last executing test programs: 2m32.918260687s ago: executing program 2 (id=1364): select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000240)="e3", 0x1}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fuse/parameters/max_user_bgreq\x00', 0xc0481, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='%!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250300000009000200cacd2dff11000000040012"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x9, 0x48}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)='L', 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$auto(0x3, 0x0, 0x7) 2m30.302292887s ago: executing program 2 (id=1367): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/btrfs/features/acl\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000003c0)=""/134, 0x86) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x02', 0x80000002) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000280), 0x200043, 0x0) poll$auto(0x0, 0x800, 0x9) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) migrate_pages$auto(0x0, 0xa, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x8, 0xfffffffffffffffa, 0x10000, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x7) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0xfdd5, 0xd, 0x378, 0x9) unshare$auto(0x40000080) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000600)="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") mknod$auto(0x0, 0x8, 0x3) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r3 = socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) socket(0x11, 0x3, 0x2) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x63, 0x7, 0x0, 0x7) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r4 = fcntl$auto_F_GETOWN(r2, 0x9, 0x7ff) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="e74328bd7000ffdbdf259c0000009800c500cf9b5a7950d5d73900f7c9a32ab9cf0a95c4fe07f335bfa7c005bd7914891a8adfe57de543958e909c82d6fa9664b315e71c7bbe220ecbfa79bded1170b2dd199005c1ce52ba26e5a783026d362595e968e03fdc0fbb83523cdc428a98febb419d6c141e89dc45f92c0fb805d6642a13ac1607b69bd99981c1e4b29ad1ba520e056d042c3babadbaa443260998ac93a841679cf604008b0008005200", @ANYRES32=r4, @ANYBLOB="bc005a800c003f002000000000000000ab00e40004cc3b9b5e006e1e63b0e19444ab801068332f41bad6e00acf8a3536543b3d200d6a871b09000000000000007e95092b661ec80c3904ecc4806e01afa2adc94af1c5357da1f660451d8237d55e630a2c67fba4418ae97d34b77d506c1f066e2c81a29d7eeebc1c5c99c652eae8f434193ec3aae906350d66acd3a45ad92fb218410f03402db1f6e0179d828d5e4f41f38dccda0ebc9520478eefbfe410dc22b090a22de0f858ba9e00080061000200000005002900060000000400f3"], 0x188}, 0x1, 0x0, 0x0, 0x2004c081}, 0xc4) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x80c4) 2m29.078360844s ago: executing program 2 (id=1372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7ffff000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYBLOB="2f212dbd7000fcdbdf", @ANYRES32=r5, @ANYBLOB="08009e"], 0x24}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00'}) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) getsockopt$auto_SO_SNDTIMEO_NEW(r6, 0x8, 0x43, 0x0, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) inotify_init1$auto(0x3000000000000) r7 = socket$nl_generic(0x11, 0x3, 0x10) socket(0xa, 0x2, 0x88) r8 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x8017, r8, 0x4, r8}, 0x10) io_uring_setup$auto(0xf0, &(0x7f00000003c0)={0xfffffffc, 0xb36, 0x9cd, 0x7, 0xffffffff, 0x6, r7, [0x1000, 0x8, 0x6], {0xfffffff7, 0x4, 0x401, 0x9, 0x8, 0xbf, 0xffca, 0x2, 0x1}, {0x81, 0x3, 0x979e, 0x7, 0x9, 0x1, 0x8, 0x0, 0x9}}) ioctl$auto_EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000140)=0x70f1f90f) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x8) syz_clone3(&(0x7f0000001340)={0x1f000000, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_OVS_DP_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000019) 2m28.435369869s ago: executing program 2 (id=1374): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) open(0x0, 0x22240, 0x155) uname$auto(0x0) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x64, 0x0, 0x1d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f00000001c0)={0x0, 0xfff}, 0x3, &(0x7f0000000280)={&(0x7f0000000100)="6c4bc022f1a924305022a30137693a982a453ee9ff2946c55588f6e6", 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop9/queue/atomic_write_unit_min_bytes\x00', 0x688242, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4106, 0x100a) mmap$auto(0x6a, 0x400008, 0x40, 0x15, r2, 0x7fffffffffffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) 2m27.369210045s ago: executing program 2 (id=1377): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x5}, 0x40000d0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='f'], 0x1ac}}, 0x40000) 2m26.681103312s ago: executing program 2 (id=1378): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) mmap$auto(0x7ffffffd, 0x40000c, 0x11, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x22180, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) pread64$auto(r0, 0x0, 0x8202000, 0x2d) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x20823) socket(0x22, 