last executing test programs: 9.570047582s ago: executing program 1 (id=642): openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$auto_I2C_SLAVE(r0, 0x703, &(0x7f0000000040)="5cfb6988ee4586e319386e") 9.403284171s ago: executing program 1 (id=643): ioctl$auto_SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mount$auto(0x0, 0x0, 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sysfs$auto(0x2, 0x10000000000002d, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) write$auto(r0, &(0x7f0000000000)='P^\x00', 0x8) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) setfsuid$auto(0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000009c0)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d4}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x0, 0x0) 6.996579898s ago: executing program 2 (id=647): prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x48ec, 0x7fffffff, 0x5) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x121d00, 0x0) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r1, 0xfb8, 0xc, r0, @relative_id=0x7, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r2, &(0x7f00000000c0)='veth1\xe7#\x16T+\xee\x03\xc4\x1c\a\xdfa\x8b[,>\xa9\xd2\xef\xb0\xfb{b^\xef\x93\x97\x06H\xcb\xe7g\xea\x9dE\xc0\xdc\x1e\x02`\x00Z\x9d|\x8f\x92\xe09\xe1hBJL\x1e\"F\xc4\xd0z\xac5+I\xfbb\x9d\x97.]\x95H\f&_\x8d1\x83\x90,\x01\x8ab\xe6P\xb8J\xc4\xc3&\xe3\x05\x7fl\x18\xf40\x18x\x88\x86\xe6{\xdb\x1c\xfef\xf1x\xc9vKq\xd4/N&\x1f\xae\xa8\x9b\xb2\xdbZ\xed\x16a}\xa9gj\xc2mt\x87&\xf7Z\xf1u\xf0\x14\x00\x00\x00\x00\x00\x00\x00i\xb9\xc8\xc6V5]\x06/\xb1`\xd9X\xe5\xfc$\a\xf3S\xbb\xe99\xf1PZ\x81\x8f\xfc\xa4w\\\x84B\x03+\xa2\xe1\xb4\x9dv\xe1\xd7\b9\xc3.\x96I\x98\x00\x00\x00\x00\x00', 0x200000000004, 0xfc) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"00fffb00", 0x0, 0x6, 0x2, 0x10009b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f000000006041", "70d9a96021a70000800100", "0d00a9827abd9c5c00001600"]}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x8a603, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000340)='%]{\fZ', 0xffffffff) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) futex$auto(&(0x7f0000000080)=0x1, 0x109, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) 6.440358924s ago: executing program 1 (id=648): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/119, 0x77) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x21, 0x2, 0xa) write$auto(0x3, 0x0, 0x100082) shmget$auto(0x0, 0x200000005, 0x7d) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r3, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyud\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8001, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) read$auto(r4, 0x0, 0x20) r6 = prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x14, r6, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r6, &(0x7f0000000340)={{&(0x7f0000001480)="fe5b2d8db432cb5a35c4154613e8b597098c1e9df23abf601321936169a4041fe5f10be4abf9002eb2e691a89374249f802c975635e5c54c80ef15efdc731526901f703c3005aa3aeb8ade3eecfb686884f11a12f3a0a722cb8b03269aa95d7c2f179e066f34ed7ef4b51da252095db4817a81d1539230bd12ddff40a2816d7c6af7a53ff07b1d84d61117b2aa83bf9f5dd378d266f8ab109974431f219e7a166e0e9b3c0535b0bdbd5ebfbf1a686fe76ecaffe3306b5c2f", 0xfffffffe, &(0x7f0000000200)={0x0, 0x40000000000007}, 0x1, &(0x7f0000001380)="d8ee39bef928c3ca32f9c1aad3008750535c4327759d007a44ed1ac1da593bc201fcf22dffcb1220bf4cb4cf01142fffc5e3253d4bbf6e351919f43c70f9aa2f1a24dcaadd7f9288dfc957aa715c634bdb873dfbfb55211eda3da55adca66e9bdbc1ee4fada01e76ac4615c998cd3471a6a2208f5ca87ce67137219e5a723b0654b6371febbcf61a1968281d62119d0cce427a032686715f08af04e8f5996fc46119dd3bbc24afab5339d1c81e7519cd1d411290b6b0040d71ac804c9bf4bd5d507daa503a3c", 0x4, 0x1}, 0x1}, 0x6, 0x4) open(0x0, 0x12000, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) socket(0x23, 0x1, 0x30) 5.704749733s ago: executing program 2 (id=650): bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000340)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb3, 0x1, 0x5, 0x4, 0xffffffffffffffff, 0x7, 0xe}, 0x7) mmap$auto(0x0, 0x202000c, 0x0, 0xeb1, 0xfffffffffffffffa, 0x101) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x121040, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) socket(0x2, 0x5, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@bpf_attr_11={0x0, 0xd, 0x1ff, 0x2400, 0xbc, 0x9, 0x1, r0}, 0xcf0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x80000000) r1 = socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x2000401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x9, 0xffffffffffffffff, [0x100, 0x9, 0xfffffffe], {0x6, 0x7, 0x3, 0xe, 0xf, 0x5, 0x1, 0x4, 0xf08a2b3}, {0x0, 0xfc, 0x6, 0x0, 0x0, 0xf89, 0x9, 0x837, 0x8}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x44) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x1, 0x0, 0x8004) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={"8ccd2cd6e8750f217e961c6aea9e196371f415eea721b3ac78f783f627b94db4", 0x9, 0xfffffff9, 0xe3, 0x87, 0x7e}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c000) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) r4 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r5, 0x720, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x105440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000140)={{0x0, 0x1, 0x7f, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf1632f77b1f6de0d679a1798eb127e1e2e9ca6310ea"}) ioctl$auto_USBDEVFS_FORBID_SUSPEND(r4, 0x5521, 0x0) close_range$auto(0x2, 0xa, 0x0) 5.429103436s ago: executing program 0 (id=651): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x10040026f34, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r2, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) 5.276005751s ago: executing program 1 (id=652): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x10040026f34, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jbd2/sda1-8/info\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) read$auto_sco_debugfs_fops_(r2, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) 5.259013535s ago: executing program 2 (id=653): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = getpid() r1 = gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r2, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x1, 0x1, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x80007, 0x7, 0x6, r2}, 0xf) rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x8) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, &(0x7f0000000040)='./file0\x00') io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) bpf$auto(0x8, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x1, 0x2}, 0x40) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.168205634s ago: executing program 3 (id=654): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="0a05bd7000f82fcf", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5) socket(0x11, 0x5, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x10be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x306, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) 4.690544978s ago: executing program 0 (id=655): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r1 = socket(0xa, 0x1, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0xc8002, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(r1, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x23, 0x0, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) 4.569553655s ago: executing program 3 (id=656): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x641, 0x0) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2a) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r0, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) getsockopt$auto_SO_SNDBUF(r0, 0x1, 0x7, &(0x7f0000000040)=']]*!\x00', &(0x7f0000000100)) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) flock$auto(0xffffffffffffffff, 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x104840, 0x78e22799f4a46f96) flock$auto(r1, 0x2) ioctl$auto(0xffffffffffffffff, 0x64ca, 0x1e2) getcwd$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 4.388601348s ago: executing program 1 (id=657): close_range$auto(0x2, 0x8, 0x0) r0 = syz_clone(0x89000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xa89, r0, 0x80000001, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = socket(0x6, 0x5, 0x4000) getsockopt$auto(r2, 0x114, 0x2716, 0xfffffffffffffffc, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x4e20, @loopback=0xac14140a}, 0x55) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, 0xe) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mptcp/blackhole_timeout\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x0) ioctl$auto_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) io_uring_setup$auto(0x92f1, &(0x7f0000000140)={0x2, 0x5, 0x6, 0x400, 0x5, 0x7, 0xffffffffffffffff, [0x3, 0x8, 0x4], {0x10001, 0x8, 0x205e660c, 0xd, 0x64d4, 0xb4e0, 0x1000, 0x8, 0x80000001}, {0x2, 0x2, 0x2, 0x0, 0x6, 0x5, 0x4, 0x5, 0x7}}) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = wait4$auto(0xffffffffffffffff, &(0x7f00000002c0)=0x5, 0x0, 0x0) r5 = socket(0x2, 0x3, 0xa) sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, 0x0, 0x20000854) syz_clone(0x1a04000, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x0) mlockall$auto(0x7) sendmsg$auto_TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4000) poll$auto(&(0x7f0000000000)={r1, 0xab78, 0xc616}, 0x80000001, 0x6) fcntl$auto(0xffffffffffffffff, 0x24, 0x0) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r3, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000300)=ANY=[@ANYBLOB="64120000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB="8c010980ae00dc800800ba00", @ANYRES32=r3, @ANYBLOB="0400f5802a009b002f70726f632f737f732f6e65742f6d707463702f626c61636b076f6c655f74696d656f75740000000400840008008d00", @ANYRES32=0x0, @ANYBLOB="0400168004003080fdb0ba0e27aad2c22e8c9360f2a389b9e7d06f2c3457c93311e81ea69a037f46618c04a2eb32b51a50db47f4635ffa3d9825861dc5a734017186114ffe34da42913b9c8dec44de621d52e7cd6d167d8401000c00c3000300000000000000000014004f002001000000000000000000000000000008002700", @ANYRES32=r4, @ANYBLOB="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"], 0x1264}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 4.139954167s ago: executing program 2 (id=658): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) r2 = socket(0xa, 0x2, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x108, 0x0, 0x6c, 0x697a}, 0xed71390}, 0x9a6, 0xff00) syz_genetlink_get_family_id$auto_net_dm(0x0, r1) close_range$auto(0x2, 0x8, 0x0) 3.988501978s ago: executing program 0 (id=659): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r1 = socket(0xa, 0x1, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0xc8002, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(r1, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x23, 0x0, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) 3.521332899s ago: executing program 0 (id=660): mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8003) r0 = socket(0x10, 0x2, 0x0) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x80, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000840) 3.416497685s ago: executing program 3 (id=661): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/stat\x00', 0x400, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/119, 0x77) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x21, 0x2, 0xa) write$auto(0x3, 0x0, 0x100082) shmget$auto(0x0, 0x200000005, 0x7d) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00'}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r3, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyud\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu8\x00', 0x8001, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) read$auto(r4, 0x0, 0x20) r6 = prctl$auto(0xbb, 0x1, 0x0, 0x5, 0x7) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r6, &(0x7f0000000340)={{&(0x7f0000001480)="fe5b2d8db432cb5a35c4154613e8b597098c1e9df23abf601321936169a4041fe5f10be4abf9002eb2e691a89374249f802c975635e5c54c80ef15efdc731526901f703c3005aa3aeb8ade3eecfb686884f11a12f3a0a722cb8b03269aa95d7c2f179e066f34ed7ef4b51da252095db4817a81d1539230bd12ddff40a2816d7c6af7a53ff07b1d84d61117b2aa83bf9f5dd378d266f8ab109974431f219e7a166e0e9b3c0535b0bdbd5ebfbf1a686fe76ecaffe3306b5c2f", 0xfffffffe, &(0x7f0000000200)={0x0, 0x40000000000007}, 0x1, &(0x7f0000001380)="d8ee39bef928c3ca32f9c1aad3008750535c4327759d007a44ed1ac1da593bc201fcf22dffcb1220bf4cb4cf01142fffc5e3253d4bbf6e351919f43c70f9aa2f1a24dcaadd7f9288dfc957aa715c634bdb873dfbfb55211eda3da55adca66e9bdbc1ee4fada01e76ac4615c998cd3471a6a2208f5ca87ce67137219e5a723b0654b6371febbcf61a1968281d62119d0cce427a032686715f08af04e8f5996fc46119dd3bbc24afab5339d1c81e7519cd1d411290b6b0040d71ac804c9bf4bd5d507daa503a3c", 0x4, 0x1}, 0x1}, 0x6, 0x4) open(0x0, 0x12000, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) socket(0x23, 0x1, 0x30) 3.296923614s ago: executing program 0 (id=662): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = getpid() r1 = gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x1, 0x1, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x80007, 0x7, 0x6, r2}, 0xf) rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x8) socket(0x18, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, &(0x7f0000000040)='./file0\x00') io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) bpf$auto(0x8, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x1, 0x2}, 0x40) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) 2.521712771s ago: executing program 3 (id=663): mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2000000000000021, 0x2, 0x10000000000002) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) r0 = getpid() r1 = gettid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x420800, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x1, 0x1, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x80007, 0x7, 0x6}, 0xf) rt_tgsigqueueinfo$auto(r0, r1, 0x1f, &(0x7f0000000400)={@siginfo_0_0={0x7ff, 0x101, 0x3, @_sigfault={0x0, @_addr_bnd={"f38c6c13db093f74", 0x0, 0x0}}}}) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x0, 0x8) socket(0x18, 0x3, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(0x0, &(0x7f0000000040)='./file0\x00') io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) bpf$auto(0x8, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0x8, 0xffffffffffffffff, @relative_id=0x1, 0x2}, 0x40) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) 2.214811773s ago: executing program 0 (id=664): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) mmap$auto(0x0, 0x20009, 0x5, 0xeb1, r0, 0x0) keyctl$auto_KEYCTL_DH_COMPUTE(0x17, 0x103, 0x1, 0xb, 0x200000000004) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x2c402, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) sendfile$auto(r3, r2, 0x0, 0x10000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) io_uring_setup$auto(0x59, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x10100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x100, 0x0, 0x1, 0x0, 0x9, 0x15f4da07, 0x6, 0xc, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) 1.986031101s ago: executing program 2 (id=665): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) setsockopt$auto(0x3, 0x82, 0x1e, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x80, 0x59d8, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/41, 0x29) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x3f, 0x808, 0x1, 0x1}) mmap$auto(0x7, 0x2020009, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x8000) r2 = socket(0xb, 0xa, 0x4) setsockopt$auto(r2, 0x107, 0x2, 0x0, 0x28) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a", 0x18) prctl$auto_PR_GET_SECCOMP(0x15, 0xe, 0x9, 0x6, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8200, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.001722412s ago: executing program 1 (id=666): open(0x0, 0x155001, 0x1b5) pipe$auto(&(0x7f0000000780)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mincore$auto(0x4, 0x8, 0x0) mprotect$auto(0x200000000000, 0x2, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) io_setup$auto(0xffff, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000040)) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1a9f42, 0x0) write$auto(r2, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}|D\xd0j\xdd\xc6\xbb^\xa92\xa9u/', 0x100000002) fstat$auto(r1, &(0x7f0000000000)={0x11, 0x5c0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x59cd, 0x10001, 0x0, 0xfffffffffffffff3, 0x1fffffd, 0x3}) shmctl$auto_SHM_UNLOCK(0x0, 0xc, &(0x7f0000000180)={{0x9, r3, r4, 0xb3a1, 0x6, 0x7, 0x9}, 0xebf, 0x2, 0x7fffffffffffffff, 0x8000000000000000, @inferred, @inferred=0xffffffffffffffff, 0xbc3f, 0x0, &(0x7f00000000c0)="83c8c531129fda3bc65776a788d1d164f802a2a0298ae540a113aa1db6b8a7e828c1583586a5b14e33eaad61fd28c28bd35433cc12b3e42501bfa8a46fd6cbbff42b4b155c5e8324e83cd0", &(0x7f0000000140)="8eb8de61b0828780c3069ef46b0953f5a55697df54a28728"}) ioprio_set$auto(0x2, r5, 0x9) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0xfff, 0x8, 0x40d, 0xffffffffffffffff, 0x5f, 0x7ff}, 0x6f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x15, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 998.078374ms ago: executing program 3 (id=667): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r1 = socket(0xa, 0x1, 0x0) mknod$auto(&(0x7f0000000140)=':,\x00', 0xc3, 0xfffffffa) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0xc8002, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(r1, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) 66.439332ms ago: