last executing test programs: 43.38013442s ago: executing program 2 (id=10080): mmap$auto(0x0, 0x4020009, 0x6, 0xebd, 0x401, 0x8000) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x58) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x283) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, 0x0) open(0x0, 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0xb, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) r3 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000240)='/dev/etherd/discover\x00', 0x80101, 0x0) writev$auto(r3, &(0x7f0000000140)={0x0, 0xe4}, 0x4) 41.596966255s ago: executing program 2 (id=10084): prctl$auto_PR_SCHED_CORE_CREATE(0x5, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9632f0d73", 0x1000}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x2b, 0x6, 0x8) semctl$auto_SETVAL(0x0, 0xfffffff5, 0x10, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r1) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0xfc, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe5, 0x2, 0x0, 0x1, [@generic="6e82250575e4f030934e5d8e50a67f12eb07162bf94422049ca025e4059d1e6561650769dfcf23f3947221e45cb3892bf018dab15308dde8da1bb9a4", @generic='\x00\x00\x00\x00\x00', @typed={0x93, 0x86, 0x0, 0x0, @binary="157774dc7ef945ee8c89728f460fe4b6f7dcc353359400006d89c52fd23c66cc9b5808bef8987c7cbcd94dfd0300000037de1c76f476b3cb180d1a227fe71ba41f5ac53759aca0fe84afcd099ac52e905c2ae97b7692980dd66e79e6dc48f64097c0d18680c17d760c4eda26200c2b32519e722a344f4a00"/143}, @typed={0x4, 0xd6}, @typed={0x8, 0xbe, 0x0, 0x0, @pid}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x48000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) 40.535751124s ago: executing program 2 (id=10086): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000006c0), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000180)={{0x171a4c29, 0x0, 0x0, 0x401, 0x9, 0xa, 0x2}, 0x8, 0x100, 0x1a56, 0x8, @raw=0x9c, @inferred=0x0, 0xe7d, 0x0, &(0x7f0000000000), &(0x7f0000000040)="1783a8"}) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="050086000000000020003b8014001a00000000000000000000000000000000010800f4002b262b000c0002000100000000000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x4000000000002) write$auto(0xffffffffffffffff, &(0x7f0000000a80)='/Eev/audi\xab\x7f\xceU\xf4_X\xb9;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8;ib\x10\xbc\x1ad\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9a\x02\x00\x00\x00U\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97H}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x86T,n\x17\xd6\\GJ\x90`2\xb5\x1a`\x15\xf3\x01\x00 (Q\tj\xc2\x95\xdc\xd8Q\v\xbcD\xbb\x12\xe4\x1dDZ\xe0\x15J\x8f\xd2J}g\xbcj\xba\n\x9d\xf0\xfbs\xf0q\xf6\x05\x13E\xc6\xfd\x82@\xde\x19$\xf5Z\xba_\x19\xe8\xac\xeaF\"\xf3\x1a\x94\x01\x00\x00\xe7\xc8\xd8\x916D\xdc\xe5\xb0#\xe8\xebr\xfe\xcf\xf98\x1b\x15\xd5\xbf\xebY9\xe0`o1\t\x9ag\x90mGY4J\xe8\xae\xad4\xce\xae\xc8\xf9\x8e\x84H\n\xeb,M\xe3\tG\b\xfb\xff\xc0\xcaa\x86\xf6b\xcb\x06\x8d\xfe\x18T\x024\x12v\xd6\x8b\xd6\xda\xa9`Z\xd1\xce?\xc5\xe9D\xa3\xd5\x81\x11zc\x8b\xbf_\xfeA\xf4\xcc\xcaOk\x8f\xde\xba\x01 \xe6\r\xe0X\x02\xf2:x\xbf)z\xed\x97\xf0\fD\x1b\xcf\x80\nAV\x89\xdd\xb4\xd4) \xc5\xdeH\xc1!\xda$$\x92t}\x88\xdac\xf8\x98U\'[\xa5L\xdb\xbd\xdb\xc0\xcbYl]\xcb\x93KD `{-XtBp\x13\x83\xddJ\xedEA\x90a\v\xbd\xdc\xc3\xc1i\x00\xa2\xc3\xa4\xfd\x06\x86j\x9f3\x01\xf9\xdc\xf0\xaa\xbff\xe2\x88', 0x5) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) writev$auto(r4, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x9, 0xfb4, 0x1, 0x2, 0x803, 0x15f4da09, 0x3, 0x7, 0x70, 0x7ffffffd, 0x7, 0x8, 0x9, 0x8000003, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r6, 0x80045010, &(0x7f0000000600)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r7 = open_by_handle_at$auto(r5, &(0x7f0000000240)={0x87, 0x81369, "f60241da8d8dba5d85e30ef454e243fe7788a3a2f99a92edab1241b19640eeb13d84b00c0980f4f1e715fd22ad7997000a7ef253d178bff534ac9a47bbfb62581df9d583ceaae893ef232e4b48d291d72ec4e61cd8e9acea06881ceb239fa358577cf1f633a31fa78495d4a3cf5c16d6b9894fb1c5dedf960683f6f5388ba1a4465a46d0f2949e"}, 0x1) r8 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll$auto(&(0x7f0000002940)={r8, 0x100, 0x8}, 0x4, 0x8) setsockopt$auto(r7, 0x1, 0x1021, 0x0, 0xd) r10 = geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r7, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES64=r10, @ANYRES64, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x20000080) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x7fff) socket(0x25, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000640)={0xc0040000, &(0x7f0000000200), &(0x7f0000000300), &(0x7f00000003c0), {0x9}, &(0x7f0000000400)=""/173, 0xad, &(0x7f0000000540)=""/156, &(0x7f0000000600)=[r3, r3, r3], 0x3, {r9}}, 0x58) 40.176292501s ago: executing program 0 (id=10089): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(0x0, 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) sendto$auto(r0, 0x0, 0x503, 0x7f, 0x0, 0x1c) ioperm$auto(0x4, 0xff, 0x4ec) setrlimit$auto(0x1000000007, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) tkill$auto(0x0, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mq_open$auto(0x0, 0x7e, 0x9, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) 40.023822716s ago: executing program 0 (id=10091): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x4000000, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x21, 0x80000, 0x829b5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x1ab101, 0x0) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/pci0000:00/0000:00:01.3/modalias\x00', 0x22400, 0x0) read$auto(r0, 0x0, 0x20) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r1, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) ioctl$auto_USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)=0xfffffffe) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x800, 0x0) flistxattr$auto(r3, 0x0, 0x8) keyctl$auto(0x4018, 0xffffffffbffffffd, 0x0, 0x400000000000005, 0x38) sendto$auto(r3, 0x0, 0xb, 0x1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x183242, 0x154) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) socket(0x10, 0x6, 0x9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x2, 0x12, r4, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = open(0x0, 0x163340, 0x2a) write$auto(0x3, 0x0, 0x3f00) ioctl$auto_XFS_IOC_FSGETXATTRA(r5, 0x801c582d, &(0x7f0000000100)={0x3, 0x0, 0xe4e6, @raw=0x8}) 39.473823967s ago: executing program 3 (id=10092): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) (async, rerun: 32) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) socket(0x11, 0x80003, 0x300) (async) prctl$auto(0x3c, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0xfffffffd, 0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (rerun: 32) getcwd$auto(0x0, 0xffffffffffffffff) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) (async, rerun: 64) inotify_init1$auto(0x3000000000000) (rerun: 64) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_reclaim_fail\x00', 0x0, 0x0) inotify_add_watch$auto(r0, 0x0, 0xe6e) (async) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') mmap$auto(0x4, 0x2020009, 0x3, 0xd32, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0xfffffffd, 0x0) (rerun: 64) 39.099596799s ago: executing program 0 (id=10094): io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) mmap$auto(0x0, 0x20006, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8004) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x92106411, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x800, 0x1, 0x0, 0x5, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x2, 0x3ff, 0x0, 0xa6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x426001, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x2000c800) prctl$auto(0x1000000003b, 0xfffffffffffffffd, 0x4, 0x5, 0x1) madvise$auto(0xffffffffbffffffc, 0xffffffffffff0005, 0x18) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) read$auto_sco_debugfs_fops_(r2, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a9, 0x7000001) madvise$auto(0x0, 0x2000040080000004, 0xe) r3 = open(&(0x7f0000000800)='./file0\x00', 0x200, 0x144) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x7) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) 38.997179188s ago: executing program 3 (id=10095): prctl$auto_PR_SCHED_CORE_CREATE(0x5, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a9632f0d73", 0x1000}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x2b, 0x6, 0x8) semctl$auto_SETVAL(0x0, 0xfffffff5, 0x10, 0x0) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r1) sendmsg$auto_TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0xfc, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xe5, 0x2, 0x0, 0x1, [@generic="6e82250575e4f030934e5d8e50a67f12eb07162bf94422049ca025e4059d1e6561650769dfcf23f3947221e45cb3892bf018dab15308dde8da1bb9a4", @generic='\x00\x00\x00\x00\x00', @typed={0x93, 0x86, 0x0, 0x0, @binary="157774dc7ef945ee8c89728f460fe4b6f7dcc353359400006d89c52fd23c66cc9b5808bef8987c7cbcd94dfd0300000037de1c76f476b3cb180d1a227fe71ba41f5ac53759aca0fe84afcd099ac52e905c2ae97b7692980dd66e79e6dc48f64097c0d18680c17d760c4eda26200c2b32519e722a344f4a00"/143}, @typed={0x4, 0xd6}, @typed={0x8, 0xbe, 0x0, 0x0, @pid}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0x401, 0x48000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) 38.994432607s ago: executing program 1 (id=10096): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x12) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x4d, 0x0, 0x20) mmap$auto(0x108, 0x400008, 0xdc, 0x61c, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x200) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/max_sectors_kb\x00', 0x141542, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0xf663, 0x15) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 38.245926824s ago: executing program 2 (id=10097): mmap$auto(0x0, 0x400005, 0xff, 0x16, 0x2, 0xa24e) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) (async) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socketpair$auto(0x5, 0x4, 0x3, &(0x7f0000000080)=0x101) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000002d40)=ANY=[@ANYBLOB="18000a00", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250a00000004000380"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap$auto(0x6, 0x0, 0x9, 0x15, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) r3 = getsockopt$auto(r2, 0x10e, 0x9, 0xfffffffffffffffe, 0x0) socketpair$auto(0x1, 0x21, 0x8000000000000000, 0x0) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000040)=0x95) (async) getsockopt$auto(r4, 0x84, 0x9, 0x0, &(0x7f0000000040)=0x95) socketpair$auto(0x4, 0x2, 0x10, 0x0) getsockopt$auto_SO_SNDTIMEO_OLD(r3, 0x72, 0x15, &(0x7f00000000c0)='/dev/audio1\x00', &(0x7f0000000100)=0x5) (async) getsockopt$auto_SO_SNDTIMEO_OLD(r3, 0x72, 0x15, &(0x7f00000000c0)='/dev/audio1\x00', &(0x7f0000000100)=0x5) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6b) (async) bind$auto(0x3, 0x0, 0x6b) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 38.182404851s ago: executing program 0 (id=10098): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) close_range$auto(0x0, r1, 0x2) io_uring_setup$auto(0x7, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) io_uring_setup$auto(0x6, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file1/file0\x00') socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x34000}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3f3) r3 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r3) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) io_uring_register$auto(r2, 0x1e, &(0x7f00000001c0)="8138034e72ac", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, r0, 0x2007f) r4 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x0, 0x0) write$auto_mousedev_fops_mousedev(r4, &(0x7f0000001380)="22d2", 0x2) r5 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r5, &(0x7f0000000280)=""/210, 0xd2) 38.007066372s ago: executing program 3 (id=10099): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0x24de, 0x16, 0x401, 0xd5be) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf252300000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4104}, 0x10) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x0, 0x0) r2 = epoll_create$auto(0x20003f) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) 37.374956419s ago: executing program 1 (id=10100): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x20948b, 0x2, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x8080800000000000, 0x3, 0x6) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 37.317522483s ago: executing program 3 (id=10101): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyab\x00', 0x88c80, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) syslog$auto(0x3, 0x0, 0x5) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) 37.15093891s ago: executing program 0 (id=10102): mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x7fff) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, 0x0, 0x402, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x801, 0x84) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01003749d63204c70e820000000041030c4950e9"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x7) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r2, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008044}, 0x20008000) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) listen$auto(r1, 0x1f64b581) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(r5, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) getpeername$auto(0x3, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, 0x0, 0x20040011) 36.970334688s ago: executing program 2 (id=10103): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x500, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r0, 0x0, 0x9000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2b022cbd7000fcdbdf250300000005000d000500000008000200040000000c000300030000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000800040000000000"], 0x48}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) r3 = socket(0xa, 0x801, 0x84) mmap$auto(0xb, 0x6, 0x3, 0xa51, r3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) mmap$auto(0x0, 0x1e00, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) read$auto(0x3, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x22, 0x800, 0x1) socket(0x29, 0x2, 0x0) socket(0x1d, 0x80000, 0x4) r8 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r8, @new_prog_fd=0x4, 0x4, @old_prog_fd=r8}, 0xa3) socket(0x1, 0x2, 0x0) 36.09053139s ago: executing program 1 (id=10104): unshare$auto(0x5da) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/platform/drivers/bxt_whiskey_cove_pmic/bind\x00', 0x40, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1p/sub3/xrun_injection\x00', 0x48041, 0x0) write$auto(r2, 0x0, 0x6) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/156, 0x9c) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) mmap$auto(0x6, 0x80000000400008, 0xd8, 0x9b72, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0xa, 0x1, 0x84) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/comm\x00', 0x101100, 0x0) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x5, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x1, 0x9, 0x3, 0x9, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf81]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x0, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x9, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x90}, 0x10040091) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000380)={0x0, 0xc0}, 0x4001, 0x0, 0x3, 0x401}, 0x6}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 35.912685185s ago: executing program 1 (id=10105): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/228, 0xe4) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x4800, 0x0) 35.824810155s ago: executing program 3 (id=10106): socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = pipe2$auto(0x0, 0x80) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000000)=0x2) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) 35.753337939s ago: executing program 2 (id=10107): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (fail_nth: 7) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x9, 0x0) lseek$auto(0x3, 0x8, 0x1) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) futex_requeue$auto(0x0, 0xfffff664, 0xf, 0x9) 35.646345757s ago: executing program 3 (id=10108): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r0, 0x92102411, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x101000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\xe0\x8c\x80\xa3\x85\x95I\xb0N\xddbD\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbfQ\x15\xbe\x01\x88\xd7lD\x97\b\x00\x00\x00\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x5, 0x10, 0xfffffffffffffffa, 0x8000) socket(0x5, 0x801, 0x100204) setsockopt$auto(r0, 0x2, 0x3ff, 0x0, 0xa6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x426001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25020000000800010089000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x70, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1000}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x7f}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x496}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x81}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000051}, 0x53f8f66112a633cc) poll$auto(0x0, 0x7f, 0x9) socket(0x1f, 0xa, 0x4) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$auto_SO_OOBINLINE(r7, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xfffffffc) r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r8, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 31.00049135s ago: executing program 0 (id=10109): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x12) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x4d, 0x0, 0x20) mmap$auto(0x108, 0x400008, 0xdc, 0x61c, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x200) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/max_sectors_kb\x00', 0x141542, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0xf663, 0x15) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 20.572980721s ago: executing program 32 (id=10107): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (fail_nth: 7) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x9, 0x0) lseek$auto(0x3, 0x8, 0x1) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) futex_requeue$auto(0x0, 0xfffff664, 0xf, 0x9) 20.445896606s ago: executing program 33 (id=10108): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r0, 0x92102411, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x101000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\xe0\x8c\x80\xa3\x85\x95I\xb0N\xddbD\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbfQ\x15\xbe\x01\x88\xd7lD\x97\b\x00\x00\x00\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x5, 0x10, 0xfffffffffffffffa, 0x8000) socket(0x5, 0x801, 0x100204) setsockopt$auto(r0, 0x2, 0x3ff, 0x0, 0xa6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x426001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25020000000800010089000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x70, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0x4c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x1}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x9}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1000}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x7f}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x496}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x5}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x81}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000051}, 0x53f8f66112a633cc) poll$auto(0x0, 0x7f, 0x9) socket(0x1f, 0xa, 0x4) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) setsockopt$auto_SO_OOBINLINE(r7, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xfffffffc) r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r8, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 19.604829654s ago: executing program 1 (id=10112): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0x5, 0x25, 0x8672, 0x80}, "66ac010005000000009b5fd59000002000ada7272464028fdce8ecc6000000000000e5ff81dcdbd3d2d9c50cb822f66eb624ad63110d61771552c03dce580000000000000000000b00", 0x3}) ioctl$auto_UI_SET_PHYS(r0, 0x4008556c, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000380)=""/4, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r3, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x7fffffffe000, 0x2, 0x0, 0xfa31, r0, 0x8) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 15.513039737s ago: executing program 34 (id=10109): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio11\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, r1) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000500)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x12) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x29, 0x4d, 0x0, 0x20) mmap$auto(0x108, 0x400008, 0xdc, 0x61c, 0x2, 0xffff) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x200) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/max_sectors_kb\x00', 0x141542, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0xf663, 0x15) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 15.51289471s ago: executing program 1 (id=10114): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x400400000001, 0x2020009, 0x10000, 0xafd, 0xfffffffffffffffa, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r0, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001700), r1) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x20000000fff}, 0xa, &(0x7f0000000100)={&(0x7f0000000240)="0556", 0x200000000}, 0x3, 0x0) r4 = prctl$auto_PR_SYS_DISPATCH_ON(0xb6, 0x1, 0x0, 0x0, 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x200000010010, r5, 0x9, 0xfffffffffffffffc) ptrace$auto(0x2, r5, 0x3, 0x4f) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x668, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3d, 0x9, 0x0, 0x1, [@generic="4e0296bb6cd29310f5087385b5fb22b0a900bc767988b72b9c8a9f89ead688efef76fe623f308c86f987b34e7e6c2bc889951673be14056e9d"]}, @TIPC_NLA_LINK={0x384, 0x4, 0x0, 0x1, [@typed={0x4, 0x15}, @generic="a5eb3d1b5dff9f909b27072d7dfb46a1eed248fcf19793e37e4185d98b91f5894307e236ea47061b667dd8ed804a6cca78a650e714d649bdb5cd67f74164ba95951cb1888bd1cc579c3c7e7334d5839272744978cd5c157234ccbf2252a074fe9b635071", @nested={0xa6, 0xf5, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@multicast2}, @generic="96c6d736c95358ff80a4e0e41bb3f1c8cf66c01cedc1a5f7fb0498f7aff8cb43466481f6fb8a2cd6ccffea137c6610f07dc654a9004115b33ea9674b88fe1899b6d3142390e393416252faddd2f6371ee2e9d329974b7e9c56b7dd27f160c45079c0a2f5cd42ce73afd455", @nested={0x4, 0x102}, @nested={0x4, 0x14a}, @typed={0x4, 0x151}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x108, 0x0, 0x0, @u32}, @generic="3d3624ccc843464c022049d40f5a6a"]}, @generic="0eeb31c79a0d5fd7ef5ddc91db024b34efdbf4cda3d8d61a846c990da0ba73363fc7ab45dbe1f9f724dc3a6c1a0ecf54ac336012cac6f3f6b44d5e12667c18d8eaa1a5eebe16e7ba88579f7538f498fc5730aa9e0afdae478903ac3288ee01acce2ccc276a3a2cb611a306b74914a5cf61533284b4072518082ca9ad57c83dfccee450d5d00a51aec85a050d17597757f285f477c0aa7992f4700b6bacb378e6c7bc83d4d589d973b23f38a227ae2345ba64c5b8ca1a3af04df59ba50bbe4edd97b1", @typed={0xc, 0x1b, 0x0, 0x0, @u64=0xadf}, @nested={0x10, 0x2a, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r3}]}, @nested={0x28, 0x26, 0x0, 0x1, [@typed={0x4, 0xd1}, @nested={0x4, 0xea}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, @nested={0xe9, 0xbf, 0x0, 0x1, [@generic="85e630d694d6128a4dfca56834ac88ccb2bf3fe9eede65985be750b6183be9f4fc57441c5354a13632ecc23ad7fcbc8d13d1d56e223b4e12352bafe4ff4de8a0287a34aa64fc93e18f40ff20ace7c301fffac4494027be428ba8fa8c0415cd6447942f3809c6f5d9e2", @nested={0x4, 0x60}, @typed={0x8, 0x2, 0x0, 0x0, @str=':(\xcd\x00'}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r0}, @generic="6fbc628da7f268ce6b44b11c0b802abb710c813ce4d1611cc9f9f1446392d4c5e76f4676beafb2a4f5dd14aa9e07113ceead1790a5a1dd74b52cdaefb40e730d9d64dc35c130813779a3b0f0be6f305a628da7ab", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x127}, @typed={0x8, 0xa6, 0x0, 0x0, @fd=r0}]}, @generic="bb01a65f9aaccd03e537ac5d7b26c1e5642ba0608a1bdd2fc48fdd93a28f07b90239c3504714f7bd05db5d05284702eee8396b15e641bc0729e45634245eb288f1573a4c57e2a1c430b89648d80a8629183b886f5cc1288e38dc67e5f90eb182f6a70354680054f8e1c285a81a831c30ef374bb1d2b9", @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}]}, @TIPC_NLA_NODE={0x290, 0x6, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xf9, 0x0, 0x0, @pid=r5}, @generic="01858bbfa6f3ddec6f0e7cd3cffd30fdbcd083ab0423c6b70ad5f0931f29bc5ed37bc2e586ad589eabffe1611d225081a448ecca8a6456461a7a27b08f3797766b3c078affa8e1fbdae223ca5724746fd9f1a2adea23ef64de27c5065031cdfa01e92233e7e99d4eccd791dcaac8986f", @nested={0x140, 0x13d, 0x0, 0x1, [@typed={0xe8, 0x149, 0x0, 0x0, @binary="10f507eced103bf44507840913ea637ae2c128e276c6ba7c66769875c30be7d09a3635b5536a0c1ddc644c69ccc24a5905d42a38f6da1dc4b8959eaaca5034cd4e91788dca524c3a525f174d60368ea3d095b9fd7390cf9495f60b7cc00d3bfc762f26926e444d5352cefdfd54bb00036aea5dd1799dab0987cd9a3203b01976bd75ccbbba00bfd2ac44f3eef181e633db678f8ff171911eca674eec1d1de1ed3c7d046658a80393da0f70081a403ab38c662da2a75a82751961ef4b27c0dc98c43317ffee282ec2b2e5996817ff986feb98e0d663cc427c27b6717c6e6610e46340455c"}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xae}, @typed={0x44, 0x6e, 0x0, 0x0, @binary="77fd76a517bb9c5dbed0a1a18e2caa8491a3880eec6c88b81f1e35b83387b6fcc42c02d8fed5b6214de9c89bdabab8fe2c45838adb4a5953b5fb84e4ca8d331e"}, @nested={0x4, 0xf9}]}, @nested={0xc4, 0x94, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x78}, @generic="b8bfd0ca28c83f916a8c3d1c96ef9e9d38be8e83309a89294739a88b294c686bae49e4a35322d1833a3539bf9bf6a803ae9c5b5f210974573340d0a276f81e3cbc6e0ec0f121ed0cc787edef219101e7baf37f73efd33845fadc2d430d802b42b725d50b0700cbcc590d8ef9c74e372bab18189059b318bd633908b5dc6188d92673504dc3f4d46ca919c533708e32c8002967725cce286d479a10992774729cef07a9d9c1da6987", @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @typed={0x8, 0x125, 0x0, 0x0, @u32=0xacca}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) 7.987826318s ago: executing program 6 (id=10113): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x20948b, 0x2, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x8080800000000000, 0x3, 0x6) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 7.953145648s ago: executing program 4 (id=10110): mmap$auto(0x0, 0x20009, 0x4, 0x414, 0x401, 0x7ff) close_range$auto(0xffffffffffffffff, 0x8, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x1d9040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0xf, 0xa, 0xf) setsockopt$auto(r0, 0x1, 0xc, 0x0, 0x7fffffff) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r1, 0x540a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r4 = setfsuid$auto(0xee00) setresuid$auto(0xffffffffffffffff, r4, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 7.938840847s ago: executing program 5 (id=10111): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x0, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r0, 