+0x22/0x1c0 [ 464.020012][T12355] shmem_get_inode+0x19a/0xfb0 [ 464.020069][T12355] shmem_tmpfile+0x58/0x180 [ 464.020120][T12355] vfs_tmpfile+0x2be/0x9b0 [ 464.020187][T12355] path_openat+0x1936/0x3140 [ 464.020230][T12355] ? do_syscall_64+0xcd/0xf80 [ 464.020256][T12355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.020301][T12355] ? __pfx_path_openat+0x10/0x10 [ 464.020358][T12355] ? __lock_acquire+0x436/0x2890 [ 464.020391][T12355] do_filp_open+0x20b/0x470 [ 464.020442][T12355] ? __pfx_do_filp_open+0x10/0x10 [ 464.020517][T12355] ? _raw_spin_unlock+0x28/0x50 [ 464.020559][T12355] ? alloc_fd+0x471/0x7d0 [ 464.020617][T12355] do_sys_openat2+0x121/0x290 [ 464.020651][T12355] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.020687][T12355] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.020744][T12355] __x64_sys_open+0x153/0x1e0 [ 464.020777][T12355] ? __pfx___x64_sys_open+0x10/0x10 [ 464.020822][T12355] ? rcu_is_watching+0x12/0xc0 [ 464.020870][T12355] do_syscall_64+0xcd/0xf80 [ 464.020901][T12355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.020931][T12355] RIP: 0033:0x7ff7f818f7c9 [ 464.020954][T12355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.020984][T12355] RSP: 002b:00007ff7f8fdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 464.021013][T12355] RAX: ffffffffffffffda RBX: 00007ff7f83e6090 RCX: 00007ff7f818f7c9 [ 464.021033][T12355] RDX: 0000000000000408 RSI: 0000000000591002 RDI: 0000200000000100 [ 464.021050][T12355] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 464.021067][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.021084][T12355] R13: 00007ff7f83e6128 R14: 00007ff7f83e6090 R15: 00007fff36d6e9c8 [ 464.021120][T12355] [ 464.726207][T12379] MTRR 1 not used [ 464.751509][T12379] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 465.067848][T12385] binder: BINDER_SET_CONTEXT_MGR already set [ 465.075987][T12385] binder: 12384:12385 ioctl 4018620d 9 returned -16 [ 465.110934][T12392] FAULT_INJECTION: forcing a failure. [ 465.110934][T12392] name failslab, interval 1, probability 0, space 0, times 0 [ 465.212075][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.2.1311 Tainted: G U L syzkaller #0 PREEMPT(full) [ 465.212127][T12392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 465.212140][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.212158][T12392] Call Trace: [ 465.212168][T12392] [ 465.212180][T12392] dump_stack_lvl+0x16c/0x1f0 [ 465.212236][T12392] should_fail_ex+0x512/0x640 [ 465.212280][T12392] ? fs_reclaim_acquire+0xae/0x150 [ 465.212333][T12392] should_failslab+0xc2/0x120 [ 465.212379][T12392] __kmalloc_noprof+0xeb/0x910 [ 465.212414][T12392] ? tomoyo_encode2+0x100/0x3e0 [ 465.212464][T12392] ? tomoyo_encode2+0x100/0x3e0 [ 465.212505][T12392] tomoyo_encode2+0x100/0x3e0 [ 465.212555][T12392] tomoyo_encode+0x29/0x50 [ 465.212598][T12392] tomoyo_realpath_from_path+0x18f/0x6e0 [ 465.212657][T12392] tomoyo_mount_acl+0x1ae/0x850 [ 465.212701][T12392] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.212753][T12392] ? kernel_text_address+0x8d/0x100 [ 465.212790][T12392] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 465.212830][T12392] ? arch_stack_walk+0xa6/0x100 [ 465.212906][T12392] ? tomoyo_domain+0xba/0x150 [ 465.212934][T12392] ? tomoyo_profile+0x47/0x60 [ 465.212965][T12392] tomoyo_mount_permission+0x16d/0x420 [ 465.213026][T12392] ? tomoyo_mount_permission+0x14f/0x420 [ 465.213072][T12392] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 465.213149][T12392] security_sb_mount+0x9b/0x260 [ 465.213189][T12392] path_mount+0x158/0x23a0 [ 465.213220][T12392] ? rcu_is_watching+0x12/0xc0 [ 465.213278][T12392] ? __pfx_path_mount+0x10/0x10 [ 465.213311][T12392] ? kmem_cache_free+0x2d8/0x770 [ 465.213353][T12392] ? putname+0xf5/0x1a0 [ 465.213387][T12392] ? putname+0xf5/0x1a0 [ 465.213411][T12392] ? putname+0xf5/0x1a0 [ 465.213444][T12392] ? __x64_sys_mount+0x293/0x310 [ 465.213471][T12392] __x64_sys_mount+0x293/0x310 [ 465.213502][T12392] ? __pfx___x64_sys_mount+0x10/0x10 [ 465.213533][T12392] ? fdget+0x187/0x210 [ 465.213581][T12392] do_syscall_64+0xcd/0xf80 [ 465.213614][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.213646][T12392] RIP: 0033:0x7ff7f818f7c9 [ 465.213671][T12392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.213703][T12392] RSP: 002b:00007ff7f8fdb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.213735][T12392] RAX: ffffffffffffffda RBX: 00007ff7f83e6090 RCX: 00007ff7f818f7c9 [ 465.213755][T12392] RDX: 0000200000000240 RSI: 0000200000000140 RDI: 0000200000000000 [ 465.213775][T12392] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.213793][T12392] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 465.213810][T12392] R13: 00007ff7f83e6128 R14: 00007ff7f83e6090 R15: 00007fff36d6e9c8 [ 465.213851][T12392] [ 465.215174][T12392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.806958][T12398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 465.865511][T12399] FAULT_INJECTION: forcing a failure. [ 465.865511][T12399] name failslab, interval 1, probability 0, space 0, times 0 [ 465.902066][T12399] CPU: 1 UID: 0 PID: 12399 Comm: syz.1.1312 Tainted: G U L syzkaller #0 PREEMPT(full) [ 465.902118][T12399] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 465.902130][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.902148][T12399] Call Trace: [ 465.902158][T12399] [ 465.902170][T12399] dump_stack_lvl+0x16c/0x1f0 [ 465.902225][T12399] should_fail_ex+0x512/0x640 [ 465.902263][T12399] ? __kmalloc_noprof+0xca/0x910 [ 465.902303][T12399] should_failslab+0xc2/0x120 [ 465.902353][T12399] __kmalloc_noprof+0xeb/0x910 [ 465.902387][T12399] ? memcg_list_lru_alloc+0x4e9/0x740 [ 465.902431][T12399] ? memcg_list_lru_alloc+0x4e9/0x740 [ 465.902466][T12399] memcg_list_lru_alloc+0x4e9/0x740 [ 465.902512][T12399] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 465.902557][T12399] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 465.902605][T12399] __memcg_slab_post_alloc_hook+0x133/0x880 [ 465.902643][T12399] ? kasan_save_track+0x14/0x30 [ 465.902691][T12399] kmem_cache_alloc_lru_noprof+0x58f/0x770 [ 465.902733][T12399] ? mqueue_alloc_inode+0x25/0x50 [ 465.902769][T12399] ? __pfx_mqueue_fill_super+0x10/0x10 [ 465.902798][T12399] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 465.902825][T12399] ? mqueue_alloc_inode+0x25/0x50 [ 465.902852][T12399] ? lockdep_init_map_type+0x5c/0x270 [ 465.902883][T12399] mqueue_alloc_inode+0x25/0x50 [ 465.902911][T12399] alloc_inode+0x64/0x240 [ 465.902956][T12399] new_inode+0x22/0x1c0 [ 465.903043][T12399] ? __pfx_mqueue_fill_super+0x10/0x10 [ 465.903073][T12399] mqueue_get_inode+0x2e/0xdd0 [ 465.903123][T12399] ? sget_fc+0x808/0xc20 [ 465.903169][T12399] ? __pfx_mqueue_fill_super+0x10/0x10 [ 465.903200][T12399] mqueue_fill_super+0x14d/0x260 [ 465.903231][T12399] get_tree_nodev+0xdd/0x190 [ 465.903281][T12399] mqueue_get_tree+0xf1/0x130 [ 465.903311][T12399] vfs_get_tree+0x8e/0x330 [ 465.903349][T12399] fc_mount_longterm+0x1a/0x270 [ 465.903392][T12399] mq_init_ns+0x482/0x810 [ 465.903431][T12399] copy_ipcs+0x3db/0x7d0 [ 465.903472][T12399] create_new_namespaces+0x20a/0xab0 [ 465.903516][T12399] ? security_capable+0x7e/0x260 [ 465.903554][T12399] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 465.903604][T12399] ksys_unshare+0x45b/0xa40 [ 465.903635][T12399] ? __pfx_ksys_unshare+0x10/0x10 [ 465.903666][T12399] ? xfd_validate_state+0x61/0x180 [ 465.903709][T12399] __x64_sys_unshare+0x31/0x40 [ 465.903737][T12399] do_syscall_64+0xcd/0xf80 [ 465.903770][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.903803][T12399] RIP: 0033:0x7fd33af8f7c9 [ 465.903830][T12399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.903863][T12399] RSP: 002b:00007fd33be68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.903894][T12399] RAX: ffffffffffffffda RBX: 00007fd33b1e6090 RCX: 00007fd33af8f7c9 [ 465.903916][T12399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c000000 [ 465.903935][T12399] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.903954][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.903974][T12399] R13: 00007fd33b1e6128 R14: 00007fd33b1e6090 R15: 00007ffc2183ac48 [ 465.904024][T12399] [ 467.655143][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1315'. [ 467.678670][T12430] MTRR 1 not used [ 467.697833][T12430] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 468.440845][T12447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 471.521693][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 473.105579][T12513] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1342'. [ 473.387283][ T5841] Bluetooth: hci0: ACL packet too small [ 474.326496][T12544] NFSD: Failed to start, no listeners configured. [ 474.420846][T12551] FAULT_INJECTION: forcing a failure. [ 474.420846][T12551] name failslab, interval 1, probability 0, space 0, times 0 [ 474.472825][T12551] CPU: 1 UID: 0 PID: 12551 Comm: syz.0.1351 Tainted: G U L syzkaller #0 PREEMPT(full) [ 474.472873][T12551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 474.472882][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 474.472895][T12551] Call Trace: [ 474.472903][T12551] [ 474.472912][T12551] dump_stack_lvl+0x16c/0x1f0 [ 474.472958][T12551] should_fail_ex+0x512/0x640 [ 474.472987][T12551] ? kmem_cache_alloc_noprof+0x62/0x770 [ 474.473018][T12551] should_failslab+0xc2/0x120 [ 474.473055][T12551] kmem_cache_alloc_noprof+0x83/0x770 [ 474.473083][T12551] ? __kernfs_new_node+0xd2/0x9b0 [ 474.473115][T12551] ? __kernfs_new_node+0xd2/0x9b0 [ 474.473141][T12551] __kernfs_new_node+0xd2/0x9b0 [ 474.473171][T12551] ? __pfx___kernfs_new_node+0x10/0x10 [ 474.473206][T12551] ? find_held_lock+0x2b/0x80 [ 474.473237][T12551] ? kernfs_root+0xee/0x2a0 [ 474.473270][T12551] kernfs_new_node+0x13c/0x1e0 [ 474.473307][T12551] __kernfs_create_file+0x53/0x350 [ 474.473347][T12551] sysfs_add_file_mode_ns+0x207/0x3c0 [ 474.473380][T12551] internal_create_group+0x597/0xf70 [ 474.473416][T12551] ? __pfx_internal_create_group+0x10/0x10 [ 474.473451][T12551] ? kernfs_create_link+0x1bd/0x240 [ 474.473476][T12551] internal_create_groups+0x9d/0x150 [ 474.473508][T12551] device_add+0x6f7/0x1980 [ 474.473546][T12551] ? __pfx_device_add+0x10/0x10 [ 474.473581][T12551] ? lockdep_init_map_type+0x5c/0x270 [ 474.473605][T12551] ? __init_waitqueue_head+0xca/0x150 [ 474.473638][T12551] netdev_register_kobject+0x1a9/0x3d0 [ 474.473671][T12551] register_netdevice+0x13c1/0x21e0 [ 474.473714][T12551] ? __pfx_register_netdevice+0x10/0x10 [ 474.473759][T12551] __tun_chr_ioctl+0x1eb6/0x4880 [ 474.473785][T12551] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 474.473846][T12551] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 474.473889][T12551] ? hook_file_ioctl_common+0x144/0x410 [ 474.473940][T12551] ? __fget_files+0x20e/0x3c0 [ 474.473992][T12551] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 474.474020][T12551] __x64_sys_ioctl+0x18e/0x210 [ 474.474050][T12551] do_syscall_64+0xcd/0xf80 [ 474.474075][T12551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.474098][T12551] RIP: 0033:0x7ff85758f7c9 [ 474.474116][T12551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.474139][T12551] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.474161][T12551] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 474.474188][T12551] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000005 [ 474.474202][T12551] RBP: 00007ff857613f91 R08: 0000000000000000 R09: 0000000000000000 [ 474.474215][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.474229][T12551] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 474.474267][T12551] [ 475.758851][T12577] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1357'. [ 475.831444][T12582] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 475.850032][T12582] netlink: 'syz.3.1360': attribute type 1 has an invalid length. [ 475.877609][T12582] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1360'. [ 475.909380][T12582] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1360'. [ 475.951023][T12584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.972586][T12584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.005187][T12584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.028850][T12584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.565202][T12601] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 476.595773][T12601] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 477.556129][T12624] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1370'. [ 477.979370][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 477.979379][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 478.059033][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 478.059042][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 478.139496][T12641] MTRR 0 not used [ 478.567735][T12649] vmstat_refresh: nr_hugetlb -3584 [ 478.962781][T12658] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1381'. [ 479.443444][T12676] usb usb3: usbfs: interface 0 claimed by hub while 'syz.2.1385' sets config #-1 [ 480.506977][T12703] MTRR 0 not used [ 481.176851][T12702] bond0: invalid ARP target specified [ 482.993253][T12713] nvme_fabrics: missing parameter 'transport=%s' [ 483.017298][T12713] nvme_fabrics: missing parameter 'nqn=%s' [ 483.082734][T12726] [U]  [ 483.085912][T12726] [U] [ 483.088667][T12726] [U] [ 483.091421][T12726] [U] [ 483.113637][T12726] [U] [ 483.116409][T12726] [U] [ 483.119166][T12726] [U] [ 483.121920][T12726] [U] [ 483.153004][T12726] [U] [ 483.155782][T12726] [U] [ 483.158543][T12726] [U] [ 483.161299][T12726] [U] [ 483.182627][T12726] [U] [ 483.185407][T12726] [U] [ 483.188122][T12726] [U] [ 483.190847][T12726] [U] [ 483.202449][T12726] [U] [ 483.205221][T12726] [U] [ 483.207938][T12726] [U] [ 483.210686][T12726] [U] [ 483.225767][T12726] [U] [ 483.228568][T12726] [U] [ 483.231335][T12726] [U] [ 483.234103][T12726] [U] [ 483.238558][T12726] [U] [ 483.241333][T12726] [U] [ 483.244100][T12726] [U] [ 483.246882][T12726] [U] [ 483.254268][T12726] [U] [ 483.257062][T12726] [U] [ 483.259819][T12726] [U] [ 483.262564][T12726] [U] [ 483.305163][T12726] [U] [ 483.308026][T12726] [U] [ 483.310769][T12726] [U] [ 483.313500][T12726] [U] [ 483.346009][T12726] [U] [ 483.348799][T12726] [U] [ 483.351548][T12726] [U] [ 483.354278][T12726] [U] [ 483.719488][ T5841] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 484.538839][T12757] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1401'. [ 486.070375][T12793] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1411'. [ 486.936175][T12734] [U] [ 486.992513][T12810] FAULT_INJECTION: forcing a failure. [ 486.992513][T12810] name failslab, interval 1, probability 0, space 0, times 0 [ 487.051448][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.1.1414 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.051502][T12810] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.051513][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.051531][T12810] Call Trace: [ 487.051541][T12810] [ 487.051552][T12810] dump_stack_lvl+0x16c/0x1f0 [ 487.051608][T12810] should_fail_ex+0x512/0x640 [ 487.051656][T12810] ? __kmalloc_noprof+0xca/0x910 [ 487.051696][T12810] should_failslab+0xc2/0x120 [ 487.051745][T12810] __kmalloc_noprof+0xeb/0x910 [ 487.051779][T12810] ? sk_prot_alloc+0x1a8/0x2a0 [ 487.051813][T12810] ? sk_prot_alloc+0x1a8/0x2a0 [ 487.051839][T12810] sk_prot_alloc+0x1a8/0x2a0 [ 487.051872][T12810] sk_alloc+0x36/0xe30 [ 487.051915][T12810] mctp_pf_create+0xe8/0x360 [ 487.051966][T12810] __sock_create+0x339/0x8a0 [ 487.052003][T12810] __sys_socket+0x14d/0x260 [ 487.052037][T12810] ? __pfx___sys_socket+0x10/0x10 [ 487.052071][T12810] ? xfd_validate_state+0x61/0x180 [ 487.052097][T12810] ? __pfx_ksys_write+0x10/0x10 [ 487.052152][T12810] __x64_sys_socket+0x72/0xb0 [ 487.052184][T12810] ? lockdep_hardirqs_on+0x7c/0x110 [ 487.052214][T12810] do_syscall_64+0xcd/0xf80 [ 487.052246][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.052276][T12810] RIP: 0033:0x7fd33af8f7c9 [ 487.052302][T12810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.052332][T12810] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 487.052360][T12810] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 487.052380][T12810] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 487.052398][T12810] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.052417][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.052435][T12810] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 487.052477][T12810] [ 487.860752][ T31] audit: type=1800 audit(2147483718.806:23): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1417" name="lu_gp_id" dev="configfs" ino=48964 res=0 errno=0 [ 487.886029][T12810] FAULT_INJECTION: forcing a failure. [ 487.886029][T12810] name failslab, interval 1, probability 0, space 0, times 0 [ 487.919119][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.1.1414 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.919174][T12810] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.919186][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.919204][T12810] Call Trace: [ 487.919215][T12810] [ 487.919225][T12810] dump_stack_lvl+0x16c/0x1f0 [ 487.919281][T12810] should_fail_ex+0x512/0x640 [ 487.919317][T12810] ? __kmalloc_node_noprof+0xcd/0x930 [ 487.919365][T12810] should_failslab+0xc2/0x120 [ 487.919414][T12810] __kmalloc_node_noprof+0xee/0x930 [ 487.919459][T12810] ? user_buffer_init+0x4d0/0x750 [ 487.919507][T12810] ? user_buffer_init+0x4d0/0x750 [ 487.919548][T12810] user_buffer_init+0x4d0/0x750 [ 487.919603][T12810] tracing_mark_open+0x19d/0x220 [ 487.919653][T12810] do_dentry_open+0x748/0x1590 [ 487.919697][T12810] ? __pfx_tracing_mark_open+0x10/0x10 [ 487.919754][T12810] vfs_open+0x82/0x3f0 [ 487.919794][T12810] path_openat+0x2078/0x3140 [ 487.919855][T12810] ? __pfx_path_openat+0x10/0x10 [ 487.919920][T12810] do_filp_open+0x20b/0x470 [ 487.919971][T12810] ? __pfx_do_filp_open+0x10/0x10 [ 487.920049][T12810] ? alloc_fd+0x471/0x7d0 [ 487.920114][T12810] do_sys_openat2+0x121/0x290 [ 487.920149][T12810] ? __pfx_do_sys_openat2+0x10/0x10 [ 487.920202][T12810] __x64_sys_openat+0x174/0x210 [ 487.920240][T12810] ? __pfx___x64_sys_openat+0x10/0x10 [ 487.920294][T12810] do_syscall_64+0xcd/0xf80 [ 487.920327][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.920359][T12810] RIP: 0033:0x7fd33af8f7c9 [ 487.920383][T12810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.920414][T12810] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 487.920444][T12810] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 487.920464][T12810] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 487.920484][T12810] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 487.920502][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.920520][T12810] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 487.920570][T12810] [ 488.158757][T12826] kexec: Could not allocate control_code_buffer [ 489.285453][T12840] random: crng reseeded on system resumption [ 489.718411][T12848] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1422'. [ 490.172620][T12864] FAULT_INJECTION: forcing a failure. [ 490.172620][T12864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 490.186438][T12864] CPU: 1 UID: 0 PID: 12864 Comm: syz.1.1426 Tainted: G U L syzkaller #0 PREEMPT(full) [ 490.186490][T12864] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 490.186501][T12864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.186520][T12864] Call Trace: [ 490.186530][T12864] [ 490.186541][T12864] dump_stack_lvl+0x16c/0x1f0 [ 490.186599][T12864] should_fail_ex+0x512/0x640 [ 490.186640][T12864] should_fail_alloc_page+0xe7/0x130 [ 490.186694][T12864] prepare_alloc_pages+0x401/0x670 [ 490.186744][T12864] ? rcu_is_watching+0x12/0xc0 [ 490.186793][T12864] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 490.186847][T12864] ? __lock_acquire+0x436/0x2890 [ 490.186884][T12864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 490.186936][T12864] ? __mod_zone_page_state+0xcc/0x1a0 [ 490.186969][T12864] ? lock_acquire+0x179/0x330 [ 490.187001][T12864] ? __lock_acquire+0x436/0x2890 [ 490.187032][T12864] ? __lock_acquire+0x436/0x2890 [ 490.187059][T12864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.187122][T12864] ? policy_nodemask+0xea/0x4e0 [ 490.187173][T12864] alloc_pages_mpol+0x1fb/0x550 [ 490.187223][T12864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 490.187281][T12864] folio_alloc_mpol_noprof+0x36/0x2f0 [ 490.187315][T12864] vma_alloc_folio_noprof+0xed/0x1e0 [ 490.187348][T12864] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 490.187404][T12864] do_anonymous_page+0xc81/0x2190 [ 490.187451][T12864] __handle_mm_fault+0x1ecf/0x2bb0 [ 490.187494][T12864] ? __pfx___handle_mm_fault+0x10/0x10 [ 490.187531][T12864] ? __pte_offset_map_lock+0x174/0x310 [ 490.187575][T12864] ? find_held_lock+0x2b/0x80 [ 490.187626][T12864] ? follow_page_pte+0x5cf/0x1390 [ 490.187690][T12864] handle_mm_fault+0x3fe/0xad0 [ 490.187730][T12864] __get_user_pages+0x54e/0x3590 [ 490.187791][T12864] ? __pfx___get_user_pages+0x10/0x10 [ 490.187847][T12864] populate_vma_page_range+0x267/0x3f0 [ 490.187896][T12864] ? __pfx_populate_vma_page_range+0x10/0x10 [ 490.187941][T12864] ? __pfx_find_vma_intersection+0x10/0x10 [ 490.187986][T12864] ? do_mmap+0x69c/0x1210 [ 490.188036][T12864] __mm_populate+0x1d8/0x380 [ 490.188086][T12864] ? __pfx___mm_populate+0x10/0x10 [ 490.188137][T12864] ? up_write+0x282/0x4e0 [ 490.188177][T12864] vm_mmap_pgoff+0x37f/0x470 [ 490.188224][T12864] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 490.188277][T12864] ? __x64_sys_futex+0x1e0/0x4c0 [ 490.188310][T12864] ? __x64_sys_futex+0x1e9/0x4c0 [ 490.188351][T12864] ksys_mmap_pgoff+0x7d/0x5c0 [ 490.188405][T12864] ? xfd_validate_state+0x61/0x180 [ 490.188433][T12864] ? __pfx_do_writev+0x10/0x10 [ 490.188480][T12864] __x64_sys_mmap+0x125/0x190 [ 490.188516][T12864] do_syscall_64+0xcd/0xf80 [ 490.188548][T12864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.188578][T12864] RIP: 0033:0x7fd33af8f7c9 [ 490.188603][T12864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.188634][T12864] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 490.188664][T12864] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 490.188685][T12864] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 490.188703][T12864] RBP: 00007fd33b013f91 R08: 0000000000000007 R09: 0000000000028000 [ 490.188721][T12864] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 490.188739][T12864] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 490.188780][T12864] [ 490.539811][T12869] sctp: [Deprecated]: syz.0.1425 (pid 12869) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.539811][T12869] Use struct sctp_sack_info instead [ 491.910811][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 491.943056][T12890] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1434'. [ 492.530722][T12894] [U]  [ 492.533607][T12894] [U] [ 492.536370][T12894] [U] [ 492.539131][T12894] [U] [ 492.576420][T12894] [U] [ 492.579221][T12894] [U] [ 492.581986][T12894] [U] [ 492.584744][T12894] [U] [ 492.630183][T12894] [U] [ 492.633073][T12894] [U] [ 492.635816][T12894] [U] [ 492.638567][T12894] [U] [ 492.677374][T12894] [U] [ 492.680192][T12894] [U] [ 492.682947][T12894] [U] [ 492.685714][T12894] [U] [ 492.719887][T12894] [U] [ 492.722685][T12894] [U] [ 492.725446][T12894] [U] [ 492.728202][T12894] [U] [ 492.764521][T12909] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1438'. [ 493.723285][T12944] FAULT_INJECTION: forcing a failure. [ 493.723285][T12944] name failslab, interval 1, probability 0, space 0, times 0 [ 493.834859][T12944] CPU: 0 UID: 0 PID: 12944 Comm: syz.3.1447 Tainted: G U L syzkaller #0 PREEMPT(full) [ 493.834909][T12944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 493.834921][T12944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.834938][T12944] Call Trace: [ 493.834947][T12944] [ 493.834959][T12944] dump_stack_lvl+0x16c/0x1f0 [ 493.835013][T12944] should_fail_ex+0x512/0x640 [ 493.835049][T12944] ? __kmalloc_cache_noprof+0x5f/0x800 [ 493.835088][T12944] should_failslab+0xc2/0x120 [ 493.835137][T12944] __kmalloc_cache_noprof+0x80/0x800 [ 493.835174][T12944] ? alloc_pipe_info+0x10e/0x590 [ 493.835230][T12944] ? alloc_pipe_info+0x10e/0x590 [ 493.835276][T12944] alloc_pipe_info+0x10e/0x590 [ 493.835327][T12944] splice_direct_to_actor+0x77d/0xa30 [ 493.835374][T12944] ? __lock_acquire+0x436/0x2890 [ 493.835408][T12944] ? __pfx_direct_splice_actor+0x10/0x10 [ 493.835455][T12944] ? __pfx_aa_file_perm+0x10/0x10 [ 493.835502][T12944] ? find_held_lock+0x2b/0x80 [ 493.835542][T12944] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 493.835586][T12944] ? get_pid_task+0xfc/0x250 [ 493.835624][T12944] do_splice_direct+0x174/0x240 [ 493.835671][T12944] ? __pfx_do_splice_direct+0x10/0x10 [ 493.835718][T12944] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 493.835771][T12944] ? rw_verify_area+0xcf/0x6c0 [ 493.835816][T12944] do_sendfile+0xb06/0xe50 [ 493.835866][T12944] ? __pfx_do_sendfile+0x10/0x10 [ 493.835910][T12944] ? __fget_files+0x20e/0x3c0 [ 493.835964][T12944] __x64_sys_sendfile64+0x1d8/0x220 [ 493.835993][T12944] ? ksys_write+0x1ac/0x250 [ 493.836035][T12944] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 493.836078][T12944] do_syscall_64+0xcd/0xf80 [ 493.836110][T12944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.836140][T12944] RIP: 0033:0x7f0abdf8f7c9 [ 493.836164][T12944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.836193][T12944] RSP: 002b:00007f0abee5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 493.836222][T12944] RAX: ffffffffffffffda RBX: 00007f0abe1e5fa0 RCX: 00007f0abdf8f7c9 [ 493.836242][T12944] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 493.836259][T12944] RBP: 00007f0abee5f090 R08: 0000000000000000 R09: 0000000000000000 [ 493.836277][T12944] R10: 00000000000002f2 R11: 0000000000000246 R12: 0000000000000001 [ 493.836295][T12944] R13: 00007f0abe1e6038 R14: 00007f0abe1e5fa0 R15: 00007ffc7633b9e8 [ 493.836336][T12944] [ 494.406524][T12950] netlink: 'syz.2.1448': attribute type 4 has an invalid length. [ 494.556765][T12955] FAULT_INJECTION: forcing a failure. [ 494.556765][T12955] name failslab, interval 1, probability 0, space 0, times 0 [ 494.563207][T12950] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1448'. [ 494.583618][T12955] CPU: 0 UID: 0 PID: 12955 Comm: syz.0.1458 Tainted: G U L syzkaller #0 PREEMPT(full) [ 494.583670][T12955] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 494.583683][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.583700][T12955] Call Trace: [ 494.583710][T12955] [ 494.583723][T12955] dump_stack_lvl+0x16c/0x1f0 [ 494.583780][T12955] should_fail_ex+0x512/0x640 [ 494.583817][T12955] ? __kmalloc_noprof+0xca/0x910 [ 494.583857][T12955] should_failslab+0xc2/0x120 [ 494.583906][T12955] __kmalloc_noprof+0xeb/0x910 [ 494.583941][T12955] ? alloc_pipe_info+0x1ec/0x590 [ 494.583997][T12955] ? alloc_pipe_info+0x1ec/0x590 [ 494.584044][T12955] alloc_pipe_info+0x1ec/0x590 [ 494.584097][T12955] splice_direct_to_actor+0x77d/0xa30 [ 494.584158][T12955] ? __lock_acquire+0x436/0x2890 [ 494.584186][T12955] ? __pfx_direct_splice_actor+0x10/0x10 [ 494.584246][T12955] ? __pfx_aa_file_perm+0x10/0x10 [ 494.584294][T12955] ? find_held_lock+0x2b/0x80 [ 494.584334][T12955] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 494.584379][T12955] ? get_pid_task+0xfc/0x250 [ 494.584417][T12955] do_splice_direct+0x174/0x240 [ 494.584464][T12955] ? __pfx_do_splice_direct+0x10/0x10 [ 494.584512][T12955] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 494.584565][T12955] ? rw_verify_area+0xcf/0x6c0 [ 494.584609][T12955] do_sendfile+0xb06/0xe50 [ 494.584658][T12955] ? __pfx_do_sendfile+0x10/0x10 [ 494.584702][T12955] ? __fget_files+0x20e/0x3c0 [ 494.584756][T12955] __x64_sys_sendfile64+0x1d8/0x220 [ 494.584785][T12955] ? ksys_write+0x1ac/0x250 [ 494.584829][T12955] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 494.584872][T12955] do_syscall_64+0xcd/0xf80 [ 494.584904][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.584936][T12955] RIP: 0033:0x7ff85758f7c9 [ 494.584960][T12955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.584990][T12955] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 494.585019][T12955] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 494.585039][T12955] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 494.585056][T12955] RBP: 00007ff8584ac090 R08: 0000000000000000 R09: 0000000000000000 [ 494.585074][T12955] R10: 00000000000002f2 R11: 0000000000000246 R12: 0000000000000001 [ 494.585092][T12955] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 494.585139][T12955] [ 495.798897][T12949] kexec: Could not allocate control_code_buffer [ 496.320955][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1453'. [ 496.389176][ T31] audit: type=1326 audit(2147483727.370:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12975 comm="syz.0.1455" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff85758f7c9 code=0x0 [ 497.629546][T13001] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 498.096424][T13011] could not allocate digest TFM handle [ 498.449841][T13023] vivid-007: ================= START STATUS ================= [ 498.489907][T13023] vivid-007: Generate PTS: true [ 498.500834][T13023] vivid-007: Generate SCR: true [ 498.542264][T13023] tpg source WxH: 320x240 (Y'CbCr) [ 498.584086][T13023] tpg field: 1 [ 498.592835][T13023] tpg crop: (0,0)/320x240 [ 498.601482][T13023] tpg compose: (0,0)/320x240 [ 498.616403][T13023] tpg colorspace: 8 [ 498.620270][T13023] tpg transfer function: 0/0 [ 498.651736][T13023] tpg Y'CbCr encoding: 0/0 [ 498.656345][T13023] tpg quantization: 0/0 [ 498.660542][T13023] tpg RGB range: 0/2 [ 498.677260][T13030] FAULT_INJECTION: forcing a failure. [ 498.677260][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 498.690977][T13023] vivid-007: ================== END STATUS ================== [ 498.731974][T13030] CPU: 1 UID: 0 PID: 13030 Comm: syz.1.1468 Tainted: G U L syzkaller #0 PREEMPT(full) [ 498.732013][T13030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 498.732022][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 498.732036][T13030] Call Trace: [ 498.732043][T13030] [ 498.732053][T13030] dump_stack_lvl+0x16c/0x1f0 [ 498.732095][T13030] should_fail_ex+0x512/0x640 [ 498.732124][T13030] ? fs_reclaim_acquire+0xae/0x150 [ 498.732165][T13030] should_failslab+0xc2/0x120 [ 498.732201][T13030] kmem_cache_alloc_noprof+0x83/0x770 [ 498.732229][T13030] ? __pfx_map_id_range_down+0x10/0x10 [ 498.732263][T13030] ? security_inode_alloc+0x3b/0x2b0 [ 498.732294][T13030] ? security_inode_alloc+0x3b/0x2b0 [ 498.732318][T13030] security_inode_alloc+0x3b/0x2b0 [ 498.732344][T13030] inode_init_always_gfp+0xced/0x1040 [ 498.732414][T13030] alloc_inode+0x86/0x240 [ 498.732451][T13030] new_inode+0x22/0x1c0 [ 498.732492][T13030] __debugfs_create_file+0x105/0x530 [ 498.732532][T13030] debugfs_create_file_full+0x41/0x60 [ 498.732571][T13030] kvm_dev_ioctl+0x1708/0x1a80 [ 498.732629][T13030] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 498.732687][T13030] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 498.732732][T13030] __x64_sys_ioctl+0x18e/0x210 [ 498.732775][T13030] do_syscall_64+0xcd/0xf80 [ 498.732810][T13030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.732842][T13030] RIP: 0033:0x7fd33af8f7c9 [ 498.732867][T13030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.732908][T13030] RSP: 002b:00007fd33be68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.732944][T13030] RAX: ffffffffffffffda RBX: 00007fd33b1e6090 RCX: 00007fd33af8f7c9 [ 498.732962][T13030] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 498.732976][T13030] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 498.732990][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.733003][T13030] R13: 00007fd33b1e6128 R14: 00007fd33b1e6090 R15: 00007ffc2183ac48 [ 498.733033][T13030] [ 498.736807][T13030] debugfs: out of free dentries, can not create file 'halt_attempted_poll' [ 499.248263][T12911] [U] [ 499.659255][T13045] bond0: no command found in slaves file - use +ifname or -ifname [ 499.707794][T13050] FAULT_INJECTION: forcing a failure. [ 499.707794][T13050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.755931][T13050] CPU: 0 UID: 7 PID: 13050 Comm: syz.0.1474 Tainted: G U L syzkaller #0 PREEMPT(full) [ 499.755980][T13050] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 499.755991][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 499.756007][T13050] Call Trace: [ 499.756017][T13050] [ 499.756029][T13050] dump_stack_lvl+0x16c/0x1f0 [ 499.756092][T13050] should_fail_ex+0x512/0x640 [ 