executing program 2 (id=668): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="0a05bd7000f82fcf", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96", 0x8}, 0x7, 0x0, 0x7, 0xb5) socket(0x11, 0x5, 0x54) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r3, 0xffff, 0x29}, 0x3, 0x7) write$auto(0x1, 0x0, 0x80000000) write$auto(0x1, 0x0, 0x7ffbfffc) munmap$auto(0x7, 0x894) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x122) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), 0xffffffffffffffff) 0s ago: executing program 3 (id=669): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) lseek$auto(0x3, 0x0, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kernel console output (not intermixed with test programs): I grabbed [ 237.913354][ T7339] vivid-007: Hotplug Present: 0x00000000 [ 237.987630][ T7339] vivid-007: RxSense Present: 0x00000000 [ 238.037964][ T7339] vivid-007: EDID Present: 0x00000000 [ 238.095258][ T7339] vivid-007: ================== END STATUS ================== [ 238.141836][ T7340] FAULT_INJECTION: forcing a failure. [ 238.141836][ T7340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 238.226796][ T7340] CPU: 0 UID: 0 PID: 7340 Comm: syz.1.289 Not tainted syzkaller #0 PREEMPT(full) [ 238.226828][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.226850][ T7340] Call Trace: [ 238.226858][ T7340] [ 238.226867][ T7340] dump_stack_lvl+0x100/0x190 [ 238.226897][ T7340] should_fail_ex.cold+0x5/0xa [ 238.226923][ T7340] get_futex_key+0x1d2/0x14f0 [ 238.226965][ T7340] ? __pfx_get_futex_key+0x10/0x10 [ 238.227001][ T7340] ? find_held_lock+0x2b/0x80 [ 238.227028][ T7340] ? futex_wake+0x4ea/0x5e0 [ 238.227061][ T7340] futex_wake+0xf4/0x5e0 [ 238.227092][ T7340] ? __pfx_futex_wake+0x10/0x10 [ 238.227130][ T7340] ? find_held_lock+0x2b/0x80 [ 238.227167][ T7340] do_futex+0x2b2/0x440 [ 238.227191][ T7340] ? __pfx_do_futex+0x10/0x10 [ 238.227221][ T7340] __x64_sys_futex+0x34f/0x4d0 [ 238.227247][ T7340] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 238.227278][ T7340] ? __pfx___x64_sys_futex+0x10/0x10 [ 238.227313][ T7340] do_syscall_64+0x115/0x840 [ 238.227348][ T7340] ? clear_bhb_loop+0x40/0x90 [ 238.227377][ T7340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.227401][ T7340] RIP: 0033:0x7f711ad9de59 [ 238.227421][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.227443][ T7340] RSP: 002b:00007f711bcc50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.227466][ T7340] RAX: ffffffffffffffda RBX: 00007f711b026188 RCX: 00007f711ad9de59 [ 238.227482][ T7340] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f711b02618c [ 238.227496][ T7340] RBP: 00007f711b026180 R08: 0000000000000001 R09: 0000000000000000 [ 238.227511][ T7340] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 238.227525][ T7340] R13: 00007f711b026218 R14: 00007fffbaba77b0 R15: 00007fffbaba7898 [ 238.227555][ T7340] [ 238.726597][ T7339] syz.3.291(7339): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 240.648235][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 240.712218][ T7379] process 'syz.0.298' launched './file0' with NULL argv: empty string added [ 240.743701][ T7369] netlink: 25 bytes leftover after parsing attributes in process `syz.1.297'. [ 243.960019][ T7430] ubi: mtd0 is already attached to ubi0 [ 244.355263][ T7441] FAULT_INJECTION: forcing a failure. [ 244.355263][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 244.423888][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.2.311 Not tainted syzkaller #0 PREEMPT(full) [ 244.423921][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.423936][ T7441] Call Trace: [ 244.423943][ T7441] [ 244.423952][ T7441] dump_stack_lvl+0x100/0x190 [ 244.423983][ T7441] should_fail_ex.cold+0x5/0xa [ 244.424011][ T7441] should_failslab+0xc2/0x120 [ 244.424041][ T7441] __kmalloc_cache_noprof+0x91/0x6c0 [ 244.424080][ T7441] ? kvm_pic_init+0x4f/0x380 [ 244.424111][ T7441] kvm_pic_init+0x4f/0x380 [ 244.424139][ T7441] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 244.424186][ T7441] ? __css_rstat_updated+0x1ce/0x5a0 [ 244.424222][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424256][ T7441] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 244.424298][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424341][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424382][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424422][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424473][ T7441] ? is_bpf_text_address+0x8a/0x1a0 [ 244.424505][ T7441] ? bpf_ksym_find+0x124/0x1c0 [ 244.424528][ T7441] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 244.424561][ T7441] ? is_bpf_text_address+0x94/0x1a0 [ 244.424592][ T7441] ? kernel_text_address+0x8d/0x100 [ 244.424624][ T7441] ? __pfx_widen_string+0x10/0x10 [ 244.424652][ T7441] ? __kernel_text_address+0xd/0x30 [ 244.424684][ T7441] ? unwind_get_return_address+0x59/0xa0 [ 244.424718][ T7441] ? arch_stack_walk+0xa6/0xf0 [ 244.424760][ T7441] ? tomoyo_path_number_perm+0x46d/0x580 [ 244.424788][ T7441] ? stack_trace_save+0x8e/0xc0 [ 244.424817][ T7441] ? __pfx_stack_trace_save+0x10/0x10 [ 244.424847][ T7441] ? stack_depot_save_flags+0x27/0x9d0 [ 244.424881][ T7441] ? __lock_acquire+0x49f/0x1a40 [ 244.424916][ T7441] ? tomoyo_path_number_perm+0x46d/0x580 [ 244.424942][ T7441] ? kasan_save_stack+0x3f/0x50 [ 244.424967][ T7441] ? kasan_save_stack+0x30/0x50 [ 244.424992][ T7441] ? kasan_save_track+0x14/0x30 [ 244.425017][ T7441] ? kasan_save_free_info+0x3b/0x70 [ 244.425056][ T7441] kvm_vm_ioctl+0x1564/0x4030 [ 244.425099][ T7441] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 244.425152][ T7441] ? kasan_quarantine_put+0x104/0x240 [ 244.425183][ T7441] ? lockdep_hardirqs_on+0x78/0x100 [ 244.425220][ T7441] ? find_held_lock+0x2b/0x80 [ 244.425246][ T7441] ? tomoyo_path_number_perm+0x28f/0x580 [ 244.425271][ T7441] ? tomoyo_path_number_perm+0x28f/0x580 [ 244.425302][ T7441] ? tomoyo_path_number_perm+0x188/0x580 [ 244.425330][ T7441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.425358][ T7441] ? __pfx_futex_wait+0x10/0x10 [ 244.425393][ T7441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 244.425427][ T7441] ? do_vfs_ioctl+0x226/0x13e0 [ 244.425459][ T7441] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 244.425497][ T7441] ? find_held_lock+0x2b/0x80 [ 244.425523][ T7441] ? __fget_files+0x215/0x3d0 [ 244.425556][ T7441] ? hook_file_ioctl_common+0x140/0x440 [ 244.425589][ T7441] ? __fget_files+0x21f/0x3d0 [ 244.425627][ T7441] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 244.425661][ T7441] __x64_sys_ioctl+0x18e/0x210 [ 244.425694][ T7441] do_syscall_64+0x115/0x840 [ 244.425730][ T7441] ? clear_bhb_loop+0x40/0x90 [ 244.425759][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.425784][ T7441] RIP: 0033:0x7f6d7819de59 [ 244.425804][ T7441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.425827][ T7441] RSP: 002b:00007f6d7901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.425850][ T7441] RAX: ffffffffffffffda RBX: 00007f6d78425fa0 RCX: 00007f6d7819de59 [ 244.425865][ T7441] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 244.425880][ T7441] RBP: 00007f6d78233e6f R08: 0000000000000000 R09: 0000000000000000 [ 244.425894][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.425909][ T7441] R13: 00007f6d78426038 R14: 00007f6d78425fa0 R15: 00007ffc7bacfc78 [ 244.425939][ T7441] [ 246.264556][ T29] audit: type=1800 audit(1783081353.615:5): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.318" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 246.387821][ T7475] FAULT_INJECTION: forcing a failure. [ 246.387821][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 246.464214][ T7475] CPU: 0 UID: 0 PID: 7475 Comm: syz.1.321 Not tainted syzkaller #0 PREEMPT(full) [ 246.464247][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 246.464262][ T7475] Call Trace: [ 246.464272][ T7475] [ 246.464282][ T7475] dump_stack_lvl+0x100/0x190 [ 246.464312][ T7475] should_fail_ex.cold+0x5/0xa [ 246.464340][ T7475] should_failslab+0xc2/0x120 [ 246.464371][ T7475] __kmalloc_cache_noprof+0x91/0x6c0 [ 246.464411][ T7475] ? kvm_pic_init+0x4f/0x380 [ 246.464442][ T7475] kvm_pic_init+0x4f/0x380 [ 246.464471][ T7475] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 246.464514][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.464549][ T7475] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 246.464592][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.464635][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.464676][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.464716][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.464767][ T7475] ? is_bpf_text_address+0x8a/0x1a0 [ 246.464799][ T7475] ? bpf_ksym_find+0x124/0x1c0 [ 246.464822][ T7475] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 246.464854][ T7475] ? is_bpf_text_address+0x94/0x1a0 [ 246.464885][ T7475] ? kernel_text_address+0x8d/0x100 [ 246.464917][ T7475] ? __pfx_widen_string+0x10/0x10 [ 246.464945][ T7475] ? __kernel_text_address+0xd/0x30 [ 246.464989][ T7475] ? unwind_get_return_address+0x59/0xa0 [ 246.465024][ T7475] ? arch_stack_walk+0xa6/0xf0 [ 246.465063][ T7475] ? tomoyo_path_number_perm+0x46d/0x580 [ 246.465090][ T7475] ? stack_trace_save+0x8e/0xc0 [ 246.465120][ T7475] ? __pfx_stack_trace_save+0x10/0x10 [ 246.465150][ T7475] ? stack_depot_save_flags+0x27/0x9d0 [ 246.465184][ T7475] ? __lock_acquire+0x49f/0x1a40 [ 246.465219][ T7475] ? tomoyo_path_number_perm+0x46d/0x580 [ 246.465244][ T7475] ? kasan_save_stack+0x3f/0x50 [ 246.465269][ T7475] ? kasan_save_stack+0x30/0x50 [ 246.465293][ T7475] ? kasan_save_track+0x14/0x30 [ 246.465318][ T7475] ? kasan_save_free_info+0x3b/0x70 [ 246.465358][ T7475] kvm_vm_ioctl+0x1564/0x4030 [ 246.465401][ T7475] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 246.465454][ T7475] ? kasan_quarantine_put+0x104/0x240 [ 246.465480][ T7475] ? lockdep_hardirqs_on+0x78/0x100 [ 246.465516][ T7475] ? find_held_lock+0x2b/0x80 [ 246.465542][ T7475] ? tomoyo_path_number_perm+0x28f/0x580 [ 246.465567][ T7475] ? tomoyo_path_number_perm+0x28f/0x580 [ 246.465598][ T7475] ? tomoyo_path_number_perm+0x188/0x580 [ 246.465625][ T7475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 246.465652][ T7475] ? __pfx_futex_wait+0x10/0x10 [ 246.465687][ T7475] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.465729][ T7475] ? do_vfs_ioctl+0x226/0x13e0 [ 246.465761][ T7475] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 246.465800][ T7475] ? find_held_lock+0x2b/0x80 [ 246.465826][ T7475] ? __fget_files+0x215/0x3d0 [ 246.465859][ T7475] ? hook_file_ioctl_common+0x140/0x440 [ 246.465892][ T7475] ? __fget_files+0x21f/0x3d0 [ 246.465931][ T7475] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 246.465965][ T7475] __x64_sys_ioctl+0x18e/0x210 [ 246.466004][ T7475] do_syscall_64+0x115/0x840 [ 246.466039][ T7475] ? clear_bhb_loop+0x40/0x90 [ 246.466068][ T7475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.466094][ T7475] RIP: 0033:0x7f711ad9de59 [ 246.466114][ T7475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.466137][ T7475] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.466160][ T7475] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 246.466176][ T7475] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 246.466191][ T7475] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 246.466205][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.466219][ T7475] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 246.466250][ T7475] [ 249.129583][ T7508] FAULT_INJECTION: forcing a failure. [ 249.129583][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 249.142542][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT(full) [ 249.142574][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.142588][ T7508] Call Trace: [ 249.142597][ T7508] [ 249.142607][ T7508] dump_stack_lvl+0x100/0x190 [ 249.142636][ T7508] should_fail_ex.cold+0x5/0xa [ 249.142670][ T7508] should_failslab+0xc2/0x120 [ 249.142704][ T7508] kmem_cache_alloc_noprof+0x91/0x6a0 [ 249.142735][ T7508] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 249.142774][ T7508] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 249.142811][ T7508] idr_get_free+0x52e/0xa00 [ 249.142854][ T7508] idr_alloc_u32+0x1ac/0x320 [ 249.142894][ T7508] ? __pfx_idr_alloc_u32+0x10/0x10 [ 249.142940][ T7508] ? lock_acquire+0x1b9/0x370 [ 249.142981][ T7508] idr_alloc_cyclic+0x10b/0x230 [ 249.143020][ T7508] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 249.143056][ T7508] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 249.143080][ T7508] ? kfree+0x1e5/0x6c0 [ 249.143119][ T7508] map_create+0x1476/0x3120 [ 249.143166][ T7508] ? __pfx_map_create+0x10/0x10 [ 249.143220][ T7508] ? __might_fault+0xc5/0x140 [ 249.143271][ T7508] __sys_bpf+0x2a6e/0x4e80 [ 249.143319][ T7508] ? __pfx___sys_bpf+0x10/0x10 [ 249.143356][ T7508] ? find_held_lock+0x2b/0x80 [ 249.143382][ T7508] ? futex_wake+0x4ea/0x5e0 [ 249.143413][ T7508] ? futex_private_hash_put+0x115/0x1c0 [ 249.143457][ T7508] ? __pfx_futex_wake+0x10/0x10 [ 249.143487][ T7508] ? rcu_read_lock_any_held+0x6a/0xa0 [ 249.143515][ T7508] ? find_held_lock+0x2b/0x80 [ 249.143541][ T7508] ? ksys_write+0x190/0x250 [ 249.143575][ T7508] ? ksys_write+0x190/0x250 [ 249.143626][ T7508] ? __x64_sys_futex+0x34f/0x4d0 [ 249.143647][ T7508] ? __x64_sys_futex+0x358/0x4d0 [ 249.143670][ T7508] ? __x64_sys_openat+0x12d/0x210 [ 249.143700][ T7508] ? xfd_validate_state+0x129/0x190 [ 249.143729][ T7508] ? __x64_sys_bpf+0xce/0x140 [ 249.143751][ T7508] __x64_sys_bpf+0xce/0x140 [ 249.143774][ T7508] ? do_syscall_64+0x90/0x840 [ 249.143811][ T7508] do_syscall_64+0x115/0x840 [ 249.143845][ T7508] ? clear_bhb_loop+0x40/0x90 [ 249.143874][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.143899][ T7508] RIP: 0033:0x7fb7cf99de59 [ 249.143919][ T7508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.143943][ T7508] RSP: 002b:00007fb7d0809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.143966][ T7508] RAX: ffffffffffffffda RBX: 00007fb7cfc25fa0 RCX: 00007fb7cf99de59 [ 249.143982][ T7508] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 249.143997][ T7508] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 249.144011][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.144025][ T7508] R13: 00007fb7cfc26038 R14: 00007fb7cfc25fa0 R15: 00007ffd603d4d28 [ 249.144055][ T7508] [ 251.824602][ T7539] netlink: 25 bytes leftover after parsing attributes in process `syz.3.335'. [ 252.730941][ T7557] FAULT_INJECTION: forcing a failure. [ 252.730941][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 252.779691][ T7558] lo: entered allmulticast mode [ 252.792897][ T7557] CPU: 0 UID: 0 PID: 7557 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 252.792930][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.792947][ T7557] Call Trace: [ 252.792956][ T7557] [ 252.792964][ T7557] dump_stack_lvl+0x100/0x190 [ 252.792995][ T7557] should_fail_ex.cold+0x5/0xa [ 252.793021][ T7557] should_failslab+0xc2/0x120 [ 252.793051][ T7557] __kmalloc_cache_noprof+0x91/0x6c0 [ 252.793091][ T7557] ? kvm_pic_init+0x4f/0x380 [ 252.793122][ T7557] kvm_pic_init+0x4f/0x380 [ 252.793150][ T7557] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 252.793189][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793224][ T7557] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 252.793266][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793308][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793349][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793389][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793446][ T7557] ? is_bpf_text_address+0x8a/0x1a0 [ 252.793478][ T7557] ? bpf_ksym_find+0x124/0x1c0 [ 252.793501][ T7557] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 252.793533][ T7557] ? is_bpf_text_address+0x94/0x1a0 [ 252.793565][ T7557] ? kernel_text_address+0x8d/0x100 [ 252.793597][ T7557] ? __pfx_widen_string+0x10/0x10 [ 252.793625][ T7557] ? __kernel_text_address+0xd/0x30 [ 252.793657][ T7557] ? unwind_get_return_address+0x59/0xa0 [ 252.793691][ T7557] ? arch_stack_walk+0xa6/0xf0 [ 252.793730][ T7557] ? tomoyo_path_number_perm+0x46d/0x580 [ 252.793757][ T7557] ? stack_trace_save+0x8e/0xc0 [ 252.793786][ T7557] ? __pfx_stack_trace_save+0x10/0x10 [ 252.793816][ T7557] ? stack_depot_save_flags+0x27/0x9d0 [ 252.793849][ T7557] ? __lock_acquire+0x49f/0x1a40 [ 252.793884][ T7557] ? tomoyo_path_number_perm+0x46d/0x580 [ 252.793909][ T7557] ? kasan_save_stack+0x3f/0x50 [ 252.793934][ T7557] ? kasan_save_stack+0x30/0x50 [ 252.793958][ T7557] ? kasan_save_track+0x14/0x30 [ 252.793983][ T7557] ? kasan_save_free_info+0x3b/0x70 [ 252.794022][ T7557] kvm_vm_ioctl+0x1564/0x4030 [ 252.794065][ T7557] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 252.794118][ T7557] ? kasan_quarantine_put+0x104/0x240 [ 252.794162][ T7557] ? lockdep_hardirqs_on+0x78/0x100 [ 252.794198][ T7557] ? find_held_lock+0x2b/0x80 [ 252.794223][ T7557] ? tomoyo_path_number_perm+0x28f/0x580 [ 252.794249][ T7557] ? tomoyo_path_number_perm+0x28f/0x580 [ 252.794282][ T7557] ? tomoyo_path_number_perm+0x188/0x580 [ 252.794310][ T7557] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.794338][ T7557] ? __pfx_futex_wait+0x10/0x10 [ 252.794373][ T7557] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.794407][ T7557] ? do_vfs_ioctl+0x226/0x13e0 [ 252.794443][ T7557] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 252.794482][ T7557] ? find_held_lock+0x2b/0x80 [ 252.794508][ T7557] ? __fget_files+0x215/0x3d0 [ 252.794542][ T7557] ? hook_file_ioctl_common+0x140/0x440 [ 252.794575][ T7557] ? __fget_files+0x21f/0x3d0 [ 252.794614][ T7557] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 252.794648][ T7557] __x64_sys_ioctl+0x18e/0x210 [ 252.794681][ T7557] do_syscall_64+0x115/0x840 [ 252.794715][ T7557] ? clear_bhb_loop+0x40/0x90 [ 252.794745][ T7557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.794770][ T7557] RIP: 0033:0x7f6d7819de59 [ 252.794790][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.794813][ T7557] RSP: 002b:00007f6d7901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.794836][ T7557] RAX: ffffffffffffffda RBX: 00007f6d78425fa0 RCX: 00007f6d7819de59 [ 252.794851][ T7557] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 252.794866][ T7557] RBP: 00007f6d78233e6f R08: 0000000000000000 R09: 0000000000000000 [ 252.794880][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.794894][ T7557] R13: 00007f6d78426038 R14: 00007f6d78425fa0 R15: 00007ffc7bacfc78 [ 252.794924][ T7557] [ 253.224084][ T7558] lo: left allmulticast mode [ 254.830732][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.837436][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.916698][ T7605] netlink: 25 bytes leftover after parsing attributes in process `syz.1.351'. [ 256.265952][ T7613] netlink: 'syz.1.353': attribute type 33 has an invalid length. [ 256.350732][ T7613] netlink: 322 bytes leftover after parsing attributes in process `syz.1.353'. [ 258.685070][ T29] audit: type=1800 audit(1783081366.045:6): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.362" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 258.735240][ T7651] FAULT_INJECTION: forcing a failure. [ 258.735240][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 258.748228][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.1.361 Not tainted syzkaller #0 PREEMPT(full) [ 258.748259][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.748274][ T7651] Call Trace: [ 258.748283][ T7651] [ 258.748293][ T7651] dump_stack_lvl+0x100/0x190 [ 258.748323][ T7651] should_fail_ex.cold+0x5/0xa [ 258.748346][ T7651] ? pcpu_block_update+0x20b/0x690 [ 258.748381][ T7651] should_failslab+0xc2/0x120 [ 258.748412][ T7651] kmem_cache_alloc_noprof+0x91/0x6a0 [ 258.748440][ T7651] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 258.748479][ T7651] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 258.748538][ T7651] idr_get_free+0x52e/0xa00 [ 258.748582][ T7651] idr_alloc_u32+0x1ac/0x320 [ 258.748622][ T7651] ? __pfx_idr_alloc_u32+0x10/0x10 [ 258.748663][ T7651] ? lock_acquire+0x1b9/0x370 [ 258.748703][ T7651] idr_alloc_cyclic+0x10b/0x230 [ 258.748742][ T7651] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 258.748778][ T7651] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 258.748802][ T7651] ? kfree+0x1e5/0x6c0 [ 258.748842][ T7651] map_create+0x1476/0x3120 [ 258.748889][ T7651] ? __pfx_map_create+0x10/0x10 [ 258.748930][ T7651] ? __might_fault+0xc5/0x140 [ 258.748980][ T7651] __sys_bpf+0x2a6e/0x4e80 [ 258.749028][ T7651] ? __pfx___sys_bpf+0x10/0x10 [ 258.749066][ T7651] ? find_held_lock+0x2b/0x80 [ 258.749091][ T7651] ? futex_wake+0x4ea/0x5e0 [ 258.749123][ T7651] ? futex_private_hash_put+0x115/0x1c0 [ 258.749167][ T7651] ? __pfx_futex_wake+0x10/0x10 [ 258.749203][ T7651] ? __pfx_clockevents_program_event+0x10/0x10 [ 258.749247][ T7651] ? __x64_sys_futex+0x34f/0x4d0 [ 258.749268][ T7651] ? __x64_sys_futex+0x358/0x4d0 [ 258.749292][ T7651] ? __x64_sys_openat+0x12d/0x210 [ 258.749321][ T7651] ? xfd_validate_state+0x129/0x190 [ 258.749350][ T7651] ? __x64_sys_bpf+0xce/0x140 [ 258.749372][ T7651] __x64_sys_bpf+0xce/0x140 [ 258.749395][ T7651] ? do_syscall_64+0x90/0x840 [ 258.749432][ T7651] do_syscall_64+0x115/0x840 [ 258.749466][ T7651] ? clear_bhb_loop+0x40/0x90 [ 258.749495][ T7651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.749528][ T7651] RIP: 0033:0x7f711ad9de59 [ 258.749548][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.749571][ T7651] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.749597][ T7651] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 258.749613][ T7651] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 258.749627][ T7651] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 258.749641][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.749656][ T7651] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 258.749686][ T7651] [ 259.404578][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.364'. [ 261.271611][ T29] audit: type=1800 audit(1783081368.635:7): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.372" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 262.129820][ T7726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'. [ 262.251764][ T5631] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 263.674245][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 263.909248][ T7757] netlink: 342 bytes leftover after parsing attributes in process `syz.2.381'. [ 264.401853][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 264.468827][ T7768] binder: 7766:7768 ioctl c0306201 0 returned -14 [ 264.959974][ T7773] vivid-007: ================= START STATUS ================= [ 265.055583][ T7773] vivid-007: Enable Output Cropping: true grabbed [ 265.119598][ T7773] vivid-007: Enable Output Composing: true grabbed [ 265.177922][ T7773] vivid-007: Enable Output Scaler: true grabbed [ 265.292812][ T7773] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 265.409835][ T7773] vivid-007: Transmit Mode: HDMI grabbed [ 265.488951][ T7773] vivid-007: Hotplug Present: 0x00000000 [ 265.556878][ T7773] vivid-007: RxSense Present: 0x00000000 [ 265.630610][ T7773] vivid-007: EDID Present: 0x00000000 [ 265.682391][ T7773] vivid-007: ================== END STATUS ================== [ 266.821941][ T7795] netlink: 346 bytes leftover after parsing attributes in process `syz.3.390'. [ 267.840960][ T7807] bridge0: port 3(syz_tun) entered blocking state [ 267.859723][ T7807] bridge0: port 3(syz_tun) entered disabled state [ 267.881102][ T7807] syz_tun: entered allmulticast mode [ 267.901244][ T7807] syz_tun: entered promiscuous mode [ 267.922810][ T7807] bridge0: port 3(syz_tun) entered blocking state [ 267.930647][ T7807] bridge0: port 3(syz_tun) entered forwarding state [ 268.290918][ T7819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.395'. [ 268.874073][ T7826] FAULT_INJECTION: forcing a failure. [ 268.874073][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 268.887085][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 268.887117][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.887131][ T7826] Call Trace: [ 268.887140][ T7826] [ 268.887150][ T7826] dump_stack_lvl+0x100/0x190 [ 268.887179][ T7826] should_fail_ex.cold+0x5/0xa [ 268.887202][ T7826] ? pcpu_block_update+0x20b/0x690 [ 268.887238][ T7826] should_failslab+0xc2/0x120 [ 268.887268][ T7826] kmem_cache_alloc_noprof+0x91/0x6a0 [ 268.887304][ T7826] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 268.887343][ T7826] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 268.887380][ T7826] idr_get_free+0x52e/0xa00 [ 268.887424][ T7826] idr_alloc_u32+0x1ac/0x320 [ 268.887464][ T7826] ? __pfx_idr_alloc_u32+0x10/0x10 [ 268.887507][ T7826] ? lock_acquire+0x1b9/0x370 [ 268.887547][ T7826] idr_alloc_cyclic+0x10b/0x230 [ 268.887586][ T7826] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 268.887622][ T7826] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 268.887646][ T7826] ? kfree+0x1e5/0x6c0 [ 268.887686][ T7826] map_create+0x1476/0x3120 [ 268.887734][ T7826] ? __pfx_map_create+0x10/0x10 [ 268.887775][ T7826] ? __might_fault+0xc5/0x140 [ 268.887828][ T7826] __sys_bpf+0x2a6e/0x4e80 [ 268.887875][ T7826] ? __pfx___sys_bpf+0x10/0x10 [ 268.887913][ T7826] ? find_held_lock+0x2b/0x80 [ 268.887938][ T7826] ? futex_wake+0x4ea/0x5e0 [ 268.887969][ T7826] ? futex_private_hash_put+0x115/0x1c0 [ 268.888013][ T7826] ? __pfx_futex_wake+0x10/0x10 [ 268.888045][ T7826] ? rcu_read_lock_any_held+0x6a/0xa0 [ 268.888073][ T7826] ? find_held_lock+0x2b/0x80 [ 268.888098][ T7826] ? ksys_write+0x190/0x250 [ 268.888132][ T7826] ? ksys_write+0x190/0x250 [ 268.888183][ T7826] ? __x64_sys_futex+0x34f/0x4d0 [ 268.888205][ T7826] ? __x64_sys_futex+0x358/0x4d0 [ 268.888228][ T7826] ? __x64_sys_openat+0x12d/0x210 [ 268.888259][ T7826] ? xfd_validate_state+0x129/0x190 [ 268.888295][ T7826] ? __x64_sys_bpf+0xce/0x140 [ 268.888316][ T7826] __x64_sys_bpf+0xce/0x140 [ 268.888340][ T7826] ? do_syscall_64+0x90/0x840 [ 268.888377][ T7826] do_syscall_64+0x115/0x840 [ 268.888411][ T7826] ? clear_bhb_loop+0x40/0x90 [ 268.888441][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.888466][ T7826] RIP: 0033:0x7f711ad9de59 [ 268.888486][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.888509][ T7826] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.888532][ T7826] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 268.888547][ T7826] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 268.888562][ T7826] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 268.888576][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.888590][ T7826] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 268.888620][ T7826] [ 270.144886][ T7832] FAULT_INJECTION: forcing a failure. [ 270.144886][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 270.158103][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.0.398 Not tainted syzkaller #0 PREEMPT(full) [ 270.158134][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.158150][ T7832] Call Trace: [ 270.158159][ T7832] [ 270.158168][ T7832] dump_stack_lvl+0x100/0x190 [ 270.158204][ T7832] should_fail_ex.cold+0x5/0xa [ 270.158233][ T7832] should_failslab+0xc2/0x120 [ 270.158264][ T7832] kmem_cache_alloc_noprof+0x91/0x6a0 [ 270.158291][ T7832] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 270.158330][ T7832] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 270.158373][ T7832] idr_get_free+0x52e/0xa00 [ 270.158421][ T7832] idr_alloc_u32+0x1ac/0x320 [ 270.158460][ T7832] ? __pfx_idr_alloc_u32+0x10/0x10 [ 270.158500][ T7832] ? lock_acquire+0x1b9/0x370 [ 270.158540][ T7832] idr_alloc_cyclic+0x10b/0x230 [ 270.158579][ T7832] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 270.158615][ T7832] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.158638][ T7832] ? kfree+0x1e5/0x6c0 [ 270.158677][ T7832] map_create+0x1476/0x3120 [ 270.158724][ T7832] ? __pfx_map_create+0x10/0x10 [ 270.158765][ T7832] ? __might_fault+0xc5/0x140 [ 270.158815][ T7832] __sys_bpf+0x2a6e/0x4e80 [ 270.158852][ T7832] ? futex_hash+0x311/0x400 [ 270.158899][ T7832] ? __pfx___sys_bpf+0x10/0x10 [ 270.158936][ T7832] ? find_held_lock+0x2b/0x80 [ 270.158961][ T7832] ? futex_wake+0x4ea/0x5e0 [ 270.158992][ T7832] ? futex_private_hash_put+0x115/0x1c0 [ 270.159036][ T7832] ? __pfx_futex_wake+0x10/0x10 [ 270.159068][ T7832] ? rcu_read_lock_any_held+0x6a/0xa0 [ 270.159096][ T7832] ? find_held_lock+0x2b/0x80 [ 270.159121][ T7832] ? ksys_write+0x190/0x250 [ 270.159155][ T7832] ? ksys_write+0x190/0x250 [ 270.159213][ T7832] ? __x64_sys_futex+0x34f/0x4d0 [ 270.159235][ T7832] ? __x64_sys_futex+0x358/0x4d0 [ 270.159258][ T7832] ? __x64_sys_openat+0x12d/0x210 [ 270.159287][ T7832] ? xfd_validate_state+0x129/0x190 [ 270.159315][ T7832] ? __x64_sys_bpf+0xce/0x140 [ 270.159338][ T7832] __x64_sys_bpf+0xce/0x140 [ 270.159361][ T7832] ? do_syscall_64+0x90/0x840 [ 270.159398][ T7832] do_syscall_64+0x115/0x840 [ 270.159432][ T7832] ? clear_bhb_loop+0x40/0x90 [ 270.159461][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.159486][ T7832] RIP: 0033:0x7fb7cf99de59 [ 270.159506][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.159529][ T7832] RSP: 002b:00007fb7d0809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.159552][ T7832] RAX: ffffffffffffffda RBX: 00007fb7cfc25fa0 RCX: 00007fb7cf99de59 [ 270.159567][ T7832] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 270.159581][ T7832] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 270.159595][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.159609][ T7832] R13: 00007fb7cfc26038 R14: 00007fb7cfc25fa0 R15: 00007ffd603d4d28 [ 270.159639][ T7832] [ 271.823719][ T7851] netlink: 346 bytes leftover after parsing attributes in process `syz.2.399'. [ 273.240534][ T7874] FAULT_INJECTION: forcing a failure. [ 273.240534][ T7874] name failslab, interval 1, probability 0, space 0, times 0 [ 273.253349][ T7874] CPU: 0 UID: 0 PID: 7874 Comm: syz.3.409 Not tainted syzkaller #0 PREEMPT(full) [ 273.253382][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.253397][ T7874] Call Trace: [ 273.253407][ T7874] [ 273.253416][ T7874] dump_stack_lvl+0x100/0x190 [ 273.253447][ T7874] should_fail_ex.cold+0x5/0xa [ 273.253481][ T7874] should_failslab+0xc2/0x120 [ 273.253513][ T7874] kmem_cache_alloc_noprof+0x91/0x6a0 [ 273.253541][ T7874] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 273.253580][ T7874] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 273.253617][ T7874] idr_get_free+0x52e/0xa00 [ 273.253661][ T7874] idr_alloc_u32+0x1ac/0x320 [ 273.253709][ T7874] ? __pfx_idr_alloc_u32+0x10/0x10 [ 273.253749][ T7874] ? lock_acquire+0x1b9/0x370 [ 273.253791][ T7874] idr_alloc_cyclic+0x10b/0x230 [ 273.253830][ T7874] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 273.253866][ T7874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 273.253890][ T7874] ? kfree+0x1e5/0x6c0 [ 273.253930][ T7874] map_create+0x1476/0x3120 [ 273.253977][ T7874] ? __pfx_map_create+0x10/0x10 [ 273.254018][ T7874] ? __might_fault+0xc5/0x140 [ 273.254073][ T7874] __sys_bpf+0x2a6e/0x4e80 [ 273.254111][ T7874] ? futex_hash+0x311/0x400 [ 273.254155][ T7874] ? __pfx___sys_bpf+0x10/0x10 [ 273.254193][ T7874] ? find_held_lock+0x2b/0x80 [ 273.254218][ T7874] ? futex_wake+0x4ea/0x5e0 [ 273.254250][ T7874] ? futex_private_hash_put+0x115/0x1c0 [ 273.254294][ T7874] ? __pfx_futex_wake+0x10/0x10 [ 273.254325][ T7874] ? rcu_read_lock_any_held+0x6a/0xa0 [ 273.254354][ T7874] ? find_held_lock+0x2b/0x80 [ 273.254380][ T7874] ? ksys_write+0x190/0x250 [ 273.254414][ T7874] ? ksys_write+0x190/0x250 [ 273.254472][ T7874] ? __x64_sys_futex+0x34f/0x4d0 [ 273.254494][ T7874] ? __x64_sys_futex+0x358/0x4d0 [ 273.254517][ T7874] ? __x64_sys_openat+0x12d/0x210 [ 273.254551][ T7874] ? xfd_validate_state+0x129/0x190 [ 273.254581][ T7874] ? __x64_sys_bpf+0xce/0x140 [ 273.254603][ T7874] __x64_sys_bpf+0xce/0x140 [ 273.254626][ T7874] ? do_syscall_64+0x90/0x840 [ 273.254664][ T7874] do_syscall_64+0x115/0x840 [ 273.254723][ T7874] ? clear_bhb_loop+0x40/0x90 [ 273.254754][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.254796][ T7874] RIP: 0033:0x7f65c459de59 [ 273.254832][ T7874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.254855][ T7874] RSP: 002b:00007f65c54a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.254878][ T7874] RAX: ffffffffffffffda RBX: 00007f65c4825fa0 RCX: 00007f65c459de59 [ 273.254894][ T7874] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 273.254908][ T7874] RBP: 00007f65c4633e6f R08: 0000000000000000 R09: 0000000000000000 [ 273.254922][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.254936][ T7874] R13: 00007f65c4826038 R14: 00007f65c4825fa0 R15: 00007ffce4cddf08 [ 273.254967][ T7874] [ 275.549473][ T7888] FAULT_INJECTION: forcing a failure. [ 275.549473][ T7888] name failslab, interval 1, probability 0, space 0, times 0 [ 275.624863][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT(full) [ 275.624900][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.624916][ T7888] Call Trace: [ 275.624925][ T7888] [ 275.624934][ T7888] dump_stack_lvl+0x100/0x190 [ 275.624965][ T7888] should_fail_ex.cold+0x5/0xa [ 275.624992][ T7888] should_failslab+0xc2/0x120 [ 275.625023][ T7888] kmem_cache_alloc_noprof+0x91/0x6a0 [ 275.625051][ T7888] ? sk_prot_alloc+0x60/0x2a0 [ 275.625087][ T7888] sk_prot_alloc+0x60/0x2a0 [ 275.625120][ T7888] sk_alloc+0x36/0xe80 [ 275.625144][ T7888] inet6_create+0x385/0x12b0 [ 275.625180][ T7888] ? inet6_create+0x7f/0x12b0 [ 275.625216][ T7888] __sock_create+0x339/0x860 [ 275.625258][ T7888] __sys_socket+0x14d/0x260 [ 275.625293][ T7888] ? __pfx___sys_socket+0x10/0x10 [ 275.625336][ T7888] __x64_sys_socket+0x72/0xb0 [ 275.625369][ T7888] ? lockdep_hardirqs_on+0x78/0x100 [ 275.625404][ T7888] do_syscall_64+0x115/0x840 [ 275.625439][ T7888] ? clear_bhb_loop+0x40/0x90 [ 275.625469][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.625494][ T7888] RIP: 0033:0x7fb7cf99de59 [ 275.625513][ T7888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.625536][ T7888] RSP: 002b:00007fb7d07e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 275.625558][ T7888] RAX: ffffffffffffffda RBX: 00007fb7cfc26090 RCX: 00007fb7cf99de59 [ 275.625574][ T7888] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 275.625588][ T7888] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 275.625603][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.625616][ T7888] R13: 00007fb7cfc26128 R14: 00007fb7cfc26090 R15: 00007ffd603d4d28 [ 275.625646][ T7888] [ 277.176494][ T7908] ubi: mtd0 is already attached to ubi0 [ 277.818243][ T7903] FAULT_INJECTION: forcing a failure. [ 277.818243][ T7903] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.042282][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.1.413 Not tainted syzkaller #0 PREEMPT(full) [ 278.042315][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.042329][ T7903] Call Trace: [ 278.042337][ T7903] [ 278.042346][ T7903] dump_stack_lvl+0x100/0x190 [ 278.042376][ T7903] should_fail_ex.cold+0x5/0xa [ 278.042403][ T7903] get_futex_key+0x1d2/0x14f0 [ 278.042444][ T7903] ? __pfx_get_futex_key+0x10/0x10 [ 278.042481][ T7903] ? __pfx_futex_hash+0x10/0x10 [ 278.042517][ T7903] ? get_pid_task+0xfc/0x250 [ 278.042543][ T7903] ? get_pid_task+0xfc/0x250 [ 278.042671][ T7903] futex_wake+0xf4/0x5e0 [ 278.042715][ T7903] ? find_held_lock+0x2b/0x80 [ 278.042743][ T7903] ? __pfx_futex_wake+0x10/0x10 [ 278.042778][ T7903] ? find_held_lock+0x2b/0x80 [ 278.042808][ T7903] do_futex+0x2b2/0x440 [ 278.042833][ T7903] ? __pfx_do_futex+0x10/0x10 [ 278.042864][ T7903] __x64_sys_futex+0x34f/0x4d0 [ 278.042889][ T7903] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 278.042919][ T7903] ? __pfx___x64_sys_futex+0x10/0x10 [ 278.042970][ T7903] do_syscall_64+0x115/0x840 [ 278.043006][ T7903] ? clear_bhb_loop+0x40/0x90 [ 278.043035][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.043061][ T7903] RIP: 0033:0x7f711ad9de59 [ 278.043081][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.043112][ T7903] RSP: 002b:00007f711bce60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.043134][ T7903] RAX: ffffffffffffffda RBX: 00007f711b026098 RCX: 00007f711ad9de59 [ 278.043150][ T7903] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f711b02609c [ 278.043165][ T7903] RBP: 00007f711b026090 R08: 0000000000000001 R09: 0000000000000000 [ 278.043179][ T7903] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 278.043194][ T7903] R13: 00007f711b026128 R14: 00007fffbaba77b0 R15: 00007fffbaba7898 [ 278.043235][ T7903] [ 278.899509][ T7933] FAULT_INJECTION: forcing a failure. [ 278.899509][ T7933] name failslab, interval 1, probability 0, space 0, times 0 [ 278.912783][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.1.419 Not tainted syzkaller #0 PREEMPT(full) [ 278.912814][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.912828][ T7933] Call Trace: [ 278.912838][ T7933] [ 278.912848][ T7933] dump_stack_lvl+0x100/0x190 [ 278.912878][ T7933] should_fail_ex.cold+0x5/0xa [ 278.912905][ T7933] should_failslab+0xc2/0x120 [ 278.912936][ T7933] kmem_cache_alloc_noprof+0x91/0x6a0 [ 278.912964][ T7933] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 278.913003][ T7933] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 278.913040][ T7933] idr_get_free+0x52e/0xa00 [ 278.913103][ T7933] idr_alloc_u32+0x1ac/0x320 [ 278.913143][ T7933] ? __pfx_idr_alloc_u32+0x10/0x10 [ 278.913187][ T7933] ? lock_acquire+0x1b9/0x370 [ 278.913228][ T7933] idr_alloc_cyclic+0x10b/0x230 [ 278.913266][ T7933] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 278.913302][ T7933] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.913326][ T7933] ? kfree+0x1e5/0x6c0 [ 278.913365][ T7933] map_create+0x1476/0x3120 [ 278.913413][ T7933] ? __pfx_map_create+0x10/0x10 [ 278.913460][ T7933] ? __might_fault+0xc5/0x140 [ 278.913511][ T7933] __sys_bpf+0x2a6e/0x4e80 [ 278.913559][ T7933] ? __pfx___sys_bpf+0x10/0x10 [ 278.913596][ T7933] ? find_held_lock+0x2b/0x80 [ 278.913622][ T7933] ? futex_wake+0x4ea/0x5e0 [ 278.913653][ T7933] ? futex_private_hash_put+0x115/0x1c0 [ 278.913697][ T7933] ? __pfx_futex_wake+0x10/0x10 [ 278.913729][ T7933] ? rcu_read_lock_any_held+0x6a/0xa0 [ 278.913757][ T7933] ? find_held_lock+0x2b/0x80 [ 278.913782][ T7933] ? ksys_write+0x190/0x250 [ 278.913816][ T7933] ? ksys_write+0x190/0x250 [ 278.913878][ T7933] ? __x64_sys_futex+0x34f/0x4d0 [ 278.913901][ T7933] ? __x64_sys_futex+0x358/0x4d0 [ 278.913930][ T7933] ? __x64_sys_openat+0x12d/0x210 [ 278.913984][ T7933] ? xfd_validate_state+0x129/0x190 [ 278.914013][ T7933] ? __x64_sys_bpf+0xce/0x140 [ 278.914042][ T7933] __x64_sys_bpf+0xce/0x140 [ 278.914071][ T7933] ? do_syscall_64+0x90/0x840 [ 278.914108][ T7933] do_syscall_64+0x115/0x840 [ 278.914152][ T7933] ? clear_bhb_loop+0x40/0x90 [ 278.914188][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.914213][ T7933] RIP: 0033:0x7f711ad9de59 [ 278.914250][ T7933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.914278][ T7933] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.914304][ T7933] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 278.914320][ T7933] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 278.914334][ T7933] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 278.914349][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.914362][ T7933] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 278.914392][ T7933] [ 279.411398][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.421'. [ 279.683223][ T7941] netlink: 342 bytes leftover after parsing attributes in process `syz.3.421'. [ 281.736237][ T7979] FAULT_INJECTION: forcing a failure. [ 281.736237][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 281.749249][ T7979] CPU: 0 UID: 0 PID: 7979 Comm: syz.1.428 Not tainted syzkaller #0 PREEMPT(full) [ 281.749280][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.749297][ T7979] Call Trace: [ 281.749306][ T7979] [ 281.749319][ T7979] dump_stack_lvl+0x100/0x190 [ 281.749353][ T7979] should_fail_ex.cold+0x5/0xa [ 281.749375][ T7979] ? pcpu_block_update+0x20b/0x690 [ 281.749410][ T7979] should_failslab+0xc2/0x120 [ 281.749440][ T7979] kmem_cache_alloc_noprof+0x91/0x6a0 [ 281.749467][ T7979] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 281.749509][ T7979] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 281.749546][ T7979] idr_get_free+0x52e/0xa00 [ 281.749590][ T7979] idr_alloc_u32+0x1ac/0x320 [ 281.749629][ T7979] ? __pfx_idr_alloc_u32+0x10/0x10 [ 281.749668][ T7979] ? lock_acquire+0x1b9/0x370 [ 281.749709][ T7979] idr_alloc_cyclic+0x10b/0x230 [ 281.749748][ T7979] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 281.749783][ T7979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.749807][ T7979] ? kfree+0x1e5/0x6c0 [ 281.749853][ T7979] map_create+0x1476/0x3120 [ 281.749901][ T7979] ? __pfx_map_create+0x10/0x10 [ 281.749943][ T7979] ? __might_fault+0xc5/0x140 [ 281.749994][ T7979] __sys_bpf+0x2a6e/0x4e80 [ 281.750044][ T7979] ? __pfx___sys_bpf+0x10/0x10 [ 281.750081][ T7979] ? find_held_lock+0x2b/0x80 [ 281.750107][ T7979] ? futex_wake+0x4ea/0x5e0 [ 281.750138][ T7979] ? futex_private_hash_put+0x115/0x1c0 [ 281.750183][ T7979] ? __pfx_futex_wake+0x10/0x10 [ 281.750215][ T7979] ? rcu_read_lock_any_held+0x6a/0xa0 [ 281.750243][ T7979] ? find_held_lock+0x2b/0x80 [ 281.750269][ T7979] ? ksys_write+0x190/0x250 [ 281.750303][ T7979] ? ksys_write+0x190/0x250 [ 281.750354][ T7979] ? __x64_sys_futex+0x34f/0x4d0 [ 281.750375][ T7979] ? __x64_sys_futex+0x358/0x4d0 [ 281.750399][ T7979] ? __x64_sys_openat+0x12d/0x210 [ 281.750427][ T7979] ? xfd_validate_state+0x129/0x190 [ 281.750455][ T7979] ? __x64_sys_bpf+0xce/0x140 [ 281.750477][ T7979] __x64_sys_bpf+0xce/0x140 [ 281.750500][ T7979] ? do_syscall_64+0x90/0x840 [ 281.750537][ T7979] do_syscall_64+0x115/0x840 [ 281.750571][ T7979] ? clear_bhb_loop+0x40/0x90 [ 281.750600][ T7979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.750647][ T7979] RIP: 0033:0x7f711ad9de59 [ 281.750667][ T7979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.750690][ T7979] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.750713][ T7979] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 281.750729][ T7979] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 281.750743][ T7979] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 281.750757][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.750791][ T7979] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 281.750826][ T7979] [ 282.158055][ T7956] Process accounting resumed [ 282.865466][ T7994] FAULT_INJECTION: forcing a failure. [ 282.865466][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 282.878287][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.2.432 Not tainted syzkaller #0 PREEMPT(full) [ 282.878318][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.878332][ T7994] Call Trace: [ 282.878342][ T7994] [ 282.878352][ T7994] dump_stack_lvl+0x100/0x190 [ 282.878382][ T7994] should_fail_ex.cold+0x5/0xa [ 282.878404][ T7994] ? pcpu_block_update+0x20b/0x690 [ 282.878447][ T7994] should_failslab+0xc2/0x120 [ 282.878478][ T7994] kmem_cache_alloc_noprof+0x91/0x6a0 [ 282.878506][ T7994] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 282.878545][ T7994] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 282.878582][ T7994] idr_get_free+0x52e/0xa00 [ 282.878626][ T7994] idr_alloc_u32+0x1ac/0x320 [ 282.878665][ T7994] ? __pfx_idr_alloc_u32+0x10/0x10 [ 282.878705][ T7994] ? lock_acquire+0x1b9/0x370 [ 282.878746][ T7994] idr_alloc_cyclic+0x10b/0x230 [ 282.878785][ T7994] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 282.878821][ T7994] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.878845][ T7994] ? kfree+0x1e5/0x6c0 [ 282.878885][ T7994] map_create+0x1476/0x3120 [ 282.878932][ T7994] ? __pfx_map_create+0x10/0x10 [ 282.878974][ T7994] ? __might_fault+0xc5/0x140 [ 282.879024][ T7994] __sys_bpf+0x2a6e/0x4e80 [ 282.879072][ T7994] ? __pfx___sys_bpf+0x10/0x10 [ 282.879109][ T7994] ? find_held_lock+0x2b/0x80 [ 282.879135][ T7994] ? futex_wake+0x4ea/0x5e0 [ 282.879166][ T7994] ? futex_private_hash_put+0x115/0x1c0 [ 282.879211][ T7994] ? __pfx_futex_wake+0x10/0x10 [ 282.879242][ T7994] ? rcu_read_lock_any_held+0x6a/0xa0 [ 282.879271][ T7994] ? find_held_lock+0x2b/0x80 [ 282.879296][ T7994] ? ksys_write+0x190/0x250 [ 282.879331][ T7994] ? ksys_write+0x190/0x250 [ 282.879382][ T7994] ? __x64_sys_futex+0x34f/0x4d0 [ 282.879404][ T7994] ? __x64_sys_futex+0x358/0x4d0 [ 282.879428][ T7994] ? __x64_sys_openat+0x12d/0x210 [ 282.879464][ T7994] ? xfd_validate_state+0x129/0x190 [ 282.879493][ T7994] ? __x64_sys_bpf+0xce/0x140 [ 282.879515][ T7994] __x64_sys_bpf+0xce/0x140 [ 282.879539][ T7994] ? do_syscall_64+0x90/0x840 [ 282.879576][ T7994] do_syscall_64+0x115/0x840 [ 282.879611][ T7994] ? clear_bhb_loop+0x40/0x90 [ 282.879640][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.879665][ T7994] RIP: 0033:0x7f6d7819de59 [ 282.879696][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.879719][ T7994] RSP: 002b:00007f6d7901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.879742][ T7994] RAX: ffffffffffffffda RBX: 00007f6d78425fa0 RCX: 00007f6d7819de59 [ 282.879758][ T7994] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 282.879773][ T7994] RBP: 00007f6d78233e6f R08: 0000000000000000 R09: 0000000000000000 [ 282.879787][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.879801][ T7994] R13: 00007f6d78426038 R14: 00007f6d78425fa0 R15: 00007ffc7bacfc78 [ 282.879831][ T7994] [ 283.613932][ T8003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 285.425403][ T8035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 285.721943][ T8035] netlink: 342 bytes leftover after parsing attributes in process `syz.2.438'. [ 286.023410][ T8034] warning: `syz.3.437' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 287.736510][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.443'. [ 287.807483][ T8056] netlink: 342 bytes leftover after parsing attributes in process `syz.1.443'. [ 288.076410][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.444'. [ 288.506867][ T8063] FAULT_INJECTION: forcing a failure. [ 288.506867][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 288.580732][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 288.580765][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.580779][ T8063] Call Trace: [ 288.580788][ T8063] [ 288.580798][ T8063] dump_stack_lvl+0x100/0x190 [ 288.580828][ T8063] should_fail_ex.cold+0x5/0xa [ 288.580856][ T8063] should_failslab+0xc2/0x120 [ 288.580888][ T8063] __kmalloc_cache_noprof+0x91/0x6c0 [ 288.580928][ T8063] ? kvm_pic_init+0x4f/0x380 [ 288.580959][ T8063] kvm_pic_init+0x4f/0x380 [ 288.581022][ T8063] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 288.581062][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581099][ T8063] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 288.581142][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581185][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581226][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581267][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581322][ T8063] ? is_bpf_text_address+0x8a/0x1a0 [ 288.581355][ T8063] ? bpf_ksym_find+0x124/0x1c0 [ 288.581380][ T8063] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.581414][ T8063] ? is_bpf_text_address+0x94/0x1a0 [ 288.581445][ T8063] ? kernel_text_address+0x8d/0x100 [ 288.581477][ T8063] ? __pfx_widen_string+0x10/0x10 [ 288.581507][ T8063] ? __kernel_text_address+0xd/0x30 [ 288.581540][ T8063] ? unwind_get_return_address+0x59/0xa0 [ 288.581574][ T8063] ? arch_stack_walk+0xa6/0xf0 [ 288.581614][ T8063] ? tomoyo_path_number_perm+0x46d/0x580 [ 288.581642][ T8063] ? stack_trace_save+0x8e/0xc0 [ 288.581672][ T8063] ? __pfx_stack_trace_save+0x10/0x10 [ 288.581703][ T8063] ? stack_depot_save_flags+0x27/0x9d0 [ 288.581737][ T8063] ? __lock_acquire+0x49f/0x1a40 [ 288.581771][ T8063] ? tomoyo_path_number_perm+0x46d/0x580 [ 288.581797][ T8063] ? kasan_save_stack+0x3f/0x50 [ 288.581822][ T8063] ? kasan_save_stack+0x30/0x50 [ 288.581847][ T8063] ? kasan_save_track+0x14/0x30 [ 288.581872][ T8063] ? kasan_save_free_info+0x3b/0x70 [ 288.581911][ T8063] kvm_vm_ioctl+0x1564/0x4030 [ 288.581955][ T8063] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 288.582018][ T8063] ? kasan_quarantine_put+0x104/0x240 [ 288.582043][ T8063] ? lockdep_hardirqs_on+0x78/0x100 [ 288.582080][ T8063] ? find_held_lock+0x2b/0x80 [ 288.582107][ T8063] ? tomoyo_path_number_perm+0x28f/0x580 [ 288.582132][ T8063] ? tomoyo_path_number_perm+0x28f/0x580 [ 288.582163][ T8063] ? tomoyo_path_number_perm+0x188/0x580 [ 288.582192][ T8063] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.582220][ T8063] ? __pfx_futex_wait+0x10/0x10 [ 288.582256][ T8063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.582290][ T8063] ? do_vfs_ioctl+0x226/0x13e0 [ 288.582321][ T8063] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 288.582360][ T8063] ? find_held_lock+0x2b/0x80 [ 288.582385][ T8063] ? __fget_files+0x215/0x3d0 [ 288.582418][ T8063] ? hook_file_ioctl_common+0x140/0x440 [ 288.582451][ T8063] ? __fget_files+0x21f/0x3d0 [ 288.582492][ T8063] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 288.582527][ T8063] __x64_sys_ioctl+0x18e/0x210 [ 288.582561][ T8063] do_syscall_64+0x115/0x840 [ 288.582597][ T8063] ? clear_bhb_loop+0x40/0x90 [ 288.582626][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.582652][ T8063] RIP: 0033:0x7f711ad9de59 [ 288.582672][ T8063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.582696][ T8063] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.582720][ T8063] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 288.582736][ T8063] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 288.582751][ T8063] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 288.582766][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.582780][ T8063] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 288.582812][ T8063] [ 289.153873][ T8070] ubi: mtd0 is already attached to ubi0 [ 289.571833][ T8080] mmap: syz.1.449 (8080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.425493][ T8088] ubi: mtd0 is already attached to ubi0 [ 290.504322][ T8091] ubi0: detaching mtd0 [ 290.615516][ T8091] ubi0: mtd0 is detached [ 291.092249][ T8093] could not allocate digest TFM handle [ 291.871047][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.455'. [ 291.890450][ T8089] FAULT_INJECTION: forcing a failure. [ 291.890450][ T8089] name fail_futex, interval 1, probability 0, space 0, times 0 [ 291.955276][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.2.446 Not tainted syzkaller #0 PREEMPT(full) [ 291.955309][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 291.955324][ T8089] Call Trace: [ 291.955332][ T8089] [ 291.955341][ T8089] dump_stack_lvl+0x100/0x190 [ 291.955372][ T8089] should_fail_ex.cold+0x5/0xa [ 291.955399][ T8089] get_futex_key+0x1d2/0x14f0 [ 291.955441][ T8089] ? __pfx_get_futex_key+0x10/0x10 [ 291.955478][ T8089] ? __pfx_futex_hash+0x10/0x10 [ 291.955523][ T8089] futex_wake+0xf4/0x5e0 [ 291.955553][ T8089] ? __pfx_futex_wake+0x10/0x10 [ 291.955589][ T8089] ? find_held_lock+0x2b/0x80 [ 291.955619][ T8089] do_futex+0x2b2/0x440 [ 291.955643][ T8089] ? __pfx_do_futex+0x10/0x10 [ 291.955674][ T8089] __x64_sys_futex+0x34f/0x4d0 [ 291.955699][ T8089] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 291.955729][ T8089] ? __pfx___x64_sys_futex+0x10/0x10 [ 291.955764][ T8089] do_syscall_64+0x115/0x840 [ 291.955799][ T8089] ? clear_bhb_loop+0x40/0x90 [ 291.955828][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.955853][ T8089] RIP: 0033:0x7f6d7819de59 [ 291.955873][ T8089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.955896][ T8089] RSP: 002b:00007f6d78ffd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 291.955924][ T8089] RAX: ffffffffffffffda RBX: 00007f6d78426098 RCX: 00007f6d7819de59 [ 291.955940][ T8089] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6d7842609c [ 291.955955][ T8089] RBP: 00007f6d78426090 R08: 0000000000000001 R09: 0000000000000000 [ 291.955969][ T8089] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 291.955984][ T8089] R13: 00007f6d78426128 R14: 00007ffc7bacfb90 R15: 00007ffc7bacfc78 [ 291.956014][ T8089] [ 293.269893][ T8137] FAULT_INJECTION: forcing a failure. [ 293.269893][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 293.283124][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.3.460 Not tainted syzkaller #0 PREEMPT(full) [ 293.283156][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 293.283172][ T8137] Call Trace: [ 293.283180][ T8137] [ 293.283188][ T8137] dump_stack_lvl+0x100/0x190 [ 293.283219][ T8137] should_fail_ex.cold+0x5/0xa [ 293.283242][ T8137] ? pcpu_block_update+0x36a/0x690 [ 293.283278][ T8137] should_failslab+0xc2/0x120 [ 293.283308][ T8137] kmem_cache_alloc_noprof+0x91/0x6a0 [ 293.283336][ T8137] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 293.283375][ T8137] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 293.283412][ T8137] idr_get_free+0x52e/0xa00 [ 293.283456][ T8137] idr_alloc_u32+0x1ac/0x320 [ 293.283495][ T8137] ? __pfx_idr_alloc_u32+0x10/0x10 [ 293.283536][ T8137] ? lock_acquire+0x1b9/0x370 [ 293.283577][ T8137] idr_alloc_cyclic+0x10b/0x230 [ 293.283616][ T8137] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 293.283652][ T8137] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 293.283676][ T8137] ? kfree+0x1e5/0x6c0 [ 293.283747][ T8137] map_create+0x1476/0x3120 [ 293.283795][ T8137] ? __pfx_map_create+0x10/0x10 [ 293.283837][ T8137] ? __might_fault+0xc5/0x140 [ 293.283889][ T8137] __sys_bpf+0x2a6e/0x4e80 [ 293.283937][ T8137] ? __pfx___sys_bpf+0x10/0x10 [ 293.283975][ T8137] ? find_held_lock+0x2b/0x80 [ 293.284001][ T8137] ? futex_wake+0x4ea/0x5e0 [ 293.284032][ T8137] ? futex_private_hash_put+0x115/0x1c0 [ 293.284077][ T8137] ? __pfx_futex_wake+0x10/0x10 [ 293.284109][ T8137] ? rcu_read_lock_any_held+0x6a/0xa0 [ 293.284137][ T8137] ? find_held_lock+0x2b/0x80 [ 293.284163][ T8137] ? ksys_write+0x190/0x250 [ 293.284198][ T8137] ? ksys_write+0x190/0x250 [ 293.284250][ T8137] ? __x64_sys_futex+0x34f/0x4d0 [ 293.284272][ T8137] ? __x64_sys_futex+0x358/0x4d0 [ 293.284296][ T8137] ? __x64_sys_openat+0x12d/0x210 [ 293.284325][ T8137] ? xfd_validate_state+0x129/0x190 [ 293.284354][ T8137] ? __x64_sys_bpf+0xce/0x140 [ 293.284376][ T8137] __x64_sys_bpf+0xce/0x140 [ 293.284400][ T8137] ? do_syscall_64+0x90/0x840 [ 293.284446][ T8137] do_syscall_64+0x115/0x840 [ 293.284480][ T8137] ? clear_bhb_loop+0x40/0x90 [ 293.284509][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.284534][ T8137] RIP: 0033:0x7f65c459de59 [ 293.284554][ T8137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.284578][ T8137] RSP: 002b:00007f65c54a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.284601][ T8137] RAX: ffffffffffffffda RBX: 00007f65c4825fa0 RCX: 00007f65c459de59 [ 293.284617][ T8137] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 293.284632][ T8137] RBP: 00007f65c4633e6f R08: 0000000000000000 R09: 0000000000000000 [ 293.284646][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.284660][ T8137] R13: 00007f65c4826038 R14: 00007f65c4825fa0 R15: 00007ffce4cddf08 [ 293.284691][ T8137] [ 297.094208][ T8187] NFSD: Failed to start, no listeners configured. [ 297.787011][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 301.257925][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 301.514926][ T8254] openvswitch: netlink: Tunnel attr 288 out of range max 16 [ 303.863077][ T8287] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 303.962467][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.484'. [ 305.264629][ T8307] FAULT_INJECTION: forcing a failure. [ 305.264629][ T8307] name failslab, interval 1, probability 0, space 0, times 0 [ 305.277441][ T8307] CPU: 0 UID: 0 PID: 8307 Comm: syz.1.487 Not tainted syzkaller #0 PREEMPT(full) [ 305.277472][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.277489][ T8307] Call Trace: [ 305.277499][ T8307] [ 305.277509][ T8307] dump_stack_lvl+0x100/0x190 [ 305.277540][ T8307] should_fail_ex.cold+0x5/0xa [ 305.277563][ T8307] ? pcpu_block_update+0x2cf/0x690 [ 305.277599][ T8307] should_failslab+0xc2/0x120 [ 305.277630][ T8307] kmem_cache_alloc_noprof+0x91/0x6a0 [ 305.277658][ T8307] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 305.277703][ T8307] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 305.277741][ T8307] idr_get_free+0x52e/0xa00 [ 305.277784][ T8307] idr_alloc_u32+0x1ac/0x320 [ 305.277825][ T8307] ? __pfx_idr_alloc_u32+0x10/0x10 [ 305.277865][ T8307] ? lock_acquire+0x1b9/0x370 [ 305.277907][ T8307] idr_alloc_cyclic+0x10b/0x230 [ 305.277946][ T8307] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 305.277983][ T8307] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.278007][ T8307] ? kfree+0x1e5/0x6c0 [ 305.278047][ T8307] map_create+0x1476/0x3120 [ 305.278094][ T8307] ? __pfx_map_create+0x10/0x10 [ 305.278136][ T8307] ? __might_fault+0xc5/0x140 [ 305.278186][ T8307] __sys_bpf+0x2a6e/0x4e80 [ 305.278234][ T8307] ? __pfx___sys_bpf+0x10/0x10 [ 305.278272][ T8307] ? find_held_lock+0x2b/0x80 [ 305.278298][ T8307] ? futex_wake+0x4ea/0x5e0 [ 305.278330][ T8307] ? futex_private_hash_put+0x115/0x1c0 [ 305.278374][ T8307] ? __pfx_futex_wake+0x10/0x10 [ 305.278406][ T8307] ? rcu_read_lock_any_held+0x6a/0xa0 [ 305.278435][ T8307] ? find_held_lock+0x2b/0x80 [ 305.278461][ T8307] ? ksys_write+0x190/0x250 [ 305.278496][ T8307] ? ksys_write+0x190/0x250 [ 305.278549][ T8307] ? __x64_sys_futex+0x34f/0x4d0 [ 305.278571][ T8307] ? __x64_sys_futex+0x358/0x4d0 [ 305.278594][ T8307] ? __x64_sys_openat+0x12d/0x210 [ 305.278624][ T8307] ? xfd_validate_state+0x129/0x190 [ 305.278653][ T8307] ? __x64_sys_bpf+0xce/0x140 [ 305.278716][ T8307] __x64_sys_bpf+0xce/0x140 [ 305.278740][ T8307] ? do_syscall_64+0x90/0x840 [ 305.278777][ T8307] do_syscall_64+0x115/0x840 [ 305.278812][ T8307] ? clear_bhb_loop+0x40/0x90 [ 305.278842][ T8307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.278867][ T8307] RIP: 0033:0x7f711ad9de59 [ 305.278888][ T8307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.278912][ T8307] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.278935][ T8307] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 305.278951][ T8307] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 305.278966][ T8307] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 305.278981][ T8307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.278996][ T8307] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 305.279031][ T8307] [ 307.032237][ T8314] FAULT_INJECTION: forcing a failure. [ 307.032237][ T8314] name failslab, interval 1, probability 0, space 0, times 0 [ 307.078820][ T8314] CPU: 0 UID: 0 PID: 8314 Comm: syz.0.489 Not tainted syzkaller #0 PREEMPT(full) [ 307.078854][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.078869][ T8314] Call Trace: [ 307.078877][ T8314] [ 307.078889][ T8314] dump_stack_lvl+0x100/0x190 [ 307.078919][ T8314] should_fail_ex.cold+0x5/0xa [ 307.078946][ T8314] should_failslab+0xc2/0x120 [ 307.078977][ T8314] __kmalloc_noprof+0xfc/0x820 [ 307.079003][ T8314] ? trace_kmem_cache_alloc+0xdd/0x100 [ 307.079033][ T8314] ? lsm_blob_alloc+0x68/0x90 [ 307.079072][ T8314] lsm_blob_alloc+0x68/0x90 [ 307.079105][ T8314] security_sk_alloc+0x2d/0x290 [ 307.079147][ T8314] sk_prot_alloc+0x1d1/0x2a0 [ 307.079182][ T8314] sk_alloc+0x36/0xe80 [ 307.079206][ T8314] inet6_create+0x385/0x12b0 [ 307.079247][ T8314] ? inet6_create+0x7f/0x12b0 [ 307.079284][ T8314] __sock_create+0x339/0x860 [ 307.079322][ T8314] __sys_socket+0x14d/0x260 [ 307.079357][ T8314] ? __pfx___sys_socket+0x10/0x10 [ 307.079400][ T8314] __x64_sys_socket+0x72/0xb0 [ 307.079434][ T8314] ? lockdep_hardirqs_on+0x78/0x100 [ 307.079469][ T8314] do_syscall_64+0x115/0x840 [ 307.079503][ T8314] ? clear_bhb_loop+0x40/0x90 [ 307.079533][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.079558][ T8314] RIP: 0033:0x7fb7cf99de59 [ 307.079578][ T8314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.079601][ T8314] RSP: 002b:00007fb7d0809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 307.079625][ T8314] RAX: ffffffffffffffda RBX: 00007fb7cfc25fa0 RCX: 00007fb7cf99de59 [ 307.079647][ T8314] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 307.079662][ T8314] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 307.079677][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.079691][ T8314] R13: 00007fb7cfc26038 R14: 00007fb7cfc25fa0 R15: 00007ffd603d4d28 [ 307.079721][ T8314] [ 308.026165][ T1046] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:7: bg 3: bad block bitmap checksum [ 308.115477][ T1046] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 4 with max blocks 69 with error 74 [ 308.205197][ T1046] EXT4-fs (sda1): This should not happen!! Data will be lost [ 308.205197][ T1046] [ 309.049644][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 309.134759][ T8353] vlan1: entered allmulticast mode [ 309.156640][ T8353] veth0_vlan: entered allmulticast mode [ 311.478931][ T8365] FAULT_INJECTION: forcing a failure. [ 311.478931][ T8365] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.514484][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.1.501 Not tainted syzkaller #0 PREEMPT(full) [ 311.514518][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.514533][ T8365] Call Trace: [ 311.514541][ T8365] [ 311.514550][ T8365] dump_stack_lvl+0x100/0x190 [ 311.514581][ T8365] should_fail_ex.cold+0x5/0xa [ 311.514612][ T8365] get_futex_key+0x1d2/0x14f0 [ 311.514654][ T8365] ? __pfx_get_futex_key+0x10/0x10 [ 311.514701][ T8365] futex_wait_setup+0x91/0x540 [ 311.514739][ T8365] __futex_wait+0x19f/0x300 [ 311.514773][ T8365] ? __pfx___futex_wait+0x10/0x10 [ 311.514801][ T8365] ? futex_hash+0x311/0x400 [ 311.514839][ T8365] ? __pfx_futex_wake_mark+0x10/0x10 [ 311.514873][ T8365] ? __pfx_futex_hash+0x10/0x10 [ 311.514917][ T8365] futex_wait+0xe6/0x370 [ 311.514946][ T8365] ? __pfx_futex_wait+0x10/0x10 [ 311.514984][ T8365] ? find_held_lock+0x2b/0x80 [ 311.515014][ T8365] do_futex+0x265/0x440 [ 311.515039][ T8365] ? __pfx_do_futex+0x10/0x10 [ 311.515069][ T8365] __x64_sys_futex+0x34f/0x4d0 [ 311.515094][ T8365] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.515124][ T8365] ? __pfx___x64_sys_futex+0x10/0x10 [ 311.515158][ T8365] do_syscall_64+0x115/0x840 [ 311.515193][ T8365] ? clear_bhb_loop+0x40/0x90 [ 311.515222][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.515248][ T8365] RIP: 0033:0x7f711ad9de59 [ 311.515275][ T8365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.515299][ T8365] RSP: 002b:00007f711bce60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 311.515323][ T8365] RAX: ffffffffffffffda RBX: 00007f711b026098 RCX: 00007f711ad9de59 [ 311.515340][ T8365] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f711b026098 [ 311.515354][ T8365] RBP: 00007f711b026090 R08: 0000000000000000 R09: 0000000000000000 [ 311.515369][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.515384][ T8365] R13: 00007f711b026128 R14: 00007fffbaba77b0 R15: 00007fffbaba7898 [ 311.515414][ T8365] [ 311.826359][ T8366] FAULT_INJECTION: forcing a failure. [ 311.826359][ T8366] name fail_futex, interval 1, probability 0, space 0, times 0 [ 311.839599][ T8366] CPU: 0 UID: 0 PID: 8366 Comm: syz.2.500 Not tainted syzkaller #0 PREEMPT(full) [ 311.839632][ T8366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.839648][ T8366] Call Trace: [ 311.839658][ T8366] [ 311.839668][ T8366] dump_stack_lvl+0x100/0x190 [ 311.839698][ T8366] should_fail_ex.cold+0x5/0xa [ 311.839725][ T8366] get_futex_key+0x1d2/0x14f0 [ 311.839766][ T8366] ? __pfx_get_futex_key+0x10/0x10 [ 311.839803][ T8366] ? find_held_lock+0x2b/0x80 [ 311.839830][ T8366] ? futex_wake+0x4ea/0x5e0 [ 311.839868][ T8366] futex_wake+0xf4/0x5e0 [ 311.839902][ T8366] ? __pfx_futex_wake+0x10/0x10 [ 311.839937][ T8366] ? find_held_lock+0x2b/0x80 [ 311.839967][ T8366] do_futex+0x2b2/0x440 [ 311.839990][ T8366] ? __pfx_do_futex+0x10/0x10 [ 311.840020][ T8366] __x64_sys_futex+0x34f/0x4d0 [ 311.840045][ T8366] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 311.840075][ T8366] ? __pfx___x64_sys_futex+0x10/0x10 [ 311.840109][ T8366] do_syscall_64+0x115/0x840 [ 311.840144][ T8366] ? clear_bhb_loop+0x40/0x90 [ 311.840173][ T8366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.840198][ T8366] RIP: 0033:0x7f6d7819de59 [ 311.840219][ T8366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.840243][ T8366] RSP: 002b:00007f6d78ffd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 311.840266][ T8366] RAX: ffffffffffffffda RBX: 00007f6d78426098 RCX: 00007f6d7819de59 [ 311.840282][ T8366] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6d7842609c [ 311.840297][ T8366] RBP: 00007f6d78426090 R08: 0000000000000001 R09: 0000000000000000 [ 311.840312][ T8366] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 311.840327][ T8366] R13: 00007f6d78426128 R14: 00007ffc7bacfb90 R15: 00007ffc7bacfc78 [ 311.840365][ T8366] [ 312.235641][ T8379] FAULT_INJECTION: forcing a failure. [ 312.235641][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 312.281033][ T8379] CPU: 0 UID: 0 PID: 8379 Comm: syz.0.504 Not tainted syzkaller #0 PREEMPT(full) [ 312.281066][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.281081][ T8379] Call Trace: [ 312.281090][ T8379] [ 312.281099][ T8379] dump_stack_lvl+0x100/0x190 [ 312.281132][ T8379] should_fail_ex.cold+0x5/0xa [ 312.281159][ T8379] should_failslab+0xc2/0x120 [ 312.281190][ T8379] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 312.281216][ T8379] ? rcu_read_lock_any_held+0x6a/0xa0 [ 312.281252][ T8379] ? find_held_lock+0x2b/0x80 [ 312.281279][ T8379] ? sock_alloc_inode+0x26/0x2c0 [ 312.281313][ T8379] ? __pfx_sock_alloc_inode+0x10/0x10 [ 312.281345][ T8379] sock_alloc_inode+0x26/0x2c0 [ 312.281379][ T8379] ? __pfx_sock_alloc_inode+0x10/0x10 [ 312.281408][ T8379] alloc_inode+0x68/0x250 [ 312.281436][ T8379] sock_alloc+0x44/0x280 [ 312.281462][ T8379] ? security_socket_create+0x7f/0x250 [ 312.281502][ T8379] __sock_create+0xc2/0x860 [ 312.281541][ T8379] __sys_socket+0x14d/0x260 [ 312.281576][ T8379] ? __pfx___sys_socket+0x10/0x10 [ 312.281619][ T8379] __x64_sys_socket+0x72/0xb0 [ 312.281653][ T8379] ? lockdep_hardirqs_on+0x78/0x100 [ 312.281689][ T8379] do_syscall_64+0x115/0x840 [ 312.281724][ T8379] ? clear_bhb_loop+0x40/0x90 [ 312.281756][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.281781][ T8379] RIP: 0033:0x7fb7cf99de59 [ 312.281801][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.281825][ T8379] RSP: 002b:00007fb7d0809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 312.281848][ T8379] RAX: ffffffffffffffda RBX: 00007fb7cfc25fa0 RCX: 00007fb7cf99de59 [ 312.281864][ T8379] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 312.281878][ T8379] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 312.281893][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.281907][ T8379] R13: 00007fb7cfc26038 R14: 00007fb7cfc25fa0 R15: 00007ffd603d4d28 [ 312.281937][ T8379] [ 312.281971][ T8379] socket: no more sockets [ 313.043724][ T8393] FAULT_INJECTION: forcing a failure. [ 313.043724][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 313.102297][ T8393] CPU: 0 UID: 0 PID: 8393 Comm: syz.1.507 Not tainted syzkaller #0 PREEMPT(full) [ 313.102330][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.102345][ T8393] Call Trace: [ 313.102354][ T8393] [ 313.102364][ T8393] dump_stack_lvl+0x100/0x190 [ 313.102395][ T8393] should_fail_ex.cold+0x5/0xa [ 313.102423][ T8393] should_failslab+0xc2/0x120 [ 313.102454][ T8393] __kmalloc_cache_noprof+0x91/0x6c0 [ 313.102494][ T8393] ? kvm_pic_init+0x4f/0x380 [ 313.102525][ T8393] kvm_pic_init+0x4f/0x380 [ 313.102554][ T8393] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 313.102595][ T8393] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 313.102640][ T8393] ? clockevents_program_event+0x1ef/0x820 [ 313.102682][ T8393] ? __lock_acquire+0x49f/0x1a40 [ 313.102723][ T8393] ? __lock_acquire+0x49f/0x1a40 [ 313.102764][ T8393] ? __lock_acquire+0x49f/0x1a40 [ 313.102815][ T8393] ? is_bpf_text_address+0x8a/0x1a0 [ 313.102847][ T8393] ? bpf_ksym_find+0x124/0x1c0 [ 313.102870][ T8393] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.102903][ T8393] ? is_bpf_text_address+0x94/0x1a0 [ 313.102934][ T8393] ? kernel_text_address+0x8d/0x100 [ 313.102967][ T8393] ? __pfx_widen_string+0x10/0x10 [ 313.102994][ T8393] ? __kernel_text_address+0xd/0x30 [ 313.103027][ T8393] ? unwind_get_return_address+0x59/0xa0 [ 313.103061][ T8393] ? arch_stack_walk+0xa6/0xf0 [ 313.103100][ T8393] ? tomoyo_path_number_perm+0x46d/0x580 [ 313.103128][ T8393] ? stack_trace_save+0x8e/0xc0 [ 313.103157][ T8393] ? __pfx_stack_trace_save+0x10/0x10 [ 313.103188][ T8393] ? stack_depot_save_flags+0x27/0x9d0 [ 313.103224][ T8393] ? __lock_acquire+0x49f/0x1a40 [ 313.103258][ T8393] ? tomoyo_path_number_perm+0x46d/0x580 [ 313.103284][ T8393] ? kasan_save_stack+0x3f/0x50 [ 313.103310][ T8393] ? kasan_save_stack+0x30/0x50 [ 313.103335][ T8393] ? kasan_save_track+0x14/0x30 [ 313.103359][ T8393] ? kasan_save_free_info+0x3b/0x70 [ 313.103399][ T8393] kvm_vm_ioctl+0x1564/0x4030 [ 313.103442][ T8393] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 313.103495][ T8393] ? kasan_quarantine_put+0x104/0x240 [ 313.103519][ T8393] ? lockdep_hardirqs_on+0x78/0x100 [ 313.103555][ T8393] ? find_held_lock+0x2b/0x80 [ 313.103580][ T8393] ? tomoyo_path_number_perm+0x28f/0x580 [ 313.103613][ T8393] ? tomoyo_path_number_perm+0x28f/0x580 [ 313.103647][ T8393] ? tomoyo_path_number_perm+0x188/0x580 [ 313.103675][ T8393] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 313.103703][ T8393] ? __pfx_futex_wait+0x10/0x10 [ 313.103738][ T8393] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 313.103772][ T8393] ? do_vfs_ioctl+0x226/0x13e0 [ 313.103803][ T8393] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 313.103842][ T8393] ? find_held_lock+0x2b/0x80 [ 313.103868][ T8393] ? __fget_files+0x215/0x3d0 [ 313.103901][ T8393] ? hook_file_ioctl_common+0x140/0x440 [ 313.103934][ T8393] ? __fget_files+0x21f/0x3d0 [ 313.103973][ T8393] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 