0x4, 0x4) mmap$auto(0x0, 0x8, 0x7, 0xffffffffffffffff, 0xfffffffffffffffa, 0x4000000008000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x5, 0x273a, 0x0, 0x8, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0, @ANYBLOB="010025bd70d100dbdf25020000002c00018028003c8008001b8b3eeac45c9340fdd3b533b3533f0570304bcd82059cc704e43e064b6bcf60051b0925259db3ba537496e6f26f1d481aef0f1db9fa9d1dd7c105ebdb6f4cf37eb849e518b0ed9e7ca553e2b766ca77d20aca102e919a006cd16275969c4fc5b56a9b38d7fbbab38d6e0d7407fea4d5cab10f5e18ac743fd7435f3a1c26c375b216159f6dcfc4c3cc670a4b7f"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x1400c844) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000001345be1f35b4e04f2318b79cee7f25e9a88a6c2509814abdbdead22996dfaf307a1930890c7ed903bbfca757f05061304abd4fc40f95e683fe785264f86a28c90400c1944", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf250a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f00000000c0)={0x0, 0x8001}, 0x400000000000002, 0x0, 0x5, 0x80000001}}, 0x3, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) semtimedop$auto(0x0, &(0x7f0000000140)={0x7, 0x81, 0x70}, 0x1f4, 0x0) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x1020009, 0x20004000000000df, 0xeb1, r1, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty34\x00', 0x620880, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x80, 0x0) ioctl$auto(r3, 0x80dc5521, r2) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) 0s ago: executing program 35 (id=10114): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x400400000001, 0x2020009, 0x10000, 0xafd, 0xfffffffffffffffa, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r0, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001700), r1) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000004040)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0x20000000fff}, 0xa, &(0x7f0000000100)={&(0x7f0000000240)="0556", 0x200000000}, 0x3, 0x0) r4 = prctl$auto_PR_SYS_DISPATCH_ON(0xb6, 0x1, 0x0, 0x0, 0x9) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x200000010010, r5, 0x9, 0xfffffffffffffffc) ptrace$auto(0x2, r5, 0x3, 0x4f) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x668, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3d, 0x9, 0x0, 0x1, [@generic="4e0296bb6cd29310f5087385b5fb22b0a900bc767988b72b9c8a9f89ead688efef76fe623f308c86f987b34e7e6c2bc889951673be14056e9d"]}, @TIPC_NLA_LINK={0x384, 0x4, 0x0, 0x1, [@typed={0x4, 0x15}, @generic="a5eb3d1b5dff9f909b27072d7dfb46a1eed248fcf19793e37e4185d98b91f5894307e236ea47061b667dd8ed804a6cca78a650e714d649bdb5cd67f74164ba95951cb1888bd1cc579c3c7e7334d5839272744978cd5c157234ccbf2252a074fe9b635071", @nested={0xa6, 0xf5, 0x0, 0x1, [@nested={0x4, 0x24}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@multicast2}, @generic="96c6d736c95358ff80a4e0e41bb3f1c8cf66c01cedc1a5f7fb0498f7aff8cb43466481f6fb8a2cd6ccffea137c6610f07dc654a9004115b33ea9674b88fe1899b6d3142390e393416252faddd2f6371ee2e9d329974b7e9c56b7dd27f160c45079c0a2f5cd42ce73afd455", @nested={0x4, 0x102}, @nested={0x4, 0x14a}, @typed={0x4, 0x151}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x108, 0x0, 0x0, @u32}, @generic="3d3624ccc843464c022049d40f5a6a"]}, @generic="0eeb31c79a0d5fd7ef5ddc91db024b34efdbf4cda3d8d61a846c990da0ba73363fc7ab45dbe1f9f724dc3a6c1a0ecf54ac336012cac6f3f6b44d5e12667c18d8eaa1a5eebe16e7ba88579f7538f498fc5730aa9e0afdae478903ac3288ee01acce2ccc276a3a2cb611a306b74914a5cf61533284b4072518082ca9ad57c83dfccee450d5d00a51aec85a050d17597757f285f477c0aa7992f4700b6bacb378e6c7bc83d4d589d973b23f38a227ae2345ba64c5b8ca1a3af04df59ba50bbe4edd97b1", @typed={0xc, 0x1b, 0x0, 0x0, @u64=0xadf}, @nested={0x10, 0x2a, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0x8, 0x1d, 0x0, 0x0, @pid=r3}]}, @nested={0x28, 0x26, 0x0, 0x1, [@typed={0x4, 0xd1}, @nested={0x4, 0xea}, @typed={0x14, 0x139, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r4}]}, @nested={0xe9, 0xbf, 0x0, 0x1, [@generic="85e630d694d6128a4dfca56834ac88ccb2bf3fe9eede65985be750b6183be9f4fc57441c5354a13632ecc23ad7fcbc8d13d1d56e223b4e12352bafe4ff4de8a0287a34aa64fc93e18f40ff20ace7c301fffac4494027be428ba8fa8c0415cd6447942f3809c6f5d9e2", @nested={0x4, 0x60}, @typed={0x8, 0x2, 0x0, 0x0, @str=':(\xcd\x00'}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r0}, @generic="6fbc628da7f268ce6b44b11c0b802abb710c813ce4d1611cc9f9f1446392d4c5e76f4676beafb2a4f5dd14aa9e07113ceead1790a5a1dd74b52cdaefb40e730d9d64dc35c130813779a3b0f0be6f305a628da7ab", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x127}, @typed={0x8, 0xa6, 0x0, 0x0, @fd=r0}]}, @generic="bb01a65f9aaccd03e537ac5d7b26c1e5642ba0608a1bdd2fc48fdd93a28f07b90239c3504714f7bd05db5d05284702eee8396b15e641bc0729e45634245eb288f1573a4c57e2a1c430b89648d80a8629183b886f5cc1288e38dc67e5f90eb182f6a70354680054f8e1c285a81a831c30ef374bb1d2b9", @typed={0x8, 0x106, 0x0, 0x0, @fd=r0}]}, @TIPC_NLA_NODE={0x290, 0x6, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0xf9, 0x0, 0x0, @pid=r5}, @generic="01858bbfa6f3ddec6f0e7cd3cffd30fdbcd083ab0423c6b70ad5f0931f29bc5ed37bc2e586ad589eabffe1611d225081a448ecca8a6456461a7a27b08f3797766b3c078affa8e1fbdae223ca5724746fd9f1a2adea23ef64de27c5065031cdfa01e92233e7e99d4eccd791dcaac8986f", @nested={0x140, 0x13d, 0x0, 0x1, [@typed={0xe8, 0x149, 0x0, 0x0, @binary="10f507eced103bf44507840913ea637ae2c128e276c6ba7c66769875c30be7d09a3635b5536a0c1ddc644c69ccc24a5905d42a38f6da1dc4b8959eaaca5034cd4e91788dca524c3a525f174d60368ea3d095b9fd7390cf9495f60b7cc00d3bfc762f26926e444d5352cefdfd54bb00036aea5dd1799dab0987cd9a3203b01976bd75ccbbba00bfd2ac44f3eef181e633db678f8ff171911eca674eec1d1de1ed3c7d046658a80393da0f70081a403ab38c662da2a75a82751961ef4b27c0dc98c43317ffee282ec2b2e5996817ff986feb98e0d663cc427c27b6717c6e6610e46340455c"}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r0}, @nested={0x4, 0xae}, @typed={0x44, 0x6e, 0x0, 0x0, @binary="77fd76a517bb9c5dbed0a1a18e2caa8491a3880eec6c88b81f1e35b83387b6fcc42c02d8fed5b6214de9c89bdabab8fe2c45838adb4a5953b5fb84e4ca8d331e"}, @nested={0x4, 0xf9}]}, @nested={0xc4, 0x94, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0x8, 0xac, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x78}, @generic="b8bfd0ca28c83f916a8c3d1c96ef9e9d38be8e83309a89294739a88b294c686bae49e4a35322d1833a3539bf9bf6a803ae9c5b5f210974573340d0a276f81e3cbc6e0ec0f121ed0cc787edef219101e7baf37f73efd33845fadc2d430d802b42b725d50b0700cbcc590d8ef9c74e372bab18189059b318bd633908b5dc6188d92673504dc3f4d46ca919c533708e32c8002967725cce286d479a10992774729cef07a9d9c1da6987", @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @typed={0x8, 0x125, 0x0, 0x0, @u32=0xacca}]}]}, 0x668}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1) kernel console output (not intermixed with test programs): 591.887398][T14019] R13: 00007f9fdfbc6308 R14: 00007f9fdfbc6270 R15: 00007ffd2ac85708 [ 591.887439][T14019] [ 592.452170][T14026] : Can't lookup blockdev [ 592.961485][ T30] audit: type=1800 audit(2147483710.198:56): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1950" name="features" dev="configfs" ino=49316 res=0 errno=0 [ 593.266474][T14022] openvswitch: ovs_: Dropping previously announced user features [ 593.682978][T14039] openvswitch: ovs_: Dropping previously announced user features [ 594.165765][T14038] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1952'. [ 594.177089][T14037] ima: policy update failed [ 594.187329][ T30] audit: type=1802 audit(2147483711.427:57): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1952" res=0 errno=0 [ 594.388358][T14045] openvswitch: ovs_: Dropping previously announced user features [ 594.828392][T14056] openvswitch: ovs_: Dropping previously announced user features [ 595.715657][ T30] audit: type=1800 audit(2147483712.947:58): pid=14073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=50447 res=0 errno=0 [ 596.572121][T14089] random: crng reseeded on system resumption [ 597.279697][T14106] FAULT_INJECTION: forcing a failure. [ 597.279697][T14106] name failslab, interval 1, probability 0, space 0, times 0 [ 597.292655][T14106] CPU: 0 UID: 0 PID: 14106 Comm: syz.1.1967 Tainted: G U syzkaller #0 PREEMPT(full) [ 597.292700][T14106] Tainted: [U]=USER [ 597.292711][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.292726][T14106] Call Trace: [ 597.292736][T14106] [ 597.292747][T14106] dump_stack_lvl+0x16c/0x1f0 [ 597.292784][T14106] should_fail_ex+0x512/0x640 [ 597.292818][T14106] ? __kmalloc_noprof+0xbf/0x510 [ 597.292851][T14106] ? ima_write_template_field_data+0x5d/0x1f0 [ 597.292888][T14106] should_failslab+0xc2/0x120 [ 597.292922][T14106] __kmalloc_noprof+0xd2/0x510 [ 597.292950][T14106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.292986][T14106] ima_write_template_field_data+0x5d/0x1f0 [ 597.293029][T14106] ima_eventdigest_init_common+0x154/0x430 [ 597.293071][T14106] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 597.293132][T14106] ? rcu_is_watching+0x12/0xc0 [ 597.293159][T14106] ? trace_kmalloc+0x2b/0xd0 [ 597.293194][T14106] ? __kmalloc_noprof+0x242/0x510 [ 597.293233][T14106] ima_alloc_init_template+0x39d/0x720 [ 597.293268][T14106] ? rcu_is_watching+0x12/0xc0 [ 597.293299][T14106] ima_store_measurement+0x1eb/0x5c0 [ 597.293335][T14106] ? __pfx_ima_store_measurement+0x10/0x10 [ 597.293369][T14106] ? vfs_getxattr_alloc+0xec/0x340 [ 597.293408][T14106] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 597.293440][T14106] process_measurement+0x1ddb/0x23e0 [ 597.293483][T14106] ? __pfx_process_measurement+0x10/0x10 [ 597.293530][T14106] ? rcu_read_unlock+0x17/0x60 [ 597.293593][T14106] ? debug_mutex_init+0x37/0x70 [ 597.293621][T14106] ? inode_to_bdi+0x9e/0x160 [ 597.293669][T14106] ima_file_check+0xc5/0x110 [ 597.293690][T14106] ? __pfx_ima_file_check+0x10/0x10 [ 597.293724][T14106] security_file_post_open+0x8e/0x210 [ 597.293758][T14106] path_openat+0x1404/0x2cb0 [ 597.293801][T14106] ? __pfx_path_openat+0x10/0x10 [ 597.293842][T14106] do_filp_open+0x20b/0x470 [ 597.293874][T14106] ? __pfx_do_filp_open+0x10/0x10 [ 597.293934][T14106] ? alloc_fd+0x471/0x7d0 [ 597.293970][T14106] do_sys_openat2+0x11b/0x1d0 [ 597.294006][T14106] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.294057][T14106] __x64_sys_openat+0x174/0x210 [ 597.294093][T14106] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.294143][T14106] do_syscall_64+0xcd/0x490 [ 597.294178][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.294204][T14106] RIP: 0033:0x7f323bd8ebe9 [ 597.294225][T14106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.294253][T14106] RSP: 002b:00007f3239ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.294277][T14106] RAX: ffffffffffffffda RBX: 00007f323bfc5fa0 RCX: 00007f323bd8ebe9 [ 597.294293][T14106] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 597.294309][T14106] RBP: 00007f323be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.294325][T14106] R10: 0000000000001a00 R11: 0000000000000246 R12: 0000000000000000 [ 597.294341][T14106] R13: 00007f323bfc6038 R14: 00007f323bfc5fa0 R15: 00007ffcd7ce8158 [ 597.294361][T14106] [ 597.303133][ T30] audit: type=1804 audit(2147483714.536:59): pid=14106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.1967" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 597.685329][T14108] : Can't lookup blockdev [ 598.400776][ T30] audit: type=1800 audit(2147483715.635:60): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=50552 res=0 errno=0 [ 600.788725][ T30] audit: type=1800 audit(2147483718.024:61): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=49766 res=0 errno=0 [ 601.166224][T14166] openvswitch: ovs_: Dropping previously announced user features [ 602.172300][T14181] : Can't lookup blockdev [ 602.328843][ T30] audit: type=1800 audit(2147483719.553:62): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1989" name="features" dev="configfs" ino=49837 res=0 errno=0 [ 602.966001][T14190] : Can't lookup blockdev [ 604.791622][T14218] openvswitch: ovs_: Dropping previously announced user features [ 604.955763][T14206] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 605.540807][T14232] : Can't lookup blockdev [ 605.626578][T14229] openvswitch: ovs_: Dropping previously announced user features [ 605.757165][ T30] audit: type=1800 audit(2147483722.981:63): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1994" name="features" dev="configfs" ino=50157 res=0 errno=0 [ 606.058170][ T30] audit: type=1800 audit(2147483723.281:64): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=50162 res=0 errno=0 [ 607.492612][T14264] : Can't lookup blockdev [ 607.751314][ T30] audit: type=1800 audit(2147483724.970:65): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1997" name="features" dev="configfs" ino=50985 res=0 errno=0 [ 608.548438][T14281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 608.560344][T14281] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2005'. [ 608.569697][T14281] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2005'. [ 608.810888][T14276] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 609.122018][T14289] openvswitch: ovs_: Dropping previously announced user features [ 611.611692][ T30] audit: type=1800 audit(2147483728.839:66): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=51513 res=0 errno=0 [ 612.691648][T14351] : Can't lookup blockdev [ 612.957362][ T30] audit: type=1800 audit(2147483730.178:67): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2018" name="features" dev="configfs" ino=51610 res=0 errno=0 [ 613.015287][T14353] openvswitch: ovs_: Dropping previously announced user features [ 614.352376][T14379] : Can't lookup blockdev [ 614.902227][ T30] audit: type=1800 audit(2147483732.127:68): pid=14391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=51793 res=0 errno=0 [ 615.100144][T14385] openvswitch: ovs_: Dropping previously announced user features [ 615.462654][T14403] : Can't lookup blockdev [ 617.254043][ T30] audit: type=1800 audit(2147483734.476:69): pid=14420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=52413 res=0 errno=0 [ 617.306398][T14431] : Can't lookup blockdev [ 617.412974][ T30] audit: type=1800 audit(2147483734.626:70): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2043" name="features" dev="configfs" ino=52416 res=0 errno=0 [ 618.507855][T14444] : Can't lookup blockdev [ 619.630143][T14469] : Can't lookup blockdev [ 620.433916][ T30] audit: type=1800 audit(2147483737.644:71): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=52018 res=0 errno=0 [ 620.709586][T14478] openvswitch: ovs_: Dropping previously announced user features [ 621.272360][T14491] : Can't lookup blockdev [ 621.734276][ T30] audit: type=1800 audit(2147483738.934:72): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=52181 res=0 errno=0 [ 622.100954][T14487] Process accounting resumed [ 622.959010][T14518] : Can't lookup blockdev [ 623.580068][ T30] audit: type=1800 audit(2147483740.783:73): pid=14529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53289 res=0 errno=0 [ 623.750496][T14535] : Can't lookup blockdev [ 624.555777][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.562352][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.569161][T14545] openvswitch: ovs_: Dropping previously announced user features [ 624.761106][T14549] : Can't lookup blockdev [ 625.230250][T14554] openvswitch: ovs_: Dropping previously announced user features [ 625.905621][ T30] audit: type=1800 audit(2147483743.121:74): pid=14556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53453 res=0 errno=0 [ 626.523809][ T30] audit: type=1800 audit(2147483743.731:75): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53532 res=0 errno=0 [ 626.973325][T14583] : Can't lookup blockdev [ 627.802137][T14599] : Can't lookup blockdev [ 628.040584][T14592] openvswitch: ovs_: Dropping previously announced user features [ 628.381324][T14606] : Can't lookup blockdev [ 629.065542][T14609] openvswitch: ovs_: Dropping previously announced user features [ 629.653315][T14613] openvswitch: ovs_: Dropping previously announced user features [ 630.778184][T14648] : Can't lookup blockdev [ 631.795901][T14655] openvswitch: ovs_: Dropping previously announced user features [ 631.852133][T14660] : Can't lookup blockdev [ 631.937604][ T30] audit: type=1800 audit(2147483749.158:76): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2100" name="features" dev="configfs" ino=53813 res=0 errno=0 [ 632.967387][T14679] : Can't lookup blockdev [ 633.533139][T14691] : Can't lookup blockdev [ 633.661010][T14690] openvswitch: ovs_: Dropping previously announced user features [ 634.432732][T14711] : Can't lookup blockdev [ 634.661542][ T30] audit: type=1800 audit(2147483751.757:77): pid=14710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=53052 res=0 errno=0 [ 634.725744][ T30] audit: type=1800 audit(2147483751.777:78): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2113" name="features" dev="configfs" ino=53054 res=0 errno=0 [ 635.945701][T14739] : Can't lookup blockdev [ 635.974942][T14737] : Can't lookup blockdev [ 636.095614][ T30] audit: type=1800 audit(2147483753.306:79): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2117" name="features" dev="configfs" ino=54007 res=0 errno=0 [ 636.842411][T14749] : Can't lookup blockdev [ 636.864255][T14748] openvswitch: ovs_: Dropping previously announced user features [ 637.532514][T14752] openvswitch: ovs_: Dropping previously announced user features [ 637.563185][ T30] audit: type=1800 audit(2147483754.776:80): pid=14756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=54059 res=0 errno=0 [ 637.857780][T14766] : Can't lookup blockdev [ 638.020978][ T30] audit: type=1800 audit(2147483755.235:81): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2127" name="features" dev="configfs" ino=54105 res=0 errno=0 [ 639.496270][T14797] : Can't lookup blockdev [ 639.895210][T14796] : Can't lookup blockdev [ 640.342479][ T30] audit: type=1800 audit(2147483757.534:82): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2134" name="features" dev="configfs" ino=54178 res=0 errno=0 [ 640.591881][T14802] openvswitch: ovs_: Dropping previously announced user features [ 641.007988][T14814] : Can't lookup blockdev [ 641.429891][T14821] : Can't lookup blockdev [ 641.692222][ T30] audit: type=1800 audit(2147483758.904:83): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2140" name="features" dev="configfs" ino=54334 res=0 errno=0 [ 642.267398][T14830] FAULT_INJECTION: forcing a failure. [ 642.267398][T14830] name fail_futex, interval 1, probability 0, space 0, times 0 [ 642.318491][T14830] CPU: 1 UID: 0 PID: 14830 Comm: syz.2.2143 Tainted: G U syzkaller #0 PREEMPT(full) [ 642.318535][T14830] Tainted: [U]=USER [ 642.318544][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.318562][T14830] Call Trace: [ 642.318571][T14830] [ 642.318582][T14830] dump_stack_lvl+0x16c/0x1f0 [ 642.318625][T14830] should_fail_ex+0x512/0x640 [ 642.318667][T14830] get_futex_key+0x1d0/0x1560 [ 642.318706][T14830] ? __pfx_get_futex_key+0x10/0x10 [ 642.318749][T14830] futex_wake+0xea/0x530 [ 642.318787][T14830] ? rcu_is_watching+0x12/0xc0 [ 642.318817][T14830] ? __pfx_futex_wake+0x10/0x10 [ 642.318859][T14830] ? kmem_cache_free+0x2d1/0x4d0 [ 642.318888][T14830] ? fd_install+0x225/0x750 [ 642.318913][T14830] ? putname+0x154/0x1a0 [ 642.318954][T14830] do_futex+0x1e3/0x350 [ 642.318988][T14830] ? __pfx_do_futex+0x10/0x10 [ 642.319020][T14830] ? map_id_range_up+0x2ce/0x3b0 [ 642.319064][T14830] __x64_sys_futex+0x1e0/0x4c0 [ 642.319101][T14830] ? __x64_sys_openat+0x174/0x210 [ 642.319148][T14830] ? __pfx___x64_sys_futex+0x10/0x10 [ 642.319179][T14830] ? xfd_validate_state+0x61/0x180 [ 642.319228][T14830] do_syscall_64+0xcd/0x490 [ 642.319268][T14830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.319296][T14830] RIP: 0033:0x7fb8ed38ebe9 [ 642.319319][T14830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.319346][T14830] RSP: 002b:00007fb8ee2140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 642.319373][T14830] RAX: ffffffffffffffda RBX: 00007fb8ed5c5fa8 RCX: 00007fb8ed38ebe9 [ 642.319392][T14830] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8ed5c5fac [ 642.319410][T14830] RBP: 00007fb8ed5c5fa0 R08: 00007fb8ee215000 R09: 0000000000000000 [ 642.319428][T14830] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 642.319445][T14830] R13: 00007fb8ed5c6038 R14: 00007ffff1a48070 R15: 00007ffff1a48158 [ 642.319482][T14830] [ 642.806401][T14848] : Can't lookup blockdev [ 642.928756][T14850] : Can't lookup blockdev [ 643.561106][ T30] audit: type=1800 audit(2147483760.763:84): pid=14852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2148" name="features" dev="configfs" ino=55348 res=0 errno=0 [ 643.975100][T14856] openvswitch: ovs_: Dropping previously announced user features [ 645.060460][T14883] : Can't lookup blockdev [ 645.173790][T14885] : Can't lookup blockdev [ 645.427144][ T30] audit: type=1800 audit(2147483762.622:85): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2155" name="features" dev="configfs" ino=55450 res=0 errno=0 [ 645.620523][T14892] FAULT_INJECTION: forcing a failure. [ 645.620523][T14892] name failslab, interval 1, probability 0, space 0, times 0 [ 645.663082][T14892] CPU: 0 UID: 0 PID: 14892 Comm: syz.1.2156 Tainted: G U syzkaller #0 PREEMPT(full) [ 645.663128][T14892] Tainted: [U]=USER [ 645.663137][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.663154][T14892] Call Trace: [ 645.663164][T14892] [ 645.663176][T14892] dump_stack_lvl+0x16c/0x1f0 [ 645.663218][T14892] should_fail_ex+0x512/0x640 [ 645.663254][T14892] ? __kmalloc_noprof+0xbf/0x510 [ 645.663288][T14892] ? ima_write_template_field_data+0x5d/0x1f0 [ 645.663325][T14892] should_failslab+0xc2/0x120 [ 645.663346][T14892] __kmalloc_noprof+0xd2/0x510 [ 645.663363][T14892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.663381][T14892] ima_write_template_field_data+0x5d/0x1f0 [ 645.663403][T14892] ima_eventdigest_init_common+0x154/0x430 [ 645.663424][T14892] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 645.663456][T14892] ? rcu_is_watching+0x12/0xc0 [ 645.663471][T14892] ? trace_kmalloc+0x2b/0xd0 [ 645.663488][T14892] ? __kmalloc_noprof+0x242/0x510 [ 645.663508][T14892] ima_alloc_init_template+0x39d/0x720 [ 645.663526][T14892] ? rcu_is_watching+0x12/0xc0 [ 645.663542][T14892] ima_store_measurement+0x1eb/0x5c0 [ 645.663560][T14892] ? __pfx_ima_store_measurement+0x10/0x10 [ 645.663578][T14892] ? vfs_getxattr_alloc+0xec/0x340 [ 645.663599][T14892] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 645.663616][T14892] process_measurement+0x1ddb/0x23e0 [ 645.663638][T14892] ? __pfx_process_measurement+0x10/0x10 [ 645.663661][T14892] ? rcu_read_unlock+0x17/0x60 [ 645.663693][T14892] ? debug_mutex_init+0x37/0x70 [ 645.663707][T14892] ? inode_to_bdi+0x9e/0x160 [ 645.663743][T14892] ima_file_check+0xc5/0x110 [ 645.663774][T14892] ? __pfx_ima_file_check+0x10/0x10 [ 645.663811][T14892] security_file_post_open+0x8e/0x210 [ 645.663843][T14892] path_openat+0x1404/0x2cb0 [ 645.663869][T14892] ? __pfx_path_openat+0x10/0x10 [ 645.663907][T14892] do_filp_open+0x20b/0x470 [ 645.663936][T14892] ? __pfx_do_filp_open+0x10/0x10 [ 645.663981][T14892] ? alloc_fd+0x471/0x7d0 [ 645.664001][T14892] do_sys_openat2+0x11b/0x1d0 [ 645.664022][T14892] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.664043][T14892] ? __pfx___schedule+0x10/0x10 [ 645.664064][T14892] __x64_sys_openat+0x174/0x210 [ 645.664087][T14892] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.664116][T14892] do_syscall_64+0xcd/0x490 [ 645.664137][T14892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.664152][T14892] RIP: 0033:0x7f323bd8ebe9 [ 645.664165][T14892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.664179][T14892] RSP: 002b:00007f3239ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.664193][T14892] RAX: ffffffffffffffda RBX: 00007f323bfc5fa0 RCX: 00007f323bd8ebe9 [ 645.664204][T14892] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 645.664213][T14892] RBP: 00007f323be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 645.664222][T14892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.664231][T14892] R13: 00007f323bfc6038 R14: 00007f323bfc5fa0 R15: 00007ffcd7ce8158 [ 645.664250][T14892] [ 645.994083][ T30] audit: type=1804 audit(2147483763.201:86): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2156" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 646.380263][T14898] : Can't lookup blockdev [ 649.100638][T14947] : Can't lookup blockdev [ 649.172915][T14949] : Can't lookup blockdev [ 649.278196][ T30] audit: type=1800 audit(2147483766.480:87): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2172" name="features" dev="configfs" ino=55567 res=0 errno=0 [ 650.220433][T14963] : Can't lookup blockdev [ 650.403421][ T30] audit: type=1800 audit(2147483767.589:88): pid=14969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2173" name="features" dev="configfs" ino=55590 res=0 errno=0 [ 650.506462][T14970] : Can't lookup blockdev [ 650.781180][T14966] : Can't lookup blockdev [ 650.789831][T14960] openvswitch: ovs_: Dropping previously announced user features [ 651.537119][T14981] vivid-003: ================= START STATUS ================= [ 651.545784][T14981] vivid-003: Radio HW Seek Mode: Bounded [ 651.551440][T14981] vivid-003: Radio Programmable HW Seek: false [ 651.558798][T14981] vivid-003: RDS Rx I/O Mode: Block I/O [ 651.564637][T14981] vivid-003: Generate RBDS Instead of RDS: false [ 651.570972][T14981] vivid-003: RDS Reception: true [ 651.587841][T14981] vivid-003: RDS Program Type: 0 inactive [ 651.593664][T14981] vivid-003: RDS PS Name: inactive [ 651.600746][T14981] vivid-003: RDS Radio Text: inactive [ 651.606644][T14981] vivid-003: RDS Traffic Announcement: false inactive [ 651.613452][T14981] vivid-003: RDS Traffic Program: false inactive [ 651.624073][T14981] vivid-003: RDS Music: false inactive [ 651.629608][T14981] vivid-003: ================== END STATUS ================== [ 652.335550][T14977] Process accounting paused [ 652.393613][T14993] FAULT_INJECTION: forcing a failure. [ 652.393613][T14993] name fail_futex, interval 1, probability 0, space 0, times 0 [ 652.421462][T14993] CPU: 1 UID: 0 PID: 14993 Comm: syz.2.2182 Tainted: G U syzkaller #0 PREEMPT(full) [ 652.421494][T14993] Tainted: [U]=USER [ 652.421506][T14993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.421515][T14993] Call Trace: [ 652.421522][T14993] [ 652.421528][T14993] dump_stack_lvl+0x16c/0x1f0 [ 652.421552][T14993] should_fail_ex+0x512/0x640 [ 652.421575][T14993] get_futex_key+0x1d0/0x1560 [ 652.421596][T14993] ? __pfx_get_futex_key+0x10/0x10 [ 652.421620][T14993] futex_wake+0xea/0x530 [ 652.421640][T14993] ? rcu_is_watching+0x12/0xc0 [ 652.421655][T14993] ? __pfx_futex_wake+0x10/0x10 [ 652.421676][T14993] ? kmem_cache_free+0x2d1/0x4d0 [ 652.421691][T14993] ? fd_install+0x225/0x750 [ 652.421705][T14993] ? putname+0x154/0x1a0 [ 652.421726][T14993] do_futex+0x1e3/0x350 [ 652.421744][T14993] ? __pfx_do_futex+0x10/0x10 [ 652.421760][T14993] ? map_id_range_up+0x2ce/0x3b0 [ 652.421783][T14993] __x64_sys_futex+0x1e0/0x4c0 [ 652.421802][T14993] ? __x64_sys_openat+0x174/0x210 [ 652.421822][T14993] ? __pfx___x64_sys_futex+0x10/0x10 [ 652.421840][T14993] ? xfd_validate_state+0x61/0x180 [ 