0x0, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), 0xffffffffffffffff) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9d\a\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6#,|\x14\x1d/\xf7\xf9~\xe7U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959pg\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, 0x0, 0x24001094) 2m26.328672628s ago: executing program 32 (id=1378): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) mmap$auto(0x7ffffffd, 0x40000c, 0x11, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x22180, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) pread64$auto(r0, 0x0, 0x8202000, 0x2d) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x4, 0x0, 0x0, 0x0, 0x20823) socket(0x22, 0x0, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), 0xffffffffffffffff) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9d\a\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6#,|\x14\x1d/\xf7\xf9~\xe7U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959pg\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, 0x0, 0x24001094) 2m18.811264614s ago: executing program 0 (id=1408): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0}, 0x0, 0x200000f8, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r4, 0x7f, &(0x7f0000000180)=']\x00', &(0x7f00000001c0)="375dcb1378652de07317a621cf0f946ca73ccbcca7dbaf06c4229c64a968395fea83676e3e4db20193308eb2b88ef1fb65251d8895496129726825abfa28772b3254b8560479f984fd7ac2e461a71e27b909740468f3403619f8f7b0b1fe", 0x1) ioctl$auto(0x3, 0xae41, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0041cf", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf2541000000080003", @ANYRES32=r5, @ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000002580)=ANY=[@ANYRES8=r0, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000008002100b50b716e161207d7712feed9d62a95f7153bf19712e36c0c55d1cf872f0e27ba46d6725cdc20ec502736b4f63095a6ccfccbab6ac398deb46f34d69c4a2e65aaf5460ae867e15bb2c2cd1546dbb5ebbc66af71aa74ac3f51193bba52818aa99db2bb097895430e205ea90cbbc5780ecd29bd23c2d4fd953031e379ae01bd7a52ee5fb1dc9e90c3312823d655ce535cb8c7cf2a2d61def92421b0e5839a644fdd409bcfd34ea740a52613272197d284c3540deea5b8082e144a964fab1d13ae1f6b5e7793c0", @ANYRES32=r3, @ANYBLOB], 0x988}, 0x1, 0x0, 0x0, 0x84}, 0x10) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) 2m17.750321927s ago: executing program 0 (id=1411): statmount$auto(0x0, 0x0, 0x1fe, 0x81) socket(0xa, 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(0x0, 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x1, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) bind$auto(r1, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 2m16.93201106s ago: executing program 0 (id=1412): mmap$auto(0x0, 0x20009, 0x4000000000cf, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x3) splice$auto(r1, 0x0, r0, 0x0, 0x8a5b, 0x401) mmap$auto(0x2000000, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 2m16.54984878s ago: executing program 0 (id=1413): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40101, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mkdir$auto(0x0, 0x8003) mount$auto(0x0, &(0x7f0000000280)='}[,&*}/file0\x00', 0x0, 0x4, 0x0) mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x7, 0x16, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x100) getsockopt$auto(r0, 0x0, 0x50, 0x0, &(0x7f0000000240)=0x1e) socket(0xb, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/apparmor/parameters/debug\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(0x0, 0x10fe) read$auto(r1, 0x0, 0xb4d3) connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x311, 0x9, 0x3, 0x81, 0x3, @broadcast}, 0x2) mmap$auto(0x9, 0x7f, 0x8, 0x18, 0xffffffffffffffff, 0x40000000000004) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 2m15.712786218s ago: executing program 0 (id=1414): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x6) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6a4e40, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r0, 0x0, 0x7fd, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@link_id=0x3, 0x92f1, 0x4}, 0xa) close_range$auto(r1, r3, 0x40204c) r5 = socket(0x2b, 0x801, 0x106) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r5, 0x0, 0x24008000) 2m12.740288462s ago: executing program 0 (id=1420): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x4000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x101, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x5, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0xc1e, 0xc9a, 0x100000000, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) (async) io_uring_setup$auto(0x8, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x6f7250c4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.6/usb22/idProduct\x00', 0x100, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) (async) iopl$auto(0x2) write$auto_event_trigger_fops_trace(0xffffffffffffffff, &(0x7f0000000240), 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) (async) mmap$auto(0x0, 0x5, 0xdf, 0x13, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x16) (async) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff) (async) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m57.484228704s