313.104007][ T8393] __x64_sys_ioctl+0x18e/0x210 [ 313.104040][ T8393] do_syscall_64+0x115/0x840 [ 313.104075][ T8393] ? clear_bhb_loop+0x40/0x90 [ 313.104104][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.104129][ T8393] RIP: 0033:0x7f711ad9de59 [ 313.104149][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.104173][ T8393] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.104196][ T8393] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 313.104225][ T8393] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 313.104241][ T8393] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 313.104255][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.104269][ T8393] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 313.104301][ T8393] [ 314.182610][ T8378] Process accounting paused [ 314.509677][ T8407] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 314.685361][ T5637] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 315.030729][ T8417] FAULT_INJECTION: forcing a failure. [ 315.030729][ T8417] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 315.138385][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.2.512 Not tainted syzkaller #0 PREEMPT(full) [ 315.138416][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.138431][ T8417] Call Trace: [ 315.138438][ T8417] [ 315.138447][ T8417] dump_stack_lvl+0x100/0x190 [ 315.138485][ T8417] should_fail_ex.cold+0x5/0xa [ 315.138510][ T8417] _copy_from_iter+0x1f4/0x1690 [ 315.138545][ T8417] ? __asan_memset+0x23/0x50 [ 315.138584][ T8417] ? __pfx__copy_from_iter+0x10/0x10 [ 315.138615][ T8417] ? __pfx___alloc_skb+0x10/0x10 [ 315.138648][ T8417] netlink_sendmsg+0x808/0xda0 [ 315.138687][ T8417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.138729][ T8417] ? apparmor_socket_sendmsg+0x15b/0x270 [ 315.138770][ T8417] ____sys_sendmsg+0xa4d/0xbe0 [ 315.138799][ T8417] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.138835][ T8417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.138879][ T8417] ___sys_sendmsg+0x190/0x1e0 [ 315.138915][ T8417] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.138946][ T8417] ? __lock_acquire+0x49f/0x1a40 [ 315.138980][ T8417] ? get_pid_task+0x106/0x250 [ 315.139038][ T8417] __sys_sendmsg+0x160/0x210 [ 315.139064][ T8417] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.139103][ T8417] do_syscall_64+0x115/0x840 [ 315.139138][ T8417] ? clear_bhb_loop+0x40/0x90 [ 315.139166][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.139190][ T8417] RIP: 0033:0x7f6d7819de59 [ 315.139210][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.139233][ T8417] RSP: 002b:00007f6d78ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.139255][ T8417] RAX: ffffffffffffffda RBX: 00007f6d78426090 RCX: 00007f6d7819de59 [ 315.139270][ T8417] RDX: 0000000020008004 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 315.139285][ T8417] RBP: 00007f6d78ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 315.139299][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.139313][ T8417] R13: 00007f6d78426128 R14: 00007f6d78426090 R15: 00007ffc7bacfc78 [ 315.139342][ T8417] [ 315.530024][ T8427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.513'. [ 316.443441][ T84] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 63 with max blocks 1 with error 117 [ 316.541793][ T84] EXT4-fs (sda1): This should not happen!! Data will be lost [ 316.541793][ T84] [ 316.794948][ T84] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 63 with max blocks 1 with error 117 [ 316.860970][ T84] EXT4-fs (sda1): This should not happen!! Data will be lost [ 316.860970][ T84] [ 317.554311][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.561219][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.786429][ T8480] netlink: 346 bytes leftover after parsing attributes in process `syz.1.523'. [ 322.303668][ T8526] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 322.395874][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'. [ 322.801038][ T8531] netlink: 346 bytes leftover after parsing attributes in process `syz.1.533'. [ 324.290768][ T8558] FAULT_INJECTION: forcing a failure. [ 324.290768][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 324.801576][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz.1.537 Not tainted syzkaller #0 PREEMPT(full) [ 324.801609][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.801624][ T8558] Call Trace: [ 324.801632][ T8558] [ 324.801640][ T8558] dump_stack_lvl+0x100/0x190 [ 324.801671][ T8558] should_fail_ex.cold+0x5/0xa [ 324.801697][ T8558] should_failslab+0xc2/0x120 [ 324.801728][ T8558] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 324.801757][ T8558] ? sock_alloc_inode+0x26/0x2c0 [ 324.801790][ T8558] ? __pfx_sock_alloc_inode+0x10/0x10 [ 324.801822][ T8558] sock_alloc_inode+0x26/0x2c0 [ 324.801852][ T8558] ? __pfx_sock_alloc_inode+0x10/0x10 [ 324.801881][ T8558] alloc_inode+0x68/0x250 [ 324.801910][ T8558] sock_alloc+0x44/0x280 [ 324.801935][ T8558] ? security_socket_create+0x7f/0x250 [ 324.801976][ T8558] __sock_create+0xc2/0x860 [ 324.802014][ T8558] __sys_socket+0x14d/0x260 [ 324.802049][ T8558] ? __pfx___sys_socket+0x10/0x10 [ 324.802092][ T8558] __x64_sys_socket+0x72/0xb0 [ 324.802126][ T8558] ? lockdep_hardirqs_on+0x78/0x100 [ 324.802162][ T8558] do_syscall_64+0x115/0x840 [ 324.802196][ T8558] ? clear_bhb_loop+0x40/0x90 [ 324.802226][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.802251][ T8558] RIP: 0033:0x7f711ad9de59 [ 324.802283][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.802307][ T8558] RSP: 002b:00007f711bca4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 324.802330][ T8558] RAX: ffffffffffffffda RBX: 00007f711b026270 RCX: 00007f711ad9de59 [ 324.802346][ T8558] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 324.802360][ T8558] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 324.802375][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.802389][ T8558] R13: 00007f711b026308 R14: 00007f711b026270 R15: 00007fffbaba7898 [ 324.802419][ T8558] [ 324.802431][ T8558] socket: no more sockets [ 327.164372][ T8593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 330.990988][ T29] audit: type=1800 audit(1783081438.345:8): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.557" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 331.551803][ T8662] FAULT_INJECTION: forcing a failure. [ 331.551803][ T8662] name failslab, interval 1, probability 0, space 0, times 0 [ 331.636424][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.1.559 Not tainted syzkaller #0 PREEMPT(full) [ 331.636457][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.636473][ T8662] Call Trace: [ 331.636480][ T8662] [ 331.636490][ T8662] dump_stack_lvl+0x100/0x190 [ 331.636524][ T8662] should_fail_ex.cold+0x5/0xa [ 331.636551][ T8662] should_failslab+0xc2/0x120 [ 331.636583][ T8662] __kmalloc_cache_noprof+0x91/0x6c0 [ 331.636622][ T8662] ? kvm_pic_init+0x4f/0x380 [ 331.636654][ T8662] kvm_pic_init+0x4f/0x380 [ 331.636682][ T8662] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 331.636722][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.636756][ T8662] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 331.636799][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.636842][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.636883][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.636924][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.636975][ T8662] ? is_bpf_text_address+0x8a/0x1a0 [ 331.637007][ T8662] ? bpf_ksym_find+0x124/0x1c0 [ 331.637031][ T8662] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 331.637064][ T8662] ? is_bpf_text_address+0x94/0x1a0 [ 331.637095][ T8662] ? kernel_text_address+0x8d/0x100 [ 331.637127][ T8662] ? __pfx_widen_string+0x10/0x10 [ 331.637155][ T8662] ? __kernel_text_address+0xd/0x30 [ 331.637188][ T8662] ? unwind_get_return_address+0x59/0xa0 [ 331.637223][ T8662] ? arch_stack_walk+0xa6/0xf0 [ 331.637263][ T8662] ? tomoyo_path_number_perm+0x46d/0x580 [ 331.637300][ T8662] ? stack_trace_save+0x8e/0xc0 [ 331.637330][ T8662] ? __pfx_stack_trace_save+0x10/0x10 [ 331.637361][ T8662] ? stack_depot_save_flags+0x27/0x9d0 [ 331.637395][ T8662] ? __lock_acquire+0x49f/0x1a40 [ 331.637431][ T8662] ? tomoyo_path_number_perm+0x46d/0x580 [ 331.637457][ T8662] ? kasan_save_stack+0x3f/0x50 [ 331.637483][ T8662] ? kasan_save_stack+0x30/0x50 [ 331.637508][ T8662] ? kasan_save_track+0x14/0x30 [ 331.637533][ T8662] ? kasan_save_free_info+0x3b/0x70 [ 331.637573][ T8662] kvm_vm_ioctl+0x1564/0x4030 [ 331.637616][ T8662] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 331.637670][ T8662] ? kasan_quarantine_put+0x104/0x240 [ 331.637694][ T8662] ? lockdep_hardirqs_on+0x78/0x100 [ 331.637731][ T8662] ? find_held_lock+0x2b/0x80 [ 331.637757][ T8662] ? tomoyo_path_number_perm+0x28f/0x580 [ 331.637782][ T8662] ? tomoyo_path_number_perm+0x28f/0x580 [ 331.637813][ T8662] ? tomoyo_path_number_perm+0x188/0x580 [ 331.637841][ T8662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 331.637869][ T8662] ? __pfx_futex_wait+0x10/0x10 [ 331.637905][ T8662] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 331.637939][ T8662] ? do_vfs_ioctl+0x226/0x13e0 [ 331.637971][ T8662] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 331.638010][ T8662] ? find_held_lock+0x2b/0x80 [ 331.638035][ T8662] ? __fget_files+0x215/0x3d0 [ 331.638069][ T8662] ? hook_file_ioctl_common+0x140/0x440 [ 331.638103][ T8662] ? __fget_files+0x21f/0x3d0 [ 331.638143][ T8662] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 331.638177][ T8662] __x64_sys_ioctl+0x18e/0x210 [ 331.638210][ T8662] do_syscall_64+0x115/0x840 [ 331.638245][ T8662] ? clear_bhb_loop+0x40/0x90 [ 331.638286][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.638311][ T8662] RIP: 0033:0x7f711ad9de59 [ 331.638331][ T8662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.638355][ T8662] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.638378][ T8662] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 331.638394][ T8662] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 331.638409][ T8662] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 331.638424][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.638438][ T8662] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 331.638469][ T8662] [ 332.309870][ T8663] FAULT_INJECTION: forcing a failure. [ 332.309870][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 332.323013][ T8663] CPU: 0 UID: 0 PID: 8663 Comm: syz.3.558 Not tainted syzkaller #0 PREEMPT(full) [ 332.323046][ T8663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.323061][ T8663] Call Trace: [ 332.323082][ T8663] [ 332.323091][ T8663] dump_stack_lvl+0x100/0x190 [ 332.323125][ T8663] should_fail_ex.cold+0x5/0xa [ 332.323152][ T8663] should_failslab+0xc2/0x120 [ 332.323183][ T8663] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 332.323210][ T8663] ? rcu_read_lock_any_held+0x6a/0xa0 [ 332.323256][ T8663] ? find_held_lock+0x2b/0x80 [ 332.323283][ T8663] ? sock_alloc_inode+0x26/0x2c0 [ 332.323316][ T8663] ? __pfx_sock_alloc_inode+0x10/0x10 [ 332.323350][ T8663] sock_alloc_inode+0x26/0x2c0 [ 332.323383][ T8663] ? __pfx_sock_alloc_inode+0x10/0x10 [ 332.323415][ T8663] alloc_inode+0x68/0x250 [ 332.323460][ T8663] sock_alloc+0x44/0x280 [ 332.323485][ T8663] ? security_socket_create+0x7f/0x250 [ 332.323525][ T8663] __sock_create+0xc2/0x860 [ 332.323563][ T8663] __sys_socket+0x14d/0x260 [ 332.323598][ T8663] ? __pfx___sys_socket+0x10/0x10 [ 332.323644][ T8663] __x64_sys_socket+0x72/0xb0 [ 332.323680][ T8663] ? lockdep_hardirqs_on+0x78/0x100 [ 332.323737][ T8663] do_syscall_64+0x115/0x840 [ 332.323778][ T8663] ? clear_bhb_loop+0x40/0x90 [ 332.323820][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.323848][ T8663] RIP: 0033:0x7f65c459de59 [ 332.323871][ T8663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.323897][ T8663] RSP: 002b:00007f65c5464028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 332.323919][ T8663] RAX: ffffffffffffffda RBX: 00007f65c4826180 RCX: 00007f65c459de59 [ 332.323935][ T8663] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 332.323950][ T8663] RBP: 00007f65c4633e6f R08: 0000000000000000 R09: 0000000000000000 [ 332.323965][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.323980][ T8663] R13: 00007f65c4826218 R14: 00007f65c4826180 R15: 00007ffce4cddf08 [ 332.324012][ T8663] [ 332.324026][ T8663] socket: no more sockets [ 333.344067][ T8675] netlink: 346 bytes leftover after parsing attributes in process `syz.0.562'. [ 334.424216][ T8695] FAULT_INJECTION: forcing a failure. [ 334.424216][ T8695] name failslab, interval 1, probability 0, space 0, times 0 [ 334.436993][ T8695] CPU: 0 UID: 0 PID: 8695 Comm: syz.1.566 Not tainted syzkaller #0 PREEMPT(full) [ 334.437024][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.437039][ T8695] Call Trace: [ 334.437048][ T8695] [ 334.437058][ T8695] dump_stack_lvl+0x100/0x190 [ 334.437089][ T8695] should_fail_ex.cold+0x5/0xa [ 334.437112][ T8695] ? pcpu_block_update+0x20b/0x690 [ 334.437152][ T8695] should_failslab+0xc2/0x120 [ 334.437183][ T8695] kmem_cache_alloc_noprof+0x91/0x6a0 [ 334.437212][ T8695] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 334.437289][ T8695] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 334.437327][ T8695] idr_get_free+0x52e/0xa00 [ 334.437371][ T8695] idr_alloc_u32+0x1ac/0x320 [ 334.437411][ T8695] ? __pfx_idr_alloc_u32+0x10/0x10 [ 334.437450][ T8695] ? lock_acquire+0x1b9/0x370 [ 334.437494][ T8695] idr_alloc_cyclic+0x10b/0x230 [ 334.437533][ T8695] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 334.437569][ T8695] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 334.437593][ T8695] ? kfree+0x1e5/0x6c0 [ 334.437632][ T8695] map_create+0x1476/0x3120 [ 334.437680][ T8695] ? __pfx_map_create+0x10/0x10 [ 334.437721][ T8695] ? __might_fault+0xc5/0x140 [ 334.437776][ T8695] __sys_bpf+0x2a6e/0x4e80 [ 334.437837][ T8695] ? __pfx___sys_bpf+0x10/0x10 [ 334.437876][ T8695] ? find_held_lock+0x2b/0x80 [ 334.437901][ T8695] ? futex_wake+0x4ea/0x5e0 [ 334.437933][ T8695] ? futex_private_hash_put+0x115/0x1c0 [ 334.437977][ T8695] ? __pfx_futex_wake+0x10/0x10 [ 334.438008][ T8695] ? rcu_read_lock_any_held+0x6a/0xa0 [ 334.438037][ T8695] ? find_held_lock+0x2b/0x80 [ 334.438062][ T8695] ? ksys_write+0x190/0x250 [ 334.438097][ T8695] ? ksys_write+0x190/0x250 [ 334.438148][ T8695] ? __x64_sys_futex+0x34f/0x4d0 [ 334.438170][ T8695] ? __x64_sys_futex+0x358/0x4d0 [ 334.438193][ T8695] ? __x64_sys_openat+0x12d/0x210 [ 334.438223][ T8695] ? xfd_validate_state+0x129/0x190 [ 334.438254][ T8695] ? __x64_sys_bpf+0xce/0x140 [ 334.438276][ T8695] __x64_sys_bpf+0xce/0x140 [ 334.438300][ T8695] ? do_syscall_64+0x90/0x840 [ 334.438336][ T8695] do_syscall_64+0x115/0x840 [ 334.438370][ T8695] ? clear_bhb_loop+0x40/0x90 [ 334.438400][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.438425][ T8695] RIP: 0033:0x7f711ad9de59 [ 334.438446][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.438469][ T8695] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.438493][ T8695] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 334.438509][ T8695] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 334.438524][ T8695] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 334.438538][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.438553][ T8695] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 334.438583][ T8695] [ 334.899731][ T8699] random: crng reseeded on system resumption [ 335.039572][ T29] audit: type=1800 audit(1783081442.285:9): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.568" name="members" dev="configfs" ino=25401 res=0 errno=0 [ 335.573742][ T8714] FAULT_INJECTION: forcing a failure. [ 335.573742][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 335.634171][ T8714] CPU: 0 UID: 0 PID: 8714 Comm: syz.0.572 Not tainted syzkaller #0 PREEMPT(full) [ 335.634205][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.634221][ T8714] Call Trace: [ 335.634228][ T8714] [ 335.634237][ T8714] dump_stack_lvl+0x100/0x190 [ 335.634268][ T8714] should_fail_ex.cold+0x5/0xa [ 335.634295][ T8714] should_failslab+0xc2/0x120 [ 335.634326][ T8714] __kmalloc_cache_noprof+0x91/0x6c0 [ 335.634366][ T8714] ? kvm_pic_init+0x4f/0x380 [ 335.634398][ T8714] kvm_pic_init+0x4f/0x380 [ 335.634426][ T8714] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 335.634483][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.634519][ T8714] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 335.634561][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.634607][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.634648][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.634688][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.634740][ T8714] ? is_bpf_text_address+0x8a/0x1a0 [ 335.634773][ T8714] ? bpf_ksym_find+0x124/0x1c0 [ 335.634796][ T8714] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.634863][ T8714] ? is_bpf_text_address+0x94/0x1a0 [ 335.634895][ T8714] ? kernel_text_address+0x8d/0x100 [ 335.634928][ T8714] ? __pfx_widen_string+0x10/0x10 [ 335.634957][ T8714] ? __kernel_text_address+0xd/0x30 [ 335.634990][ T8714] ? unwind_get_return_address+0x59/0xa0 [ 335.635028][ T8714] ? arch_stack_walk+0xa6/0xf0 [ 335.635067][ T8714] ? tomoyo_path_number_perm+0x46d/0x580 [ 335.635094][ T8714] ? stack_trace_save+0x8e/0xc0 [ 335.635124][ T8714] ? __pfx_stack_trace_save+0x10/0x10 [ 335.635155][ T8714] ? stack_depot_save_flags+0x27/0x9d0 [ 335.635189][ T8714] ? __lock_acquire+0x49f/0x1a40 [ 335.635224][ T8714] ? tomoyo_path_number_perm+0x46d/0x580 [ 335.635250][ T8714] ? kasan_save_stack+0x3f/0x50 [ 335.635275][ T8714] ? kasan_save_stack+0x30/0x50 [ 335.635300][ T8714] ? kasan_save_track+0x14/0x30 [ 335.635325][ T8714] ? kasan_save_free_info+0x3b/0x70 [ 335.635365][ T8714] kvm_vm_ioctl+0x1564/0x4030 [ 335.635408][ T8714] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 335.635468][ T8714] ? kasan_quarantine_put+0x104/0x240 [ 335.635492][ T8714] ? lockdep_hardirqs_on+0x78/0x100 [ 335.635529][ T8714] ? find_held_lock+0x2b/0x80 [ 335.635555][ T8714] ? tomoyo_path_number_perm+0x28f/0x580 [ 335.635580][ T8714] ? tomoyo_path_number_perm+0x28f/0x580 [ 335.635612][ T8714] ? tomoyo_path_number_perm+0x188/0x580 [ 335.635640][ T8714] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.635668][ T8714] ? __pfx_futex_wait+0x10/0x10 [ 335.635703][ T8714] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.635737][ T8714] ? do_vfs_ioctl+0x226/0x13e0 [ 335.635768][ T8714] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 335.635807][ T8714] ? find_held_lock+0x2b/0x80 [ 335.635832][ T8714] ? __fget_files+0x215/0x3d0 [ 335.635866][ T8714] ? hook_file_ioctl_common+0x140/0x440 [ 335.635899][ T8714] ? __fget_files+0x21f/0x3d0 [ 335.635937][ T8714] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 335.635971][ T8714] __x64_sys_ioctl+0x18e/0x210 [ 335.636004][ T8714] do_syscall_64+0x115/0x840 [ 335.636039][ T8714] ? clear_bhb_loop+0x40/0x90 [ 335.636068][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.636093][ T8714] RIP: 0033:0x7fb7cf99de59 [ 335.636114][ T8714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.636138][ T8714] RSP: 002b:00007fb7d0809028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.636161][ T8714] RAX: ffffffffffffffda RBX: 00007fb7cfc25fa0 RCX: 00007fb7cf99de59 [ 335.636177][ T8714] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 335.636192][ T8714] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 335.636207][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.636221][ T8714] R13: 00007fb7cfc26038 R14: 00007fb7cfc25fa0 R15: 00007ffd603d4d28 [ 335.636252][ T8714] [ 336.424881][ T8722] netlink: 342 bytes leftover after parsing attributes in process `syz.0.574'. [ 340.811023][ T8776] FAULT_INJECTION: forcing a failure. [ 340.811023][ T8776] name failslab, interval 1, probability 0, space 0, times 0 [ 340.865763][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.587'. [ 340.887722][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.3.584 Not tainted syzkaller #0 PREEMPT(full) [ 340.887755][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.887770][ T8776] Call Trace: [ 340.887779][ T8776] [ 340.887806][ T8776] dump_stack_lvl+0x100/0x190 [ 340.887838][ T8776] should_fail_ex.cold+0x5/0xa [ 340.887867][ T8776] should_failslab+0xc2/0x120 [ 340.887897][ T8776] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 340.887926][ T8776] ? sock_alloc_inode+0x26/0x2c0 [ 340.887958][ T8776] ? __pfx_sock_alloc_inode+0x10/0x10 [ 340.887990][ T8776] sock_alloc_inode+0x26/0x2c0 [ 340.888021][ T8776] ? __pfx_sock_alloc_inode+0x10/0x10 [ 340.888051][ T8776] alloc_inode+0x68/0x250 [ 340.888080][ T8776] sock_alloc+0x44/0x280 [ 340.888106][ T8776] ? security_socket_create+0x7f/0x250 [ 340.888154][ T8776] __sock_create+0xc2/0x860 [ 340.888191][ T8776] __sys_socket+0x14d/0x260 [ 340.888226][ T8776] ? __pfx___sys_socket+0x10/0x10 [ 340.888269][ T8776] __x64_sys_socket+0x72/0xb0 [ 340.888307][ T8776] ? lockdep_hardirqs_on+0x78/0x100 [ 340.888342][ T8776] do_syscall_64+0x115/0x840 [ 340.888377][ T8776] ? clear_bhb_loop+0x40/0x90 [ 340.888406][ T8776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.888431][ T8776] RIP: 0033:0x7f65c459de59 [ 340.888452][ T8776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.888476][ T8776] RSP: 002b:00007f65c5485028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 340.888499][ T8776] RAX: ffffffffffffffda RBX: 00007f65c4826090 RCX: 00007f65c459de59 [ 340.888515][ T8776] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 340.888530][ T8776] RBP: 00007f65c4633e6f R08: 0000000000000000 R09: 0000000000000000 [ 340.888544][ T8776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.888559][ T8776] R13: 00007f65c4826128 R14: 00007f65c4826090 R15: 00007ffce4cddf08 [ 340.888589][ T8776] [ 340.888611][ T8776] socket: no more sockets [ 342.338633][ T8812] FAULT_INJECTION: forcing a failure. [ 342.338633][ T8812] name fail_futex, interval 1, probability 0, space 0, times 0 [ 342.404579][ T8812] CPU: 0 UID: 0 PID: 8812 Comm: syz.3.592 Not tainted syzkaller #0 PREEMPT(full) [ 342.404613][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.404628][ T8812] Call Trace: [ 342.404635][ T8812] [ 342.404644][ T8812] dump_stack_lvl+0x100/0x190 [ 342.404675][ T8812] should_fail_ex.cold+0x5/0xa [ 342.404706][ T8812] get_futex_key+0x1d2/0x14f0 [ 342.404749][ T8812] ? __pfx_get_futex_key+0x10/0x10 [ 342.404786][ T8812] ? __lock_acquire+0x49f/0x1a40 [ 342.404824][ T8812] ? prepare_signal+0x154/0xe80 [ 342.404862][ T8812] futex_wake+0xf4/0x5e0 [ 342.404888][ T8812] ? __pfx_prepare_signal+0x10/0x10 [ 342.404925][ T8812] ? __pfx_futex_wake+0x10/0x10 [ 342.404954][ T8812] ? find_held_lock+0x2b/0x80 [ 342.404981][ T8812] ? do_send_specific+0x152/0x360 [ 342.405014][ T8812] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.405054][ T8812] do_futex+0x2b2/0x440 [ 342.405078][ T8812] ? __pfx_do_futex+0x10/0x10 [ 342.405108][ T8812] __x64_sys_futex+0x34f/0x4d0 [ 342.405133][ T8812] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 342.405167][ T8812] ? __pfx___x64_sys_futex+0x10/0x10 [ 342.405201][ T8812] do_syscall_64+0x115/0x840 [ 342.405236][ T8812] ? clear_bhb_loop+0x40/0x90 [ 342.405265][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.405290][ T8812] RIP: 0033:0x7f65c459de59 [ 342.405309][ T8812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.405333][ T8812] RSP: 002b:00007f65c54a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 342.405356][ T8812] RAX: ffffffffffffffda RBX: 00007f65c4825fa8 RCX: 00007f65c459de59 [ 342.405372][ T8812] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f65c4825fac [ 342.405387][ T8812] RBP: 00007f65c4825fa0 R08: 0000000000000001 R09: 0000000000000000 [ 342.405402][ T8812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.405424][ T8812] R13: 00007f65c4826038 R14: 00007ffce4cdde20 R15: 00007ffce4cddf08 [ 342.405454][ T8812] [ 343.445245][ T8828] FAULT_INJECTION: forcing a failure. [ 343.445245][ T8828] name failslab, interval 1, probability 0, space 0, times 0 [ 343.482362][ T8828] CPU: 0 UID: 0 PID: 8828 Comm: syz.1.596 Not tainted syzkaller #0 PREEMPT(full) [ 343.482396][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.482411][ T8828] Call Trace: [ 343.482427][ T8828] [ 343.482436][ T8828] dump_stack_lvl+0x100/0x190 [ 343.482467][ T8828] should_fail_ex.cold+0x5/0xa [ 343.482494][ T8828] should_failslab+0xc2/0x120 [ 343.482525][ T8828] __kmalloc_noprof+0xfc/0x820 [ 343.482553][ T8828] ? kvm_io_bus_register_dev+0x1d2/0x720 [ 343.482599][ T8828] kvm_io_bus_register_dev+0x1d2/0x720 [ 343.482644][ T8828] kvm_pic_init+0x22f/0x380 [ 343.482674][ T8828] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 343.482714][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.482750][ T8828] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 343.482792][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.482835][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.482876][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.482917][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.482968][ T8828] ? is_bpf_text_address+0x8a/0x1a0 [ 343.483000][ T8828] ? bpf_ksym_find+0x124/0x1c0 [ 343.483022][ T8828] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 343.483056][ T8828] ? is_bpf_text_address+0x94/0x1a0 [ 343.483087][ T8828] ? kernel_text_address+0x8d/0x100 [ 343.483120][ T8828] ? __pfx_widen_string+0x10/0x10 [ 343.483148][ T8828] ? __kernel_text_address+0xd/0x30 [ 343.483180][ T8828] ? unwind_get_return_address+0x59/0xa0 [ 343.483214][ T8828] ? arch_stack_walk+0xa6/0xf0 [ 343.483255][ T8828] ? tomoyo_path_number_perm+0x46d/0x580 [ 343.483283][ T8828] ? stack_trace_save+0x8e/0xc0 [ 343.483313][ T8828] ? __pfx_stack_trace_save+0x10/0x10 [ 343.483343][ T8828] ? stack_depot_save_flags+0x27/0x9d0 [ 343.483377][ T8828] ? __lock_acquire+0x49f/0x1a40 [ 343.483418][ T8828] ? tomoyo_path_number_perm+0x46d/0x580 [ 343.483445][ T8828] ? kasan_save_stack+0x3f/0x50 [ 343.483470][ T8828] ? kasan_save_stack+0x30/0x50 [ 343.483495][ T8828] ? kasan_save_track+0x14/0x30 [ 343.483520][ T8828] ? kasan_save_free_info+0x3b/0x70 [ 343.483560][ T8828] kvm_vm_ioctl+0x1564/0x4030 [ 343.483604][ T8828] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 343.483657][ T8828] ? kasan_quarantine_put+0x104/0x240 [ 343.483681][ T8828] ? lockdep_hardirqs_on+0x78/0x100 [ 343.483718][ T8828] ? find_held_lock+0x2b/0x80 [ 343.483744][ T8828] ? tomoyo_path_number_perm+0x28f/0x580 [ 343.483769][ T8828] ? tomoyo_path_number_perm+0x28f/0x580 [ 343.483800][ T8828] ? tomoyo_path_number_perm+0x188/0x580 [ 343.483828][ T8828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.483865][ T8828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.483899][ T8828] ? do_vfs_ioctl+0x226/0x13e0 [ 343.483931][ T8828] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 343.483970][ T8828] ? find_held_lock+0x2b/0x80 [ 343.483996][ T8828] ? __fget_files+0x215/0x3d0 [ 343.484039][ T8828] ? hook_file_ioctl_common+0x140/0x440 [ 343.484072][ T8828] ? __fget_files+0x21f/0x3d0 [ 343.484112][ T8828] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 343.484147][ T8828] __x64_sys_ioctl+0x18e/0x210 [ 343.484180][ T8828] do_syscall_64+0x115/0x840 [ 343.484215][ T8828] ? clear_bhb_loop+0x40/0x90 [ 343.484245][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.484270][ T8828] RIP: 0033:0x7f711ad9de59 [ 343.484290][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.484315][ T8828] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.484338][ T8828] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 343.484354][ T8828] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 343.484369][ T8828] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 343.484385][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.484400][ T8828] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 343.484438][ T8828] [ 344.456508][ T8848] FAULT_INJECTION: forcing a failure. [ 344.456508][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 344.469363][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.3.600 Not tainted syzkaller #0 PREEMPT(full) [ 344.469395][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.469411][ T8848] Call Trace: [ 344.469419][ T8848] [ 344.469429][ T8848] dump_stack_lvl+0x100/0x190 [ 344.469459][ T8848] should_fail_ex.cold+0x5/0xa [ 344.469483][ T8848] ? pcpu_block_update+0x36a/0x690 [ 344.469520][ T8848] should_failslab+0xc2/0x120 [ 344.469550][ T8848] kmem_cache_alloc_noprof+0x91/0x6a0 [ 344.469578][ T8848] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 344.469618][ T8848] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 344.469655][ T8848] idr_get_free+0x52e/0xa00 [ 344.469699][ T8848] idr_alloc_u32+0x1ac/0x320 [ 344.469738][ T8848] ? __pfx_idr_alloc_u32+0x10/0x10 [ 344.469779][ T8848] ? lock_acquire+0x1b9/0x370 [ 344.469820][ T8848] idr_alloc_cyclic+0x10b/0x230 [ 344.469859][ T8848] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 344.469896][ T8848] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 344.469920][ T8848] ? kfree+0x1e5/0x6c0 [ 344.469984][ T8848] map_create+0x1476/0x3120 [ 344.470032][ T8848] ? __pfx_map_create+0x10/0x10 [ 344.470074][ T8848] ? __might_fault+0xc5/0x140 [ 344.470125][ T8848] __sys_bpf+0x2a6e/0x4e80 [ 344.470163][ T8848] ? futex_hash+0x311/0x400 [ 344.470207][ T8848] ? __pfx___sys_bpf+0x10/0x10 [ 344.470244][ T8848] ? find_held_lock+0x2b/0x80 [ 344.470275][ T8848] ? futex_wake+0x4ea/0x5e0 [ 344.470306][ T8848] ? futex_private_hash_put+0x115/0x1c0 [ 344.470351][ T8848] ? __pfx_futex_wake+0x10/0x10 [ 344.470382][ T8848] ? rcu_read_lock_any_held+0x6a/0xa0 [ 344.470411][ T8848] ? find_held_lock+0x2b/0x80 [ 344.470437][ T8848] ? ksys_write+0x190/0x250 [ 344.470471][ T8848] ? ksys_write+0x190/0x250 [ 344.470524][ T8848] ? __x64_sys_futex+0x34f/0x4d0 [ 344.470546][ T8848] ? __x64_sys_futex+0x358/0x4d0 [ 344.470570][ T8848] ? __x64_sys_openat+0x12d/0x210 [ 344.470599][ T8848] ? xfd_validate_state+0x129/0x190 [ 344.470628][ T8848] ? __x64_sys_bpf+0xce/0x140 [ 344.470650][ T8848] __x64_sys_bpf+0xce/0x140 [ 344.470674][ T8848] ? do_syscall_64+0x90/0x840 [ 344.470710][ T8848] do_syscall_64+0x115/0x840 [ 344.470745][ T8848] ? clear_bhb_loop+0x40/0x90 [ 344.470775][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.470800][ T8848] RIP: 0033:0x7f65c459de59 [ 344.470821][ T8848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.470844][ T8848] RSP: 002b:00007f65c54a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.470867][ T8848] RAX: ffffffffffffffda RBX: 00007f65c4825fa0 RCX: 00007f65c459de59 [ 344.470883][ T8848] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 344.470898][ T8848] RBP: 00007f65c4633e6f R08: 0000000000000000 R09: 0000000000000000 [ 344.470913][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.470933][ T8848] R13: 00007f65c4826038 R14: 00007f65c4825fa0 R15: 00007ffce4cddf08 [ 344.470964][ T8848] [ 346.674717][ T8874] FAULT_INJECTION: forcing a failure. [ 346.674717][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 346.687506][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.2.605 Not tainted syzkaller #0 PREEMPT(full) [ 346.687537][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.687552][ T8874] Call Trace: [ 346.687561][ T8874] [ 346.687570][ T8874] dump_stack_lvl+0x100/0x190 [ 346.687601][ T8874] should_fail_ex.cold+0x5/0xa [ 346.687629][ T8874] should_failslab+0xc2/0x120 [ 346.687660][ T8874] kmem_cache_alloc_noprof+0x91/0x6a0 [ 346.687688][ T8874] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 346.687727][ T8874] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 346.687765][ T8874] idr_get_free+0x52e/0xa00 [ 346.687809][ T8874] idr_alloc_u32+0x1ac/0x320 [ 346.687849][ T8874] ? __pfx_idr_alloc_u32+0x10/0x10 [ 346.687889][ T8874] ? lock_acquire+0x1b9/0x370 [ 346.687930][ T8874] idr_alloc_cyclic+0x10b/0x230 [ 346.687969][ T8874] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 346.688006][ T8874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 346.688030][ T8874] ? kfree+0x1e5/0x6c0 [ 346.688069][ T8874] map_create+0x1476/0x3120 [ 346.688117][ T8874] ? __pfx_map_create+0x10/0x10 [ 346.688159][ T8874] ? __might_fault+0xc5/0x140 [ 346.688217][ T8874] __sys_bpf+0x2a6e/0x4e80 [ 346.688265][ T8874] ? __pfx___sys_bpf+0x10/0x10 [ 346.688304][ T8874] ? __pfx_futex_hash+0x10/0x10 [ 346.688341][ T8874] ? get_pid_task+0xfc/0x250 [ 346.688368][ T8874] ? get_pid_task+0xfc/0x250 [ 346.688401][ T8874] ? futex_wait+0x11e/0x370 [ 346.688430][ T8874] ? __pfx_futex_wait+0x10/0x10 [ 346.688457][ T8874] ? find_held_lock+0x2b/0x80 [ 346.688490][ T8874] ? rcu_read_lock_any_held+0x6a/0xa0 [ 346.688518][ T8874] ? find_held_lock+0x2b/0x80 [ 346.688544][ T8874] ? ksys_write+0x190/0x250 [ 346.688578][ T8874] ? ksys_write+0x190/0x250 [ 346.688630][ T8874] ? __x64_sys_futex+0x34f/0x4d0 [ 346.688652][ T8874] ? __x64_sys_futex+0x358/0x4d0 [ 346.688679][ T8874] ? xfd_validate_state+0x129/0x190 [ 346.688707][ T8874] ? __x64_sys_bpf+0xce/0x140 [ 346.688738][ T8874] __x64_sys_bpf+0xce/0x140 [ 346.688761][ T8874] ? do_syscall_64+0x90/0x840 [ 346.688799][ T8874] do_syscall_64+0x115/0x840 [ 346.688833][ T8874] ? clear_bhb_loop+0x40/0x90 [ 346.688863][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.688888][ T8874] RIP: 0033:0x7f6d7819de59 [ 346.688912][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.688936][ T8874] RSP: 002b:00007f6d7901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.688959][ T8874] RAX: ffffffffffffffda RBX: 00007f6d78425fa0 RCX: 00007f6d7819de59 [ 346.688975][ T8874] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 346.688990][ T8874] RBP: 00007f6d78233e6f R08: 0000000000000000 R09: 0000000000000000 [ 346.689005][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.689020][ T8874] R13: 00007f6d78426038 R14: 00007f6d78425fa0 R15: 00007ffc7bacfc78 [ 346.689050][ T8874] [ 347.335084][ T8877] FAULT_INJECTION: forcing a failure. [ 347.335084][ T8877] name failslab, interval 1, probability 0, space 0, times 0 [ 347.396008][ T8877] CPU: 0 UID: 0 PID: 8877 Comm: syz.1.604 Not tainted syzkaller #0 PREEMPT(full) [ 347.396041][ T8877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 347.396056][ T8877] Call Trace: [ 347.396063][ T8877] [ 347.396072][ T8877] dump_stack_lvl+0x100/0x190 [ 347.396103][ T8877] should_fail_ex.cold+0x5/0xa [ 347.396131][ T8877] should_failslab+0xc2/0x120 [ 347.396161][ T8877] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 347.396191][ T8877] ? sock_alloc_inode+0x26/0x2c0 [ 347.396233][ T8877] ? __pfx_sock_alloc_inode+0x10/0x10 [ 347.396265][ T8877] sock_alloc_inode+0x26/0x2c0 [ 347.396295][ T8877] ? __pfx_sock_alloc_inode+0x10/0x10 [ 347.396325][ T8877] alloc_inode+0x68/0x250 [ 347.396353][ T8877] sock_alloc+0x44/0x280 [ 347.396379][ T8877] ? security_socket_create+0x7f/0x250 [ 347.396419][ T8877] __sock_create+0xc2/0x860 [ 347.396457][ T8877] __sys_socket+0x14d/0x260 [ 347.396492][ T8877] ? __pfx___sys_socket+0x10/0x10 [ 347.396536][ T8877] __x64_sys_socket+0x72/0xb0 [ 347.396570][ T8877] ? lockdep_hardirqs_on+0x78/0x100 [ 347.396605][ T8877] do_syscall_64+0x115/0x840 [ 347.396639][ T8877] ? clear_bhb_loop+0x40/0x90 [ 347.396669][ T8877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.396694][ T8877] RIP: 0033:0x7f711ad9de59 [ 347.396713][ T8877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.396736][ T8877] RSP: 002b:00007f711bcc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 347.396759][ T8877] RAX: ffffffffffffffda RBX: 00007f711b026180 RCX: 00007f711ad9de59 [ 347.396775][ T8877] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 347.396789][ T8877] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 347.396804][ T8877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.396818][ T8877] R13: 00007f711b026218 R14: 00007f711b026180 R15: 00007fffbaba7898 [ 347.396850][ T8877] [ 347.396862][ T8877] socket: no more sockets [ 347.693120][ T8842] Process accounting resumed [ 349.202900][ T8899] FAULT_INJECTION: forcing a failure. [ 349.202900][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 349.249102][ T8899] CPU: 0 UID: 0 PID: 8899 Comm: syz.2.610 Not tainted syzkaller #0 PREEMPT(full) [ 349.249134][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.249157][ T8899] Call Trace: [ 349.249196][ T8899] [ 349.249205][ T8899] dump_stack_lvl+0x100/0x190 [ 349.249289][ T8899] should_fail_ex.cold+0x5/0xa [ 349.249331][ T8899] should_failslab+0xc2/0x120 [ 349.249380][ T8899] __kmalloc_cache_noprof+0x91/0x6c0 [ 349.249425][ T8899] ? kvm_pic_init+0x4f/0x380 [ 349.249467][ T8899] kvm_pic_init+0x4f/0x380 [ 349.249502][ T8899] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 349.249550][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.249600][ T8899] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 349.249642][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.249686][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.249726][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.249767][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.249819][ T8899] ? is_bpf_text_address+0x8a/0x1a0 [ 349.249865][ T8899] ? bpf_ksym_find+0x124/0x1c0 [ 349.249889][ T8899] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 349.249933][ T8899] ? is_bpf_text_address+0x94/0x1a0 [ 349.249965][ T8899] ? kernel_text_address+0x8d/0x100 [ 349.250007][ T8899] ? __pfx_widen_string+0x10/0x10 [ 349.250096][ T8899] ? __kernel_text_address+0xd/0x30 [ 349.250129][ T8899] ? unwind_get_return_address+0x59/0xa0 [ 349.250169][ T8899] ? arch_stack_walk+0xa6/0xf0 [ 349.250213][ T8899] ? tomoyo_path_number_perm+0x46d/0x580 [ 349.250262][ T8899] ? stack_trace_save+0x8e/0xc0 [ 349.250292][ T8899] ? __pfx_stack_trace_save+0x10/0x10 [ 349.250323][ T8899] ? stack_depot_save_flags+0x27/0x9d0 [ 349.250371][ T8899] ? __lock_acquire+0x49f/0x1a40 [ 349.250405][ T8899] ? tomoyo_path_number_perm+0x46d/0x580 [ 349.250431][ T8899] ? kasan_save_stack+0x3f/0x50 [ 349.250456][ T8899] ? kasan_save_stack+0x30/0x50 [ 349.250487][ T8899] ? kasan_save_track+0x14/0x30 [ 349.250512][ T8899] ? kasan_save_free_info+0x3b/0x70 [ 349.250552][ T8899] kvm_vm_ioctl+0x1564/0x4030 [ 349.250602][ T8899] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 349.250655][ T8899] ? kasan_quarantine_put+0x104/0x240 [ 349.250679][ T8899] ? lockdep_hardirqs_on+0x78/0x100 [ 349.250753][ T8899] ? find_held_lock+0x2b/0x80 [ 349.250779][ T8899] ? tomoyo_path_number_perm+0x28f/0x580 [ 349.250805][ T8899] ? tomoyo_path_number_perm+0x28f/0x580 [ 349.250836][ T8899] ? tomoyo_path_number_perm+0x188/0x580 [ 349.250864][ T8899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.250893][ T8899] ? __pfx_futex_wait+0x10/0x10 [ 349.250928][ T8899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 349.250967][ T8899] ? do_vfs_ioctl+0x226/0x13e0 [ 349.251013][ T8899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 349.251052][ T8899] ? find_held_lock+0x2b/0x80 [ 349.251078][ T8899] ? __fget_files+0x215/0x3d0 [ 349.251112][ T8899] ? hook_file_ioctl_common+0x140/0x440 [ 349.251156][ T8899] ? __fget_files+0x21f/0x3d0 [ 349.251195][ T8899] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 349.251230][ T8899] __x64_sys_ioctl+0x18e/0x210 [ 349.251263][ T8899] do_syscall_64+0x115/0x840 [ 349.251299][ T8899] ? clear_bhb_loop+0x40/0x90 [ 349.251337][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.251363][ T8899] RIP: 0033:0x7f6d7819de59 [ 349.251384][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.251410][ T8899] RSP: 002b:00007f6d7901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.251466][ T8899] RAX: ffffffffffffffda RBX: 00007f6d78425fa0 RCX: 00007f6d7819de59 [ 349.251490][ T8899] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 349.251505][ T8899] RBP: 00007f6d78233e6f R08: 0000000000000000 R09: 0000000000000000 [ 349.251519][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.251534][ T8899] R13: 00007f6d78426038 R14: 00007f6d78425fa0 R15: 00007ffc7bacfc78 [ 349.251564][ T8899] [ 351.135777][ T35] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 925 with max blocks 4 with error 117 [ 351.210126][ T35] EXT4-fs (sda1): This should not happen!! Data will be lost [ 351.210126][ T35] [ 352.205783][ T8939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.618'. [ 352.512805][ T8932] FAULT_INJECTION: forcing a failure. [ 352.512805][ T8932] name failslab, interval 1, probability 0, space 0, times 0 [ 352.579146][ T8932] CPU: 0 UID: 0 PID: 8932 Comm: syz.1.617 Not tainted syzkaller #0 PREEMPT(full) [ 352.579179][ T8932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.579193][ T8932] Call Trace: [ 352.579201][ T8932] [ 352.579210][ T8932] dump_stack_lvl+0x100/0x190 [ 352.579240][ T8932] should_fail_ex.cold+0x5/0xa [ 352.579268][ T8932] should_failslab+0xc2/0x120 [ 352.579299][ T8932] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 352.579328][ T8932] ? sock_alloc_inode+0x26/0x2c0 [ 352.579503][ T8932] ? __pfx_sock_alloc_inode+0x10/0x10 [ 352.579536][ T8932] sock_alloc_inode+0x26/0x2c0 [ 352.579566][ T8932] ? __pfx_sock_alloc_inode+0x10/0x10 [ 352.579596][ T8932] alloc_inode+0x68/0x250 [ 352.579624][ T8932] sock_alloc+0x44/0x280 [ 352.579663][ T8932] ? security_socket_create+0x7f/0x250 [ 352.579703][ T8932] __sock_create+0xc2/0x860 [ 352.579764][ T8932] __sys_socket+0x14d/0x260 [ 352.579799][ T8932] ? __pfx___sys_socket+0x10/0x10 [ 352.579843][ T8932] __x64_sys_socket+0x72/0xb0 [ 352.579877][ T8932] ? lockdep_hardirqs_on+0x78/0x100 [ 352.579914][ T8932] do_syscall_64+0x115/0x840 [ 352.579948][ T8932] ? clear_bhb_loop+0x40/0x90 [ 352.579978][ T8932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.580003][ T8932] RIP: 0033:0x7f711ad9de59 [ 352.580024][ T8932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.580057][ T8932] RSP: 002b:00007f711bd07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 352.580080][ T8932] RAX: ffffffffffffffda RBX: 00007f711b025fa0 RCX: 00007f711ad9de59 [ 352.580096][ T8932] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 352.580111][ T8932] RBP: 00007f711ae33e6f R08: 0000000000000000 R09: 0000000000000000 [ 352.580126][ T8932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.580141][ T8932] R13: 00007f711b026038 R14: 00007f711b025fa0 R15: 00007fffbaba7898 [ 352.580178][ T8932] [ 352.580209][ T8932] socket: no more sockets [ 358.038923][ T9010] netlink: 342 bytes leftover after parsing attributes in process `syz.2.631'. [ 358.068730][ T9022] vivid-007: ================= START STATUS ================= [ 358.144836][ T9022] vivid-007: Enable Output Cropping: true grabbed [ 358.193328][ T9022] vivid-007: Enable Output Composing: true grabbed [ 358.250178][ T9022] vivid-007: Enable Output Scaler: true grabbed [ 358.343777][ T9022] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 358.500208][ T9022] vivid-007: Transmit Mode: HDMI grabbed [ 358.573917][ T9022] vivid-007: Hotplug Present: 0x00000000 [ 358.657929][ T9022] vivid-007: RxSense Present: 0x00000000 [ 358.704739][ T9022] vivid-007: EDID Present: 0x00000000 [ 358.796840][ T9022] vivid-007: ================== END STATUS ================== [ 359.001402][ T9036] ubi0: attaching mtd0 [ 359.027183][ T9036] ubi0: scanning is finished [ 359.166775][ T9036] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 359.193515][ T9036] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 359.221408][ T9036] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 359.251606][ T9036] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 359.279172][ T9036] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 359.305151][ T9036] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 359.347340][ T9036] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 565818358 [ 359.397408][ T9036] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 359.453995][ T9037] ubi0: background thread "ubi_bgt0d" started, PID 9037 [ 360.793215][ T9062] ubi: mtd0 is already attached to ubi0 [ 368.660579][ T9181] FAULT_INJECTION: forcing a failure. [ 368.660579][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 368.746479][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.0.664 Not tainted syzkaller #0 PREEMPT(full) [ 368.746512][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.746528][ T9181] Call Trace: [ 368.746535][ T9181] [ 368.746544][ T9181] dump_stack_lvl+0x100/0x190 [ 368.746574][ T9181] should_fail_ex.cold+0x5/0xa [ 368.746602][ T9181] should_failslab+0xc2/0x120 [ 368.746633][ T9181] __kmalloc_noprof+0xfc/0x820 [ 368.746660][ T9181] ? copy_splice_read+0x1a3/0xbb0 [ 368.746726][ T9181] copy_splice_read+0x1a3/0xbb0 [ 368.746771][ T9181] ? __pfx_copy_splice_read+0x10/0x10 [ 368.746812][ T9181] ? look_up_lock_class+0x55/0x120 [ 368.746853][ T9181] ? lockdep_init_map_type+0x5c/0x250 [ 368.746892][ T9181] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 368.746929][ T9181] ? __pfx_filemap_splice_read+0x10/0x10 [ 368.746982][ T9181] do_splice_read+0x2bd/0x370 [ 368.747023][ T9181] splice_direct_to_actor+0x2a1/0xa30 [ 368.747064][ T9181] ? __pfx_direct_splice_actor+0x10/0x10 [ 368.747108][ T9181] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 368.747156][ T9181] do_splice_direct+0x174/0x240 [ 368.747195][ T9181] ? __pfx_do_splice_direct+0x10/0x10 [ 368.747236][ T9181] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 368.747275][ T9181] ? bpf_lsm_file_permission+0x9/0x10 [ 368.747311][ T9181] ? security_file_permission+0x76/0x210 [ 368.747341][ T9181] ? rw_verify_area+0xce/0x6d0 [ 368.747375][ T9181] do_sendfile+0xadc/0xe20 [ 368.747415][ T9181] ? __pfx_do_sendfile+0x10/0x10 [ 368.747453][ T9181] ? __x64_sys_futex+0x34f/0x4d0 [ 368.747476][ T9181] ? __x64_sys_futex+0x358/0x4d0 [ 368.747502][ T9181] __x64_sys_sendfile64+0x1d8/0x220 [ 368.747528][ T9181] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 368.747561][ T9181] do_syscall_64+0x115/0x840 [ 368.747596][ T9181] ? clear_bhb_loop+0x40/0x90 [ 368.747625][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.747650][ T9181] RIP: 0033:0x7fb7cf99de59 [ 368.747670][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.747700][ T9181] RSP: 002b:00007fb7d07e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 368.747724][ T9181] RAX: ffffffffffffffda RBX: 00007fb7cfc26090 RCX: 00007fb7cf99de59 [ 368.747740][ T9181] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 368.747755][ T9181] RBP: 00007fb7cfa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 368.747770][ T9181] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 368.747784][ T9181] R13: 00007fb7cfc26128 R14: 00007fb7cfc26090 R15: 00007ffd603d4d28 [ 368.747815][ T9181] [ 369.789808][ T84] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1365 with max blocks 4 with error 117 [ 369.825166][ T84] EXT4-fs (sda1): This should not happen!! Data will be lost [ 369.825166][ T84] [ 370.035219][ T84] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:5: bg 4: bad block bitmap checksum [ 370.058170][ T9061] bridge0: port 3(syz_tun) entered disabled state [ 370.086529][ T84] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3347 with max blocks 237 with error 74 [ 370.106447][ T9061] syz_tun (unregistering): left allmulticast mode [ 370.123992][ T84] EXT4-fs (sda1): This should not happen!! Data will be lost [ 370.123992][ T84] [ 370.136582][ T9061] syz_tun (unregistering): left promiscuous mode [ 370.155422][ T9061] bridge0: port 3(syz_tun) entered disabled state [ 371.139938][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.378559][ T9] ================================================================== [ 371.378633][ T9] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 371.378678][ T9] Write of size 8 at addr ffffc90004b31640 by task kworker/0:0/9 [ 371.378697][ T9] [ 371.378708][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 371.378734][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.378755][ T9] Workqueue: events_power_efficient fb_flashcursor [ 371.378789][ T9] Call Trace: [ 371.378799][ T9] [ 371.378808][ T9] dump_stack_lvl+0x100/0x190 [ 371.378832][ T9] print_report+0x13d/0x4b0 [ 371.378866][ T9] ? _raw_spin_lock_irqsave+0x52/0x60 [ 371.378939][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 371.378962][ T9] kasan_report+0xdf/0x1c0 [ 371.378993][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 371.379021][ T9] sys_imageblit+0x19fb/0x1d60 [ 371.379050][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 371.379077][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 371.379104][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 371.379163][ T9] soft_cursor+0x524/0xa10 [ 371.379201][ T9] ? fb_get_color_depth+0x120/0x250 [ 371.379235][ T9] bit_cursor+0xca1/0x1490 [ 371.379274][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 371.379313][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.379344][ T9] ? get_color+0x1da/0x450 [ 371.379373][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 371.379407][ T9] fb_flashcursor+0x338/0x430 [ 371.379437][ T9] process_one_work+0xa23/0x1940 [ 371.379474][ T9] ? __pfx_process_one_work+0x10/0x10 [ 371.379508][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 371.379540][ T9] worker_thread+0x5ef/0xe50 [ 371.379575][ T9] ? kthread+0x13a/0x450 [ 371.379606][ T9] ? __pfx_worker_thread+0x10/0x10 [ 371.379636][ T9] kthread+0x370/0x450 [ 371.379662][ T9] ? __pfx_kthread+0x10/0x10 [ 371.379690][ T9] ret_from_fork+0x72b/0xd50 [ 371.379716][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 371.379742][ T9] ? __switch_to+0x800/0x10f0 [ 371.379785][ T9] ? __switch_to_asm+0x39/0x70 [ 371.379816][ T9] ? __pfx_kthread+0x10/0x10 [ 371.379844][ T9] ret_from_fork_asm+0x1a/0x30 [ 371.379881][ T9] [ 371.379889][ T9] [ 371.379895][ T9] The buggy address belongs to a vmalloc virtual mapping [ 371.379917][ T9] Memory state around the buggy address: [ 371.379930][ T9] ffffc90004b31500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 371.379951][ T9] ffffc90004b31580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 371.379968][ T9] >ffffc90004b31600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 371.379981][ T9] ^ [ 371.379994][ T9] ffffc90004b31680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 371.380011][ T9] ffffc90004b31700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 371.380024][ T9] ================================================================== [ 371.391627][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.391647][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 371.391675][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 371.391691][ T9] Workqueue: events_power_efficient fb_flashcursor [ 371.391727][ T9] Call Trace: [ 371.391735][ T9] [ 371.391744][ T9] dump_stack_lvl+0x100/0x190 [ 371.391770][ T9] vpanic+0x552/0x970 [ 371.391792][ T9] ? __pfx_vpanic+0x10/0x10 [ 371.391814][ T9] ? mark_held_locks+0x40/0x70 [ 371.391851][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 371.391876][ T9] panic+0xd1/0xe0 [ 371.391896][ T9] ? __pfx_panic+0x10/0x10 [ 371.391925][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 371.391949][ T9] ? preempt_schedule_common+0x42/0xc0 [ 371.391986][ T9] ? check_panic_on_warn+0x1f/0x90 [ 371.392019][ T9] check_panic_on_warn.cold+0x19/0x34 [ 371.392044][ T9] end_report.part.0+0x3a/0x90 [ 371.392079][ T9] kasan_report.cold+0xe/0x18 [ 371.392113][ T9] ? sys_imageblit+0x19fb/0x1d60 [ 371.392142][ T9] sys_imageblit+0x19fb/0x1d60 [ 371.392175][ T9] ? __pfx_sys_imageblit+0x10/0x10 [ 371.392203][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 371.392228][ T9] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 371.392266][ T9] soft_cursor+0x524/0xa10 [ 371.392305][ T9] ? fb_get_color_depth+0x120/0x250 [ 371.392339][ T9] bit_cursor+0xca1/0x1490 [ 371.392379][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 371.392419][ T9] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 371.392451][ T9] ? get_color+0x1da/0x450 [ 371.392481][ T9] ? __pfx_bit_cursor+0x10/0x10 [ 371.392515][ T9] fb_flashcursor+0x338/0x430 [ 371.392547][ T9] process_one_work+0xa23/0x1940 [ 371.392585][ T9] ? __pfx_process_one_work+0x10/0x10 [ 371.392620][ T9] ? __pfx_fb_flashcursor+0x10/0x10 [ 371.392652][ T9] worker_thread+0x5ef/0xe50 [ 371.392689][ T9] ? kthread+0x13a/0x450 [ 371.392716][ T9] ? __pfx_worker_thread+0x10/0x10 [ 371.392746][ T9] kthread+0x370/0x450 [ 371.392773][ T9] ? __pfx_kthread+0x10/0x10 [ 371.392802][ T9] ret_from_fork+0x72b/0xd50 [ 371.392829][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 371.392855][ T9] ? __switch_to+0x800/0x10f0 [ 371.392888][ T9] ? __switch_to_asm+0x39/0x70 [ 371.392923][ T9] ? __pfx_kthread+0x10/0x10 [ 371.392953][ T9] ret_from_fork_asm+0x1a/0x30 [ 371.392991][ T9] [ 371.393071][ T9] Kernel Offset: disabled