652.421870][T14993] do_syscall_64+0xcd/0x490 [ 652.421890][T14993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.421905][T14993] RIP: 0033:0x7fb8ed38ebe9 [ 652.421917][T14993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.421931][T14993] RSP: 002b:00007fb8ee2140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 652.421945][T14993] RAX: ffffffffffffffda RBX: 00007fb8ed5c5fa8 RCX: 00007fb8ed38ebe9 [ 652.421955][T14993] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8ed5c5fac [ 652.421964][T14993] RBP: 00007fb8ed5c5fa0 R08: 00007fb8ee215000 R09: 0000000000000000 [ 652.421972][T14993] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 652.421981][T14993] R13: 00007fb8ed5c6038 R14: 00007ffff1a48070 R15: 00007ffff1a48158 [ 652.421999][T14993] [ 653.003243][T15004] : Can't lookup blockdev [ 653.154734][T15003] : Can't lookup blockdev [ 653.600935][T15013] : Can't lookup blockdev [ 653.724813][T15009] openvswitch: ovs_: Dropping previously announced user features [ 654.724957][T15026] : Can't lookup blockdev [ 656.272017][T15047] : Can't lookup blockdev [ 657.422081][T15062] : Can't lookup blockdev [ 657.558633][T15061] openvswitch: ovs_: Dropping previously announced user features [ 658.500551][T15075] : Can't lookup blockdev [ 659.004946][T15084] : Can't lookup blockdev [ 659.883453][T15094] : Can't lookup blockdev [ 659.988801][ T30] audit: type=1800 audit(2147483777.194:89): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2208" name="features" dev="configfs" ino=55948 res=0 errno=0 [ 660.135392][T15101] : Can't lookup blockdev [ 661.207160][T15113] FAULT_INJECTION: forcing a failure. [ 661.207160][T15113] name failslab, interval 1, probability 0, space 0, times 0 [ 661.267739][T15113] CPU: 0 UID: 0 PID: 15113 Comm: syz.3.2213 Tainted: G U syzkaller #0 PREEMPT(full) [ 661.267787][T15113] Tainted: [U]=USER [ 661.267797][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.267813][T15113] Call Trace: [ 661.267823][T15113] [ 661.267834][T15113] dump_stack_lvl+0x16c/0x1f0 [ 661.267876][T15113] should_fail_ex+0x512/0x640 [ 661.267912][T15113] ? __kmalloc_noprof+0xbf/0x510 [ 661.267948][T15113] ? ima_write_template_field_data+0x5d/0x1f0 [ 661.267986][T15113] should_failslab+0xc2/0x120 [ 661.268022][T15113] __kmalloc_noprof+0xd2/0x510 [ 661.268054][T15113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.268091][T15113] ima_write_template_field_data+0x5d/0x1f0 [ 661.268134][T15113] ima_eventdigest_init_common+0x154/0x430 [ 661.268177][T15113] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 661.268242][T15113] ? rcu_is_watching+0x12/0xc0 [ 661.268270][T15113] ? trace_kmalloc+0x2b/0xd0 [ 661.268305][T15113] ? __kmalloc_noprof+0x242/0x510 [ 661.268341][T15113] ima_alloc_init_template+0x39d/0x720 [ 661.268383][T15113] ? rcu_is_watching+0x12/0xc0 [ 661.268414][T15113] ima_store_measurement+0x1eb/0x5c0 [ 661.268450][T15113] ? __pfx_ima_store_measurement+0x10/0x10 [ 661.268485][T15113] ? vfs_getxattr_alloc+0xec/0x340 [ 661.268526][T15113] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 661.268560][T15113] process_measurement+0x1ddb/0x23e0 [ 661.268604][T15113] ? __pfx_process_measurement+0x10/0x10 [ 661.268645][T15113] ? rcu_read_unlock+0x17/0x60 [ 661.268701][T15113] ? debug_mutex_init+0x37/0x70 [ 661.268728][T15113] ? inode_to_bdi+0x9e/0x160 [ 661.268767][T15113] ima_file_check+0xc5/0x110 [ 661.268794][T15113] ? __pfx_ima_file_check+0x10/0x10 [ 661.268832][T15113] security_file_post_open+0x8e/0x210 [ 661.268869][T15113] path_openat+0x1404/0x2cb0 [ 661.268914][T15113] ? __pfx_path_openat+0x10/0x10 [ 661.268956][T15113] do_filp_open+0x20b/0x470 [ 661.268988][T15113] ? __pfx_do_filp_open+0x10/0x10 [ 661.269048][T15113] ? alloc_fd+0x471/0x7d0 [ 661.269088][T15113] do_sys_openat2+0x11b/0x1d0 [ 661.269127][T15113] ? __pfx_do_sys_openat2+0x10/0x10 [ 661.269164][T15113] ? map_id_range_up+0x2ce/0x3b0 [ 661.269216][T15113] __x64_sys_openat+0x174/0x210 [ 661.269255][T15113] ? __pfx___x64_sys_openat+0x10/0x10 [ 661.269311][T15113] do_syscall_64+0xcd/0x490 [ 661.269350][T15113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.269388][T15113] RIP: 0033:0x7f83f418ebe9 [ 661.269412][T15113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.269439][T15113] RSP: 002b:00007f83f5042038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 661.269465][T15113] RAX: ffffffffffffffda RBX: 00007f83f43c5fa0 RCX: 00007f83f418ebe9 [ 661.269483][T15113] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 661.269502][T15113] RBP: 00007f83f4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 661.269519][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.269535][T15113] R13: 00007f83f43c6038 R14: 00007f83f43c5fa0 R15: 00007ffe3f1ad958 [ 661.269573][T15113] [ 661.642176][ T30] audit: type=1804 audit(2147483778.844:90): pid=15113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2213" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 661.677443][T15119] vivid-003: ================= START STATUS ================= [ 661.685226][T15119] vivid-003: Radio HW Seek Mode: Bounded [ 661.698341][T15119] vivid-003: Radio Programmable HW Seek: false [ 661.719554][T15119] vivid-003: RDS Rx I/O Mode: Block I/O [ 661.742713][T15119] vivid-003: Generate RBDS Instead of RDS: false [ 661.785167][T15119] vivid-003: RDS Reception: true [ 661.790280][T15119] vivid-003: RDS Program Type: 0 inactive [ 661.796079][T15119] vivid-003: RDS PS Name: inactive [ 661.808680][T15119] vivid-003: RDS Radio Text: inactive [ 661.814348][T15119] vivid-003: RDS Traffic Announcement: false inactive [ 661.830169][T15119] vivid-003: RDS Traffic Program: false inactive [ 661.836618][T15119] vivid-003: RDS Music: false inactive [ 661.847245][T15119] vivid-003: ================== END STATUS ================== [ 662.133561][T15138] : Can't lookup blockdev [ 662.472504][ T30] audit: type=1800 audit(2147483779.553:91): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2220" name="features" dev="configfs" ino=56054 res=0 errno=0 [ 663.188255][T15152] : Can't lookup blockdev [ 663.258044][T15153] : Can't lookup blockdev [ 663.386984][ T30] audit: type=1800 audit(2147483780.513:92): pid=15155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2222" name="features" dev="configfs" ino=54994 res=0 errno=0 [ 664.136895][T15164] vivid-003: ================= START STATUS ================= [ 664.148982][T15164] vivid-003: Radio HW Seek Mode: Bounded [ 664.154994][T15164] vivid-003: Radio Programmable HW Seek: false [ 664.164385][T15164] vivid-003: RDS Rx I/O Mode: Block I/O [ 664.169984][T15164] vivid-003: Generate RBDS Instead of RDS: false [ 664.177438][T15164] vivid-003: RDS Reception: true [ 664.185055][T15164] vivid-003: RDS Program Type: 0 inactive [ 664.192524][T15164] vivid-003: RDS PS Name: inactive [ 664.197835][T15164] vivid-003: RDS Radio Text: inactive [ 664.294177][T15164] vivid-003: RDS Traffic Announcement: false inactive [ 664.333207][T15164] vivid-003: RDS Traffic Program: false inactive [ 664.350573][T15164] vivid-003: RDS Music: false inactive [ 664.357118][T15164] vivid-003: ================== END STATUS ================== [ 665.513590][T15188] : Can't lookup blockdev [ 665.761540][ T30] audit: type=1800 audit(2147483782.951:93): pid=15188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2233" name="features" dev="configfs" ino=55088 res=0 errno=0 [ 666.219762][T15202] : Can't lookup blockdev [ 666.913568][T15216] vivid-003: ================= START STATUS ================= [ 666.964265][T15216] vivid-003: Radio HW Seek Mode: Bounded [ 666.976525][T15216] vivid-003: Radio Programmable HW Seek: false [ 666.992160][T15216] vivid-003: RDS Rx I/O Mode: Block I/O [ 666.998260][T15216] vivid-003: Generate RBDS Instead of RDS: false [ 667.009275][T15216] vivid-003: RDS Reception: true [ 667.055658][T15216] vivid-003: RDS Program Type: 0 inactive [ 667.081737][T15216] vivid-003: RDS PS Name: inactive [ 667.134811][T15216] vivid-003: RDS Radio Text: inactive [ 667.144170][T15216] vivid-003: RDS Traffic Announcement: false inactive [ 667.151295][T15216] vivid-003: RDS Traffic Program: false inactive [ 667.183383][T15216] vivid-003: RDS Music: false inactive [ 667.218032][T15216] vivid-003: ================== END STATUS ================== [ 668.785156][T15256] : Can't lookup blockdev [ 668.908138][ T30] audit: type=1800 audit(2147483786.090:94): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2248" name="features" dev="configfs" ino=56350 res=0 errno=0 [ 668.954258][T15261] : Can't lookup blockdev [ 669.840287][T15273] vivid-003: ================= START STATUS ================= [ 669.853089][T15273] vivid-003: Radio HW Seek Mode: Bounded [ 669.876749][T15273] vivid-003: Radio Programmable HW Seek: false [ 669.906807][T15273] vivid-003: RDS Rx I/O Mode: Block I/O [ 669.947700][T15273] vivid-003: Generate RBDS Instead of RDS: false [ 669.957589][T15273] vivid-003: RDS Reception: true [ 669.970872][T15273] vivid-003: RDS Program Type: 0 inactive [ 669.990198][T15273] vivid-003: RDS PS Name: inactive [ 670.028286][T15273] vivid-003: RDS Radio Text: inactive [ 670.039910][T15273] vivid-003: RDS Traffic Announcement: false inactive [ 670.047195][T15273] vivid-003: RDS Traffic Program: false inactive [ 670.053822][T15273] vivid-003: RDS Music: false inactive [ 670.060361][T15273] vivid-003: ================== END STATUS ================== [ 670.375568][T15288] : Can't lookup blockdev [ 670.677752][T15284] openvswitch: ovs_: Dropping previously announced user features [ 671.029535][T15286] openvswitch: ovs_: Dropping previously announced user features [ 672.431932][T15312] openvswitch: ovs_: Dropping previously announced user features [ 672.530014][T15324] : Can't lookup blockdev [ 673.703059][T15338] : Can't lookup blockdev [ 674.783547][T15351] openvswitch: ovs_: Dropping previously announced user features [ 675.013379][T15362] : Can't lookup blockdev [ 675.204135][T15359] : Can't lookup blockdev [ 675.389950][ T30] audit: type=1800 audit(2147483792.457:95): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2272" name="features" dev="configfs" ino=57512 res=0 errno=0 [ 676.382778][T15384] : Can't lookup blockdev [ 676.482737][ T30] audit: type=1800 audit(2147483793.676:96): pid=15384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2275" name="features" dev="configfs" ino=56771 res=0 errno=0 [ 676.981816][T15393] : Can't lookup blockdev [ 678.126064][T15408] : Can't lookup blockdev [ 678.784851][T15412] : Can't lookup blockdev [ 678.931366][ T30] audit: type=1800 audit(2147483796.125:97): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2284" name="features" dev="configfs" ino=56869 res=0 errno=0 [ 679.022966][T15417] : Can't lookup blockdev [ 679.825997][T15424] : Can't lookup blockdev [ 679.892785][T15425] : Can't lookup blockdev [ 680.038728][ T30] audit: type=1800 audit(2147483797.224:98): pid=15426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2287" name="features" dev="configfs" ino=57595 res=0 errno=0 [ 681.044495][T15444] : Can't lookup blockdev [ 681.083280][T15446] : Can't lookup blockdev [ 681.151064][T15447] : Can't lookup blockdev [ 681.174200][ T30] audit: type=1800 audit(2147483798.364:99): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2291" name="features" dev="configfs" ino=57668 res=0 errno=0 [ 682.972089][T15452] Process accounting resumed [ 684.071187][T15484] : Can't lookup blockdev [ 684.129594][ T30] audit: type=1800 audit(2147483801.282:100): pid=15484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2298" name="features" dev="configfs" ino=56985 res=0 errno=0 [ 684.237372][T15485] : Can't lookup blockdev [ 684.362283][T15492] : Can't lookup blockdev [ 684.446044][T15493] : Can't lookup blockdev [ 685.929661][T15510] : Can't lookup blockdev [ 686.000529][T15511] : Can't lookup blockdev [ 686.081914][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.090438][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.133479][ T30] audit: type=1800 audit(2147483803.321:101): pid=15510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2304" name="features" dev="configfs" ino=57023 res=0 errno=0 [ 688.042252][T15540] : Can't lookup blockdev [ 688.145494][T15544] : Can't lookup blockdev [ 688.305481][ T30] audit: type=1800 audit(2147483805.480:102): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2313" name="features" dev="configfs" ino=57131 res=0 errno=0 [ 688.474810][T15549] : Can't lookup blockdev [ 689.401887][T15552] openvswitch: ovs_: Dropping previously announced user features [ 689.824797][T15566] : Can't lookup blockdev [ 689.921640][T15565] : Can't lookup blockdev [ 689.949437][ T30] audit: type=1800 audit(2147483807.139:103): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2316" name="features" dev="configfs" ino=57995 res=0 errno=0 [ 690.656239][T15572] FAULT_INJECTION: forcing a failure. [ 690.656239][T15572] name failslab, interval 1, probability 0, space 0, times 0 [ 690.742080][T15572] CPU: 0 UID: 0 PID: 15572 Comm: syz.0.2318 Tainted: G U syzkaller #0 PREEMPT(full) [ 690.742126][T15572] Tainted: [U]=USER [ 690.742136][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.742152][T15572] Call Trace: [ 690.742162][T15572] [ 690.742174][T15572] dump_stack_lvl+0x16c/0x1f0 [ 690.742215][T15572] should_fail_ex+0x512/0x640 [ 690.742250][T15572] ? __kmalloc_noprof+0xbf/0x510 [ 690.742284][T15572] ? ima_write_template_field_data+0x5d/0x1f0 [ 690.742321][T15572] should_failslab+0xc2/0x120 [ 690.742364][T15572] __kmalloc_noprof+0xd2/0x510 [ 690.742395][T15572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.742430][T15572] ima_write_template_field_data+0x5d/0x1f0 [ 690.742474][T15572] ima_eventdigest_init_common+0x154/0x430 [ 690.742517][T15572] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 690.742578][T15572] ? rcu_is_watching+0x12/0xc0 [ 690.742605][T15572] ? trace_kmalloc+0x2b/0xd0 [ 690.742640][T15572] ? __kmalloc_noprof+0x242/0x510 [ 690.742687][T15572] ima_alloc_init_template+0x39d/0x720 [ 690.742724][T15572] ? rcu_is_watching+0x12/0xc0 [ 690.742756][T15572] ima_store_measurement+0x1eb/0x5c0 [ 690.742792][T15572] ? __pfx_ima_store_measurement+0x10/0x10 [ 690.742826][T15572] ? vfs_getxattr_alloc+0xec/0x340 [ 690.742867][T15572] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 690.742900][T15572] process_measurement+0x1ddb/0x23e0 [ 690.742948][T15572] ? __pfx_process_measurement+0x10/0x10 [ 690.742994][T15572] ? rcu_read_unlock+0x17/0x60 [ 690.743057][T15572] ? debug_mutex_init+0x37/0x70 [ 690.743084][T15572] ? inode_to_bdi+0x9e/0x160 [ 690.743123][T15572] ima_file_check+0xc5/0x110 [ 690.743151][T15572] ? __pfx_ima_file_check+0x10/0x10 [ 690.743189][T15572] security_file_post_open+0x8e/0x210 [ 690.743225][T15572] path_openat+0x1404/0x2cb0 [ 690.743269][T15572] ? __pfx_path_openat+0x10/0x10 [ 690.743310][T15572] do_filp_open+0x20b/0x470 [ 690.743340][T15572] ? __pfx_do_filp_open+0x10/0x10 [ 690.743390][T15572] ? alloc_fd+0x471/0x7d0 [ 690.743427][T15572] do_sys_openat2+0x11b/0x1d0 [ 690.743466][T15572] ? __pfx_do_sys_openat2+0x10/0x10 [ 690.743502][T15572] ? map_id_range_up+0x2ce/0x3b0 [ 690.743553][T15572] __x64_sys_openat+0x174/0x210 [ 690.743592][T15572] ? __pfx___x64_sys_openat+0x10/0x10 [ 690.743656][T15572] do_syscall_64+0xcd/0x490 [ 690.743697][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.743725][T15572] RIP: 0033:0x7f9fdf98ebe9 [ 690.743747][T15572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.743775][T15572] RSP: 002b:00007f9fe08d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 690.743800][T15572] RAX: ffffffffffffffda RBX: 00007f9fdfbc5fa0 RCX: 00007f9fdf98ebe9 [ 690.743819][T15572] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 690.743838][T15572] RBP: 00007f9fdfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 690.743856][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.743872][T15572] R13: 00007f9fdfbc6038 R14: 00007f9fdfbc5fa0 R15: 00007ffd2ac85708 [ 690.743907][T15572] [ 691.197453][ T30] audit: type=1804 audit(2147483808.389:104): pid=15572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.2318" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 691.635406][T15584] : Can't lookup blockdev [ 691.655270][T15587] : Can't lookup blockdev [ 691.782064][ T30] audit: type=1800 audit(2147483808.968:105): pid=15592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2319" name="features" dev="configfs" ino=57246 res=0 errno=0 [ 692.305609][T15582] openvswitch: ovs_: Dropping previously announced user features [ 693.056775][T15608] : Can't lookup blockdev [ 693.227758][ T30] audit: type=1800 audit(2147483810.418:106): pid=15612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2325" name="features" dev="configfs" ino=58064 res=0 errno=0 [ 694.278320][T15623] : Can't lookup blockdev [ 694.413151][T15627] : Can't lookup blockdev [ 694.553129][ T30] audit: type=1800 audit(2147483811.727:107): pid=15629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2327" name="features" dev="configfs" ino=58392 res=0 errno=0 [ 695.309397][T15633] FAULT_INJECTION: forcing a failure. [ 695.309397][T15633] name failslab, interval 1, probability 0, space 0, times 0 [ 695.375997][T15633] CPU: 1 UID: 0 PID: 15633 Comm: syz.1.2329 Tainted: G U syzkaller #0 PREEMPT(full) [ 695.376043][T15633] Tainted: [U]=USER [ 695.376053][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.376071][T15633] Call Trace: [ 695.376081][T15633] [ 695.376092][T15633] dump_stack_lvl+0x16c/0x1f0 [ 695.376134][T15633] should_fail_ex+0x512/0x640 [ 695.376169][T15633] ? __kmalloc_noprof+0xbf/0x510 [ 695.376200][T15633] ? ima_write_template_field_data+0x5d/0x1f0 [ 695.376237][T15633] should_failslab+0xc2/0x120 [ 695.376267][T15633] __kmalloc_noprof+0xd2/0x510 [ 695.376291][T15633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.376327][T15633] ima_write_template_field_data+0x5d/0x1f0 [ 695.376371][T15633] ima_eventdigest_init_common+0x154/0x430 [ 695.376412][T15633] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 695.376474][T15633] ? rcu_is_watching+0x12/0xc0 [ 695.376501][T15633] ? trace_kmalloc+0x2b/0xd0 [ 695.376545][T15633] ? __kmalloc_noprof+0x242/0x510 [ 695.376585][T15633] ima_alloc_init_template+0x39d/0x720 [ 695.376621][T15633] ? rcu_is_watching+0x12/0xc0 [ 695.376650][T15633] ima_store_measurement+0x1eb/0x5c0 [ 695.376685][T15633] ? __pfx_ima_store_measurement+0x10/0x10 [ 695.376717][T15633] ? vfs_getxattr_alloc+0xec/0x340 [ 695.376756][T15633] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 695.376789][T15633] process_measurement+0x1ddb/0x23e0 [ 695.376830][T15633] ? __pfx_process_measurement+0x10/0x10 [ 695.376875][T15633] ? rcu_read_unlock+0x17/0x60 [ 695.376939][T15633] ? debug_mutex_init+0x37/0x70 [ 695.376965][T15633] ? inode_to_bdi+0x9e/0x160 [ 695.377005][T15633] ima_file_check+0xc5/0x110 [ 695.377034][T15633] ? __pfx_ima_file_check+0x10/0x10 [ 695.377072][T15633] security_file_post_open+0x8e/0x210 [ 695.377107][T15633] path_openat+0x1404/0x2cb0 [ 695.377152][T15633] ? __pfx_path_openat+0x10/0x10 [ 695.377215][T15633] do_filp_open+0x20b/0x470 [ 695.377249][T15633] ? __pfx_do_filp_open+0x10/0x10 [ 695.377309][T15633] ? alloc_fd+0x471/0x7d0 [ 695.377349][T15633] do_sys_openat2+0x11b/0x1d0 [ 695.377387][T15633] ? __pfx_do_sys_openat2+0x10/0x10 [ 695.377429][T15633] ? __pfx___schedule+0x10/0x10 [ 695.377470][T15633] __x64_sys_openat+0x174/0x210 [ 695.377515][T15633] ? __pfx___x64_sys_openat+0x10/0x10 [ 695.377571][T15633] do_syscall_64+0xcd/0x490 [ 695.377608][T15633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.377636][T15633] RIP: 0033:0x7f323bd8ebe9 [ 695.377658][T15633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.377683][T15633] RSP: 002b:00007f3239ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 695.377709][T15633] RAX: ffffffffffffffda RBX: 00007f323bfc5fa0 RCX: 00007f323bd8ebe9 [ 695.377728][T15633] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 695.377745][T15633] RBP: 00007f323be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 695.377760][T15633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.377776][T15633] R13: 00007f323bfc6038 R14: 00007f323bfc5fa0 R15: 00007ffcd7ce8158 [ 695.377813][T15633] [ 695.383133][ T30] audit: type=1804 audit(2147483812.567:108): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.2329" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 695.996120][T15639] : Can't lookup blockdev [ 696.218469][ T30] audit: type=1800 audit(2147483813.366:109): pid=15649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2331" name="features" dev="configfs" ino=58186 res=0 errno=0 [ 696.696911][T15651] : Can't lookup blockdev [ 697.689178][T15662] openvswitch: ovs_: Dropping previously announced user features [ 698.098222][T15674] : Can't lookup blockdev [ 698.233718][ T30] audit: type=1800 audit(2147483815.415:110): pid=15675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2338" name="features" dev="configfs" ino=58241 res=0 errno=0 [ 698.974876][T15689] : Can't lookup blockdev [ 699.143062][ T30] audit: type=1800 audit(2147483816.305:111): pid=15693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2341" name="features" dev="configfs" ino=58291 res=0 errno=0 [ 699.666125][T15695] openvswitch: ovs_: Dropping previously announced user features [ 699.866022][T15700] : Can't lookup blockdev [ 700.898951][T15707] openvswitch: ovs_: Dropping previously announced user features [ 701.037053][T15718] : Can't lookup blockdev [ 701.071561][T15714] : Can't lookup blockdev [ 701.087570][T15717] : Can't lookup blockdev [ 701.168850][ T30] audit: type=1800 audit(2147483818.334:112): pid=15720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2345" name="features" dev="configfs" ino=58675 res=0 errno=0 [ 702.305370][T15733] : Can't lookup blockdev [ 702.382000][ T30] audit: type=1800 audit(2147483819.563:113): pid=15735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2357" name="features" dev="configfs" ino=58716 res=0 errno=0 [ 702.498768][T15739] : Can't lookup blockdev [ 702.532312][T15734] : Can't lookup blockdev [ 704.356420][T15752] : Can't lookup blockdev [ 704.382476][T15748] openvswitch: ovs_: Dropping previously announced user features [ 704.426769][ T30] audit: type=1800 audit(2147483821.602:114): pid=15753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2362" name="features" dev="configfs" ino=58756 res=0 errno=0 [ 705.157290][T15767] : Can't lookup blockdev [ 705.230778][ T30] audit: type=1800 audit(2147483822.402:115): pid=15768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2364" name="features" dev="configfs" ino=59431 res=0 errno=0 [ 706.020526][T15773] FAULT_INJECTION: forcing a failure. [ 706.020526][T15773] name failslab, interval 1, probability 0, space 0, times 0 [ 706.037188][T15773] CPU: 1 UID: 0 PID: 15773 Comm: syz.3.2356 Tainted: G U syzkaller #0 PREEMPT(full) [ 706.037232][T15773] Tainted: [U]=USER [ 706.037249][T15773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 706.037266][T15773] Call Trace: [ 706.037276][T15773] [ 706.037287][T15773] dump_stack_lvl+0x16c/0x1f0 [ 706.037328][T15773] should_fail_ex+0x512/0x640 [ 706.037364][T15773] ? __kmalloc_noprof+0xbf/0x510 [ 706.037398][T15773] ? ima_write_template_field_data+0x5d/0x1f0 [ 706.037436][T15773] should_failslab+0xc2/0x120 [ 706.037466][T15773] __kmalloc_noprof+0xd2/0x510 [ 706.037497][T15773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.037532][T15773] ima_write_template_field_data+0x5d/0x1f0 [ 706.037578][T15773] ima_eventdigest_init_common+0x154/0x430 [ 706.037621][T15773] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 706.037684][T15773] ? rcu_is_watching+0x12/0xc0 [ 706.037707][T15773] ? trace_kmalloc+0x2b/0xd0 [ 706.037737][T15773] ? __kmalloc_noprof+0x242/0x510 [ 706.037772][T15773] ima_alloc_init_template+0x39d/0x720 [ 706.037808][T15773] ? rcu_is_watching+0x12/0xc0 [ 706.037840][T15773] ima_store_measurement+0x1eb/0x5c0 [ 706.037873][T15773] ? __pfx_ima_store_measurement+0x10/0x10 [ 706.037903][T15773] ? vfs_getxattr_alloc+0xec/0x340 [ 706.037937][T15773] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 706.037963][T15773] process_measurement+0x1ddb/0x23e0 [ 706.038004][T15773] ? __pfx_process_measurement+0x10/0x10 [ 706.038043][T15773] ? rcu_read_unlock+0x17/0x60 [ 706.038097][T15773] ? debug_mutex_init+0x37/0x70 [ 706.038113][T15773] ? inode_to_bdi+0x9e/0x160 [ 706.038134][T15773] ima_file_check+0xc5/0x110 [ 706.038149][T15773] ? __pfx_ima_file_check+0x10/0x10 [ 706.038168][T15773] security_file_post_open+0x8e/0x210 [ 706.038186][T15773] path_openat+0x1404/0x2cb0 [ 706.038209][T15773] ? __pfx_path_openat+0x10/0x10 [ 706.038230][T15773] do_filp_open+0x20b/0x470 [ 706.038256][T15773] ? __pfx_do_filp_open+0x10/0x10 [ 706.038288][T15773] ? alloc_fd+0x471/0x7d0 [ 706.038308][T15773] do_sys_openat2+0x11b/0x1d0 [ 706.038330][T15773] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.038349][T15773] ? map_id_range_up+0x2ce/0x3b0 [ 706.038376][T15773] __x64_sys_openat+0x174/0x210 [ 706.038396][T15773] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.038424][T15773] do_syscall_64+0xcd/0x490 [ 706.038444][T15773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.038458][T15773] RIP: 0033:0x7f83f418ebe9 [ 706.038472][T15773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.038485][T15773] RSP: 002b:00007f83f5042038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.038500][T15773] RAX: ffffffffffffffda RBX: 00007f83f43c5fa0 RCX: 00007f83f418ebe9 [ 706.038510][T15773] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 706.038519][T15773] RBP: 00007f83f4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 706.038528][T15773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.038537][T15773] R13: 00007f83f43c6038 R14: 00007f83f43c5fa0 R15: 00007ffe3f1ad958 [ 706.038557][T15773] [ 706.348772][ T30] audit: type=1804 audit(2147483823.221:116): pid=15773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2356" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 706.475852][T15777] : Can't lookup blockdev [ 706.966214][T15781] openvswitch: ovs_: Dropping previously announced user features [ 707.179098][T15787] : Can't lookup blockdev [ 707.321392][ T30] audit: type=1800 audit(2147483824.491:117): pid=15788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2358" name="features" dev="configfs" ino=58916 res=0 errno=0 [ 707.500033][T15797] : Can't lookup blockdev [ 707.782527][ T30] audit: type=1800 audit(2147483824.940:118): pid=15798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2363" name="features" dev="configfs" ino=59478 res=0 errno=0 [ 708.484610][T15802] openvswitch: ovs_: Dropping previously announced user features [ 709.516969][T15830] : Can't lookup blockdev [ 709.629207][ T30] audit: type=1800 audit(2147483826.810:119): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2370" name="features" dev="configfs" ino=59032 res=0 errno=0 [ 710.440935][T15841] FAULT_INJECTION: forcing a failure. [ 710.440935][T15841] name failslab, interval 1, probability 0, space 0, times 0 [ 710.454108][T15841] CPU: 1 UID: 0 PID: 15841 Comm: syz.2.2372 Tainted: G U syzkaller #0 PREEMPT(full) [ 710.454154][T15841] Tainted: [U]=USER [ 710.454162][T15841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.454177][T15841] Call Trace: [ 