499.756139][T13050] _copy_to_user+0x32/0xd0 [ 499.756196][T13050] simple_read_from_buffer+0xcb/0x170 [ 499.756243][T13050] proc_fail_nth_read+0x197/0x240 [ 499.756302][T13050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.756354][T13050] ? rw_verify_area+0xcf/0x6c0 [ 499.756395][T13050] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 499.756449][T13050] vfs_read+0x1e4/0xcf0 [ 499.756494][T13050] ? __pfx___mutex_lock+0x10/0x10 [ 499.756531][T13050] ? __pfx_vfs_read+0x10/0x10 [ 499.756587][T13050] ? __fget_files+0x20e/0x3c0 [ 499.756644][T13050] ksys_read+0x12a/0x250 [ 499.756689][T13050] ? __pfx_ksys_read+0x10/0x10 [ 499.756745][T13050] do_syscall_64+0xcd/0xf80 [ 499.756778][T13050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.756811][T13050] RIP: 0033:0x7ff85758e1dc [ 499.756836][T13050] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 499.756867][T13050] RSP: 002b:00007ff8584ac030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 499.756896][T13050] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758e1dc [ 499.756916][T13050] RDX: 000000000000000f RSI: 00007ff8584ac0a0 RDI: 0000000000000004 [ 499.756935][T13050] RBP: 00007ff8584ac090 R08: 0000000000000000 R09: 0000000000000000 [ 499.756959][T13050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.756978][T13050] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 499.757018][T13050] [ 500.745615][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1475'. [ 500.848377][T13065] netlink: zone id is out of range [ 500.890003][T13065] netlink: zone id is out of range [ 500.938708][T13065] netlink: zone id is out of range [ 500.946849][T13065] netlink: zone id is out of range [ 500.972428][T13065] netlink: zone id is out of range [ 501.049426][T13065] netlink: zone id is out of range [ 501.056977][T13065] netlink: zone id is out of range [ 501.084932][T13065] netlink: zone id is out of range [ 501.100452][T13065] netlink: zone id is out of range [ 501.105642][T13065] netlink: zone id is out of range [ 501.693338][T13078] binder: 13077:13078 ioctl 4020565a 38 returned -22 [ 501.927907][T13084] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1483'. [ 501.990290][T13087] FAULT_INJECTION: forcing a failure. [ 501.990290][T13087] name failslab, interval 1, probability 0, space 0, times 0 [ 502.033546][T13087] CPU: 1 UID: 0 PID: 13087 Comm: syz.1.1484 Tainted: G U L syzkaller #0 PREEMPT(full) [ 502.033619][T13087] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 502.033632][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 502.033651][T13087] Call Trace: [ 502.033661][T13087] [ 502.033673][T13087] dump_stack_lvl+0x16c/0x1f0 [ 502.033731][T13087] should_fail_ex+0x512/0x640 [ 502.033770][T13087] ? kmem_cache_alloc_noprof+0x62/0x770 [ 502.033814][T13087] should_failslab+0xc2/0x120 [ 502.033870][T13087] kmem_cache_alloc_noprof+0x83/0x770 [ 502.033911][T13087] ? alloc_empty_file+0x55/0x1e0 [ 502.033958][T13087] ? alloc_empty_file+0x55/0x1e0 [ 502.033991][T13087] alloc_empty_file+0x55/0x1e0 [ 502.034025][T13087] alloc_file_pseudo+0x13a/0x230 [ 502.034061][T13087] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 502.034101][T13087] ? _raw_spin_unlock+0x28/0x50 [ 502.034146][T13087] ? alloc_fd+0x471/0x7d0 [ 502.034209][T13087] __anon_inode_getfile+0xe8/0x280 [ 502.034243][T13087] ? __init_waitqueue_head+0xca/0x150 [ 502.034286][T13087] do_epoll_create+0x326/0x500 [ 502.034337][T13087] __x64_sys_epoll_create+0x45/0x70 [ 502.034388][T13087] do_syscall_64+0xcd/0xf80 [ 502.034420][T13087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.034453][T13087] RIP: 0033:0x7fd33af8f7c9 [ 502.034478][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.034508][T13087] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 502.034537][T13087] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 502.034558][T13087] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 502.034576][T13087] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 502.034594][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.034612][T13087] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 502.034651][T13087] [ 503.095565][T13119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1491'. [ 503.163418][T13118] can: request_module (can-proto-0) failed. [ 503.367186][T13118] can: request_module (can-proto-0) failed. [ 503.431304][T13118] can: request_module (can-proto-0) failed. [ 503.621730][T13118] can: request_module (can-proto-0) failed. [ 503.745633][T13118] can: request_module (can-proto-0) failed. [ 503.856277][T13118] can: request_module (can-proto-0) failed. [ 503.925495][T13130] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1493'. [ 503.941358][T13131] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 503.972765][T13131] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 503.997165][T13131] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1492'. [ 504.023736][T13131] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1492'. [ 504.103439][T13134] vivid-009: ================= START STATUS ================= [ 504.131845][T13134] vivid-009: Generate PTS: true [ 504.136986][T13134] vivid-009: Generate SCR: true [ 504.151619][T13134] tpg source WxH: 320x240 (Y'CbCr) [ 504.172221][T13134] tpg field: 1 [ 504.181096][T13134] tpg crop: (0,0)/320x240 [ 504.201316][T13134] tpg compose: (0,0)/320x240 [ 504.206201][T13134] tpg colorspace: 8 [ 504.210649][T13134] tpg transfer function: 0/0 [ 504.226691][T13134] tpg Y'CbCr encoding: 0/0 [ 504.237833][T13134] tpg quantization: 0/0 [ 504.242054][T13134] tpg RGB range: 0/2 [ 504.278973][T13134] vivid-009: ================== END STATUS ================== [ 505.504790][T13169] FAULT_INJECTION: forcing a failure. [ 505.504790][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 505.650074][T13169] CPU: 1 UID: 0 PID: 13169 Comm: syz.0.1504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 505.650113][T13169] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 505.650121][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 505.650135][T13169] Call Trace: [ 505.650142][T13169] [ 505.650150][T13169] dump_stack_lvl+0x16c/0x1f0 [ 505.650191][T13169] should_fail_ex+0x512/0x640 [ 505.650219][T13169] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 505.650252][T13169] should_failslab+0xc2/0x120 [ 505.650288][T13169] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 505.650318][T13169] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 505.650345][T13169] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 505.650372][T13169] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 505.650393][T13169] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 505.650416][T13169] alloc_inode+0x64/0x240 [ 505.650443][T13169] new_inode+0x22/0x1c0 [ 505.650470][T13169] hugetlbfs_get_inode+0x354/0x700 [ 505.650497][T13169] hugetlb_file_setup+0x15b/0x620 [ 505.650524][T13169] ksys_mmap_pgoff+0x189/0x5c0 [ 505.650561][T13169] __x64_sys_mmap+0x125/0x190 [ 505.650587][T13169] do_syscall_64+0xcd/0xf80 [ 505.650617][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.650640][T13169] RIP: 0033:0x7ff85758f7c9 [ 505.650657][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.650679][T13169] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.650700][T13169] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 505.650715][T13169] RDX: 0000000000000002 RSI: 0000000000004005 RDI: 0000000000000000 [ 505.650728][T13169] RBP: 00007ff857613f91 R08: 0000000000000401 R09: 0000300000000000 [ 505.650742][T13169] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 505.650755][T13169] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 505.650784][T13169] [ 506.718490][T13190] FAULT_INJECTION: forcing a failure. [ 506.718490][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 506.749611][T13190] CPU: 0 UID: 0 PID: 13190 Comm: syz.0.1508 Tainted: G U L syzkaller #0 PREEMPT(full) [ 506.749667][T13190] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 506.749679][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 506.749697][T13190] Call Trace: [ 506.749708][T13190] [ 506.749720][T13190] dump_stack_lvl+0x16c/0x1f0 [ 506.749774][T13190] should_fail_ex+0x512/0x640 [ 506.749809][T13190] ? __kmalloc_cache_noprof+0x5f/0x800 [ 506.749847][T13190] should_failslab+0xc2/0x120 [ 506.749893][T13190] __kmalloc_cache_noprof+0x80/0x800 [ 506.749928][T13190] ? do_epoll_create+0x62/0x500 [ 506.749993][T13190] ? __pfx_ksys_write+0x10/0x10 [ 506.750043][T13190] ? do_epoll_create+0x62/0x500 [ 506.750088][T13190] do_epoll_create+0x62/0x500 [ 506.750138][T13190] __x64_sys_epoll_create+0x45/0x70 [ 506.750187][T13190] do_syscall_64+0xcd/0xf80 [ 506.750219][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.750250][T13190] RIP: 0033:0x7ff85758f7c9 [ 506.750275][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.750306][T13190] RSP: 002b:00007ff8584ac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 506.750343][T13190] RAX: ffffffffffffffda RBX: 00007ff8577e5fa0 RCX: 00007ff85758f7c9 [ 506.750364][T13190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003e [ 506.750383][T13190] RBP: 00007ff857613f91 R08: 0000000000000000 R09: 0000000000000000 [ 506.750402][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.750421][T13190] R13: 00007ff8577e6038 R14: 00007ff8577e5fa0 R15: 00007ffe381b0fd8 [ 506.750461][T13190] [ 507.332471][T13204] futex_wake_op: syz.1.1512 tries to shift op by -2048; fix this program [ 507.497468][T13206] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1514'. [ 507.876185][T13219] kAFS: Invalid Command on /proc/fs/afs/cells file [ 508.005303][T13212] tc_dump_action: action bad kind [ 508.756372][T13236] FAULT_INJECTION: forcing a failure. [ 508.756372][T13236] name fail_futex, interval 1, probability 0, space 0, times 0 [ 508.788295][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz.1.1518 Tainted: G U L syzkaller #0 PREEMPT(full) [ 508.788353][T13236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 508.788365][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 508.788384][T13236] Call Trace: [ 508.788394][T13236] [ 508.788406][T13236] dump_stack_lvl+0x16c/0x1f0 [ 508.788464][T13236] should_fail_ex+0x512/0x640 [ 508.788516][T13236] get_futex_key+0x1d0/0x15f0 [ 508.788555][T13236] ? __pfx_get_futex_key+0x10/0x10 [ 508.788593][T13236] ? __lock_acquire+0x436/0x2890 [ 508.788629][T13236] futex_wake+0xea/0x530 [ 508.788669][T13236] ? futex_wait+0x120/0x380 [ 508.788717][T13236] ? __pfx_futex_wake+0x10/0x10 [ 508.788765][T13236] ? __fget_files+0x204/0x3c0 [ 508.788823][T13236] do_futex+0x1e3/0x350 [ 508.788860][T13236] ? __pfx_do_futex+0x10/0x10 [ 508.788894][T13236] ? fdget+0x187/0x210 [ 508.788939][T13236] ? __sys_sendmsg+0x18c/0x220 [ 508.788987][T13236] __x64_sys_futex+0x1e0/0x4c0 [ 508.789031][T13236] ? __pfx___x64_sys_futex+0x10/0x10 [ 508.789085][T13236] do_syscall_64+0xcd/0xf80 [ 508.789118][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.789149][T13236] RIP: 