710.454185][T15841] [ 710.454194][T15841] dump_stack_lvl+0x16c/0x1f0 [ 710.454230][T15841] should_fail_ex+0x512/0x640 [ 710.454261][T15841] ? __kmalloc_noprof+0xbf/0x510 [ 710.454289][T15841] ? ima_write_template_field_data+0x5d/0x1f0 [ 710.454321][T15841] should_failslab+0xc2/0x120 [ 710.454348][T15841] __kmalloc_noprof+0xd2/0x510 [ 710.454372][T15841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.454400][T15841] ima_write_template_field_data+0x5d/0x1f0 [ 710.454435][T15841] ima_eventdigest_init_common+0x154/0x430 [ 710.454468][T15841] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 710.454518][T15841] ? rcu_is_watching+0x12/0xc0 [ 710.454542][T15841] ? trace_kmalloc+0x2b/0xd0 [ 710.454569][T15841] ? __kmalloc_noprof+0x242/0x510 [ 710.454600][T15841] ima_alloc_init_template+0x39d/0x720 [ 710.454628][T15841] ? rcu_is_watching+0x12/0xc0 [ 710.454652][T15841] ima_store_measurement+0x1eb/0x5c0 [ 710.454681][T15841] ? __pfx_ima_store_measurement+0x10/0x10 [ 710.454708][T15841] ? vfs_getxattr_alloc+0xec/0x340 [ 710.454741][T15841] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 710.454769][T15841] process_measurement+0x1ddb/0x23e0 [ 710.454803][T15841] ? __pfx_process_measurement+0x10/0x10 [ 710.454839][T15841] ? rcu_read_unlock+0x17/0x60 [ 710.454899][T15841] ? debug_mutex_init+0x37/0x70 [ 710.454922][T15841] ? inode_to_bdi+0x9e/0x160 [ 710.454956][T15841] ima_file_check+0xc5/0x110 [ 710.454981][T15841] ? __pfx_ima_file_check+0x10/0x10 [ 710.455012][T15841] security_file_post_open+0x8e/0x210 [ 710.455041][T15841] path_openat+0x1404/0x2cb0 [ 710.455077][T15841] ? __pfx_path_openat+0x10/0x10 [ 710.455110][T15841] do_filp_open+0x20b/0x470 [ 710.455136][T15841] ? __pfx_do_filp_open+0x10/0x10 [ 710.455182][T15841] ? alloc_fd+0x471/0x7d0 [ 710.455213][T15841] do_sys_openat2+0x11b/0x1d0 [ 710.455244][T15841] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.455272][T15841] ? map_id_range_up+0x2ce/0x3b0 [ 710.455314][T15841] __x64_sys_openat+0x174/0x210 [ 710.455345][T15841] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.455388][T15841] do_syscall_64+0xcd/0x490 [ 710.455419][T15841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.455441][T15841] RIP: 0033:0x7fb8ed38ebe9 [ 710.455461][T15841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.455482][T15841] RSP: 002b:00007fb8ee214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.455504][T15841] RAX: ffffffffffffffda RBX: 00007fb8ed5c5fa0 RCX: 00007fb8ed38ebe9 [ 710.455520][T15841] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 710.455536][T15841] RBP: 00007fb8ed411e19 R08: 0000000000000000 R09: 0000000000000000 [ 710.455550][T15841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.455564][T15841] R13: 00007fb8ed5c6038 R14: 00007fb8ed5c5fa0 R15: 00007ffff1a48158 [ 710.455595][T15841] [ 710.826896][ T30] audit: type=1804 audit(2147483827.959:120): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.2.2372" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 710.986020][T15849] : Can't lookup blockdev [ 711.561585][T15855] openvswitch: ovs_: Dropping previously announced user features [ 711.961944][T15863] : Can't lookup blockdev [ 712.229881][ T30] audit: type=1800 audit(2147483829.408:121): pid=15864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2376" name="features" dev="configfs" ino=59162 res=0 errno=0 [ 713.062104][T15874] : Can't lookup blockdev [ 713.445825][ T30] audit: type=1800 audit(2147483830.628:122): pid=15878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2377" name="features" dev="configfs" ino=59172 res=0 errno=0 [ 713.523225][T15881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.547063][T15881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.556773][T15881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.567896][T15881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.588717][T15881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 713.942841][T11366] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.023164][T15886] openvswitch: ovs_: Dropping previously announced user features [ 714.182473][T11366] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.315528][T15885] openvswitch: ovs_: Dropping previously announced user features [ 714.388763][T15874] Process accounting paused [ 714.429879][T11366] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.584280][T11366] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.621128][T15900] : Can't lookup blockdev [ 714.728629][ T30] audit: type=1800 audit(2147483831.897:123): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2383" name="features" dev="configfs" ino=59738 res=0 errno=0 [ 715.168472][T15896] openvswitch: ovs_: Dropping previously announced user features [ 715.234602][T15879] chnl_net:caif_netlink_parms(): no params data found [ 715.593713][T11366] bridge_slave_1: left allmulticast mode [ 715.601158][T11366] bridge_slave_1: left promiscuous mode [ 715.612236][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.636422][T11366] bridge_slave_0: left allmulticast mode [ 715.653125][T11366] bridge_slave_0: left promiscuous mode [ 715.668938][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.720456][T15881] Bluetooth: hci4: command tx timeout [ 716.026931][T15916] : Can't lookup blockdev [ 716.144491][ T30] audit: type=1800 audit(2147483833.296:124): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2388" name="features" dev="configfs" ino=59283 res=0 errno=0 [ 716.690191][T11366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.730606][T11366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.742146][T11366] bond0 (unregistering): Released all slaves [ 716.871826][T11366] ovs_: left promiscuous mode [ 716.995512][T15879] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.006366][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.014794][T15879] bridge_slave_0: entered allmulticast mode [ 717.023324][T15879] bridge_slave_0: entered promiscuous mode [ 717.088923][T15879] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.096246][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.103545][T15879] bridge_slave_1: entered allmulticast mode [ 717.111776][T15879] bridge_slave_1: entered promiscuous mode [ 717.195671][T15879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.243936][T15879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.607264][ T30] audit: type=1800 audit(2147483834.776:125): pid=15942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2397" name="features" dev="configfs" ino=59334 res=0 errno=0 [ 717.636320][T15879] team0: Port device team_slave_0 added [ 717.701767][T15879] team0: Port device team_slave_1 added [ 717.798549][T15881] Bluetooth: hci4: command tx timeout [ 717.827207][T15938] : Can't lookup blockdev [ 718.669530][T15879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.730446][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.796900][T15879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.813465][T15879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.840318][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.866737][T15879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.959656][T11366] hsr_slave_0: left promiscuous mode [ 718.966038][T11366] hsr_slave_1: left promiscuous mode [ 718.974119][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 718.982401][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.992726][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.000185][T11366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.023200][T11366] veth1_macvtap: left promiscuous mode [ 719.030167][T11366] veth1_vlan: left promiscuous mode [ 719.035621][T11366] veth0_vlan: left promiscuous mode [ 719.480480][T11366] team0 (unregistering): Port device team_slave_1 removed [ 719.522551][T11366] team0 (unregistering): Port device team_slave_0 removed [ 719.880765][T15881] Bluetooth: hci4: command tx timeout [ 719.932930][T15879] hsr_slave_0: entered promiscuous mode [ 719.939555][T15879] hsr_slave_1: entered promiscuous mode [ 719.945547][T15879] debugfs: 'hsr0' already exists in 'hsr' [ 719.952837][T15879] Cannot create hsr debugfs directory [ 720.728940][T15879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 720.743337][T15879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 720.758906][T15879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 720.772956][T15879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 720.915205][T15879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.951952][T15879] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.973593][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.980932][T11366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.024898][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.032137][T11366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.385693][T15879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.471036][T15879] veth0_vlan: entered promiscuous mode [ 721.495146][T15879] veth1_vlan: entered promiscuous mode [ 721.548069][T15879] veth0_macvtap: entered promiscuous mode [ 721.566120][T15879] veth1_macvtap: entered promiscuous mode [ 721.603266][T15879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.626731][T15879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.653666][T11659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.667751][T11659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.697525][T11659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.725687][T11659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.851554][T11365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.867355][T11365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.905148][T11659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.913978][T11659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.959467][T15881] Bluetooth: hci4: command tx timeout [ 722.199610][ T30] audit: type=1800 audit(2147483839.363:126): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2401" name="features" dev="configfs" ino=60352 res=0 errno=0 [ 723.482458][T16019] openvswitch: ovs_: Dropping previously announced user features [ 723.627147][T16027] : Can't lookup blockdev [ 723.740284][T11377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.752072][T11377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.760903][T11377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.776938][ T30] audit: type=1800 audit(2147483840.942:127): pid=16032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2393" name="features" dev="configfs" ino=60731 res=0 errno=0 [ 723.778415][T11377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.816605][T11377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.941946][T16033] : Can't lookup blockdev [ 724.708262][T11368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.102885][T11368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.323543][T11368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.961736][T11377] Bluetooth: hci3: command tx timeout [ 725.982344][T11368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.514469][T16029] chnl_net:caif_netlink_parms(): no params data found [ 726.764577][ T30] audit: type=1800 audit(2147483843.921:128): pid=16073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2404" name="features" dev="configfs" ino=61593 res=0 errno=0 [ 726.807636][T16066] : Can't lookup blockdev [ 726.828672][T11368] bridge_slave_1: left allmulticast mode [ 726.836926][T11368] bridge_slave_1: left promiscuous mode [ 726.857497][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.945076][T11368] bridge_slave_0: left allmulticast mode [ 727.024733][T11368] bridge_slave_0: left promiscuous mode [ 727.038403][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.042391][T11377] Bluetooth: hci3: command tx timeout [ 728.418332][T11368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.429960][T11368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.443796][T11368] bond0 (unregistering): Released all slaves [ 728.587739][T11368] ovs_: left promiscuous mode [ 728.823521][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.830760][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.851165][T16029] bridge_slave_0: entered allmulticast mode [ 728.868019][T16029] bridge_slave_0: entered promiscuous mode [ 728.877555][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.887137][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.896164][T16029] bridge_slave_1: entered allmulticast mode [ 728.903996][T16029] bridge_slave_1: entered promiscuous mode [ 729.036915][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.071856][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.197767][T16107] ovs_: entered promiscuous mode [ 729.245912][T16029] team0: Port device team_slave_0 added [ 729.278363][T16029] team0: Port device team_slave_1 added [ 729.548131][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.573809][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.652428][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.875246][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.892835][T16129] : Can't lookup blockdev [ 729.897499][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.124227][T11377] Bluetooth: hci3: command tx timeout [ 730.144260][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.191255][ T30] audit: type=1800 audit(2147483847.359:129): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2410" name="features" dev="configfs" ino=61658 res=0 errno=0 [ 730.550412][T11368] hsr_slave_0: left promiscuous mode [ 730.590487][T11368] hsr_slave_1: left promiscuous mode [ 730.610765][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.620038][T11368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.635308][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.643028][T11368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.712793][T11368] veth1_macvtap: left promiscuous mode [ 730.745126][T11368] veth0_macvtap: left promiscuous mode [ 730.771265][T11368] veth1_vlan: left promiscuous mode [ 730.781226][T11368] veth0_vlan: left promiscuous mode [ 730.971649][ T30] audit: type=1800 audit(2147483848.139:130): pid=16148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2414" name="features" dev="configfs" ino=60980 res=0 errno=0 [ 731.737483][T11368] team0 (unregistering): Port device team_slave_1 removed [ 731.789768][T11368] team0 (unregistering): Port device team_slave_0 removed [ 732.204729][T11377] Bluetooth: hci3: command tx timeout [ 732.280651][T16029] hsr_slave_0: entered promiscuous mode [ 732.293894][T16029] hsr_slave_1: entered promiscuous mode [ 732.321718][T16029] debugfs: 'hsr0' already exists in 'hsr' [ 732.336771][T16029] Cannot create hsr debugfs directory [ 732.821170][T16158] : Can't lookup blockdev [ 734.491422][T16189] vhci_hcd: invalid port number 56 [ 734.512950][T16189] vhci_hcd: invalid port number 56 [ 734.540301][T16029] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 734.571892][T16029] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 734.588939][T16029] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 734.589358][T16186] openvswitch: ovs_: Dropping previously announced user features [ 734.626244][T16029] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 734.645874][T16194] FAULT_INJECTION: forcing a failure. [ 734.645874][T16194] name failslab, interval 1, probability 0, space 0, times 0 [ 734.659338][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.0.2422 Tainted: G U syzkaller #0 PREEMPT(full) [ 734.659376][T16194] Tainted: [U]=USER [ 734.659385][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.659399][T16194] Call Trace: [ 734.659408][T16194] [ 734.659417][T16194] dump_stack_lvl+0x16c/0x1f0 [ 734.659453][T16194] should_fail_ex+0x512/0x640 [ 734.659487][T16194] ? fs_reclaim_acquire+0xae/0x150 [ 734.659527][T16194] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 734.659559][T16194] should_failslab+0xc2/0x120 [ 734.659601][T16194] __kmalloc_noprof+0xd2/0x510 [ 734.659638][T16194] tomoyo_realpath_from_path+0xc2/0x6e0 [ 734.659676][T16194] ? tomoyo_profile+0x47/0x60 [ 734.659702][T16194] tomoyo_path_number_perm+0x245/0x580 [ 734.659731][T16194] ? tomoyo_path_number_perm+0x237/0x580 [ 734.659764][T16194] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 734.659801][T16194] ? find_held_lock+0x2b/0x80 [ 734.659859][T16194] ? find_held_lock+0x2b/0x80 [ 734.659884][T16194] ? hook_file_ioctl_common+0x145/0x410 [ 734.659924][T16194] ? __fget_files+0x20e/0x3c0 [ 734.659959][T16194] security_file_ioctl+0x9b/0x240 [ 734.659993][T16194] __x64_sys_ioctl+0xb7/0x210 [ 734.660034][T16194] do_syscall_64+0xcd/0x490 [ 734.660071][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.660099][T16194] RIP: 0033:0x7f9fdf98ebe9 [ 734.660120][T16194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.660144][T16194] RSP: 002b:00007f9fe08d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.660169][T16194] RAX: ffffffffffffffda RBX: 00007f9fdfbc5fa0 RCX: 00007f9fdf98ebe9 [ 734.660187][T16194] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 734.660205][T16194] RBP: 00007f9fe08d9090 R08: 0000000000000000 R09: 0000000000000000 [ 734.660221][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.660237][T16194] R13: 00007f9fdfbc6038 R14: 00007f9fdfbc5fa0 R15: 00007ffd2ac85708 [ 734.660274][T16194] [ 734.660814][T16194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 734.955247][T16194] vhci_hcd: invalid port number 56 [ 734.960555][T16194] vhci_hcd: invalid port number 56 [ 735.157949][ T30] audit: type=1800 audit(2147483852.327:131): pid=16214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2423" name="features" dev="configfs" ino=61126 res=0 errno=0 [ 735.189671][T16216] : Can't lookup blockdev [ 735.451789][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.699771][T16029] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.788510][T11659] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.795741][T11659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.902514][T11659] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.909827][T11659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.003047][T16029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 736.023029][T16029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.602978][T16246] vhci_hcd: invalid port number 56 [ 736.642571][T16246] vhci_hcd: default hub control req: 2305 v0aca i0038 l2044 [ 736.872174][T16029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.881780][T16253] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 736.911308][T16253] FAULT_INJECTION: forcing a failure. [ 736.911308][T16253] name failslab, interval 1, probability 0, space 0, times 0 [ 736.961777][T16253] CPU: 1 UID: 0 PID: 16253 Comm: syz.1.2429 Tainted: G U syzkaller #0 PREEMPT(full) [ 736.961826][T16253] Tainted: [U]=USER [ 736.961835][T16253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 736.961852][T16253] Call Trace: [ 736.961862][T16253] [ 736.961874][T16253] dump_stack_lvl+0x16c/0x1f0 [ 736.961915][T16253] should_fail_ex+0x512/0x640 [ 736.961953][T16253] ? fs_reclaim_acquire+0xae/0x150 [ 736.961997][T16253] ? tomoyo_encode2+0x100/0x3e0 [ 736.962033][T16253] should_failslab+0xc2/0x120 [ 736.962068][T16253] __kmalloc_noprof+0xd2/0x510 [ 736.962107][T16253] tomoyo_encode2+0x100/0x3e0 [ 736.962149][T16253] tomoyo_encode+0x29/0x50 [ 736.962185][T16253] tomoyo_realpath_from_path+0x18f/0x6e0 [ 736.962233][T16253] tomoyo_check_open_permission+0x2ab/0x3c0 [ 736.962269][T16253] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 736.962340][T16253] ? find_held_lock+0x2b/0x80 [ 736.962379][T16253] tomoyo_file_open+0x6b/0x90 [ 736.962406][T16253] security_file_open+0x84/0x1e0 [ 736.962444][T16253] do_dentry_open+0x596/0x1530 [ 736.962488][T16253] vfs_open+0x82/0x3f0 [ 736.962532][T16253] path_openat+0x1de4/0x2cb0 [ 736.962582][T16253] ? __pfx_path_openat+0x10/0x10 [ 736.962626][T16253] do_filp_open+0x20b/0x470 [ 736.962666][T16253] ? __pfx_do_filp_open+0x10/0x10 [ 736.962728][T16253] ? alloc_fd+0x471/0x7d0 [ 736.962769][T16253] do_sys_openat2+0x11b/0x1d0 [ 736.962809][T16253] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.962865][T16253] __x64_sys_openat+0x174/0x210 [ 736.962905][T16253] ? __pfx___x64_sys_openat+0x10/0x10 [ 736.962968][T16253] do_syscall_64+0xcd/0x490 [ 736.963010][T16253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.963040][T16253] RIP: 0033:0x7fd69878ebe9 [ 736.963062][T16253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.963088][T16253] RSP: 002b:00007fd6969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.963114][T16253] RAX: ffffffffffffffda RBX: 00007fd6989c5fa0 RCX: 00007fd69878ebe9 [ 736.963134][T16253] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 736.963153][T16253] RBP: 00007fd698811e19 R08: 0000000000000000 R09: 0000000000000000 [ 736.963172][T16253] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000000 [ 736.963190][T16253] R13: 00007fd6989c6038 R14: 00007fd6989c5fa0 R15: 00007ffcef78e658 [ 736.963229][T16253] [ 736.963350][T16253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 737.265839][T16029] veth0_vlan: entered promiscuous mode [ 737.321841][T16029] veth1_vlan: entered promiscuous mode [ 737.643587][T16029] veth0_macvtap: entered promiscuous mode [ 737.679472][T16029] veth1_macvtap: entered promiscuous mode [ 737.943776][T16029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.015628][T16029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.031274][T16276] openvswitch: ovs_: Dropping previously announced user features [ 738.038650][T11659] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.075549][T11659] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.095173][T11659] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.124161][T11659] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.412829][ T30] audit: type=1800 audit(2147483855.575:132): pid=16286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2434" name="features" dev="configfs" ino=61427 res=0 errno=0 [ 738.588765][T11363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.650505][T11363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.328358][T11406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.360728][T11406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.998754][T16312] FAULT_INJECTION: forcing a failure. [ 739.998754][T16312] name failslab, interval 1, probability 0, space 0, times 0 [ 740.144776][T16317] ovs_: entered promiscuous mode [ 740.154857][T16312] CPU: 1 UID: 0 PID: 16312 Comm: syz.1.2436 Tainted: G U syzkaller #0 PREEMPT(full) [ 740.154903][T16312] Tainted: [U]=USER [ 740.154913][T16312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.154929][T16312] Call Trace: [ 740.154939][T16312] [ 740.154950][T16312] dump_stack_lvl+0x16c/0x1f0 [ 740.154992][T16312] should_fail_ex+0x512/0x640 [ 740.155028][T16312] ? __kmalloc_noprof+0xbf/0x510 [ 740.155064][T16312] ? handler_new_ref+0x1b0/0xc60 [ 740.155100][T16312] should_failslab+0xc2/0x120 [ 740.155137][T16312] __kmalloc_noprof+0xd2/0x510 [ 740.155166][T16312] ? __asan_memcpy+0x3c/0x60 [ 740.155202][T16312] handler_new_ref+0x1b0/0xc60 [ 740.155247][T16312] v4l2_ctrl_new+0x1963/0x2180 [ 740.155298][T16312] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 740.155355][T16312] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 740.155402][T16312] v4l2_ctrl_new_std+0x1be/0x290 [ 740.155453][T16312] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 740.155496][T16312] ? rcu_is_watching+0x12/0xc0 [ 740.155523][T16312] ? trace_kmalloc+0x2b/0xd0 [ 740.155563][T16312] ? __kvmalloc_node_noprof+0x298/0x620 [ 740.155599][T16312] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 740.155645][T16312] ? media_request_object_init+0x100/0x180 [ 740.155693][T16312] vicodec_open+0x1d0/0xf90 [ 740.155732][T16312] v4l2_open+0x222/0x490 [ 740.155766][T16312] ? __pfx_v4l2_open+0x10/0x10 [ 740.155792][T16312] chrdev_open+0x231/0x6a0 [ 740.155820][T16312] ? __pfx_apparmor_file_open+0x10/0x10 [ 740.155847][T16312] ? __pfx_chrdev_open+0x10/0x10 [ 740.155880][T16312] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 740.155919][T16312] do_dentry_open+0x97f/0x1530 [ 740.155953][T16312] ? __pfx_chrdev_open+0x10/0x10 [ 740.155995][T16312] vfs_open+0x82/0x3f0 [ 740.156038][T16312] path_openat+0x1de4/0x2cb0 [ 740.156084][T16312] ? __pfx_path_openat+0x10/0x10 [ 740.156186][T16312] do_filp_open+0x20b/0x470 [ 740.156225][T16312] ? __pfx_do_filp_open+0x10/0x10 [ 740.156287][T16312] ? alloc_fd+0x471/0x7d0 [ 740.156337][T16312] do_sys_openat2+0x11b/0x1d0 [ 740.156379][T16312] ? __pfx_do_sys_openat2+0x10/0x10 [ 740.156434][T16312] __x64_sys_openat+0x174/0x210 [ 740.156474][T16312] ? __pfx___x64_sys_openat+0x10/0x10 [ 740.156530][T16312] do_syscall_64+0xcd/0x490 [ 740.156570][T16312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.156600][T16312] RIP: 0033:0x7fd69878ebe9 [ 740.156622][T16312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.156649][T16312] RSP: 002b:00007fd6969b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 740.156677][T16312] RAX: ffffffffffffffda RBX: 00007fd6989c6180 RCX: 00007fd69878ebe9 [ 740.156694][T16312] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 740.156709][T16312] RBP: 00007fd698811e19 R08: 0000000000000000 R09: 0000000000000000 [ 740.156724][T16312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.156740][T16312] R13: 00007fd6989c6218 R14: 00007fd6989c6180 R15: 00007ffcef78e658 [ 740.156775][T16312] [ 741.198751][T16331] zswap: compressor not available [ 741.393325][T16353] FAULT_INJECTION: forcing a failure. [ 741.393325][T16353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.478941][T16353] CPU: 0 UID: 0 PID: 16353 Comm: syz.2.2443 Tainted: G U syzkaller #0 PREEMPT(full) [ 741.478972][T16353] Tainted: [U]=USER [ 741.478977][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.478986][T16353] Call Trace: [ 741.478992][T16353] [ 741.478998][T16353] dump_stack_lvl+0x16c/0x1f0 [ 741.479022][T16353] should_fail_ex+0x512/0x640 [ 741.479045][T16353] _copy_from_user+0x2e/0xd0 [ 741.479068][T16353] do_sys_poll+0x1d5/0xdf0 [ 741.479085][T16353] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 741.479104][T16353] ? kernel_text_address+0x8d/0x100 [ 741.479118][T16353] ? __kernel_text_address+0xd/0x40 [ 741.479131][T16353] ? __pfx_do_sys_poll+0x10/0x10 [ 741.479161][T16353] ? find_held_lock+0x2b/0x80 [ 741.479214][T16353] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 741.479236][T16353] ? set_user_sigmask+0x21b/0x2b0 [ 741.479250][T16353] ? __pfx_set_user_sigmask+0x10/0x10 [ 741.479265][T16353] ? __fget_files+0x20e/0x3c0 [ 741.479283][T16353] __x64_sys_ppoll+0x254/0x2d0 [ 741.479299][T16353] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 741.479313][T16353] ? ksys_write+0x1ac/0x250 [ 741.479329][T16353] ? __pfx_ksys_write+0x10/0x10 [ 741.479349][T16353] do_syscall_64+0xcd/0x490 [ 741.479370][T16353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.479385][T16353] RIP: 0033:0x7fb8ed38ebe9 [ 741.479397][T16353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.479411][T16353] RSP: 002b:00007fb8ee214038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 