0033:0x7fd33af8f7c9 [ 508.789175][T13236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.789206][T13236] RSP: 002b:00007fd33be680e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 508.789237][T13236] RAX: ffffffffffffffda RBX: 00007fd33b1e6098 RCX: 00007fd33af8f7c9 [ 508.789258][T13236] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd33b1e609c [ 508.789276][T13236] RBP: 00007fd33b1e6090 R08: 00007fd33be8a000 R09: 0000000000000000 [ 508.789295][T13236] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 508.789314][T13236] R13: 00007fd33b1e6128 R14: 00007ffc2183ab60 R15: 00007ffc2183ac48 [ 508.789355][T13236] [ 510.809583][T13275] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1527'. [ 510.970745][T13278] FAULT_INJECTION: forcing a failure. [ 510.970745][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 511.011272][T13278] CPU: 1 UID: 0 PID: 13278 Comm: syz.2.1528 Tainted: G U L syzkaller #0 PREEMPT(full) [ 511.011328][T13278] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 511.011340][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.011359][T13278] Call Trace: [ 511.011370][T13278] [ 511.011382][T13278] dump_stack_lvl+0x16c/0x1f0 [ 511.011443][T13278] should_fail_ex+0x512/0x640 [ 511.011481][T13278] ? __kmalloc_noprof+0xca/0x910 [ 511.011522][T13278] should_failslab+0xc2/0x120 [ 511.011573][T13278] __kmalloc_noprof+0xeb/0x910 [ 511.011607][T13278] ? __pfx___might_resched+0x10/0x10 [ 511.011652][T13278] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 511.011700][T13278] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 511.011737][T13278] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 511.011783][T13278] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 511.011821][T13278] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 511.011857][T13278] ? genl_get_cmd+0x194/0x580 [ 511.011901][T13278] ? __radix_tree_lookup+0x21f/0x2c0 [ 511.011955][T13278] genl_rcv_msg+0x55c/0x800 [ 511.012007][T13278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.012043][T13278] ? __pfx_ctrl_getfamily+0x10/0x10 [ 511.012118][T13278] netlink_rcv_skb+0x158/0x420 [ 511.012168][T13278] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.012204][T13278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.012272][T13278] ? netlink_deliver_tap+0x1ae/0xd30 [ 511.012328][T13278] genl_rcv+0x28/0x40 [ 511.012357][T13278] netlink_unicast+0x5aa/0x870 [ 511.012414][T13278] ? __pfx_netlink_unicast+0x10/0x10 [ 511.012482][T13278] netlink_sendmsg+0x8c8/0xdd0 [ 511.012539][T13278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.012596][T13278] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 511.012638][T13278] __sys_sendto+0x4a3/0x520 [ 511.012680][T13278] ? __pfx___sys_sendto+0x10/0x10 [ 511.012737][T13278] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 511.012783][T13278] ? count_memcg_events+0x122/0x290 [ 511.012857][T13278] __x64_sys_sendto+0xe0/0x1c0 [ 511.012897][T13278] ? do_syscall_64+0x91/0xf80 [ 511.012925][T13278] ? lockdep_hardirqs_on+0x7c/0x110 [ 511.012955][T13278] do_syscall_64+0xcd/0xf80 [ 511.012988][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.013040][T13278] RIP: 0033:0x7ff7f819165c [ 511.013073][T13278] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 511.013105][T13278] RSP: 002b:00007ff7f8fd9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 511.013136][T13278] RAX: ffffffffffffffda RBX: 00007ff7f8fd9fc0 RCX: 00007ff7f819165c [ 511.013157][T13278] RDX: 0000000000000020 RSI: 00007ff7f8fda010 RDI: 0000000000000002 [ 511.013175][T13278] RBP: 0000000000000000 R08: 00007ff7f8fd9f14 R09: 000000000000000c [ 511.013193][T13278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 511.013211][T13278] R13: 00007ff7f8fd9f68 R14: 00007ff7f8fda010 R15: 0000000000000000 [ 511.013255][T13278] [ 511.420397][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.426845][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.982605][T13295] FAULT_INJECTION: forcing a failure. [ 511.982605][T13295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.999237][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.2.1531 Tainted: G U L syzkaller #0 PREEMPT(full) [ 511.999290][T13295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 511.999302][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 511.999320][T13295] Call Trace: [ 511.999330][T13295] [ 511.999342][T13295] dump_stack_lvl+0x16c/0x1f0 [ 511.999405][T13295] should_fail_ex+0x512/0x640 [ 511.999449][T13295] _copy_from_user+0x2e/0xd0 [ 511.999493][T13295] copy_msghdr_from_user+0x98/0x160 [ 511.999539][T13295] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 511.999602][T13295] ___sys_sendmsg+0xfe/0x1d0 [ 511.999649][T13295] ? __pfx____sys_sendmsg+0x10/0x10 [ 511.999747][T13295] __sys_sendmsg+0x16d/0x220 [ 511.999793][T13295] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.999864][T13295] do_syscall_64+0xcd/0xf80 [ 511.999899][T13295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.999931][T13295] RIP: 0033:0x7ff7f818f7c9 [ 511.999955][T13295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.999986][T13295] RSP: 002b:00007ff7f8ffc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.000022][T13295] RAX: ffffffffffffffda RBX: 00007ff7f83e5fa0 RCX: 00007ff7f818f7c9 [ 512.000042][T13295] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000015 [ 512.000061][T13295] RBP: 00007ff7f8ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 512.000081][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.000100][T13295] R13: 00007ff7f83e6038 R14: 00007ff7f83e5fa0 R15: 00007fff36d6e9c8 [ 512.000143][T13295] [ 513.586648][T13322] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1538'. [ 513.955992][T13336] FAULT_INJECTION: forcing a failure. [ 513.955992][T13336] name fail_futex, interval 1, probability 0, space 0, times 0 [ 513.979736][T13336] CPU: 1 UID: 0 PID: 13336 Comm: syz.0.1540 Tainted: G U L syzkaller #0 PREEMPT(full) [ 513.979777][T13336] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 513.979786][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.979800][T13336] Call Trace: [ 513.979807][T13336] [ 513.979816][T13336] dump_stack_lvl+0x16c/0x1f0 [ 513.979866][T13336] should_fail_ex+0x512/0x640 [ 513.979898][T13336] get_futex_key+0x1d0/0x15f0 [ 513.979927][T13336] ? __pfx_get_futex_key+0x10/0x10 [ 513.979955][T13336] ? __lock_acquire+0x436/0x2890 [ 513.979983][T13336] futex_wake+0xea/0x530 [ 513.980013][T13336] ? futex_wait+0x120/0x380 [ 513.980047][T13336] ? __pfx_futex_wake+0x10/0x10 [ 513.980082][T13336] ? __fget_files+0x204/0x3c0 [ 513.980151][T13336] do_futex+0x1e3/0x350 [ 513.980188][T13336] ? __pfx_do_futex+0x10/0x10 [ 513.980225][T13336] ? fdget+0x187/0x210 [ 513.980266][T13336] ? __sys_sendmsg+0x18c/0x220 [ 513.980301][T13336] __x64_sys_futex+0x1e0/0x4c0 [ 513.980332][T13336] ? __pfx___x64_sys_futex+0x10/0x10 [ 513.980370][T13336] do_syscall_64+0xcd/0xf80 [ 513.980395][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.980418][T13336] RIP: 0033:0x7ff85758f7c9 [ 513.980436][T13336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.980459][T13336] RSP: 002b:00007ff8584490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.980480][T13336] RAX: ffffffffffffffda RBX: 00007ff8577e6278 RCX: 00007ff85758f7c9 [ 513.980495][T13336] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff8577e627c [ 513.980509][T13336] RBP: 00007ff8577e6270 R08: 00007ff8584ad000 R09: 0000000000000000 [ 513.980523][T13336] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 513.980537][T13336] R13: 00007ff8577e6308 R14: 00007ffe381b0ef0 R15: 00007ffe381b0fd8 [ 513.980568][T13336] [ 514.264439][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 516.500437][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.500540][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.507965][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.515979][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.523562][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.531141][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.538390][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.546173][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.553742][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 516.561342][ T5841] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 517.286103][T13387] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1552'. [ 517.398901][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1555'. [ 517.901907][T13403] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2938708390 out of range (51000000..2150000000) [ 518.904538][T13420] Invalid ELF header magic: != ELF [ 520.181613][T13447] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1566'. [ 520.533518][T13451] random: crng reseeded on system resumption [ 521.089291][T13442] zswap: compressor not available [ 523.320113][T13486] can: request_module (can-proto-0) failed. [ 523.902740][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 525.025061][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 526.003962][T13523] .^: entered promiscuous mode [ 529.512535][T13578] netlink: 'syz.3.1595': attribute type 4 has an invalid length. [ 529.520337][T13578] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1595'. [ 532.142583][T13597] .^: entered promiscuous mode [ 538.477164][T13705] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 538.916952][T13707] .