741.479425][T16353] RAX: ffffffffffffffda RBX: 00007fb8ed5c5fa0 RCX: 00007fb8ed38ebe9 [ 741.479435][T16353] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000180 [ 741.479443][T16353] RBP: 00007fb8ee214090 R08: 0000000000000008 R09: 0000000000000000 [ 741.479452][T16353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.479461][T16353] R13: 00007fb8ed5c6038 R14: 00007fb8ed5c5fa0 R15: 00007ffff1a48158 [ 741.479479][T16353] [ 741.847714][T15881] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.858752][T15881] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.922257][T15881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.934308][T15881] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.942982][T15881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 742.056561][T16366] : Can't lookup blockdev [ 742.346570][ T30] audit: type=1800 audit(2147483859.333:133): pid=16371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2445" name="features" dev="configfs" ino=62214 res=0 errno=0 [ 742.857280][T16373] openvswitch: ovs_: Dropping previously announced user features [ 743.305589][T11365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.491219][T11365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.596099][T11365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.695755][T11365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.737763][T16356] chnl_net:caif_netlink_parms(): no params data found [ 744.002630][T16356] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.011308][T16356] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.036748][T16356] bridge_slave_0: entered allmulticast mode [ 744.050659][T11377] Bluetooth: hci1: command tx timeout [ 744.063686][T16356] bridge_slave_0: entered promiscuous mode [ 744.107960][T16356] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.126124][T16356] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.138065][T16356] bridge_slave_1: entered allmulticast mode [ 744.147216][T16356] bridge_slave_1: entered promiscuous mode [ 744.215182][T16356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.266997][T16356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.333758][T11365] bridge_slave_1: left allmulticast mode [ 744.342492][T11365] bridge_slave_1: left promiscuous mode [ 744.348298][T11365] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.362812][T11365] bridge_slave_0: left allmulticast mode [ 744.368643][T11365] bridge_slave_0: left promiscuous mode [ 744.375661][T11365] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.907695][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 744.936875][T16411] synth uevent: /bus/hid/drivers/zeroplus: unknown uevent action string [ 745.147813][T11365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.166376][T11365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.186263][T11365] bond0 (unregistering): Released all slaves [ 745.207896][T16394] openvswitch: ovs_: Dropping previously announced user features [ 745.243098][T16356] team0: Port device team_slave_0 added [ 745.263214][T16356] team0: Port device team_slave_1 added [ 745.374234][T11365] ovs_: left promiscuous mode [ 745.396906][T16356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.407530][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.439441][T16356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.465438][T16356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.472971][T16356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.512023][T16418] : Can't lookup blockdev [ 745.546562][T16356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.576495][ T30] audit: type=1800 audit(2147483862.732:134): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2455" name="features" dev="configfs" ino=62935 res=0 errno=0 [ 746.133626][T11377] Bluetooth: hci1: command tx timeout [ 746.173117][T16356] hsr_slave_0: entered promiscuous mode [ 746.252405][T16356] hsr_slave_1: entered promiscuous mode [ 746.272326][T16356] debugfs: 'hsr0' already exists in 'hsr' [ 746.301250][T16356] Cannot create hsr debugfs directory [ 747.302125][T16445] openvswitch: ovs_: Dropping previously announced user features [ 747.495631][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502213][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.547646][T11365] hsr_slave_0: left promiscuous mode [ 747.554686][T11365] hsr_slave_1: left promiscuous mode [ 747.564237][T11365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.585970][T11365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.602738][T11365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.622090][T11365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.696283][T11365] veth1_macvtap: left promiscuous mode [ 747.710229][T11365] veth0_macvtap: left promiscuous mode [ 747.744751][T11365] veth1_vlan: left promiscuous mode [ 747.758538][T11365] veth0_vlan: left promiscuous mode [ 748.213043][T11377] Bluetooth: hci1: command tx timeout [ 748.770267][T11365] team0 (unregistering): Port device team_slave_0 removed [ 750.293925][T11377] Bluetooth: hci1: command tx timeout [ 750.405312][T16356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 750.445980][T16356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 750.486426][T16356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 750.511265][T16356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 751.021031][T16356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.062754][T16356] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.091670][T11366] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.098891][T11366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.254911][T16518] : Can't lookup blockdev [ 751.286487][T11366] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.293780][T11366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.381354][T16515] openvswitch: ovs_: Dropping previously announced user features [ 751.421327][ T30] audit: type=1800 audit(2147483868.469:135): pid=16521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2466" name="features" dev="configfs" ino=63226 res=0 errno=0 [ 752.385219][ T30] audit: type=1800 audit(2147483869.518:136): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2467" name="features" dev="configfs" ino=63260 res=0 errno=0 [ 752.920724][T16543] openvswitch: netlink: Key type 81 is out of range max 32 [ 753.145516][T16356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.690527][T16356] veth0_vlan: entered promiscuous mode [ 753.765973][T16565] openvswitch: ovs_: Dropping previously announced user features [ 753.868308][T16356] veth1_vlan: entered promiscuous mode [ 754.190887][T16356] veth0_macvtap: entered promiscuous mode [ 754.274684][T16356] veth1_macvtap: entered promiscuous mode [ 754.472113][T16356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.858590][T16356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.871116][T16593] : Can't lookup blockdev [ 754.879047][ T30] audit: type=1800 audit(2147483872.037:137): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2475" name="features" dev="configfs" ino=64534 res=0 errno=0 [ 754.931743][T11365] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.967101][T11365] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.047235][T11365] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.101963][T11365] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.448395][T11366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.491746][T11366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.608798][T11363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.647877][T11363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.742696][ T30] audit: type=1800 audit(2147483873.896:138): pid=16620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2478" name="features" dev="configfs" ino=64632 res=0 errno=0 [ 757.318502][T15881] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 757.337584][T15881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 757.352105][T15881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 757.366514][T15881] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 757.382012][T15881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 757.709927][T16634] ovs_: entered promiscuous mode [ 758.211268][T16649] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 758.364836][T16657] FAULT_INJECTION: forcing a failure. [ 758.364836][T16657] name failslab, interval 1, probability 0, space 0, times 0 [ 758.375006][T11366] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.390102][T16657] CPU: 1 UID: 0 PID: 16657 Comm: syz.1.2483 Tainted: G U syzkaller #0 PREEMPT(full) [ 758.390149][T16657] Tainted: [U]=USER [ 758.390159][T16657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.390175][T16657] Call Trace: [ 758.390188][T16657] [ 758.390200][T16657] dump_stack_lvl+0x16c/0x1f0 [ 758.390242][T16657] should_fail_ex+0x512/0x640 [ 758.390278][T16657] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 758.390311][T16657] should_failslab+0xc2/0x120 [ 758.390347][T16657] __kmalloc_cache_noprof+0x6a/0x3e0 [ 758.390388][T16657] ? debug_mutex_init+0x37/0x70 [ 758.390414][T16657] ? do_inotify_init+0xa2/0x5f0 [ 758.390454][T16657] do_inotify_init+0xa2/0x5f0 [ 758.390488][T16657] ? rcu_is_watching+0x12/0xc0 [ 758.390517][T16657] __x64_sys_inotify_init1+0x30/0x40 [ 758.390554][T16657] do_syscall_64+0xcd/0x490 [ 758.390592][T16657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.390620][T16657] RIP: 0033:0x7fd69878ebe9 [ 758.390643][T16657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.390668][T16657] RSP: 002b:00007fd6969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 758.390690][T16657] RAX: ffffffffffffffda RBX: 00007fd6989c5fa0 RCX: 00007fd69878ebe9 [ 758.390707][T16657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 758.390721][T16657] RBP: 00007fd698811e19 R08: 0000000000000000 R09: 0000000000000000 [ 758.390737][T16657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.390752][T16657] R13: 00007fd6989c6038 R14: 00007fd6989c5fa0 R15: 00007ffcef78e658 [ 758.390785][T16657] [ 758.762746][T16663] : Can't lookup blockdev [ 758.787284][T11366] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.860997][ T30] audit: type=1800 audit(2147483876.005:139): pid=16667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2484" name="features" dev="configfs" ino=64196 res=0 errno=0 [ 759.241833][T11366] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.498745][T15881] Bluetooth: hci0: command tx timeout [ 759.595264][T11366] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.678539][T16682] FAULT_INJECTION: forcing a failure. [ 759.678539][T16682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 759.748122][T16682] CPU: 0 UID: 0 PID: 16682 Comm: syz.0.2487 Tainted: G U syzkaller #0 PREEMPT(full) [ 759.748147][T16682] Tainted: [U]=USER [ 759.748153][T16682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.748161][T16682] Call Trace: [ 759.748167][T16682] [ 759.748173][T16682] dump_stack_lvl+0x16c/0x1f0 [ 759.748196][T16682] should_fail_ex+0x512/0x640 [ 759.748219][T16682] _copy_to_user+0x32/0xd0 [ 759.748234][T16682] simple_read_from_buffer+0xcb/0x170 [ 759.748251][T16682] proc_fail_nth_read+0x197/0x240 [ 759.748267][T16682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.748284][T16682] ? rw_verify_area+0xcf/0x6c0 [ 759.748298][T16682] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 759.748320][T16682] vfs_read+0x1e4/0xcf0 [ 759.748339][T16682] ? __pfx___mutex_lock+0x10/0x10 [ 759.748358][T16682] ? __pfx_vfs_read+0x10/0x10 [ 759.748378][T16682] ? __fget_files+0x20e/0x3c0 [ 759.748399][T16682] ksys_read+0x12a/0x250 [ 759.748414][T16682] ? __pfx_ksys_read+0x10/0x10 [ 759.748435][T16682] do_syscall_64+0xcd/0x490 [ 759.748459][T16682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.748474][T16682] RIP: 0033:0x7f275df8d5fc [ 759.748486][T16682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 759.748500][T16682] RSP: 002b:00007f275ee1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 759.748520][T16682] RAX: ffffffffffffffda RBX: 00007f275e1c6090 RCX: 00007f275df8d5fc [ 759.748536][T16682] RDX: 000000000000000f RSI: 00007f275ee1e0a0 RDI: 0000000000000004 [ 759.748551][T16682] RBP: 00007f275ee1e090 R08: 0000000000000000 R09: 0000000000000000 [ 759.748566][T16682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.748581][T16682] R13: 00007f275e1c6128 R14: 00007f275e1c6090 R15: 00007fff3552f038 [ 759.748614][T16682] [ 760.071796][T16626] chnl_net:caif_netlink_parms(): no params data found [ 760.121519][T11366] bridge_slave_1: left allmulticast mode [ 760.127205][T11366] bridge_slave_1: left promiscuous mode [ 760.133102][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.169177][T11366] bridge_slave_0: left allmulticast mode [ 760.174951][T11366] bridge_slave_0: left promiscuous mode [ 760.185673][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.464246][ T30] audit: type=1800 audit(2147483877.614:140): pid=16697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2489" name="features" dev="configfs" ino=64842 res=0 errno=0 [ 760.883221][T16701] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 761.579516][T15881] Bluetooth: hci0: command tx timeout [ 761.641869][T11366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.667155][T11366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.696027][T11366] bond0 (unregistering): Released all slaves [ 761.828626][T11366] ovs_: left promiscuous mode [ 761.970475][T16706] openvswitch: ovs_: Dropping previously announced user features [ 762.121496][T16626] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.128667][T16626] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.147747][T16626] bridge_slave_0: entered allmulticast mode [ 762.158469][T16626] bridge_slave_0: entered promiscuous mode [ 762.212833][T16626] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.222961][T16626] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.234775][T16626] bridge_slave_1: entered allmulticast mode [ 762.245588][T16626] bridge_slave_1: entered promiscuous mode [ 762.496887][T16722] FAULT_INJECTION: forcing a failure. [ 762.496887][T16722] name failslab, interval 1, probability 0, space 0, times 0 [ 762.517506][T16722] CPU: 0 UID: 0 PID: 16722 Comm: syz.3.2496 Tainted: G U syzkaller #0 PREEMPT(full) [ 762.517548][T16722] Tainted: [U]=USER [ 762.517557][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.517572][T16722] Call Trace: [ 762.517581][T16722] [ 762.517592][T16722] dump_stack_lvl+0x16c/0x1f0 [ 762.517629][T16722] should_fail_ex+0x512/0x640 [ 762.517664][T16722] ? fs_reclaim_acquire+0xae/0x150 [ 762.517703][T16722] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 762.517739][T16722] should_failslab+0xc2/0x120 [ 762.517772][T16722] __kmalloc_noprof+0xd2/0x510 [ 762.517810][T16722] tomoyo_realpath_from_path+0xc2/0x6e0 [ 762.517847][T16722] ? tomoyo_profile+0x47/0x60 [ 762.517874][T16722] tomoyo_path_number_perm+0x245/0x580 [ 762.517904][T16722] ? tomoyo_path_number_perm+0x237/0x580 [ 762.517938][T16722] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 762.517971][T16722] ? find_held_lock+0x2b/0x80 [ 762.518028][T16722] ? find_held_lock+0x2b/0x80 [ 762.518052][T16722] ? hook_file_ioctl_common+0x145/0x410 [ 762.518094][T16722] ? __fget_files+0x20e/0x3c0 [ 762.518130][T16722] security_file_ioctl+0x9b/0x240 [ 762.518163][T16722] __x64_sys_ioctl+0xb7/0x210 [ 762.518203][T16722] do_syscall_64+0xcd/0x490 [ 762.518240][T16722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.518279][T16722] RIP: 0033:0x7f10bd58ebe9 [ 762.518300][T16722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.518326][T16722] RSP: 002b:00007f10be40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.518352][T16722] RAX: ffffffffffffffda RBX: 00007f10bd7c6090 RCX: 00007f10bd58ebe9 [ 762.518370][T16722] RDX: 0000000000000001 RSI: 0000000000004b66 RDI: 0000000000000003 [ 762.518386][T16722] RBP: 00007f10be40f090 R08: 0000000000000000 R09: 0000000000000000 [ 762.518403][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.518419][T16722] R13: 00007f10bd7c6128 R14: 00007f10bd7c6090 R15: 00007ffc48af5358 [ 762.518456][T16722] [ 762.518467][T16722] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.846351][T16731] : Can't lookup blockdev [ 762.917720][T16626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.988476][T16626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.024364][ T30] audit: type=1800 audit(2147483880.163:141): pid=16738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2497" name="features" dev="configfs" ino=64442 res=0 errno=0 [ 763.662561][T15881] Bluetooth: hci0: command tx timeout [ 764.294943][T16626] team0: Port device team_slave_0 added [ 764.343413][T16626] team0: Port device team_slave_1 added [ 764.507006][T16751] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 764.569121][T16762] : Can't lookup blockdev [ 764.594709][T11366] hsr_slave_0: left promiscuous mode [ 764.660151][T11366] hsr_slave_1: left promiscuous mode [ 764.708102][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.762830][ T30] audit: type=1800 audit(2147483881.912:142): pid=16765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2502" name="features" dev="configfs" ino=65045 res=0 errno=0 [ 764.779398][T11366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.028142][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.056295][T11366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.083299][T11366] veth1_macvtap: left promiscuous mode [ 765.089004][T11366] veth0_macvtap: left promiscuous mode [ 765.098699][T11366] veth1_vlan: left promiscuous mode [ 765.180725][T11366] veth0_vlan: left promiscuous mode [ 765.743744][T15881] Bluetooth: hci0: command tx timeout [ 766.258045][T11366] team0 (unregistering): Port device team_slave_1 removed [ 766.307383][T11366] team0 (unregistering): Port device team_slave_0 removed [ 766.795680][T16626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.803173][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.830178][T16626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.886021][T16776] openvswitch: ovs_: Dropping previously announced user features [ 766.937953][T16626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.991826][T16626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.024726][T16626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.037556][T16790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 767.248724][T16793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 767.389713][T16626] hsr_slave_0: entered promiscuous mode [ 767.416756][T16626] hsr_slave_1: entered promiscuous mode [ 767.717515][T16803] : Can't lookup blockdev [ 767.781386][ T30] audit: type=1800 audit(2147483884.920:143): pid=16807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2509" name="features" dev="configfs" ino=65171 res=0 errno=0 [ 768.996073][T16822] ima: policy update failed [ 769.005130][ T30] audit: type=1802 audit(2147483886.150:144): pid=16822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2513" res=0 errno=0 [ 769.592135][T16842] FAULT_INJECTION: forcing a failure. [ 769.592135][T16842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.662947][T16842] CPU: 1 UID: 0 PID: 16842 Comm: syz.3.2516 Tainted: G U syzkaller #0 PREEMPT(full) [ 769.662986][T16842] Tainted: [U]=USER [ 769.662994][T16842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 769.663009][T16842] Call Trace: [ 769.663018][T16842] [ 769.663027][T16842] dump_stack_lvl+0x16c/0x1f0 [ 769.663064][T16842] should_fail_ex+0x512/0x640 [ 769.663102][T16842] _copy_from_user+0x2e/0xd0 [ 769.663138][T16842] copy_msghdr_from_user+0x98/0x160 [ 769.663172][T16842] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 769.663221][T16842] ___sys_sendmsg+0xfe/0x1d0 [ 769.663253][T16842] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.663323][T16842] __sys_sendmsg+0x16d/0x220 [ 769.663356][T16842] ? __pfx___sys_sendmsg+0x10/0x10 [ 769.663408][T16842] do_syscall_64+0xcd/0x490 [ 769.663444][T16842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.663469][T16842] RIP: 0033:0x7f10bd58ebe9 [ 769.663489][T16842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.663514][T16842] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.663539][T16842] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 769.663566][T16842] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 769.663583][T16842] RBP: 00007f10be430090 R08: 0000000000000000 R09: 0000000000000000 [ 769.663600][T16842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.663614][T16842] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 769.663645][T16842] [ 769.665154][T16626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 769.868578][T16848] : Can't lookup blockdev [ 770.031207][T16626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.055193][T16626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.108049][T16626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.135645][ T30] audit: type=1800 audit(2147483887.289:145): pid=16864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2515" name="features" dev="configfs" ino=65772 res=0 errno=0 [ 770.618512][T16862] openvswitch: ovs_: Dropping previously announced user features [ 770.729161][T16626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.820674][T16626] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.915437][T16886] : Can't lookup blockdev [ 770.921891][T11358] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.929035][T11358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.000280][ T30] audit: type=1800 audit(2147483888.149:146): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2521" name="features" dev="configfs" ino=65803 res=0 errno=0 [ 771.085658][T11358] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.093146][T11358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.180865][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.392241][T16626] veth0_vlan: entered promiscuous mode [ 772.441224][T16626] veth1_vlan: entered promiscuous mode [ 772.621066][T16626] veth0_macvtap: entered promiscuous mode [ 772.659935][T16626] veth1_macvtap: entered promiscuous mode [ 772.748897][T16626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.006668][T16626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.074651][T11406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.138134][T11406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.177642][T11406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.197658][T11406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.260942][T16935] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 773.570894][T11365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.664438][T11365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.919626][T11366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.003843][T11366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.283998][T16955] : Can't lookup blockdev [ 774.398617][ T30] audit: type=1800 audit(2147483891.547:147): pid=16958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2529" name="features" dev="configfs" ino=66660 res=0 errno=0 [ 774.492924][T16957] openvswitch: ovs_: Dropping previously announced user features [ 774.544972][T16953] FAULT_INJECTION: forcing a failure. [ 774.544972][T16953] name failslab, interval 1, probability 0, space 0, times 0 [ 774.569384][T16953] CPU: 1 UID: 0 PID: 16953 Comm: syz.2.2477 Tainted: G U syzkaller #0 PREEMPT(full) [ 774.569432][T16953] Tainted: [U]=USER [ 774.569442][T16953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.569459][T16953] Call Trace: [ 774.569469][T16953] [ 774.569479][T16953] dump_stack_lvl+0x16c/0x1f0 [ 774.569520][T16953] should_fail_ex+0x512/0x640 [ 774.569555][T16953] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 774.569592][T16953] should_failslab+0xc2/0x120 [ 774.569627][T16953] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 774.569657][T16953] ? __pfx_map_id_range_down+0x10/0x10 [ 774.569696][T16953] ? prepare_creds+0x2c/0x7d0 [ 774.569742][T16953] prepare_creds+0x2c/0x7d0 [ 774.569782][T16953] __sys_setfsgid+0xe3/0x380 [ 774.569811][T16953] ? rcu_is_watching+0x12/0xc0 [ 774.569843][T16953] do_syscall_64+0xcd/0x490 [ 774.569911][T16953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.569939][T16953] RIP: 0033:0x7f40e418ebe9 [ 774.569971][T16953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.569998][T16953] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 774.570024][T16953] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 774.570044][T16953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.570061][T16953] RBP: 00007f40e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 774.570079][T16953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.570096][T16953] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 774.570132][T16953] [ 774.876824][T16965] : Can't lookup blockdev [ 775.037547][ T30] audit: type=1800 audit(2147483892.187:148): pid=16968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2531" name="features" dev="configfs" ino=66708 res=0 errno=0 [ 775.443241][T16975] vhci_hcd: invalid port number 56 [ 775.489384][T16975] vhci_hcd: invalid port number 56 [ 775.710088][T16980] FAULT_INJECTION: forcing a failure. [ 775.710088][T16980] name failslab, interval 1, probability 0, space 0, times 0 [ 775.749530][T16980] CPU: 1 UID: 0 PID: 16980 Comm: syz.2.2536 Tainted: G U syzkaller #0 PREEMPT(full) [ 775.749572][T16980] Tainted: [U]=USER [ 775.749580][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 775.749594][T16980] Call Trace: [ 775.749603][T16980] [ 775.749614][T16980] dump_stack_lvl+0x16c/0x1f0 [ 775.749652][T16980] should_fail_ex+0x512/0x640 [ 775.749686][T16980] ? fs_reclaim_acquire+0xae/0x150 [ 775.749724][T16980] ? tomoyo_encode2+0x100/0x3e0 [ 775.749783][T16980] should_failslab+0xc2/0x120 [ 775.749816][T16980] __kmalloc_noprof+0xd2/0x510 [ 775.749846][T16980] ? d_absolute_path+0x136/0x1a0 [ 775.749887][T16980] tomoyo_encode2+0x100/0x3e0 [ 775.749926][T16980] tomoyo_encode+0x29/0x50 [ 775.749959][T16980] tomoyo_realpath_from_path+0x18f/0x6e0 [ 775.750002][T16980] tomoyo_path_number_perm+0x245/0x580 [ 775.750030][T16980] ? tomoyo_path_number_perm+0x237/0x580 [ 775.750064][T16980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 775.750098][T16980] ? find_held_lock+0x2b/0x80 [ 775.750158][T16980] ? find_held_lock+0x2b/0x80 [ 775.750182][T16980] ? hook_file_ioctl_common+0x145/0x410 [ 775.750223][T16980] ? __fget_files+0x20e/0x3c0 [ 775.750258][T16980] security_file_ioctl+0x9b/0x240 [ 775.750292][T16980] __x64_sys_ioctl+0xb7/0x210 [ 775.750333][T16980] do_syscall_64+0xcd/0x490 [ 775.750370][T16980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.750397][T16980] RIP: 0033:0x7f40e418ebe9 [ 775.750418][T16980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.750442][T16980] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.750467][T16980] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 775.750485][T16980] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 775.750501][T16980] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 775.750521][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.750537][T16980] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 775.750573][T16980] [ 775.752870][T16980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 775.899348][T16982] vhci_hcd: invalid port number 56 [ 775.956172][T16980] vhci_hcd: invalid port number 56 [ 775.981044][T16982] vhci_hcd: invalid port number 56 [ 776.002500][T16980] vhci_hcd: invalid port number 56 [ 776.633841][T17003] : Can't lookup blockdev [ 776.869209][ T30] audit: type=1800 audit(2147483893.876:149): pid=17009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2542" name="features" dev="configfs" ino=66133 res=0 errno=0 [ 776.909386][T17002] openvswitch: ovs_: Dropping previously announced user features [ 777.623939][T17019] : Can't lookup blockdev [ 777.705465][ T30] audit: type=1800 audit(2147483894.846:150): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2547" name="features" dev="configfs" ino=66153 res=0 errno=0 [ 778.585292][T17042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 780.854693][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 781.489657][T17065] : Can't lookup blockdev [ 781.631885][ T30] audit: type=1800 audit(2147483898.764:151): pid=17073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2557" name="features" dev="configfs" ino=66228 res=0 errno=0 [ 781.880423][T17074] FAULT_INJECTION: forcing a failure. [ 781.880423][T17074] name fail_futex, interval 1, probability 0, space 0, times 0 [ 781.908888][T17075] : Can't lookup blockdev [ 781.964864][T17074] CPU: 0 UID: 0 PID: 17074 Comm: syz.2.2560 Tainted: G U syzkaller #0 PREEMPT(full) [ 781.964912][T17074] Tainted: [U]=USER [ 781.964922][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.964939][T17074] Call Trace: [ 781.964949][T17074] [ 781.964960][T17074] dump_stack_lvl+0x16c/0x1f0 [ 781.965003][T17074] should_fail_ex+0x512/0x640 [ 781.965046][T17074] get_futex_key+0x1d0/0x1560 [ 781.965083][T17074] ? __pfx_get_futex_key+0x10/0x10 [ 781.965113][T17074] ? __lock_acquire+0xb97/0x1ce0 [ 781.965153][T17074] futex_wake+0xea/0x530 [ 781.965204][T17074] ? __pfx_futex_wake+0x10/0x10 [ 781.965239][T17074] ? __might_fault+0xe3/0x190 [ 781.965265][T17074] ? __might_fault+0x13b/0x190 [ 781.965315][T17074] do_futex+0x1e3/0x350 [ 781.965354][T17074] ? __pfx_do_futex+0x10/0x10 [ 781.965388][T17074] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 781.965438][T17074] __x64_sys_futex+0x1e0/0x4c0 [ 781.965479][T17074] ? __pfx___x64_sys_futex+0x10/0x10 [ 781.965515][T17074] ? __sys_getsockopt+0x144/0x1b0 [ 781.965564][T17074] do_syscall_64+0xcd/0x490 [ 781.965604][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.965635][T17074] RIP: 0033:0x7f40e418ebe9 [ 781.965657][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.965685][T17074] RSP: 002b:00007f40e50ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 781.965715][T17074] RAX: ffffffffffffffda RBX: 00007f40e43c6188 RCX: 00007f40e418ebe9 [ 781.965736][T17074] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f40e43c618c [ 781.965755][T17074] RBP: 00007f40e43c6180 R08: 00007f40e50f1000 R09: 0000000000000000 [ 781.965774][T17074] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 781.965803][T17074] R13: 00007f40e43c6218 R14: 00007ffeb05fd110 R15: 00007ffeb05fd1f8 [ 781.965843][T17074] [ 782.227835][ T30] audit: type=1800 audit(2147483899.363:152): pid=17078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2561" name="features" dev="configfs" ino=66979 res=0 errno=0 [ 782.367099][T17069] openvswitch: ovs_: Dropping previously announced user features [ 782.737309][T17085] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2563'. [ 783.325029][T17098] FAULT_INJECTION: forcing a failure. [ 783.325029][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 783.348223][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.2.2565 Tainted: G U syzkaller #0 PREEMPT(full) [ 783.348272][T17098] Tainted: [U]=USER [ 783.348282][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.348300][T17098] Call Trace: [ 783.348310][T17098] [ 783.348322][T17098] dump_stack_lvl+0x16c/0x1f0 [ 783.348370][T17098] should_fail_ex+0x512/0x640 [ 783.348404][T17098] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 783.348439][T17098] should_failslab+0xc2/0x120 [ 783.348476][T17098] __kmalloc_cache_noprof+0x6a/0x3e0 [ 783.348504][T17098] ? allocate_file_region_entries+0x15b/0x620 [ 783.348537][T17098] ? allocate_file_region_entries+0x1a0/0x620 [ 783.348576][T17098] allocate_file_region_entries+0x1a0/0x620 [ 783.348616][T17098] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 783.348662][T17098] region_chg+0x85/0x140 [ 783.348695][T17098] __vma_reservation_common+0x43b/0x740 [ 783.348732][T17098] ? __pfx___vma_reservation_common+0x10/0x10 [ 783.348779][T17098] alloc_hugetlb_folio+0x946/0x1560 [ 783.348826][T17098] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 783.348864][T17098] ? __pfx_down_read+0x10/0x10 [ 783.348907][T17098] ? __filemap_get_folio+0x32b/0xc30 [ 783.348953][T17098] hugetlb_fault+0x1bce/0x2f40 [ 783.348989][T17098] ? __pfx_hugetlb_fault+0x10/0x10 [ 783.349032][T17098] ? find_vma+0xbf/0x140 [ 783.349086][T17098] ? __pfx_find_vma+0x10/0x10 [ 783.349126][T17098] handle_mm_fault+0xbfa/0xd10 [ 783.349156][T17098] ? __bpf_trace_exceptions+0x1/0x40 [ 783.349202][T17098] do_user_addr_fault+0x7a6/0x1370 [ 783.349247][T17098] ? rcu_is_watching+0x12/0xc0 [ 783.349280][T17098] exc_page_fault+0x5c/0xb0 [ 783.349316][T17098] asm_exc_page_fault+0x26/0x30 [ 783.349342][T17098] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 783.349377][T17098] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 783.349405][T17098] RSP: 0018:ffffc900046ff950 EFLAGS: 00050246 [ 783.349429][T17098] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 783.349446][T17098] RDX: fffff520008dff43 RSI: 0000000000000000 RDI: ffffc900046ffa10 [ 783.349463][T17098] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff520008dff42 [ 783.349477][T17098] R10: ffffc900046ffa17 R11: 0000000000000000 R12: 0000000000000000 [ 783.349492][T17098] R13: ffffc900046ffa10 R14: ffffffff89610800 R15: ffff88807a09d340 [ 783.349510][T17098] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 783.349564][T17098] _copy_from_user+0x98/0xd0 [ 783.349606][T17098] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 783.349654][T17098] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 783.349693][T17098] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 783.349733][T17098] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 783.349774][T17098] ? __local_bh_enable_ip+0xa4/0x120 [ 783.349807][T17098] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 783.349846][T17098] sctp_getsockopt+0x124f/0x69b0 [ 783.349882][T17098] ? __futex_wait+0x24c/0x2f0 [ 783.349920][T17098] ? __pfx_sctp_getsockopt+0x10/0x10 [ 783.349976][T17098] ? __lock_acquire+0xb97/0x1ce0 [ 783.350031][T17098] ? find_held_lock+0x2b/0x80 [ 783.350056][T17098] ? __might_fault+0xe3/0x190 [ 783.350086][T17098] ? __might_fault+0xe3/0x190 [ 783.350112][T17098] ? __might_fault+0x13b/0x190 [ 783.350149][T17098] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 783.350182][T17098] do_sock_getsockopt+0x34d/0x440 [ 783.350217][T17098] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 783.350249][T17098] ? __fget_files+0x204/0x3c0 [ 783.350288][T17098] __sys_getsockopt+0x123/0x1b0 [ 783.350323][T17098] __x64_sys_getsockopt+0xbd/0x160 [ 783.350350][T17098] ? do_syscall_64+0x91/0x490 [ 783.350388][T17098] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.350416][T17098] do_syscall_64+0xcd/0x490 [ 783.350447][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.350471][T17098] RIP: 0033:0x7f40e418ebe9 [ 783.350490][T17098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.350514][T17098] RSP: 002b:00007f40e50cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 783.350536][T17098] RAX: ffffffffffffffda RBX: 00007f40e43c6090 RCX: 00007f40e418ebe9 [ 783.350552][T17098] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 783.350566][T17098] RBP: 00007f40e4211e19 R08: 0000200000000280 R09: 0000000000000000 [ 783.350580][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.350594][T17098] R13: 00007f40e43c6128 R14: 00007f40e43c6090 R15: 00007ffeb05fd1f8 [ 783.350627][T17098] [ 784.182590][T17107] FAULT_INJECTION: forcing a failure. [ 784.182590][T17107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 784.196245][T17107] CPU: 1 UID: 0 PID: 17107 Comm: syz.1.2568 Tainted: G U syzkaller #0 PREEMPT(full) [ 784.196288][T17107] Tainted: [U]=USER [ 784.196298][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.196315][T17107] Call Trace: [ 784.196324][T17107] [ 784.196336][T17107] dump_stack_lvl+0x16c/0x1f0 [ 784.196368][T17107] should_fail_ex+0x512/0x640 [ 784.196392][T17107] should_fail_alloc_page+0xe7/0x130 [ 784.196413][T17107] prepare_alloc_pages+0x3c2/0x610 [ 784.196434][T17107] ? rcu_is_watching+0x12/0xc0 [ 784.196451][T17107] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 784.196471][T17107] ? rcu_is_watching+0x12/0xc0 [ 784.196485][T17107] ? trace_mm_page_alloc+0x11f/0x1a0 [ 784.196505][T17107] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 784.196524][T17107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 784.196543][T17107] ? is_bpf_text_address+0x8a/0x1a0 [ 784.196561][T17107] ? bpf_ksym_find+0x124/0x1c0 [ 784.196576][T17107] ? is_bpf_text_address+0x94/0x1a0 [ 784.196594][T17107] ? __kernel_text_address+0xd/0x40 [ 784.196607][T17107] ? unwind_get_return_address+0x59/0xa0 [ 784.196630][T17107] alloc_pages_bulk_noprof+0x71c/0x1410 [ 784.196646][T17107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 784.196668][T17107] ? policy_nodemask+0xea/0x4e0 [ 784.196688][T17107] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 784.196705][T17107] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 784.196732][T17107] kasan_populate_vmalloc+0xf1/0x1f0 [ 784.196752][T17107] alloc_vmap_area+0x959/0x29c0 [ 784.196781][T17107] ? __pfx_alloc_vmap_area+0x10/0x10 [ 784.196806][T17107] __get_vm_area_node+0x1ca/0x330 [ 784.196830][T17107] __vmalloc_node_range_noprof+0x271/0x14b0 [ 784.196844][T17107] ? n_tty_open+0x1a/0x170 [ 784.196864][T17107] ? look_up_lock_class+0x59/0x150 [ 784.196886][T17107] ? n_tty_open+0x1a/0x170 [ 784.196911][T17107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.196924][T17107] ? console_unlock+0x184/0x210 [ 784.196937][T17107] ? __pfx_console_unlock+0x10/0x10 [ 784.196952][T17107] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 784.196976][T17107] ? n_tty_open+0x1a/0x170 [ 784.196995][T17107] __vmalloc_node_noprof+0xad/0xf0 [ 784.197008][T17107] ? n_tty_open+0x1a/0x170 [ 784.197028][T17107] ? __pfx_n_tty_open+0x10/0x10 [ 784.197091][T17107] n_tty_open+0x1a/0x170 [ 784.197111][T17107] ? __pfx_n_tty_open+0x10/0x10 [ 784.197131][T17107] tty_ldisc_open+0x9f/0x120 [ 784.197149][T17107] tty_ldisc_setup+0x40/0x100 [ 784.197166][T17107] tty_init_dev.part.0+0x1ec/0x500 [ 784.197188][T17107] tty_open+0xa50/0xf90 [ 784.197210][T17107] ? __pfx_tty_open+0x10/0x10 [ 784.197229][T17107] ? chrdev_open+0x10b/0x6a0 [ 784.197249][T17107] ? __pfx_tty_open+0x10/0x10 [ 784.197267][T17107] chrdev_open+0x231/0x6a0 [ 784.197284][T17107] ? __pfx_apparmor_file_open+0x10/0x10 [ 784.197303][T17107] ? __pfx_chrdev_open+0x10/0x10 [ 784.197321][T17107] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 784.197340][T17107] do_dentry_open+0x97f/0x1530 [ 784.197357][T17107] ? __pfx_chrdev_open+0x10/0x10 [ 784.197382][T17107] vfs_open+0x82/0x3f0 [ 784.197418][T17107] path_openat+0x1de4/0x2cb0 [ 784.197461][T17107] ? __pfx_path_openat+0x10/0x10 [ 784.197492][T17107] do_filp_open+0x20b/0x470 [ 784.197510][T17107] ? __pfx_do_filp_open+0x10/0x10 [ 784.197540][T17107] ? alloc_fd+0x471/0x7d0 [ 784.197561][T17107] do_sys_openat2+0x11b/0x1d0 [ 784.197580][T17107] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.197608][T17107] __x64_sys_openat+0x174/0x210 [ 784.197629][T17107] ? __pfx___x64_sys_openat+0x10/0x10 [ 784.197657][T17107] do_syscall_64+0xcd/0x490 [ 784.197678][T17107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.197693][T17107] RIP: 0033:0x7fd69878ebe9 [ 784.197706][T17107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.197722][T17107] RSP: 002b:00007fd6969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 784.197735][T17107] RAX: ffffffffffffffda RBX: 00007fd6989c5fa0 RCX: 00007fd69878ebe9 [ 784.197745][T17107] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 784.197755][T17107] RBP: 00007fd698811e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.197764][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.197774][T17107] R13: 00007fd6989c6038 R14: 00007fd6989c5fa0 R15: 00007ffcef78e658 [ 784.197793][T17107] [ 784.198009][T17107] syz.1.2568: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 784.673195][T17107] CPU: 1 UID: 0 PID: 17107 Comm: syz.1.2568 Tainted: G U syzkaller #0 PREEMPT(full) [ 784.673221][T17107] Tainted: [U]=USER [ 784.673226][T17107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.673235][T17107] Call Trace: [ 784.673241][T17107] [ 784.673247][T17107] dump_stack_lvl+0x16c/0x1f0 [ 784.673270][T17107] warn_alloc+0x248/0x3a0 [ 784.673290][T17107] ? __pfx_warn_alloc+0x10/0x10 [ 784.673308][T17107] ? kfree+0x2b4/0x4d0 [ 784.673327][T17107] ? __get_vm_area_node+0x208/0x330 [ 784.673356][T17107] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 784.673371][T17107] ? look_up_lock_class+0x59/0x150 [ 784.673395][T17107] ? n_tty_open+0x1a/0x170 [ 784.673422][T17107] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 784.673435][T17107] ? console_unlock+0x184/0x210 [ 784.673450][T17107] ? __pfx_console_unlock+0x10/0x10 [ 784.673465][T17107] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 784.673489][T17107] ? n_tty_open+0x1a/0x170 [ 784.673509][T17107] __vmalloc_node_noprof+0xad/0xf0 [ 784.673522][T17107] ? n_tty_open+0x1a/0x170 [ 784.673542][T17107] ? __pfx_n_tty_open+0x10/0x10 [ 784.673563][T17107] n_tty_open+0x1a/0x170 [ 784.673583][T17107] ? __pfx_n_tty_open+0x10/0x10 [ 784.673602][T17107] tty_ldisc_open+0x9f/0x120 [ 784.673619][T17107] tty_ldisc_setup+0x40/0x100 [ 784.673637][T17107] tty_init_dev.part.0+0x1ec/0x500 [ 784.673659][T17107] tty_open+0xa50/0xf90 [ 784.673681][T17107] ? __pfx_tty_open+0x10/0x10 [ 784.673701][T17107] ? chrdev_open+0x10b/0x6a0 [ 784.673722][T17107] ? __pfx_tty_open+0x10/0x10 [ 784.673741][T17107] chrdev_open+0x231/0x6a0 [ 784.673758][T17107] ? __pfx_apparmor_file_open+0x10/0x10 [ 784.673775][T17107] ? __pfx_chrdev_open+0x10/0x10 [ 784.673793][T17107] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 784.673814][T17107] do_dentry_open+0x97f/0x1530 [ 784.673832][T17107] ? __pfx_chrdev_open+0x10/0x10 [ 784.673853][T17107] vfs_open+0x82/0x3f0 [ 784.673876][T17107] path_openat+0x1de4/0x2cb0 [ 784.673903][T17107] ? __pfx_path_openat+0x10/0x10 [ 784.673930][T17107] do_filp_open+0x20b/0x470 [ 784.673955][T17107] ? __pfx_do_filp_open+0x10/0x10 [ 784.674002][T17107] ? alloc_fd+0x471/0x7d0 [ 784.674025][T17107] do_sys_openat2+0x11b/0x1d0 [ 784.674046][T17107] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.674076][T17107] __x64_sys_openat+0x174/0x210 [ 784.674103][T17107] ? __pfx___x64_sys_openat+0x10/0x10 [ 784.674132][T17107] do_syscall_64+0xcd/0x490 [ 784.674153][T17107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.674172][T17107] RIP: 0033:0x7fd69878ebe9 [ 784.674186][T17107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.674200][T17107] RSP: 002b:00007fd6969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 784.674214][T17107] RAX: ffffffffffffffda RBX: 00007fd6989c5fa0 RCX: 00007fd69878ebe9 [ 784.674224][T17107] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 784.674233][T17107] RBP: 00007fd698811e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.674242][T17107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.674251][T17107] R13: 00007fd6989c6038 R14: 00007fd6989c5fa0 R15: 00007ffcef78e658 [ 784.674270][T17107] [ 784.674461][T17107] Mem-Info: [ 785.118877][T17107] active_anon:8329 inactive_anon:11 isolated_anon:0 [ 785.118877][T17107] active_file:19739 inactive_file:40539 isolated_file:0 [ 785.118877][T17107] unevictable:768 dirty:573 writeback:0 [ 785.118877][T17107] slab_reclaimable:11628 slab_unreclaimable:93654 [ 785.118877][T17107] mapped:27473 shmem:1364 pagetables:1173 [ 785.118877][T17107] sec_pagetables:0 bounce:0 [ 785.118877][T17107] kernel_misc_reclaimable:0 [ 785.118877][T17107] free:1315121 free_pcp:18650 free_cma:0 [ 785.233166][T17107] Node 0 active_anon:33140kB inactive_anon:32kB active_file:78916kB inactive_file:161956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105880kB dirty:2292kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11300kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.308547][T17107] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 785.338835][T17107] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.368145][T17107] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 785.374231][T17107] Node 0 DMA32 free:1341268kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33096kB inactive_anon:32kB active_file:78916kB inactive_file:160628kB unevictable:1536kB writepending:2292kB present:3129332kB managed:2539584kB mlocked:0kB bounce:0kB free_pcp:72144kB local_pcp:50096kB free_cma:0kB [ 785.415260][T17107] lowmem_reserve[]: 0 0 1 1 1 [ 785.420182][T17107] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.489658][T17107] lowmem_reserve[]: 0 0 0 0 0 [ 785.577628][T17107] Node 1 Normal free:3907064kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 785.611068][T17107] lowmem_reserve[]: 0 0 0 0 0 [ 785.615957][T17107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 785.673448][T17107] Node 0 DMA32: 1446*4kB (UM) 533*8kB (UME) 607*16kB (UME) 520*32kB (UME) 110*64kB (UME) 115*128kB (UME) 190*256kB (UME) 106*512kB (UME) 68*1024kB (UME) 20*2048kB (UM) 261*4096kB (UM) = 1340720kB [ 785.694942][T17129] : Can't lookup blockdev [ 785.745599][T17107] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 785.761000][T17107] Node 1 Normal: 198*4kB (UME) 54*8kB (UME) 55*16kB (UME) 230*32kB (UME) 104*64kB (UME) 30*128kB (UME) 12*256kB (UM) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 945*4096kB (M) = 3907064kB [ 785.780211][T17107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.790745][T17107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.796510][T17132] : Can't lookup blockdev [ 785.800811][T17107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.814243][T17131] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 785.814645][T17107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.889388][ T30] audit: type=1800 audit(2147483903.021:153): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2571" name="features" dev="configfs" ino=67126 res=0 errno=0 [ 785.967385][T17107] 61641 total pagecache pages [ 785.992643][T17107] 5 pages in swap cache [ 786.014346][T17107] Free swap = 124988kB [ 786.029956][T17107] Total swap = 124996kB [ 786.040725][T17107] 2097051 pages RAM [ 786.057525][T17107] 0 pages HighMem/MovableOnly [ 786.079004][T17107] 430193 pages reserved [ 786.111988][T17107] 0 pages cma reserved [ 786.140113][T17107] tty tty12: ldisc open failed (-12), clearing slot 11 [ 786.484844][T17136] openvswitch: ovs_: Dropping previously announced user features [ 787.796511][T17169] : Can't lookup blockdev [ 787.889969][ T30] audit: type=1800 audit(2147483905.020:154): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2584" name="features" dev="configfs" ino=66391 res=0 errno=0 [ 788.009232][T17173] FAULT_INJECTION: forcing a failure. [ 788.009232][T17173] name failslab, interval 1, probability 0, space 0, times 0 [ 788.024406][T17173] CPU: 0 UID: 0 PID: 17173 Comm: syz.1.2586 Tainted: G U syzkaller #0 PREEMPT(full) [ 788.024449][T17173] Tainted: [U]=USER [ 788.024458][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.024472][T17173] Call Trace: [ 788.024483][T17173] [ 788.024493][T17173] dump_stack_lvl+0x16c/0x1f0 [ 788.024533][T17173] should_fail_ex+0x512/0x640 [ 788.024567][T17173] ? fs_reclaim_acquire+0xae/0x150 [ 788.024613][T17173] ? tomoyo_encode2+0x100/0x3e0 [ 788.024646][T17173] should_failslab+0xc2/0x120 [ 788.024679][T17173] __kmalloc_noprof+0xd2/0x510 [ 788.024709][T17173] ? d_absolute_path+0x136/0x1a0 [ 788.024750][T17173] tomoyo_encode2+0x100/0x3e0 [ 788.024789][T17173] tomoyo_encode+0x29/0x50 [ 788.024821][T17173] tomoyo_realpath_from_path+0x18f/0x6e0 [ 788.024866][T17173] tomoyo_path_number_perm+0x245/0x580 [ 788.024896][T17173] ? tomoyo_path_number_perm+0x237/0x580 [ 788.024930][T17173] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 788.024963][T17173] ? find_held_lock+0x2b/0x80 [ 788.025022][T17173] ? find_held_lock+0x2b/0x80 [ 788.025045][T17173] ? hook_file_ioctl_common+0x145/0x410 [ 788.025087][T17173] ? __fget_files+0x20e/0x3c0 [ 788.025121][T17173] security_file_ioctl+0x9b/0x240 [ 788.025155][T17173] __x64_sys_ioctl+0xb7/0x210 [ 788.025206][T17173] do_syscall_64+0xcd/0x490 [ 788.025244][T17173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.025271][T17173] RIP: 0033:0x7fd69878ebe9 [ 788.025292][T17173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.025317][T17173] RSP: 002b:00007fd6969f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.025341][T17173] RAX: ffffffffffffffda RBX: 00007fd6989c5fa0 RCX: 00007fd69878ebe9 [ 788.025359][T17173] RDX: 0000000000000001 RSI: 0000000000004b66 RDI: 0000000000000003 [ 788.025375][T17173] RBP: 00007fd6969f6090 R08: 0000000000000000 R09: 0000000000000000 [ 788.025392][T17173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.025408][T17173] R13: 00007fd6989c6038 R14: 00007fd6989c5fa0 R15: 00007ffcef78e658 [ 788.025444][T17173] [ 788.025515][T17173] ERROR: Out of memory at tomoyo_realpath_from_path. [ 788.440966][T17179] : Can't lookup blockdev [ 788.562927][ T30] audit: type=1800 audit(2147483905.690:155): pid=17182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2587" name="features" dev="configfs" ino=67278 res=0 errno=0 [ 789.560578][T17191] openvswitch: ovs_: Dropping previously announced user features [ 790.486739][T17209] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2595'. [ 790.516598][T17205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 790.768316][T17216] : Can't lookup blockdev [ 790.843486][ T30] audit: type=1800 audit(2147483907.979:156): pid=17220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2597" name="features" dev="configfs" ino=67598 res=0 errno=0 [ 791.021526][T17222] binder: 17221:17222 ioctl 541b 38 returned -22 [ 791.430295][T17231] : Can't lookup blockdev [ 791.667916][ T30] audit: type=1800 audit(2147483908.779:157): pid=17234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2599" name="features" dev="configfs" ino=67374 res=0 errno=0 [ 792.034555][T17233] openvswitch: ovs_: Dropping previously announced user features [ 792.480041][T17253] FAULT_INJECTION: forcing a failure. [ 792.480041][T17253] name failslab, interval 1, probability 0, space 0, times 0 [ 792.532542][T17253] CPU: 0 UID: 0 PID: 17253 Comm: syz.2.2606 Tainted: G U syzkaller #0 PREEMPT(full) [ 792.532571][T17253] Tainted: [U]=USER [ 792.532576][T17253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.532584][T17253] Call Trace: [ 792.532589][T17253] [ 792.532595][T17253] dump_stack_lvl+0x16c/0x1f0 [ 792.532619][T17253] should_fail_ex+0x512/0x640 [ 792.532639][T17253] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 792.532659][T17253] should_failslab+0xc2/0x120 [ 792.532678][T17253] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 792.532695][T17253] ? __alloc_skb+0x2b2/0x380 [ 792.532715][T17253] __alloc_skb+0x2b2/0x380 [ 792.532732][T17253] ? __pfx___alloc_skb+0x10/0x10 [ 792.532751][T17253] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 792.532770][T17253] ? __lock_acquire+0xb97/0x1ce0 [ 792.532791][T17253] netlink_alloc_large_skb+0x69/0x130 [ 792.532812][T17253] netlink_sendmsg+0x6a1/0xdd0 [ 792.532834][T17253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 792.532855][T17253] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 792.532874][T17253] ____sys_sendmsg+0xa98/0xc70 [ 792.532889][T17253] ? copy_msghdr_from_user+0x10a/0x160 [ 792.532908][T17253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 792.532930][T17253] ___sys_sendmsg+0x134/0x1d0 [ 792.532949][T17253] ? __pfx____sys_sendmsg+0x10/0x10 [ 792.532989][T17253] __sys_sendmsg+0x16d/0x220 [ 792.533007][T17253] ? __pfx___sys_sendmsg+0x10/0x10 [ 792.533037][T17253] do_syscall_64+0xcd/0x490 [ 792.533062][T17253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.533077][T17253] RIP: 0033:0x7f40e418ebe9 [ 792.533089][T17253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.533102][T17253] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 792.533116][T17253] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 792.533126][T17253] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 792.533135][T17253] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 792.533143][T17253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.533152][T17253] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 792.533170][T17253] [ 793.621977][T17280] : Can't lookup blockdev [ 793.676725][T17277] ovs_: entered promiscuous mode [ 793.761759][ T30] audit: type=1800 audit(2147483910.897:158): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2611" name="features" dev="configfs" ino=67577 res=0 errno=0 [ 794.461813][T17294] : Can't lookup blockdev [ 794.549021][ T30] audit: type=1800 audit(2147483911.687:159): pid=17300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2615" name="features" dev="configfs" ino=68629 res=0 errno=0 [ 795.549393][T17310] vhci_hcd: invalid port number 56 [ 795.554562][T17310] vhci_hcd: invalid port number 56 [ 795.619158][T17314] FAULT_INJECTION: forcing a failure. [ 795.619158][T17314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.635410][T17314] CPU: 0 UID: 0 PID: 17314 Comm: syz.0.2621 Tainted: G U syzkaller #0 PREEMPT(full) [ 795.635454][T17314] Tainted: [U]=USER [ 795.635463][T17314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.635478][T17314] Call Trace: [ 795.635488][T17314] [ 795.635499][T17314] dump_stack_lvl+0x16c/0x1f0 [ 795.635538][T17314] should_fail_ex+0x512/0x640 [ 795.635579][T17314] _copy_from_user+0x2e/0xd0 [ 795.635619][T17314] usbdev_ioctl+0x22d3/0x4070 [ 795.635658][T17314] ? __pfx_usbdev_ioctl+0x10/0x10 [ 795.635698][T17314] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 795.635738][T17314] ? do_vfs_ioctl+0x128/0x14f0 [ 795.635791][T17314] ? find_held_lock+0x2b/0x80 [ 795.635814][T17314] ? hook_file_ioctl_common+0x145/0x410 [ 795.635851][T17314] ? __fget_files+0x20e/0x3c0 [ 795.635881][T17314] ? __pfx_usbdev_ioctl+0x10/0x10 [ 795.635910][T17314] __x64_sys_ioctl+0x18e/0x210 [ 795.635945][T17314] do_syscall_64+0xcd/0x490 [ 795.635979][T17314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.636002][T17314] RIP: 0033:0x7f275df8ebe9 [ 795.636022][T17314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.636045][T17314] RSP: 002b:00007f275ee3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.636069][T17314] RAX: ffffffffffffffda RBX: 00007f275e1c5fa0 