^: entered promiscuous mode [ 539.414071][T13717] netlink: 62 bytes leftover after parsing attributes in process `syz.0.1625'. [ 541.470548][T13756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1634'. [ 541.761597][T13761] tipc: Started in network mode [ 541.777380][T13761] tipc: Node identity ee00, cluster identity 4711 [ 541.788501][T13761] tipc: Node number set to 60928 [ 543.529050][T13818] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1650'. [ 543.558256][T13818] nbd: must specify at least one socket [ 544.835182][T13837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1657'. [ 544.930174][ T5841] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 546.487212][T13873] tipc: Started in network mode [ 546.512723][T13873] tipc: Node identity ee00, cluster identity 4711 [ 546.541800][T13873] tipc: Node number set to 60928 [ 547.787740][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 547.879503][T13910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1672'. [ 548.165209][T13912] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1673'. [ 549.539635][T13936] tipc: Started in network mode [ 549.586383][T13936] tipc: Node identity ee00, cluster identity 4711 [ 549.618667][T13936] tipc: Node number set to 60928 [ 550.159992][T13956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 550.177933][T13956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.199332][T13956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 550.219470][T13956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 550.301276][T13964] serio: Serial port ttyS0 [ 552.088851][T14010] FAULT_INJECTION: forcing a failure. [ 552.088851][T14010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.102398][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.1.1700 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.102451][T14010] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.102463][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.102481][T14010] Call Trace: [ 552.102491][T14010] [ 552.102502][T14010] dump_stack_lvl+0x16c/0x1f0 [ 552.102558][T14010] should_fail_ex+0x512/0x640 [ 552.102601][T14010] strncpy_from_user+0x3b/0x2e0 [ 552.102641][T14010] path_removexattrat+0xc6/0x5e0 [ 552.102690][T14010] ? __pfx_path_removexattrat+0x10/0x10 [ 552.102771][T14010] ? ksys_write+0x1ac/0x250 [ 552.102816][T14010] ? __pfx_ksys_write+0x10/0x10 [ 552.102871][T14010] __x64_sys_fremovexattr+0x5a/0x80 [ 552.102905][T14010] do_syscall_64+0xcd/0xf80 [ 552.102939][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.102977][T14010] RIP: 0033:0x7fd33af8f7c9 [ 552.103002][T14010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.103032][T14010] RSP: 002b:00007fd33be68038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 552.103063][T14010] RAX: ffffffffffffffda RBX: 00007fd33b1e6090 RCX: 00007fd33af8f7c9 [ 552.103083][T14010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 552.103100][T14010] RBP: 00007fd33be68090 R08: 0000000000000000 R09: 0000000000000000 [ 552.103118][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.103135][T14010] R13: 00007fd33b1e6128 R14: 00007fd33b1e6090 R15: 00007ffc2183ac48 [ 552.103176][T14010] [ 552.267090][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 552.276476][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 552.282537][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 552.288735][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 553.384847][T14032] vhci_hcd vhci_hcd.2: invalid port number 10 [ 553.394819][T14032] vhci_hcd vhci_hcd.2: default hub control req: 0900 v0000 i000a l0 [ 554.816910][T14057] XFS: Clearing xfsstats [ 555.118047][T14066] FAULT_INJECTION: forcing a failure. [ 555.118047][T14066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.158363][T14066] CPU: 0 UID: 0 PID: 14066 Comm: syz.3.1712 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.158414][T14066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.158426][T14066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.158453][T14066] Call Trace: [ 555.158463][T14066] [ 555.158474][T14066] dump_stack_lvl+0x16c/0x1f0 [ 555.158529][T14066] should_fail_ex+0x512/0x640 [ 555.158573][T14066] _copy_to_user+0x32/0xd0 [ 555.158614][T14066] simple_read_from_buffer+0xcb/0x170 [ 555.158662][T14066] proc_fail_nth_read+0x197/0x240 [ 555.158716][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.158774][T14066] ? rw_verify_area+0xcf/0x6c0 [ 555.158814][T14066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 555.158868][T14066] vfs_read+0x1e4/0xcf0 [ 555.158915][T14066] ? __pfx___mutex_lock+0x10/0x10 [ 555.158952][T14066] ? __pfx_vfs_read+0x10/0x10 [ 555.159006][T14066] ? __fget_files+0x20e/0x3c0 [ 555.159064][T14066] ksys_read+0x12a/0x250 [ 555.159107][T14066] ? __pfx_ksys_read+0x10/0x10 [ 555.159162][T14066] do_syscall_64+0xcd/0xf80 [ 555.159192][T14066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.159225][T14066] RIP: 0033:0x7f0abdf8e1dc [ 555.159248][T14066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 555.159278][T14066] RSP: 002b:00007f0abee3e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 555.159306][T14066] RAX: ffffffffffffffda RBX: 00007f0abe1e6090 RCX: 00007f0abdf8e1dc [ 555.159325][T14066] RDX: 000000000000000f RSI: 00007f0abee3e0a0 RDI: 0000000000000005 [ 555.159344][T14066] RBP: 00007f0abee3e090 R08: 0000000000000000 R09: 0000000000000000 [ 555.159361][T14066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.159379][T14066] R13: 00007f0abe1e6128 R14: 00007f0abe1e6090 R15: 00007ffc7633b9e8 [ 555.159422][T14066] [ 557.238690][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1726'. [ 557.416311][T14118] vhci_hcd vhci_hcd.2: invalid port number 10 [ 557.456395][T14118] vhci_hcd vhci_hcd.2: default hub control req: 0900 v0000 i000a l0 [ 559.542984][T14158] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 560.244065][T14178] vhci_hcd vhci_hcd.2: invalid port number 10 [ 560.257424][T14178] vhci_hcd vhci_hcd.2: default hub control req: 0900 v0000 i000a l0 [ 561.685290][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 563.406781][T14248] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1766'. [ 563.641644][T14251] vhci_hcd vhci_hcd.2: invalid port number 10 [ 563.661830][T14251] vhci_hcd vhci_hcd.2: default hub control req: 0900 v0000 i000a l0 [ 564.813737][T14277] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 564.847125][T14277] vhci_hcd vhci_hcd.1: default hub control req: 0000 v0000 i0000 l0 [ 565.119956][T14011] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 565.872233][T14282] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 565.889146][T14282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.899171][T14282] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.923105][T14282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 567.116268][T14011] Bluetooth: hci0: command 0x0406 tx timeout [ 567.736536][T14330] FAULT_INJECTION: forcing a failure. [ 567.736536][T14330] name failslab, interval 1, probability 0, space 0, times 0 [ 567.750017][T14330] CPU: 1 UID: 0 PID: 14330 Comm: syz.0.1780 Tainted: G U L syzkaller #0 PREEMPT(full) [ 567.750089][T14330] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 567.750101][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.750119][T14330] Call Trace: [ 567.750130][T14330] [ 567.750142][T14330] dump_stack_lvl+0x16c/0x1f0 [ 567.750197][T14330] should_fail_ex+0x512/0x640 [ 567.750233][T14330] ? kmem_cache_alloc_noprof+0x62/0x770 [ 567.750277][T14330] should_failslab+0xc2/0x120 [ 567.750325][T14330] kmem_cache_alloc_noprof+0x83/0x770 [ 567.750365][T14330] ? __pmd_alloc+0xbf/0x9c0 [ 567.750423][T14330] ? __pmd_alloc+0xbf/0x9c0 [ 567.750469][T14330] __pmd_alloc+0xbf/0x9c0 [ 567.750532][T14330] __handle_mm_fault+0xbeb/0x2bb0 [ 567.750576][T14330] ? __pfx___handle_mm_fault+0x10/0x10 [ 567.750640][T14330] ? find_vma+0xbf/0x140 [ 567.750682][T14330] ? __pfx_find_vma+0x10/0x10 [ 567.750722][T14330] ? __pfx_number+0x10/0x10 [ 567.750761][T14330] handle_mm_fault+0x3fe/0xad0 [ 567.750802][T14330] do_user_addr_fault+0x7a6/0x1370 [ 567.750846][T14330] ? rcu_is_watching+0x12/0xc0 [ 567.750893][T14330] exc_page_fault+0x64/0xc0 [ 567.750943][T14330] asm_exc_page_fault+0x26/0x30 [ 567.750972][T14330] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 567.751013][T14330] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 567.751043][T14330] RSP: 0018:ffffc90003fcfad8 EFLAGS: 00050206 [ 567.751068][T14330] RAX: 3030363030307830 RBX: 000000000000000b RCX: 000000000000000b [ 567.751086][T14330] RDX: ffffed100644ac02 RSI: ffff888032256000 RDI: 0000000000000000 [ 567.751104][T14330] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100644ac01 [ 567.751122][T14330] R10: ffff88803225600a R11: ffff88801c39c830 R12: ffffc90003fcfd90 [ 567.751141][T14330] R13: 000000000000000b R14: ffff888032256000 R15: 00007ffffffff000 [ 567.751182][T14330] _copy_to_iter+0x383/0x1710 [ 567.751222][T14330] ? __mutex_unlock_slowpath+0x161/0x790 [ 567.751255][T14330] ? adr_show+0x49/0xb0 [ 567.751288][T14330] ? __pfx__copy_to_iter+0x10/0x10 [ 567.751324][T14330] ? kernfs_seq_stop+0xcd/0x120 [ 567.751377][T14330] ? kernfs_put_active+0x86/0xe0 [ 567.751443][T14330] seq_read_iter+0xd02/0x12d0 [ 567.751506][T14330] kernfs_fop_read_iter+0x46c/0x610 [ 567.751569][T14330] ? rw_verify_area+0xcf/0x6c0 [ 567.751614][T14330] vfs_read+0x8bf/0xcf0 [ 567.751693][T14330] ? __pfx_vfs_read+0x10/0x10 [ 567.751774][T14330] ksys_read+0x12a/0x250 [ 567.751820][T14330] ? __pfx_ksys_read+0x10/0x10 [ 567.751880][T14330] do_syscall_64+0xcd/0xf80 [ 567.751914][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.751951][T14330] RIP: 0033:0x7ff85758f7c9 [ 567.751973][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.752003][T14330] RSP: 002b:00007ff85848b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.752031][T14330] RAX: ffffffffffffffda RBX: 00007ff8577e6090 RCX: 00007ff85758f7c9 [ 567.752052][T14330] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 000000000000000e [ 567.752070][T14330] RBP: 00007ff857613f91 R08: 0000000000000000 R09: 0000000000000000 [ 567.752088][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.752106][T14330] R13: 00007ff8577e6128 R14: 00007ff8577e6090 R15: 00007ffe381b0fd8 [ 567.752149][T14330] [ 568.095337][T14011] Bluetooth: hci3: command 0x0406 tx timeout [ 568.098767][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.109322][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 568.927624][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1784'. [ 570.233043][T14395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 570.529566][ T31] audit: type=1800 audit(2147483801.906:25): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1800" name="lu_gp_id" dev="configfs" ino=59684 res=0 errno=0 [ 570.592219][T14406] FAULT_INJECTION: forcing a failure. [ 570.592219][T14406] name failslab, interval 1, probability 0, space 0, times 0 [ 570.645373][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.1.1801 Tainted: G U L syzkaller #0 PREEMPT(full) [ 570.645432][T14406] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 570.645445][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 570.645464][T14406] Call Trace: [ 570.645475][T14406] [ 570.645487][T14406] dump_stack_lvl+0x16c/0x1f0 [ 570.645545][T14406] should_fail_ex+0x512/0x640 [ 570.645585][T14406] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 570.645632][T14406] should_failslab+0xc2/0x120 [ 570.645683][T14406] kmem_cache_alloc_node_noprof+0x86/0x800 [ 570.645726][T14406] ? __alloc_skb+0x156/0x410 [ 570.645774][T14406] ? __alloc_skb+0x156/0x410 [ 570.645812][T14406] __alloc_skb+0x156/0x410 [ 570.645849][T14406] ? __alloc_skb+0x35d/0x410 [ 570.645888][T14406] ? __pfx___alloc_skb+0x10/0x10 [ 570.645944][T14406] vhci_write+0xc1/0x480 [ 570.645980][T14406] vfs_write+0x7d3/0x11d0 [ 570.646030][T14406] ? __pfx_vhci_write+0x10/0x10 [ 570.646067][T14406] ? __pfx_vfs_write+0x10/0x10 [ 570.646111][T14406] ? find_held_lock+0x2b/0x80 [ 570.646195][T14406] ksys_write+0x12a/0x250 [ 570.646244][T14406] ? __pfx_ksys_write+0x10/0x10 [ 570.646305][T14406] do_syscall_64+0xcd/0xf80 [ 570.646340][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.646373][T14406] RIP: 0033:0x7fd33af8f7c9 [ 570.646399][T14406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.646431][T14406] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.646462][T14406] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 570.646483][T14406] RDX: 00000000000002d9 RSI: 0000000000000000 RDI: 00000000000000ca [ 570.646503][T14406] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 570.646522][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.646542][T14406] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 570.646586][T14406] [ 570.911461][T14412] netlink: 'syz.3.1802': attribute type 2 has an invalid length. [ 570.919440][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 571.012673][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 571.052823][ T31] audit: type=1800 audit(2147483802.428:26): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1803" name="features" dev="configfs" ino=59011 res=0 errno=0 [ 571.099980][T14417] netlink: 'syz.1.1803': attribute type 4 has an invalid length. [ 572.544539][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.551356][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.074864][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 573.708388][T14485] zswap: compressor not available [ 574.568386][T14519] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 574.598374][T14519] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 574.668262][T14519] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 574.683772][T14519] page_type: f5(slab) [ 574.728408][T14519] raw: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 574.835363][T14519] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 574.868797][T14519] head: 00fff00000000040 ffff88813ff27140 dead000000000100 dead000000000122 [ 574.912973][T14519] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 574.942664][T14519] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 574.966916][T14519] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 575.014817][T14519] page dumped because: unmovable page [ 575.037866][T14519] page_owner tracks the page as allocated [ 575.070273][T14519] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5300, tgid 5300 (udevd), ts 51575468248, free_ts 51503120305 [ 575.133146][T14519] post_alloc_hook+0x1af/0x220 [ 575.153651][T14519] get_page_from_freelist+0xd0b/0x31a0 [ 575.178203][T14519] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 575.224556][T14519] alloc_pages_mpol+0x1fb/0x550 [ 575.229500][T14519] new_slab+0x2c3/0x430 [ 575.268631][T14519] ___slab_alloc+0xe18/0x1c90 [ 575.293130][T14519] __slab_alloc.constprop.0+0x63/0x110 [ 575.303473][T14519] __kmalloc_noprof+0x4fc/0x910 [ 575.308414][T14519] tomoyo_realpath_from_path+0xc2/0x6e0 [ 575.352820][T14519] tomoyo_realpath_nofollow+0xdb/0xf0 [ 575.358312][T14519] tomoyo_find_next_domain+0x2a8/0x20b0 [ 575.369477][T14519] tomoyo_bprm_check_security+0x12d/0x1d0 [ 575.387215][T14519] security_bprm_check+0x1b9/0x1e0 [ 575.403115][T14519] bprm_execve+0x81e/0x1620 [ 575.413219][T14519] do_execveat_common.isra.0+0x4a5/0x610 [ 575.423268][T14519] __x64_sys_execve+0x8e/0xb0 [ 575.427992][T14519] page last free pid 5212 tgid 5212 stack trace: [ 575.466118][T14519] __free_frozen_pages+0x7df/0x1170 [ 575.471372][T14519] __put_partials+0x130/0x170 [ 575.503818][T14519] qlist_free_all+0x4c/0xf0 [ 575.508399][T14519] kasan_quarantine_reduce+0x195/0x1e0 [ 575.524295][T14519] __kasan_slab_alloc+0x69/0x90 [ 575.542365][T14519] kmem_cache_alloc_noprof+0x25e/0x770 [ 575.548175][T14519] getname_flags.part.0+0x4c/0x550 [ 575.583007][T14519] getname_flags+0x93/0xf0 [ 575.587525][T14519] do_readlinkat+0xb4/0x3a0 [ 575.593921][T14519] __x64_sys_readlink+0x78/0xc0 [ 575.598846][T14519] do_syscall_64+0xcd/0xf80 [ 575.652776][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.251448][T14556] net_ratelimit: 66 callbacks suppressed [ 576.251469][T14556] openvswitch: netlink: Duplicate or invalid key (type 0). [ 576.614306][T14544] ptp ptp0: only physical clock in use now [ 579.516319][T14598] zswap: compressor not available [ 580.086378][T14581] kexec: Could not allocate control_code_buffer [ 582.077883][T14645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 582.362691][T14650] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1861'. [ 582.538027][T14658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1864'. [ 582.558194][T14659] FAULT_INJECTION: forcing a failure. [ 582.558194][T14659] name failslab, interval 1, probability 0, space 0, times 0 [ 582.667518][T14659] CPU: 1 UID: 0 PID: 14659 Comm: syz.1.1863 Tainted: G U L syzkaller #0 PREEMPT(full) [ 582.667572][T14659] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 582.667584][T14659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.667604][T14659] Call Trace: [ 582.667614][T14659] [ 582.667626][T14659] dump_stack_lvl+0x16c/0x1f0 [ 582.667693][T14659] should_fail_ex+0x512/0x640 [ 582.667731][T14659] ? kmem_cache_alloc_noprof+0x62/0x770 [ 582.667777][T14659] should_failslab+0xc2/0x120 [ 582.667827][T14659] kmem_cache_alloc_noprof+0x83/0x770 [ 582.667866][T14659] ? alloc_uid+0x13d/0x4c0 [ 582.667920][T14659] ? alloc_uid+0x13d/0x4c0 [ 582.667964][T14659] alloc_uid+0x13d/0x4c0 [ 582.668012][T14659] ? __pfx_alloc_uid+0x10/0x10 [ 582.668061][T14659] ? bpf_lsm_capable+0x9/0x10 [ 582.668104][T14659] ? security_capable+0x7e/0x260 [ 582.668141][T14659] __sys_setuid+0x1cc/0x440 [ 582.668185][T14659] do_syscall_64+0xcd/0xf80 [ 582.668218][T14659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.668250][T14659] RIP: 0033:0x7fd33af8f7c9 [ 582.668275][T14659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.668306][T14659] RSP: 002b:00007fd33be68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 582.668378][T14659] RAX: ffffffffffffffda RBX: 00007fd33b1e6090 RCX: 00007fd33af8f7c9 [ 582.668400][T14659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 582.668421][T14659] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 582.668441][T14659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.668460][T14659] R13: 00007fd33b1e6128 R14: 00007fd33b1e6090 R15: 00007ffc2183ac48 [ 582.668505][T14659] [ 583.953476][T14672] zswap: compressor not available [ 584.517789][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 586.563947][T14656] kexec: Could not allocate control_code_buffer [ 586.619164][T14722] random: crng reseeded on system resumption [ 587.201381][T14729] zswap: compressor not available [ 588.816295][T14727] kexec: Could not allocate control_code_buffer [ 588.864074][ T5841] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 590.331398][T14771] KVM: debugfs: duplicate directory 14771-4 [ 590.500405][T14789] hub 1-0:1.0: USB hub found [ 590.562533][T14789] hub 1-0:1.0: 1 port detected [ 591.143916][T14808] FAULT_INJECTION: forcing a failure. [ 591.143916][T14808] name failslab, interval 1, probability 0, space 0, times 0 [ 591.236395][T14808] CPU: 1 UID: 0 PID: 14808 Comm: syz.0.1898 Tainted: G U L syzkaller #0 PREEMPT(full) [ 591.236448][T14808] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 591.236460][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.236478][T14808] Call Trace: [ 591.236489][T14808] [ 591.236500][T14808] dump_stack_lvl+0x16c/0x1f0 [ 591.236559][T14808] should_fail_ex+0x512/0x640 [ 591.236597][T14808] ? kmem_cache_alloc_noprof+0x62/0x770 [ 591.236642][T14808] should_failslab+0xc2/0x120 [ 591.236692][T14808] kmem_cache_alloc_noprof+0x83/0x770 [ 591.236731][T14808] ? prepare_creds+0x2c/0x940 [ 591.236775][T14808] ? prepare_creds+0x2c/0x940 [ 591.236811][T14808] prepare_creds+0x2c/0x940 [ 591.236851][T14808] __sys_setuid+0x9a/0x440 [ 591.236895][T14808] do_syscall_64+0xcd/0xf80 [ 591.236929][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.236960][T14808] RIP: 0033:0x7ff85758f7c9 [ 591.236986][T14808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.237024][T14808] RSP: 002b:00007ff85848b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 591.237054][T14808] RAX: ffffffffffffffda RBX: 00007ff8577e6090 RCX: 00007ff85758f7c9 [ 591.237075][T14808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 591.237093][T14808] RBP: 00007ff857613f91 R08: 0000000000000000 R09: 0000000000000000 [ 591.237111][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.237128][T14808] R13: 00007ff8577e6128 R14: 00007ff8577e6090 R15: 00007ffe381b0fd8 [ 591.237170][T14808] [ 592.160312][T14821] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 592.762017][T14830] netlink: 'syz.1.1904': attribute type 2 has an invalid length. [ 593.135779][T14841] bridge0: port 3(veth1_macvtap) entered blocking state [ 593.145107][T14841] bridge0: port 3(veth1_macvtap) entered disabled state [ 593.187536][T14841] veth1_macvtap: entered allmulticast mode [ 593.196651][T14841] veth1_macvtap: left allmulticast mode [ 596.581813][T14915] zswap: compressor not available [ 597.862880][T14332] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 598.070709][T14951] FAULT_INJECTION: forcing a failure. [ 598.070709][T14951] name failslab, interval 1, probability 0, space 0, times 0 [ 598.106148][T14951] CPU: 0 UID: 0 PID: 14951 Comm: syz.1.1930 Tainted: G U L syzkaller #0 PREEMPT(full) [ 598.106205][T14951] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 598.106217][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.106235][T14951] Call Trace: [ 598.106245][T14951] [ 598.106256][T14951] dump_stack_lvl+0x16c/0x1f0 [ 598.106330][T14951] should_fail_ex+0x512/0x640 [ 598.106370][T14951] ? __kmalloc_noprof+0xca/0x910 [ 598.106411][T14951] should_failslab+0xc2/0x120 [ 598.106464][T14951] __kmalloc_noprof+0xeb/0x910 [ 598.106501][T14951] ? sk_prot_alloc+0x1a8/0x2a0 [ 598.106537][T14951] ? sk_prot_alloc+0x1a8/0x2a0 [ 598.106564][T14951] sk_prot_alloc+0x1a8/0x2a0 [ 598.106600][T14951] sk_alloc+0x36/0xe30 [ 598.106644][T14951] __netlink_create+0x5e/0x2c0 [ 598.106684][T14951] ? __wake_up+0x3f/0x60 [ 598.106734][T14951] netlink_create+0x39e/0x620 [ 598.106778][T14951] ? __pfx_genl_bind+0x10/0x10 [ 598.106807][T14951] ? __pfx_genl_unbind+0x10/0x10 [ 598.106834][T14951] ? __pfx_genl_release+0x10/0x10 [ 598.106871][T14951] __sock_create+0x339/0x8a0 [ 598.106912][T14951] __sys_socket+0x14d/0x260 [ 598.106944][T14951] ? __x64_sys_openat+0x174/0x210 [ 598.106982][T14951] ? __pfx___sys_socket+0x10/0x10 [ 598.107018][T14951] ? xfd_validate_state+0x61/0x180 [ 598.107057][T14951] __x64_sys_socket+0x72/0xb0 [ 598.107090][T14951] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.107121][T14951] do_syscall_64+0xcd/0xf80 [ 598.107155][T14951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.107188][T14951] RIP: 0033:0x7fd33af8f7c9 [ 598.107214][T14951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.107247][T14951] RSP: 002b:00007fd33be89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 598.107278][T14951] RAX: ffffffffffffffda RBX: 00007fd33b1e5fa0 RCX: 00007fd33af8f7c9 [ 598.107300][T14951] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 598.107343][T14951] RBP: 00007fd33b013f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.107363][T14951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.107383][T14951] R13: 00007fd33b1e6038 R14: 00007fd33b1e5fa0 