RCX: 00007f275df8ebe9 [ 795.636087][T17314] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 795.636103][T17314] RBP: 00007f275ee3f090 R08: 0000000000000000 R09: 0000000000000000 [ 795.636117][T17314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.636132][T17314] R13: 00007f275e1c6038 R14: 00007f275e1c5fa0 R15: 00007fff3552f038 [ 795.636165][T17314] [ 796.006818][T17321] vhci_hcd: default hub control req: 2309 v0014 i0005 l2044 [ 796.287902][T17328] : Can't lookup blockdev [ 796.313795][ T30] audit: type=1800 audit(2147483913.446:160): pid=17328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2625" name="features" dev="configfs" ino=68706 res=0 errno=0 [ 796.636947][T17339] openvswitch: ovs_: Dropping previously announced user features [ 796.905541][T17349] : Can't lookup blockdev [ 797.011295][ T30] audit: type=1800 audit(2147483914.136:161): pid=17352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2630" name="features" dev="configfs" ino=67830 res=0 errno=0 [ 797.554959][T17357] zswap: compressor not available [ 798.021676][T17378] : Can't lookup blockdev [ 798.086131][ T30] audit: type=1800 audit(2147483915.215:162): pid=17378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2637" name="features" dev="configfs" ino=68915 res=0 errno=0 [ 798.301855][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 798.430227][T17389] openvswitch: ovs_: Dropping previously announced user features [ 799.432005][T17412] : Can't lookup blockdev [ 799.542676][ T30] audit: type=1800 audit(2147483916.675:163): pid=17412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2646" name="features" dev="configfs" ino=69138 res=0 errno=0 [ 799.854619][T17420] : Can't lookup blockdev [ 799.909761][T17415] can: request_module (can-proto-0) failed. [ 799.956590][T17425] FAULT_INJECTION: forcing a failure. [ 799.956590][T17425] name failslab, interval 1, probability 0, space 0, times 0 [ 800.017165][T17425] CPU: 0 UID: 0 PID: 17425 Comm: syz.0.2649 Tainted: G U syzkaller #0 PREEMPT(full) [ 800.017212][T17425] Tainted: [U]=USER [ 800.017221][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.017237][T17425] Call Trace: [ 800.017246][T17425] [ 800.017258][T17425] dump_stack_lvl+0x16c/0x1f0 [ 800.017297][T17425] should_fail_ex+0x512/0x640 [ 800.017335][T17425] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 800.017363][T17425] should_failslab+0xc2/0x120 [ 800.017395][T17425] __kmalloc_cache_noprof+0x6a/0x3e0 [ 800.017420][T17425] ? allocate_file_region_entries+0x15b/0x620 [ 800.017450][T17425] ? allocate_file_region_entries+0x1a0/0x620 [ 800.017486][T17425] allocate_file_region_entries+0x1a0/0x620 [ 800.017523][T17425] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 800.017562][T17425] region_chg+0x85/0x140 [ 800.017585][T17425] __vma_reservation_common+0x43b/0x740 [ 800.017604][T17425] ? __pfx___vma_reservation_common+0x10/0x10 [ 800.017627][T17425] alloc_hugetlb_folio+0x946/0x1560 [ 800.017651][T17425] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 800.017670][T17425] ? _raw_spin_unlock+0x28/0x50 [ 800.017689][T17425] ? __filemap_get_folio+0x32b/0xc30 [ 800.017712][T17425] hugetlb_fault+0x1bce/0x2f40 [ 800.017729][T17425] ? __pfx_hugetlb_fault+0x10/0x10 [ 800.017751][T17425] ? find_vma+0xbf/0x140 [ 800.017768][T17425] ? __pfx_find_vma+0x10/0x10 [ 800.017797][T17425] handle_mm_fault+0xbfa/0xd10 [ 800.017813][T17425] ? __bpf_trace_exceptions+0x1/0x40 [ 800.017837][T17425] do_user_addr_fault+0x7a6/0x1370 [ 800.017860][T17425] ? rcu_is_watching+0x12/0xc0 [ 800.017879][T17425] exc_page_fault+0x5c/0xb0 [ 800.017898][T17425] asm_exc_page_fault+0x26/0x30 [ 800.017913][T17425] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 800.017929][T17425] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 800.017943][T17425] RSP: 0018:ffffc90004927950 EFLAGS: 00050246 [ 800.017955][T17425] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 800.017971][T17425] RDX: fffff52000924f43 RSI: 0000000000000000 RDI: ffffc90004927a10 [ 800.017986][T17425] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52000924f42 [ 800.018002][T17425] R10: ffffc90004927a17 R11: 0000000000000000 R12: 0000000000000000 [ 800.018017][T17425] R13: ffffc90004927a10 R14: ffffffff89610800 R15: ffff888034628000 [ 800.018035][T17425] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.018089][T17425] _copy_from_user+0x98/0xd0 [ 800.018131][T17425] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 800.018162][T17425] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 800.018186][T17425] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 800.018211][T17425] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.018233][T17425] ? __local_bh_enable_ip+0xa4/0x120 [ 800.018251][T17425] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.018271][T17425] sctp_getsockopt+0x124f/0x69b0 [ 800.018295][T17425] ? __pfx_sctp_getsockopt+0x10/0x10 [ 800.018324][T17425] ? __lock_acquire+0xb97/0x1ce0 [ 800.018352][T17425] ? find_held_lock+0x2b/0x80 [ 800.018365][T17425] ? __might_fault+0xe3/0x190 [ 800.018383][T17425] ? __might_fault+0xe3/0x190 [ 800.018397][T17425] ? __might_fault+0x13b/0x190 [ 800.018419][T17425] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 800.018440][T17425] do_sock_getsockopt+0x34d/0x440 [ 800.018464][T17425] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 800.018484][T17425] ? __fget_files+0x204/0x3c0 [ 800.018509][T17425] __sys_getsockopt+0x123/0x1b0 [ 800.018533][T17425] __x64_sys_getsockopt+0xbd/0x160 [ 800.018550][T17425] ? do_syscall_64+0x91/0x490 [ 800.018569][T17425] ? lockdep_hardirqs_on+0x7c/0x110 [ 800.018586][T17425] do_syscall_64+0xcd/0x490 [ 800.018606][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.018620][T17425] RIP: 0033:0x7f275df8ebe9 [ 800.018632][T17425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.018646][T17425] RSP: 002b:00007f275ee1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 800.018659][T17425] RAX: ffffffffffffffda RBX: 00007f275e1c6090 RCX: 00007f275df8ebe9 [ 800.018669][T17425] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 800.018678][T17425] RBP: 00007f275e011e19 R08: 0000200000000280 R09: 0000000000000000 [ 800.018687][T17425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.018696][T17425] R13: 00007f275e1c6128 R14: 00007f275e1c6090 R15: 00007fff3552f038 [ 800.018716][T17425] [ 800.484633][T17438] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 800.621730][T17441] FAULT_INJECTION: forcing a failure. [ 800.621730][T17441] name failslab, interval 1, probability 0, space 0, times 0 [ 800.636482][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.3.2655 Tainted: G U syzkaller #0 PREEMPT(full) [ 800.636508][T17441] Tainted: [U]=USER [ 800.636514][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 800.636523][T17441] Call Trace: [ 800.636528][T17441] [ 800.636534][T17441] dump_stack_lvl+0x16c/0x1f0 [ 800.636559][T17441] should_fail_ex+0x512/0x640 [ 800.636578][T17441] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 800.636596][T17441] should_failslab+0xc2/0x120 [ 800.636615][T17441] __kmalloc_cache_noprof+0x6a/0x3e0 [ 800.636631][T17441] ? snd_midi_event_new+0x6f/0x210 [ 800.636655][T17441] snd_midi_event_new+0x6f/0x210 [ 800.636675][T17441] snd_virmidi_output_open+0x106/0x670 [ 800.636707][T17441] open_substream+0x478/0x990 [ 800.636730][T17441] rawmidi_open_priv+0x543/0x6e0 [ 800.636749][T17441] snd_rawmidi_open+0x4cc/0xbf0 [ 800.636769][T17441] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 800.636786][T17441] ? __pfx_default_wake_function+0x10/0x10 [ 800.636803][T17441] ? kobject_get_unless_zero+0x156/0x1e0 [ 800.636824][T17441] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 800.636840][T17441] snd_open+0x22a/0x4c0 [ 800.636860][T17441] ? __pfx_snd_open+0x10/0x10 [ 800.636879][T17441] chrdev_open+0x231/0x6a0 [ 800.636896][T17441] ? __pfx_apparmor_file_open+0x10/0x10 [ 800.636912][T17441] ? __pfx_chrdev_open+0x10/0x10 [ 800.636930][T17441] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 800.636950][T17441] do_dentry_open+0x97f/0x1530 [ 800.636968][T17441] ? __pfx_chrdev_open+0x10/0x10 [ 800.636990][T17441] vfs_open+0x82/0x3f0 [ 800.637012][T17441] path_openat+0x1de4/0x2cb0 [ 800.637035][T17441] ? __pfx_path_openat+0x10/0x10 [ 800.637055][T17441] do_filp_open+0x20b/0x470 [ 800.637072][T17441] ? __pfx_do_filp_open+0x10/0x10 [ 800.637102][T17441] ? alloc_fd+0x471/0x7d0 [ 800.637122][T17441] do_sys_openat2+0x11b/0x1d0 [ 800.637141][T17441] ? __pfx_do_sys_openat2+0x10/0x10 [ 800.637169][T17441] __x64_sys_openat+0x174/0x210 [ 800.637189][T17441] ? __pfx___x64_sys_openat+0x10/0x10 [ 800.637220][T17441] do_syscall_64+0xcd/0x490 [ 800.637241][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.637256][T17441] RIP: 0033:0x7f10bd58ebe9 [ 800.637269][T17441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.637282][T17441] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.637297][T17441] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 800.637307][T17441] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 800.637317][T17441] RBP: 00007f10bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 800.637326][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.637335][T17441] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 800.637354][T17441] [ 801.024997][T17445] openvswitch: ovs_: Dropping previously announced user features [ 802.024519][T17465] : Can't lookup blockdev [ 802.043850][ T30] audit: type=1800 audit(2147483919.173:164): pid=17465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2659" name="features" dev="configfs" ino=67965 res=0 errno=0 [ 802.849931][T17485] : Can't lookup blockdev [ 802.936954][T17484] FAULT_INJECTION: forcing a failure. [ 802.936954][T17484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.986362][ T30] audit: type=1800 audit(2147483920.083:165): pid=17486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2665" name="features" dev="configfs" ino=69321 res=0 errno=0 [ 803.029713][T17484] CPU: 0 UID: 0 PID: 17484 Comm: syz.2.2664 Tainted: G U syzkaller #0 PREEMPT(full) [ 803.029758][T17484] Tainted: [U]=USER [ 803.029767][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 803.029782][T17484] Call Trace: [ 803.029798][T17484] [ 803.029808][T17484] dump_stack_lvl+0x16c/0x1f0 [ 803.029847][T17484] should_fail_ex+0x512/0x640 [ 803.029887][T17484] _copy_from_user+0x2e/0xd0 [ 803.029926][T17484] vt_ioctl+0x10ab/0x30a0 [ 803.029951][T17484] ? lockdep_hardirqs_on+0x7c/0x110 [ 803.029988][T17484] ? __pfx_vt_ioctl+0x10/0x10 [ 803.030015][T17484] ? tomoyo_path_number_perm+0x295/0x580 [ 803.030052][T17484] ? tomoyo_path_number_perm+0x18d/0x580 [ 803.030086][T17484] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 803.030120][T17484] ? find_held_lock+0x2b/0x80 [ 803.030147][T17484] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 803.030193][T17484] ? tty_jobctrl_ioctl+0x152/0xe00 [ 803.030228][T17484] ? __pfx_vt_ioctl+0x10/0x10 [ 803.030251][T17484] tty_ioctl+0x661/0x1680 [ 803.030286][T17484] ? __pfx_tty_ioctl+0x10/0x10 [ 803.030329][T17484] ? find_held_lock+0x2b/0x80 [ 803.030353][T17484] ? hook_file_ioctl_common+0x145/0x410 [ 803.030392][T17484] ? __fget_files+0x20e/0x3c0 [ 803.030423][T17484] ? __pfx_tty_ioctl+0x10/0x10 [ 803.030456][T17484] __x64_sys_ioctl+0x18e/0x210 [ 803.030495][T17484] do_syscall_64+0xcd/0x490 [ 803.030531][T17484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.030557][T17484] RIP: 0033:0x7f40e418ebe9 [ 803.030578][T17484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 803.030602][T17484] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.030627][T17484] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 803.030644][T17484] RDX: 0000000000000001 RSI: 0000000000004b66 RDI: 0000000000000003 [ 803.030668][T17484] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 803.030684][T17484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.030700][T17484] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 803.030738][T17484] [ 803.316760][T17497] openvswitch: ovs_: Dropping previously announced user features [ 804.899218][T17527] : Can't lookup blockdev [ 804.907351][ T30] audit: type=1800 audit(2147483922.042:166): pid=17527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2675" name="features" dev="configfs" ino=68239 res=0 errno=0 [ 805.942745][T17551] nbd: couldn't find device at index 137 [ 805.999683][T17550] : Can't lookup blockdev [ 806.105428][ T30] audit: type=1800 audit(2147483923.231:167): pid=17552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2679" name="features" dev="configfs" ino=68287 res=0 errno=0 [ 806.131964][T17549] openvswitch: ovs_: Dropping previously announced user features [ 807.413362][T17574] : Can't lookup blockdev [ 807.421177][ T30] audit: type=1800 audit(2147483924.541:168): pid=17574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2687" name="features" dev="configfs" ino=68327 res=0 errno=0 [ 808.628699][T17594] : Can't lookup blockdev [ 808.721761][ T30] audit: type=1800 audit(6442451221.847:169): pid=17599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2693" name="features" dev="configfs" ino=68349 res=0 errno=0 [ 808.914394][T17603] openvswitch: ovs_: Dropping previously announced user features [ 808.970863][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.977421][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.740087][T17623] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 809.886918][T17628] : Can't lookup blockdev [ 809.917697][ T30] audit: type=1800 audit(6442451223.027:170): pid=17628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2701" name="features" dev="configfs" ino=68400 res=0 errno=0 [ 810.348078][T17633] FAULT_INJECTION: forcing a failure. [ 810.348078][T17633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.405162][T17633] CPU: 1 UID: 0 PID: 17633 Comm: syz.2.2703 Tainted: G U syzkaller #0 PREEMPT(full) [ 810.405206][T17633] Tainted: [U]=USER [ 810.405214][T17633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.405229][T17633] Call Trace: [ 810.405239][T17633] [ 810.405250][T17633] dump_stack_lvl+0x16c/0x1f0 [ 810.405288][T17633] should_fail_ex+0x512/0x640 [ 810.405328][T17633] should_fail_alloc_page+0xe7/0x130 [ 810.405364][T17633] prepare_alloc_pages+0x3c2/0x610 [ 810.405399][T17633] ? unwind_get_return_address+0x59/0xa0 [ 810.405432][T17633] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 810.405475][T17633] ? stack_trace_save+0x8e/0xc0 [ 810.405503][T17633] ? __pfx_stack_trace_save+0x10/0x10 [ 810.405532][T17633] ? stack_depot_save_flags+0x29/0x9c0 [ 810.405575][T17633] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 810.405629][T17633] ? __lock_acquire+0xb97/0x1ce0 [ 810.405659][T17633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.405698][T17633] ? policy_nodemask+0xea/0x4e0 [ 810.405734][T17633] alloc_pages_mpol+0x1fb/0x550 [ 810.405768][T17633] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 810.405801][T17633] ? find_held_lock+0x2b/0x80 [ 810.405832][T17633] alloc_pages_noprof+0x131/0x390 [ 810.405866][T17633] get_free_pages_noprof+0x10/0xb0 [ 810.405900][T17633] do_proc_control+0x211/0x10a0 [ 810.405935][T17633] ? __might_fault+0x13b/0x190 [ 810.405965][T17633] ? __pfx_do_proc_control+0x10/0x10 [ 810.406007][T17633] usbdev_ioctl+0x2300/0x4070 [ 810.406044][T17633] ? __pfx_usbdev_ioctl+0x10/0x10 [ 810.406083][T17633] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.406120][T17633] ? do_vfs_ioctl+0x128/0x14f0 [ 810.406173][T17633] ? find_held_lock+0x2b/0x80 [ 810.406197][T17633] ? hook_file_ioctl_common+0x145/0x410 [ 810.406238][T17633] ? __fget_files+0x20e/0x3c0 [ 810.406270][T17633] ? __pfx_usbdev_ioctl+0x10/0x10 [ 810.406302][T17633] __x64_sys_ioctl+0x18e/0x210 [ 810.406338][T17633] do_syscall_64+0xcd/0x490 [ 810.406372][T17633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.406397][T17633] RIP: 0033:0x7f40e418ebe9 [ 810.406419][T17633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.406442][T17633] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 810.406466][T17633] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 810.406485][T17633] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 810.406502][T17633] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 810.406518][T17633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.406547][T17633] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 810.406589][T17633] [ 810.681945][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.817593][T17640] vhci_hcd: invalid port number 52 [ 810.841856][T17640] vhci_hcd: default hub control req: 3305 v0014 i0034 l2044 [ 810.986513][T17645] : Can't lookup blockdev [ 811.086337][ T30] audit: type=1800 audit(6442451224.217:171): pid=17649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2709" name="features" dev="configfs" ino=69776 res=0 errno=0 [ 811.190001][T17643] openvswitch: ovs_: Dropping previously announced user features [ 811.570421][T17657] zswap: compressor not available [ 811.590968][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 811.987601][T17686] : Can't lookup blockdev [ 812.041769][ T30] audit: type=1800 audit(6442451225.167:172): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2718" name="features" dev="configfs" ino=69893 res=0 errno=0 [ 813.109899][ T30] audit: type=1800 audit(6442451226.237:173): pid=17696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2723" name="lu_gp_id" dev="configfs" ino=69911 res=0 errno=0 [ 813.259215][T15881] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 813.762316][T17710] openvswitch: ovs_: Dropping previously announced user features [ 814.224587][T17723] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 814.368868][T17726] : Can't lookup blockdev [ 814.502949][ T30] audit: type=1800 audit(6442451227.637:174): pid=17726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2729" name="features" dev="configfs" ino=68564 res=0 errno=0 [ 814.752252][T17741] : Can't lookup blockdev [ 815.717244][T17759] FAULT_INJECTION: forcing a failure. [ 815.717244][T17759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 815.732598][T17759] CPU: 1 UID: 0 PID: 17759 Comm: syz.2.2739 Tainted: G U syzkaller #0 PREEMPT(full) [ 815.732641][T17759] Tainted: [U]=USER [ 815.732650][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 815.732665][T17759] Call Trace: [ 815.732673][T17759] [ 815.732683][T17759] dump_stack_lvl+0x16c/0x1f0 [ 815.732721][T17759] should_fail_ex+0x512/0x640 [ 815.732760][T17759] _copy_to_user+0x32/0xd0 [ 815.732788][T17759] con_get_unimap+0x2de/0x460 [ 815.732836][T17759] vt_ioctl+0x12e2/0x30a0 [ 815.732859][T17759] ? lockdep_hardirqs_on+0x7c/0x110 [ 815.732895][T17759] ? __pfx_vt_ioctl+0x10/0x10 [ 815.732922][T17759] ? tomoyo_path_number_perm+0x295/0x580 [ 815.732958][T17759] ? tomoyo_path_number_perm+0x18d/0x580 [ 815.732992][T17759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 815.733025][T17759] ? find_held_lock+0x2b/0x80 [ 815.733050][T17759] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.733087][T17759] ? tty_jobctrl_ioctl+0x152/0xe00 [ 815.733116][T17759] ? __pfx_vt_ioctl+0x10/0x10 [ 815.733139][T17759] tty_ioctl+0x661/0x1680 [ 815.733173][T17759] ? __pfx_tty_ioctl+0x10/0x10 [ 815.733216][T17759] ? find_held_lock+0x2b/0x80 [ 815.733241][T17759] ? hook_file_ioctl_common+0x145/0x410 [ 815.733281][T17759] ? __fget_files+0x20e/0x3c0 [ 815.733320][T17759] ? __pfx_tty_ioctl+0x10/0x10 [ 815.733353][T17759] __x64_sys_ioctl+0x18e/0x210 [ 815.733394][T17759] do_syscall_64+0xcd/0x490 [ 815.733430][T17759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.733457][T17759] RIP: 0033:0x7f40e418ebe9 [ 815.733478][T17759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.733503][T17759] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.733527][T17759] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 815.733545][T17759] RDX: 0000000000000001 RSI: 0000000000004b66 RDI: 0000000000000003 [ 815.733561][T17759] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 815.733577][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.733593][T17759] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 815.733628][T17759] [ 816.180004][T17768] openvswitch: ovs_: Dropping previously announced user features [ 816.890230][T17785] : Can't lookup blockdev [ 816.998301][ T30] audit: type=1800 audit(6442451230.127:175): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2744" name="features" dev="configfs" ino=70268 res=0 errno=0 [ 817.515421][T17801] : Can't lookup blockdev [ 818.949846][T17826] FAULT_INJECTION: forcing a failure. [ 818.949846][T17826] name failslab, interval 1, probability 0, space 0, times 0 [ 818.964779][T17822] openvswitch: ovs_: Dropping previously announced user features [ 818.966699][T17826] CPU: 0 UID: 0 PID: 17826 Comm: syz.3.2756 Tainted: G U syzkaller #0 PREEMPT(full) [ 818.966740][T17826] Tainted: [U]=USER [ 818.966749][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.966766][T17826] Call Trace: [ 818.966776][T17826] [ 818.966787][T17826] dump_stack_lvl+0x16c/0x1f0 [ 818.966828][T17826] should_fail_ex+0x512/0x640 [ 818.966871][T17826] ? __kmalloc_noprof+0xbf/0x510 [ 818.966904][T17826] ? __register_sysctl_table+0xb3/0x1900 [ 818.966941][T17826] should_failslab+0xc2/0x120 [ 818.966976][T17826] __kmalloc_noprof+0xd2/0x510 [ 818.967016][T17826] __register_sysctl_table+0xb3/0x1900 [ 818.967053][T17826] ? is_module_address+0x5f/0xf0 [ 818.967094][T17826] ? __pfx___register_sysctl_table+0x10/0x10 [ 818.967130][T17826] ? is_module_address+0x69/0xf0 [ 818.967164][T17826] ? register_net_sysctl_sz+0x228/0x3e0 [ 818.967203][T17826] ? __asan_memcpy+0x3c/0x60 [ 818.967232][T17826] devinet_init_net+0x378/0x910 [ 818.967274][T17826] ? __pfx_devinet_init_net+0x10/0x10 [ 818.967312][T17826] ops_init+0x1e2/0x5f0 [ 818.967352][T17826] setup_net+0x10f/0x380 [ 818.967385][T17826] ? lockdep_init_map_type+0x5c/0x280 [ 818.967422][T17826] ? __pfx_setup_net+0x10/0x10 [ 818.967460][T17826] ? debug_mutex_init+0x37/0x70 [ 818.967490][T17826] copy_net_ns+0x2a6/0x5f0 [ 818.967532][T17826] create_new_namespaces+0x3ea/0xa90 [ 818.967571][T17826] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 818.967604][T17826] ksys_unshare+0x45b/0xa40 [ 818.967639][T17826] ? __pfx_ksys_unshare+0x10/0x10 [ 818.967675][T17826] ? xfd_validate_state+0x61/0x180 [ 818.967722][T17826] __x64_sys_unshare+0x31/0x40 [ 818.967755][T17826] do_syscall_64+0xcd/0x490 [ 818.967792][T17826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.967819][T17826] RIP: 0033:0x7f10bd58ebe9 [ 818.967849][T17826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.967875][T17826] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 818.967901][T17826] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 818.967920][T17826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 818.967938][T17826] RBP: 00007f10bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 818.967955][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.967971][T17826] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 818.968006][T17826] [ 819.274588][T17836] FAULT_INJECTION: forcing a failure. [ 819.274588][T17836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.298126][T17836] CPU: 1 UID: 0 PID: 17836 Comm: syz.2.2757 Tainted: G U syzkaller #0 PREEMPT(full) [ 819.298166][T17836] Tainted: [U]=USER [ 819.298175][T17836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.298191][T17836] Call Trace: [ 819.298200][T17836] [ 819.298210][T17836] dump_stack_lvl+0x16c/0x1f0 [ 819.298247][T17836] should_fail_ex+0x512/0x640 [ 819.298286][T17836] _copy_from_iter+0x29f/0x1720 [ 819.298329][T17836] ? __alloc_skb+0x200/0x380 [ 819.298361][T17836] ? __pfx__copy_from_iter+0x10/0x10 [ 819.298401][T17836] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 819.298434][T17836] ? __lock_acquire+0xb97/0x1ce0 [ 819.298475][T17836] netlink_sendmsg+0x829/0xdd0 [ 819.298516][T17836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 819.298555][T17836] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 819.298589][T17836] ____sys_sendmsg+0xa98/0xc70 [ 819.298616][T17836] ? copy_msghdr_from_user+0x10a/0x160 [ 819.298648][T17836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 819.298690][T17836] ___sys_sendmsg+0x134/0x1d0 [ 819.298726][T17836] ? __pfx____sys_sendmsg+0x10/0x10 [ 819.298810][T17836] __sys_sendmsg+0x16d/0x220 [ 819.298844][T17836] ? __pfx___sys_sendmsg+0x10/0x10 [ 819.298900][T17836] do_syscall_64+0xcd/0x490 [ 819.298936][T17836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.298962][T17836] RIP: 0033:0x7f40e418ebe9 [ 819.298983][T17836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.299006][T17836] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.299028][T17836] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 819.299046][T17836] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 819.299061][T17836] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 819.299077][T17836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.299093][T17836] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 819.299131][T17836] [ 819.820981][T17842] : Can't lookup blockdev [ 819.924498][ T30] audit: type=1800 audit(6442451233.057:176): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2758" name="features" dev="configfs" ino=70835 res=0 errno=0 [ 820.023269][T17851] : Can't lookup blockdev [ 820.787332][T17859] FAULT_INJECTION: forcing a failure. [ 820.787332][T17859] name failslab, interval 1, probability 0, space 0, times 0 [ 820.800602][T17859] CPU: 1 UID: 0 PID: 17859 Comm: syz.3.2764 Tainted: G U syzkaller #0 PREEMPT(full) [ 820.800637][T17859] Tainted: [U]=USER [ 820.800642][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.800652][T17859] Call Trace: [ 820.800658][T17859] [ 820.800665][T17859] dump_stack_lvl+0x116/0x1f0 [ 820.800690][T17859] should_fail_ex+0x512/0x640 [ 820.800713][T17859] should_failslab+0xc2/0x120 [ 820.800733][T17859] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 820.800751][T17859] ? __send_signal_locked+0x159/0x12c0 [ 820.800773][T17859] ? sig_get_ucounts+0x1c0/0x5b0 [ 820.800794][T17859] __send_signal_locked+0x159/0x12c0 [ 820.800819][T17859] group_send_sig_info+0x2a4/0x300 [ 820.800837][T17859] ? __pfx_group_send_sig_info+0x10/0x10 [ 820.800858][T17859] ? kill_pid_info_type+0x1a/0x2a0 [ 820.800874][T17859] kill_pid_info_type+0x92/0x2a0 [ 820.800893][T17859] kill_proc_info+0x6f/0x1b0 [ 820.800910][T17859] kill_something_info+0x2a2/0x310 [ 820.800926][T17859] ? __task_pid_nr_ns+0x186/0x500 [ 820.800948][T17859] __x64_sys_kill+0xd7/0x140 [ 820.800965][T17859] ? __pfx___x64_sys_kill+0x10/0x10 [ 820.800988][T17859] ? rcu_is_watching+0x12/0xc0 [ 820.801004][T17859] do_syscall_64+0xcd/0x490 [ 820.801024][T17859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.801039][T17859] RIP: 0033:0x7f10bd58ebe9 [ 820.801052][T17859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.801066][T17859] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 820.801080][T17859] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 820.801090][T17859] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000155 [ 820.801099][T17859] RBP: 00007f10bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.801108][T17859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.801117][T17859] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 820.801136][T17859] [ 821.755659][T17876] openvswitch: ovs_: Dropping previously announced user features [ 822.225807][T17889] : Can't lookup blockdev [ 822.463827][ T30] audit: type=1800 audit(6442451235.587:177): pid=17889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2772" name="features" dev="configfs" ino=70897 res=0 errno=0 [ 822.504931][T17894] : Can't lookup blockdev [ 822.533955][T17895] vhci_hcd: invalid port number 56 [ 822.546741][T17895] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 823.010202][T17901] FAULT_INJECTION: forcing a failure. [ 823.010202][T17901] name failslab, interval 1, probability 0, space 0, times 0 [ 823.062213][T17901] CPU: 0 UID: 0 PID: 17901 Comm: syz.2.2776 Tainted: G U syzkaller #0 PREEMPT(full) [ 823.062238][T17901] Tainted: [U]=USER [ 823.062243][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 823.062253][T17901] Call Trace: [ 823.062258][T17901] [ 823.062265][T17901] dump_stack_lvl+0x16c/0x1f0 [ 823.062288][T17901] should_fail_ex+0x512/0x640 [ 823.062308][T17901] ? fs_reclaim_acquire+0xae/0x150 [ 823.062330][T17901] ? usb_alloc_urb+0x66/0xa0 [ 823.062345][T17901] should_failslab+0xc2/0x120 [ 823.062364][T17901] __kmalloc_noprof+0xd2/0x510 [ 823.062388][T17901] usb_alloc_urb+0x66/0xa0 [ 823.062404][T17901] do_proc_control+0x2ef/0x10a0 [ 823.062423][T17901] ? __might_fault+0x13b/0x190 [ 823.062440][T17901] ? __pfx_do_proc_control+0x10/0x10 [ 823.062463][T17901] usbdev_ioctl+0x2300/0x4070 [ 823.062483][T17901] ? __pfx_usbdev_ioctl+0x10/0x10 [ 823.062505][T17901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.062527][T17901] ? do_vfs_ioctl+0x128/0x14f0 [ 823.062557][T17901] ? find_held_lock+0x2b/0x80 [ 823.062571][T17901] ? hook_file_ioctl_common+0x145/0x410 [ 823.062594][T17901] ? __fget_files+0x20e/0x3c0 [ 823.062612][T17901] ? __pfx_usbdev_ioctl+0x10/0x10 [ 823.062636][T17901] __x64_sys_ioctl+0x18e/0x210 [ 823.062659][T17901] do_syscall_64+0xcd/0x490 [ 823.062680][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.062694][T17901] RIP: 0033:0x7f40e418ebe9 [ 823.062706][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.062720][T17901] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.062734][T17901] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 823.062744][T17901] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 823.062753][T17901] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 823.062761][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.062770][T17901] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 823.062788][T17901] [ 823.282135][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.403846][T17934] openvswitch: ovs_: Dropping previously announced user features [ 824.768045][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2785'. [ 825.331773][T17954] : Can't lookup blockdev [ 825.357554][ T30] audit: type=1800 audit(6442451238.487:178): pid=17954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2788" name="features" dev="configfs" ino=71008 res=0 errno=0 [ 825.597186][T17943] zswap: compressor not available [ 825.606099][T17958] : Can't lookup blockdev [ 826.711699][T17966] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 827.658236][T17995] openvswitch: ovs_: Dropping previously announced user features [ 827.674877][T17999] FAULT_INJECTION: forcing a failure. [ 827.674877][T17999] name failslab, interval 1, probability 0, space 0, times 0 [ 827.736361][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.0.2799 Tainted: G U I syzkaller #0 PREEMPT(full) [ 827.736409][T17999] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 827.736420][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 827.736437][T17999] Call Trace: [ 827.736447][T17999] [ 827.736458][T17999] dump_stack_lvl+0x16c/0x1f0 [ 827.736500][T17999] should_fail_ex+0x512/0x640 [ 827.736536][T17999] ? fs_reclaim_acquire+0xae/0x150 [ 827.736579][T17999] should_failslab+0xc2/0x120 [ 827.736615][T17999] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 827.736650][T17999] ? security_inode_alloc+0x3b/0x2b0 [ 827.736686][T17999] security_inode_alloc+0x3b/0x2b0 [ 827.736719][T17999] inode_init_always_gfp+0xce4/0x1030 [ 827.736755][T17999] alloc_inode+0x86/0x240 [ 827.736793][T17999] sock_alloc+0x40/0x280 [ 827.736832][T17999] __sock_create+0xc1/0x8d0 [ 827.736866][T17999] __sys_socket+0x14d/0x260 [ 827.736895][T17999] ? __pfx___sys_socket+0x10/0x10 [ 827.736923][T17999] ? xfd_validate_state+0x61/0x180 [ 827.736968][T17999] __x64_sys_socket+0x72/0xb0 [ 827.736995][T17999] ? lockdep_hardirqs_on+0x7c/0x110 [ 827.737029][T17999] do_syscall_64+0xcd/0x490 [ 827.737067][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.737095][T17999] RIP: 0033:0x7f275df8ebe9 [ 827.737121][T17999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.737149][T17999] RSP: 002b:00007f275ee1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 827.737176][T17999] RAX: ffffffffffffffda RBX: 00007f275e1c6090 RCX: 00007f275df8ebe9 [ 827.737202][T17999] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 000000000000001d [ 827.737220][T17999] RBP: 00007f275e011e19 R08: 0000000000000000 R09: 0000000000000000 [ 827.737238][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.737256][T17999] R13: 00007f275e1c6128 R14: 00007f275e1c6090 R15: 00007fff3552f038 [ 827.737290][T17999] [ 827.739361][T17999] socket: no more sockets [ 828.285499][T18008] : Can't lookup blockdev [ 828.294194][ T30] audit: type=1800 audit(6442451241.427:179): pid=18008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2800" name="features" dev="configfs" ino=71088 res=0 errno=0 [ 828.555544][T18014] : Can't lookup blockdev [ 828.601870][T18016] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2803'. [ 830.079648][T18045] FAULT_INJECTION: forcing a failure. [ 830.079648][T18045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.097278][T18045] CPU: 1 UID: 0 PID: 18045 Comm: syz.0.2810 Tainted: G U I syzkaller #0 PREEMPT(full) [ 830.097320][T18045] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 830.097330][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.097342][T18045] Call Trace: [ 830.097350][T18045] [ 830.097359][T18045] dump_stack_lvl+0x16c/0x1f0 [ 830.097394][T18045] should_fail_ex+0x512/0x640 [ 830.097432][T18045] _copy_to_user+0x32/0xd0 [ 830.097459][T18045] simple_read_from_buffer+0xcb/0x170 [ 830.097486][T18045] proc_fail_nth_read+0x197/0x240 [ 830.097513][T18045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.097543][T18045] ? rw_verify_area+0xcf/0x6c0 [ 830.097566][T18045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.097592][T18045] vfs_read+0x1e4/0xcf0 [ 830.097626][T18045] ? __pfx___mutex_lock+0x10/0x10 [ 830.097659][T18045] ? __pfx_vfs_read+0x10/0x10 [ 830.097696][T18045] ? __fget_files+0x20e/0x3c0 [ 830.097732][T18045] ksys_read+0x12a/0x250 [ 830.097759][T18045] ? __pfx_ksys_read+0x10/0x10 [ 830.097785][T18045] ? fput+0x9b/0xd0 [ 830.097820][T18045] do_syscall_64+0xcd/0x490 [ 830.097853][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.097878][T18045] RIP: 0033:0x7f275df8d5fc [ 830.097898][T18045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 830.097921][T18045] RSP: 002b:00007f275ee3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.097944][T18045] RAX: ffffffffffffffda RBX: 00007f275e1c5fa0 RCX: 00007f275df8d5fc [ 830.097970][T18045] RDX: 000000000000000f RSI: 00007f275ee3f0a0 RDI: 0000000000000004 [ 830.097986][T18045] RBP: 00007f275ee3f090 R08: 0000000000000000 R09: 0000000000000000 [ 830.098000][T18045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.098015][T18045] R13: 00007f275e1c6038 R14: 00007f275e1c5fa0 R15: 00007fff3552f038 [ 830.098050][T18045] [ 830.576233][T18055] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 830.621435][T18051] openvswitch: ovs_: Dropping previously announced user features [ 830.720411][T18058] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 831.340214][T18061] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 831.547232][T18071] : Can't lookup blockdev [ 831.576473][ T30] audit: type=1800 audit(6442451244.707:180): pid=18071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2816" name="features" dev="configfs" ino=72327 res=0 errno=0 [ 831.619628][T18073] : Can't lookup blockdev [ 832.768296][T18090] random: crng reseeded on system resumption [ 832.821671][T18080] zswap: compressor not available [ 833.429334][T18107] zswap: compressor not available [ 833.632957][T18117] FAULT_INJECTION: forcing a failure. [ 833.632957][T18117] name failslab, interval 1, probability 0, space 0, times 0 [ 833.646081][T18117] CPU: 1 UID: 0 PID: 18117 Comm: syz.3.2827 Tainted: G U I syzkaller #0 PREEMPT(full) [ 833.646125][T18117] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 833.646135][T18117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.646150][T18117] Call Trace: [ 833.646160][T18117] [ 833.646170][T18117] dump_stack_lvl+0x16c/0x1f0 [ 833.646209][T18117] should_fail_ex+0x512/0x640 [ 833.646248][T18117] should_failslab+0xc2/0x120 [ 833.646282][T18117] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 833.646312][T18117] ? skb_clone+0x190/0x3f0 [ 833.646349][T18117] skb_clone+0x190/0x3f0 [ 833.646380][T18117] netlink_deliver_tap+0xabd/0xd30 [ 833.646417][T18117] netlink_unicast+0x64c/0x870 [ 833.646468][T18117] ? __pfx_netlink_unicast+0x10/0x10 [ 833.646503][T18117] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 833.646536][T18117] ? __lock_acquire+0xb97/0x1ce0 [ 833.646580][T18117] netlink_sendmsg+0x8d1/0xdd0 [ 833.646621][T18117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.646661][T18117] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 833.646696][T18117] ____sys_sendmsg+0xa98/0xc70 [ 833.646723][T18117] ? copy_msghdr_from_user+0x10a/0x160 [ 833.646757][T18117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.646801][T18117] ___sys_sendmsg+0x134/0x1d0 [ 833.646837][T18117] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.646916][T18117] __sys_sendmsg+0x16d/0x220 [ 833.646951][T18117] ? __pfx___sys_sendmsg+0x10/0x10 [ 833.647013][T18117] do_syscall_64+0xcd/0x490 [ 833.647049][T18117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.647076][T18117] RIP: 0033:0x7f10bd58ebe9 [ 833.647098][T18117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.647122][T18117] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.647144][T18117] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 833.647160][T18117] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003 [ 833.647175][T18117] RBP: 00007f10be430090 R08: 0000000000000000 R09: 0000000000000000 [ 833.647190][T18117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.647206][T18117] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 833.647242][T18117] [ 833.876184][ C1] vkms_vblank_simulate: vblank timer overrun [ 834.026447][T18115] openvswitch: ovs_: Dropping previously announced user features [ 834.356087][T18128] : Can't lookup blockdev [ 834.373944][ T30] audit: type=1800 audit(6442451247.497:181): pid=18128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2830" name="features" dev="configfs" ino=71326 res=0 errno=0 [ 834.410626][T18131] : Can't lookup blockdev [ 836.649291][T11377] Bluetooth: hci4: command 0x0406 tx timeout [ 836.812411][T18179] vhci_hcd: invalid port number 56 [ 836.855211][T18179] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 837.378489][T18191] openvswitch: ovs_: Dropping previously announced user features [ 837.778904][T18199] : Can't lookup blockdev [ 837.871783][ T30] audit: type=1800 audit(6442451250.997:182): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2845" name="features" dev="configfs" ino=72654 res=0 errno=0 [ 837.892424][ C1] vkms_vblank_simulate: vblank timer overrun [ 838.084684][T18205] : Can't lookup blockdev [ 838.106545][ T30] audit: type=1800 audit(6442451251.237:183): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2846" name="features" dev="configfs" ino=71412 res=0 errno=0 [ 838.358767][T18209] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2849'. [ 838.399053][T18212] FAULT_INJECTION: forcing a failure. [ 838.399053][T18212] name failslab, interval 1, probability 0, space 0, times 0 [ 838.427660][T18212] CPU: 1 UID: 0 PID: 18212 Comm: syz.2.2848 Tainted: G U I syzkaller #0 PREEMPT(full) [ 838.427686][T18212] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 838.427692][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 838.427701][T18212] Call Trace: [ 838.427707][T18212] [ 838.427713][T18212] dump_stack_lvl+0x16c/0x1f0 [ 838.427745][T18212] should_fail_ex+0x512/0x640 [ 838.427765][T18212] ? fs_reclaim_acquire+0xae/0x150 [ 838.427788][T18212] should_failslab+0xc2/0x120 [ 838.427806][T18212] __kmalloc_cache_noprof+0x6a/0x3e0 [ 838.427822][T18212] ? __asan_memset+0x23/0x50 [ 838.427834][T18212] ? do_proc_control+0x335/0x10a0 [ 838.427852][T18212] ? usb_init_urb+0x38/0x130 [ 838.427870][T18212] do_proc_control+0x335/0x10a0 [ 838.427888][T18212] ? __might_fault+0x13b/0x190 [ 838.427905][T18212] ? __pfx_do_proc_control+0x10/0x10 [ 838.427927][T18212] usbdev_ioctl+0x2300/0x4070 [ 838.427953][T18212] ? __pfx_usbdev_ioctl+0x10/0x10 [ 838.427974][T18212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 838.427996][T18212] ? do_vfs_ioctl+0x128/0x14f0 [ 838.428025][T18212] ? find_held_lock+0x2b/0x80 [ 838.428039][T18212] ? hook_file_ioctl_common+0x145/0x410 [ 838.428063][T18212] ? __fget_files+0x20e/0x3c0 [ 838.428081][T18212] ? __pfx_usbdev_ioctl+0x10/0x10 [ 838.428098][T18212] __x64_sys_ioctl+0x18e/0x210 [ 838.428121][T18212] do_syscall_64+0xcd/0x490 [ 838.428141][T18212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.428156][T18212] RIP: 0033:0x7f40e418ebe9 [ 838.428169][T18212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.428183][T18212] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 838.428197][T18212] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 838.428207][T18212] RDX: 0000200000000100 RSI: 00000000c0185500 RDI: 0000000000000003 [ 838.428216][T18212] RBP: 00007f40e50f0090 R08: 0000000000000000 R09: 0000000000000000 [ 838.428225][T18212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.428233][T18212] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 838.428252][T18212] [ 838.428605][T18213] vhci_hcd: invalid port number 56 [ 838.722585][T18213] vhci_hcd: invalid port number 56 [ 839.064514][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2854'. [ 839.141005][T18236] openvswitch: netlink: Key type 133 is out of range max 32 [ 839.479654][T18243] : Can't lookup blockdev [ 839.553603][ T30] audit: type=1800 audit(6442451252.677:184): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2857" name="features" dev="configfs" ino=72749 res=0 errno=0 [ 839.711945][T18240] zswap: compressor lY not available [ 840.176734][ T30] audit: type=1800 audit(6442451253.307:185): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2859" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 840.234086][T18249] openvswitch: ovs_: Dropping previously announced user features [ 840.419277][T18257] : Can't lookup blockdev [ 840.441091][ T30] audit: type=1804 audit(6442451253.567:186): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2861" name=2F6E6577726F6F742F3132312F22050820 dev="tmpfs" ino=659 res=1 errno=0 [ 840.552255][ T30] audit: type=1800 audit(6442451253.567:187): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2861" name=22050820 dev="tmpfs" ino=659 res=0 errno=0 [ 840.573452][ T30] audit: type=1800 audit(6442451253.607:188): pid=18257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2860" name="features" dev="configfs" ino=72782 res=0 errno=0 [ 840.761563][T18264] vhci_hcd: invalid port number 69 [ 840.811819][T18264] vhci_hcd: default hub control req: 290c v0009 i0045 l1012 [ 841.971150][T18295] FAULT_INJECTION: forcing a failure. [ 841.971150][T18295] name failslab, interval 1, probability 0, space 0, times 0 [ 841.984196][T18295] CPU: 1 UID: 0 PID: 18295 Comm: syz.2.2867 Tainted: G U I syzkaller #0 PREEMPT(full) [ 841.984241][T18295] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 841.984252][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 841.984268][T18295] Call Trace: [ 841.984277][T18295] [ 841.984286][T18295] dump_stack_lvl+0x16c/0x1f0 [ 841.984320][T18295] should_fail_ex+0x512/0x640 [ 841.984351][T18295] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 841.984381][T18295] should_failslab+0xc2/0x120 [ 841.984414][T18295] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 841.984444][T18295] ? getname_flags.part.0+0x4c/0x550 [ 841.984486][T18295] getname_flags.part.0+0x4c/0x550 [ 841.984527][T18295] getname_flags+0x93/0xf0 [ 841.984555][T18295] do_sys_openat2+0xb8/0x1d0 [ 841.984592][T18295] ? __pfx_do_sys_openat2+0x10/0x10 [ 841.984653][T18295] __x64_sys_openat+0x174/0x210 [ 841.984691][T18295] ? __pfx___x64_sys_openat+0x10/0x10 [ 841.984741][T18295] do_syscall_64+0xcd/0x490 [ 841.984779][T18295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.984805][T18295] RIP: 0033:0x7f40e418ebe9 [ 841.984826][T18295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.984850][T18295] RSP: 002b:00007f40e50f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 841.984875][T18295] RAX: ffffffffffffffda RBX: 00007f40e43c5fa0 RCX: 00007f40e418ebe9 [ 841.984893][T18295] RDX: 0000000000002000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 841.984909][T18295] RBP: 00007f40e4211e19 R08: 0000000000000000 R09: 0000000000000000 [ 841.984925][T18295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.984941][T18295] R13: 00007f40e43c6038 R14: 00007f40e43c5fa0 R15: 00007ffeb05fd1f8 [ 841.984975][T18295] [ 842.405758][T18299] FAULT_INJECTION: forcing a failure. [ 842.405758][T18299] name failslab, interval 1, probability 0, space 0, times 0 [ 842.418779][T18299] CPU: 1 UID: 0 PID: 18299 Comm: syz.0.2868 Tainted: G U I syzkaller #0 PREEMPT(full) [ 842.418826][T18299] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 842.418837][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 842.418853][T18299] Call Trace: [ 842.418864][T18299] [ 842.418874][T18299] dump_stack_lvl+0x16c/0x1f0 [ 842.418916][T18299] should_fail_ex+0x512/0x640 [ 842.418953][T18299] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 842.418987][T18299] should_failslab+0xc2/0x120 [ 842.419024][T18299] __kmalloc_cache_noprof+0x6a/0x3e0 [ 842.419051][T18299] ? allocate_file_region_entries+0x15b/0x620 [ 842.419082][T18299] ? allocate_file_region_entries+0x1a0/0x620 [ 842.419120][T18299] allocate_file_region_entries+0x1a0/0x620 [ 842.419159][T18299] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 842.419203][T18299] region_chg+0x85/0x140 [ 842.419236][T18299] __vma_reservation_common+0x43b/0x740 [ 842.419271][T18299] ? __pfx___vma_reservation_common+0x10/0x10 [ 842.419316][T18299] alloc_hugetlb_folio+0x946/0x1560 [ 842.419362][T18299] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 842.419399][T18299] ? __pfx_down_read+0x10/0x10 [ 842.419442][T18299] ? __filemap_get_folio+0x32b/0xc30 [ 842.419485][T18299] hugetlb_fault+0x1bce/0x2f40 [ 842.419520][T18299] ? __pfx_hugetlb_fault+0x10/0x10 [ 842.419562][T18299] ? find_vma+0xbf/0x140 [ 842.419607][T18299] ? __pfx_find_vma+0x10/0x10 [ 842.419647][T18299] handle_mm_fault+0xbfa/0xd10 [ 842.419679][T18299] ? __bpf_trace_exceptions+0x1/0x40 [ 842.419720][T18299] do_user_addr_fault+0x7a6/0x1370 [ 842.419768][T18299] ? rcu_is_watching+0x12/0xc0 [ 842.419800][T18299] exc_page_fault+0x5c/0xb0 [ 842.419835][T18299] asm_exc_page_fault+0x26/0x30 [ 842.419860][T18299] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 842.419890][T18299] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 842.419918][T18299] RSP: 0018:ffffc9000e317950 EFLAGS: 00050246 [ 842.419940][T18299] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 842.419956][T18299] RDX: fffff52001c62f43 RSI: 0000000000000000 RDI: ffffc9000e317a10 [ 842.419974][T18299] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52001c62f42 [ 842.419992][T18299] R10: ffffc9000e317a17 R11: 0000000000000000 R12: 0000000000000000 [ 842.420010][T18299] R13: ffffc9000e317a10 R14: ffffffff89610800 R15: ffff8880334e3780 [ 842.420032][T18299] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 842.420089][T18299] _copy_from_user+0x98/0xd0 [ 842.420132][T18299] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 842.420183][T18299] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 842.420229][T18299] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 842.420272][T18299] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 842.420326][T18299] ? __local_bh_enable_ip+0xa4/0x120 [ 842.420362][T18299] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 842.420403][T18299] sctp_getsockopt+0x124f/0x69b0 [ 842.420443][T18299] ? __futex_wait+0x24c/0x2f0 [ 842.420484][T18299] ? __pfx_sctp_getsockopt+0x10/0x10 [ 842.420540][T18299] ? __lock_acquire+0xb97/0x1ce0 [ 842.420600][T18299] ? find_held_lock+0x2b/0x80 [ 842.420627][T18299] ? __might_fault+0xe3/0x190 [ 842.420658][T18299] ? __might_fault+0xe3/0x190 [ 842.420687][T18299] ? __might_fault+0x13b/0x190 [ 842.420731][T18299] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 842.420771][T18299] do_sock_getsockopt+0x34d/0x440 [ 842.420813][T18299] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 842.420850][T18299] ? __fget_files+0x204/0x3c0 [ 842.420898][T18299] __sys_getsockopt+0x123/0x1b0 [ 842.420941][T18299] __x64_sys_getsockopt+0xbd/0x160 [ 842.420973][T18299] ? do_syscall_64+0x91/0x490 [ 842.421008][T18299] ? lockdep_hardirqs_on+0x7c/0x110 [ 842.421041][T18299] do_syscall_64+0xcd/0x490 [ 842.421079][T18299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.421106][T18299] RIP: 0033:0x7f275df8ebe9 [ 842.421128][T18299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.421153][T18299] RSP: 002b:00007f275ee3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 842.421179][T18299] RAX: ffffffffffffffda RBX: 00007f275e1c5fa0 RCX: 00007f275df8ebe9 [ 842.421198][T18299] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 842.421215][T18299] RBP: 00007f275e011e19 R08: 0000200000000280 R09: 0000000000000000 [ 842.421233][T18299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.421250][T18299] R13: 00007f275e1c6038 R14: 00007f275e1c5fa0 R15: 00007fff3552f038 [ 842.421288][T18299] [ 843.567074][T18309] : Can't lookup blockdev [ 843.693714][ T30] audit: type=1800 audit(6442451256.817:189): pid=18310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2870" name="features" dev="configfs" ino=72943 res=0 errno=0 [ 844.090075][T18317] : Can't lookup blockdev [ 844.102576][T18312] openvswitch: ovs_: Dropping previously announced user features [ 844.117699][ T30] audit: type=1800 audit(6442451257.247:190): pid=18317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2873" name="features" dev="configfs" ino=72951 res=0 errno=0 [ 844.209317][T18319] FAULT_INJECTION: forcing a failure. [ 844.209317][T18319] name failslab, interval 1, probability 0, space 0, times 0 [ 844.224108][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.3.2871 Tainted: G U I syzkaller #0 PREEMPT(full) [ 844.224153][T18319] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 844.224164][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 844.224178][T18319] Call Trace: [ 844.224187][T18319] [ 844.224197][T18319] dump_stack_lvl+0x16c/0x1f0 [ 844.224239][T18319] should_fail_ex+0x512/0x640 [ 844.224273][T18319] ? __kmalloc_noprof+0xbf/0x510 [ 844.224305][T18319] ? ima_write_template_field_data+0x5d/0x1f0 [ 844.224339][T18319] should_failslab+0xc2/0x120 [ 844.224373][T18319] __kmalloc_noprof+0xd2/0x510 [ 844.224408][T18319] ima_write_template_field_data+0x5d/0x1f0 [ 844.224451][T18319] ima_eventname_init_common+0x1b8/0x260 [ 844.224492][T18319] ? __pfx_ima_eventname_init_common+0x10/0x10 [ 844.224535][T18319] ? trace_kmalloc+0x2b/0xd0 [ 844.224570][T18319] ? __kmalloc_noprof+0x242/0x510 [ 844.224610][T18319] ima_alloc_init_template+0x39d/0x720 [ 844.224645][T18319] ? rcu_is_watching+0x12/0xc0 [ 844.224676][T18319] ima_store_measurement+0x1eb/0x5c0 [ 844.224711][T18319] ? __pfx_ima_store_measurement+0x10/0x10 [ 844.224747][T18319] ? vfs_getxattr_alloc+0xec/0x340 [ 844.224796][T18319] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 844.224829][T18319] process_measurement+0x1ddb/0x23e0 [ 844.224871][T18319] ? __pfx_process_measurement+0x10/0x10 [ 844.224916][T18319] ? rcu_read_unlock+0x17/0x60 [ 844.224978][T18319] ? debug_mutex_init+0x37/0x70 [ 844.225007][T18319] ? inode_to_bdi+0x9e/0x160 [ 844.225046][T18319] ima_file_check+0xc5/0x110 [ 844.225074][T18319] ? __pfx_ima_file_check+0x10/0x10 [ 844.225112][T18319] security_file_post_open+0x8e/0x210 [ 844.225148][T18319] path_openat+0x1404/0x2cb0 [ 844.225192][T18319] ? __pfx_path_openat+0x10/0x10 [ 844.225231][T18319] do_filp_open+0x20b/0x470 [ 844.225263][T18319] ? __pfx_do_filp_open+0x10/0x10 [ 844.225321][T18319] ? alloc_fd+0x471/0x7d0 [ 844.225360][T18319] do_sys_openat2+0x11b/0x1d0 [ 844.225400][T18319] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.225453][T18319] __x64_sys_openat+0x174/0x210 [ 844.225492][T18319] ? __pfx___x64_sys_openat+0x10/0x10 [ 844.225545][T18319] do_syscall_64+0xcd/0x490 [ 844.225584][T18319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.225610][T18319] RIP: 0033:0x7f10bd58ebe9 [ 844.225632][T18319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.225659][T18319] RSP: 002b:00007f10be430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.225685][T18319] RAX: ffffffffffffffda RBX: 00007f10bd7c5fa0 RCX: 00007f10bd58ebe9 [ 844.225705][T18319] RDX: 0000000000000142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 844.225722][T18319] RBP: 00007f10bd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 844.225738][T18319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.225764][T18319] R13: 00007f10bd7c6038 R14: 00007f10bd7c5fa0 R15: 00007ffc48af5358 [ 844.225802][T18319] [ 844.226418][ T30] audit: type=1804 audit(6442451257.357:191): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.3.2871" name="/newroot/sys/kernel/debug/tracing/dynamic_events" dev="tracefs" ino=24 res=0 errno=0 [ 845.510514][T18322] KVM: debugfs: duplicate directory 18322-3 [ 845.545622][T18322] KVM: debugfs: duplicate directory 18322-4 [ 845.598883][T18322] KVM: debugfs: duplicate directory 18322-5 [ 845.661561][T18322] KVM: debugfs: duplicate directory 18322-6 [ 845.704863][T18322] KVM: debugfs: duplicate directory 18322-7 [ 845.728870][T18322] KVM: debugfs: duplicate directory 18322-8 [ 845.761032][T18322] KVM: debugfs: duplicate directory 18322-11 [ 845.782504][T18322] KVM: debugfs: duplicate directory 18322-12 [ 845.789785][T18322] KVM: debugfs: duplicate directory 18322-13 [ 845.813054][T18322] KVM: debugfs: duplicate directory 18322-14 [ 846.827713][T18360] : Can't lookup blockdev [ 846.884140][T15881] Bluetooth: hci3: command 0x0406 tx timeout [ 846.937616][ T30] audit: type=1800 audit(6442451260.067:192): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2883" name="features" dev="configfs" ino=76806 res=0 errno=0 [ 847.407127][T18367] : Can't lookup blockdev