R15: 00007ffc2183ac48 [ 598.107428][T14951] [ 599.715429][T14979] zswap: compressor not available [ 600.587213][ T31] audit: type=1800 audit(2147483832.112:27): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1944" name="dbroot" dev="configfs" ino=63405 res=0 errno=0 [ 600.881050][T15014] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1946'. [ 600.939520][T15017] cgroup: fork rejected by pids controller in /syz2 [ 603.995846][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 606.419440][T15180] zswap: compressor û not available [ 609.691578][T14996] block nbd8: shutting down sockets [ 610.207043][T15223] ================================================================== [ 610.207064][T15223] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 610.207104][T15223] Read of size 256 at addr ffff88805c04a3c0 by task syz.2.1973/15223 [ 610.207127][T15223] [ 610.207143][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.2.1973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.207182][T15223] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.207192][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.207209][T15223] Call Trace: [ 610.207217][T15223] [ 610.207226][T15223] dump_stack_lvl+0x116/0x1f0 [ 610.207271][T15223] print_report+0xcd/0x630 [ 610.207310][T15223] ? __virt_addr_valid+0x81/0x610 [ 610.207352][T15223] ? __phys_addr+0xe8/0x180 [ 610.207393][T15223] ? fbcon_prepare_logo+0xa03/0xc70 [ 610.207422][T15223] kasan_report+0xe0/0x110 [ 610.207461][T15223] ? fbcon_prepare_logo+0xa03/0xc70 [ 610.207501][T15223] kasan_check_range+0x100/0x1b0 [ 610.207537][T15223] __asan_memcpy+0x23/0x60 [ 610.207570][T15223] fbcon_prepare_logo+0xa03/0xc70 [ 610.207607][T15223] fbcon_init+0xda0/0x1930 [ 610.207637][T15223] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 610.207673][T15223] visual_init+0x320/0x620 [ 610.207705][T15223] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 610.207748][T15223] store_bind+0x61d/0x760 [ 610.207788][T15223] ? sysfs_file_kobj+0xe4/0x290 [ 610.207815][T15223] ? __pfx_store_bind+0x10/0x10 [ 610.207851][T15223] dev_attr_store+0x58/0x80 [ 610.207887][T15223] ? __pfx_dev_attr_store+0x10/0x10 [ 610.207924][T15223] sysfs_kf_write+0xf2/0x150 [ 610.207950][T15223] kernfs_fop_write_iter+0x3af/0x570 [ 610.207989][T15223] ? __pfx_sysfs_kf_write+0x10/0x10 [ 610.208017][T15223] vfs_write+0x7d3/0x11d0 [ 610.208056][T15223] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 610.208098][T15223] ? __pfx_vfs_write+0x10/0x10 [ 610.208148][T15223] ksys_write+0x12a/0x250 [ 610.208185][T15223] ? __pfx_ksys_write+0x10/0x10 [ 610.208228][T15223] do_syscall_64+0xcd/0xf80 [ 610.208254][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.208282][T15223] RIP: 0033:0x7ff7f818f7c9 [ 610.208303][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.208331][T15223] RSP: 002b:00007ff7f8fba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.208356][T15223] RAX: ffffffffffffffda RBX: 00007ff7f83e6180 RCX: 00007ff7f818f7c9 [ 610.208374][T15223] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.208390][T15223] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.208407][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.208423][T15223] R13: 00007ff7f83e6218 R14: 00007ff7f83e6180 R15: 00007fff36d6e9c8 [ 610.208450][T15223] [ 610.208459][T15223] [ 610.208465][T15223] Allocated by task 15178: [ 610.208478][T15223] kasan_save_stack+0x33/0x60 [ 610.208514][T15223] kasan_save_track+0x14/0x30 [ 610.208557][T15223] __kasan_slab_alloc+0x89/0x90 [ 610.208594][T15223] kmem_cache_alloc_noprof+0x25e/0x770 [ 610.208624][T15223] skb_clone+0x190/0x3f0 [ 610.208658][T15223] packet_rcv+0x610/0x17a0 [ 610.208688][T15223] deliver_skb+0x1ae/0x260 [ 610.208712][T15223] dev_queue_xmit_nit+0x5ea/0xac0 [ 610.208749][T15223] dev_hard_start_xmit+0x56b/0x6e0 [ 610.208778][T15223] __dev_queue_xmit+0x6d7/0x46c0 [ 610.208819][T15223] netlink_deliver_tap+0xa87/0xd30 [ 610.208854][T15223] netlink_unicast+0x64c/0x870 [ 610.208889][T15223] netlink_sendmsg+0x8c8/0xdd0 [ 610.208925][T15223] __sys_sendto+0x4a3/0x520 [ 610.208952][T15223] __x64_sys_sendto+0xe0/0x1c0 [ 610.208980][T15223] do_syscall_64+0xcd/0xf80 [ 610.208999][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.209021][T15223] [ 610.209026][T15223] Freed by task 15174: [ 610.209037][T15223] kasan_save_stack+0x33/0x60 [ 610.209067][T15223] kasan_save_track+0x14/0x30 [ 610.209098][T15223] kasan_save_free_info+0x3b/0x60 [ 610.209126][T15223] __kasan_slab_free+0x5f/0x80 [ 610.209161][T15223] kmem_cache_free+0x2d8/0x770 [ 610.209212][T15223] kfree_skbmem+0x1a4/0x1f0 [ 610.209237][T15223] sk_skb_reason_drop+0x136/0x1a0 [ 610.209275][T15223] skb_queue_purge_reason+0x2b0/0x420 [ 610.209318][T15223] packet_release+0x7fb/0xd50 [ 610.209351][T15223] __sock_release+0xb3/0x270 [ 610.209391][T15223] sock_close+0x1c/0x30 [ 610.209430][T15223] __fput+0x402/0xb70 [ 610.209454][T15223] task_work_run+0x150/0x240 [ 610.209484][T15223] exit_to_user_mode_loop+0xfb/0x540 [ 610.209517][T15223] do_syscall_64+0x4ee/0xf80 [ 610.209553][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.209581][T15223] [ 610.209588][T15223] The buggy address belongs to the object at ffff88805c04a3c0 [ 610.209588][T15223] which belongs to the cache skbuff_head_cache of size 240 [ 610.209613][T15223] The buggy address is located 0 bytes inside of [ 610.209613][T15223] freed 240-byte region [ffff88805c04a3c0, ffff88805c04a4b0) [ 610.209644][T15223] [ 610.209651][T15223] The buggy address belongs to the physical page: [ 610.209664][T15223] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c04a [ 610.209691][T15223] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 610.209715][T15223] page_type: f5(slab) [ 610.209739][T15223] raw: 00fff00000000000 ffff888140eac8c0 dead000000000122 0000000000000000 [ 610.209767][T15223] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 610.209783][T15223] page dumped because: kasan: bad access detected [ 610.209798][T15223] page_owner tracks the page as allocated [ 610.209808][T15223] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15178, tgid 15174 (syz.0.1965), ts 606711413384, free_ts 606627777007 [ 610.209856][T15223] post_alloc_hook+0x1af/0x220 [ 610.209887][T15223] get_page_from_freelist+0xd0b/0x31a0 [ 610.209922][T15223] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 610.209957][T15223] alloc_pages_mpol+0x1fb/0x550 [ 610.210000][T15223] new_slab+0x2c3/0x430 [ 610.210028][T15223] ___slab_alloc+0xe18/0x1c90 [ 610.210055][T15223] __slab_alloc.constprop.0+0x63/0x110 [ 610.210085][T15223] kmem_cache_alloc_noprof+0x44d/0x770 [ 610.210119][T15223] skb_clone+0x190/0x3f0 [ 610.210156][T15223] packet_rcv+0x610/0x17a0 [ 610.210189][T15223] deliver_skb+0x1ae/0x260 [ 610.210217][T15223] dev_queue_xmit_nit+0x5ea/0xac0 [ 610.210257][T15223] dev_hard_start_xmit+0x56b/0x6e0 [ 610.210289][T15223] __dev_queue_xmit+0x6d7/0x46c0 [ 610.210320][T15223] netlink_deliver_tap+0xa87/0xd30 [ 610.210361][T15223] netlink_unicast+0x64c/0x870 [ 610.210403][T15223] page last free pid 23 tgid 23 stack trace: [ 610.210418][T15223] __free_frozen_pages+0x7df/0x1170 [ 610.210444][T15223] tlb_remove_table_rcu+0x2b2/0x390 [ 610.210470][T15223] rcu_core+0x79c/0x15f0 [ 610.210504][T15223] handle_softirqs+0x219/0x950 [ 610.210551][T15223] run_ksoftirqd+0x3a/0x60 [ 610.210588][T15223] smpboot_thread_fn+0x3f7/0xae0 [ 610.210631][T15223] kthread+0x3c5/0x780 [ 610.210657][T15223] ret_from_fork+0x983/0xb10 [ 610.210684][T15223] ret_from_fork_asm+0x1a/0x30 [ 610.210726][T15223] [ 610.210734][T15223] Memory state around the buggy address: [ 610.210749][T15223] ffff88805c04a280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.210771][T15223] ffff88805c04a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 610.210792][T15223] >ffff88805c04a380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 610.210808][T15223] ^ [ 610.210824][T15223] ffff88805c04a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 610.210846][T15223] ffff88805c04a480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 610.210863][T15223] ================================================================== [ 610.253935][T15223] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 610.253967][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.2.1973 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.254015][T15223] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.254028][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.254048][T15223] Call Trace: [ 610.254058][T15223] [ 610.254070][T15223] dump_stack_lvl+0x3d/0x1f0 [ 610.254125][T15223] vpanic+0x640/0x6f0 [ 610.254158][T15223] panic+0xca/0xd0 [ 610.254187][T15223] ? __pfx_panic+0x10/0x10 [ 610.254219][T15223] ? fbcon_prepare_logo+0xa03/0xc70 [ 610.254269][T15223] ? preempt_schedule_common+0x44/0xc0 [ 610.254318][T15223] ? preempt_schedule_thunk+0x16/0x30 [ 610.254347][T15223] ? check_panic_on_warn+0x1f/0xb0 [ 610.254379][T15223] check_panic_on_warn+0xab/0xb0 [ 610.254410][T15223] end_report+0x107/0x160 [ 610.254454][T15223] kasan_report+0xee/0x110 [ 610.254518][T15223] ? fbcon_prepare_logo+0xa03/0xc70 [ 610.254566][T15223] kasan_check_range+0x100/0x1b0 [ 610.254600][T15223] __asan_memcpy+0x23/0x60 [ 610.254640][T15223] fbcon_prepare_logo+0xa03/0xc70 [ 610.254686][T15223] fbcon_init+0xda0/0x1930 [ 610.254722][T15223] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 610.254834][T15223] visual_init+0x320/0x620 [ 610.254903][T15223] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 610.254950][T15223] store_bind+0x61d/0x760 [ 610.256085][T15223] ? sysfs_file_kobj+0xe4/0x290 [ 610.256406][T15223] ? __pfx_store_bind+0x10/0x10 [ 610.256448][T15223] dev_attr_store+0x58/0x80 [ 610.256492][T15223] ? __pfx_dev_attr_store+0x10/0x10 [ 610.256543][T15223] sysfs_kf_write+0xf2/0x150 [ 610.256577][T15223] kernfs_fop_write_iter+0x3af/0x570 [ 610.256624][T15223] ? __pfx_sysfs_kf_write+0x10/0x10 [ 610.256658][T15223] vfs_write+0x7d3/0x11d0 [ 610.256704][T15223] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 610.256755][T15223] ? __pfx_vfs_write+0x10/0x10 [ 610.256814][T15223] ksys_write+0x12a/0x250 [ 610.256859][T15223] ? __pfx_ksys_write+0x10/0x10 [ 610.256909][T15223] do_syscall_64+0xcd/0xf80 [ 610.256941][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.256973][T15223] RIP: 0033:0x7ff7f818f7c9 [ 610.256998][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.257030][T15223] RSP: 002b:00007ff7f8fba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.257061][T15223] RAX: ffffffffffffffda RBX: 00007ff7f83e6180 RCX: 00007ff7f818f7c9 [ 610.257082][T15223] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.257102][T15223] RBP: 00007ff7f8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.257122][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.257141][T15223] R13: 00007ff7f83e6218 R14: 00007ff7f83e6180 R15: 00007fff36d6e9c8 [ 610.257175][T15223] [ 610.257779][T15223] Kernel Offset: disabled