ago: executing program 33 (id=1420): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x4000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x101, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x5, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0xc1e, 0xc9a, 0x100000000, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) (async) io_uring_setup$auto(0x8, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(r1, 0x0, 0x40, 0x0, 0x6f7250c4) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.6/usb22/idProduct\x00', 0x100, 0x0) (async) socket(0x10, 0x2, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x0) (async) iopl$auto(0x2) write$auto_event_trigger_fops_trace(0xffffffffffffffff, &(0x7f0000000240), 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) (async) mmap$auto(0x0, 0x5, 0xdf, 0x13, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x16) (async) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x0, 0x46, &(0x7f00000000c0)='[\x00', 0xfff) (async) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m33.461160125s ago: executing program 3 (id=1551): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) io_uring_register$auto(0x2, 0xf000, &(0x7f0000000000), 0x3) 1m33.351774516s ago: executing program 3 (id=1552): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x4004090) madvise$auto(0x0, 0x2000040080000004, 0xe) poll$auto(0x0, 0x7f, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$auto(0x3, 0x10f, 0xffff8001, 0x0, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pread64$auto(r0, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 1m32.39236141s ago: executing program 3 (id=1558): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r0, 0x0, 0x3f2, 0x80000000000000b) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) setresuid$auto(0x0, 0x7, 0x8080) fchdir$auto(0xffffffffffffffff) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) socket(0x2, 0x801, 0x100) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) socket(0x25, 0x1, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, &(0x7f0000000080)='\xcf\\,((!!\x00', 0x2) fsopen$auto(0x0, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x0) pipe$auto(0x0) write$auto(0x6, 0x0, 0x100000001) close_range$auto(0x2, r0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0x42) 1m32.268760108s ago: executing program 3 (id=1559): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon34\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x6a4, 0x400, 0x9}]}) r4 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x2003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r5, 0x0, 0xd0) mmap$auto(0x40, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x20500, 0x0) unshare$auto(0x1) ioctl$auto(r4, 0x6f2d, r4) 1m31.725963908s ago: executing program 3 (id=1561): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) rseq$auto(&(0x7f0000000200)={0xe, 0x402, 0xfb82, 0x3, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x80}, 0x10) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5d3, 0x810004, 0x400000000ffb, 0x8000000008011, 0xffffffffffffffff, 0xc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x2) open(&(0x7f0000000340)='./file0\x00', 0x101000, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) sysfs$auto(0x2, 0x2000000000040, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) 1m30.372130886s ago: executing program 3 (id=1564): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x9) r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x3f0, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x39c, 0x4, 0x0, 0x1, [@nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x5a}]}, @typed={0x78, 0x106, 0x0, 0x0, @binary="944288810cabb9193b6ff54891e6367d6544d9003ae81afbb0c424f11c82fb25180542198f97d885135af297fce3bf3ad5ae9ffbd17e970b854a21f65897ee7ed6ac5419c73c6c5a059dc075a72eeb9814492b764fb1afffe6c5343227c93d4775aec225704a900d11a3b2e0f73d6a47ed880b74"}, @nested={0x2b1, 0x11c, 0x0, 0x1, [@typed={0x5b, 0x14c, 0x0, 0x0, @binary="5e9deda43ced3f173c9e8c8d4cc83d891ae8f973b8919a8bd5da59d2f14551359facf1d81543ae137bc2897fc602f9b5a3f48779b859ba16765d0733ebd7e6faf1c7659b6685ed09148b78731482b906ee5ebf86b379d1"}, @generic="173a2553a8e19f0a5a18f65675aaed9fceceeef53305540db43d1aa1df9e6838b73c59aaa31cc16ad471ee5b31d81e0930063a4207abd2035c3a2103382ca95adcee1c73ce57987224b205669a26b681a7147d46ddad354f0a0bbb1ed31366c58ec2f03362f6f62fae317058fd0eedfad4e7cf8fe96a0ce93c2348a9b557fb72640dfe47ea1628fc6cc89422c554409bc46dc1297c9ceddf07a661c2edd71bfbd2b479dbf439180b4d85b9c4156a1f5b956a94032ed978d0a9a1d06cb5fa39d406ea", @generic="b4b8853eea06cb3ffa68d3d60dea65996c9d969dfefccd5ed10519c3bdaa09d0aa52e6ab11717ffb63f148ecfbdaac9bbd4c9d004d27cdf16e906aaf126e6167209bcfd8494eba739a328cda901baace71cc881238da477f1ab3cd4ee5686c507f283c23d46d3bce2ea186bf1e94958edfebf8ceb3cc00d3e3c76d4955b424d2c2fc9930190c15d011691b6b9b444b4e44ee68b561648c1318c9be9ac863a9cba85f67238eee5b57bc9e18ae54eba89cd68a38b82f3e1b11174a5df01d79b5c667", @generic="3c5d30c3b008bf9656298142102f2d3e86582bfb4a679b8e5c69a5e9b7729c7f0277df59f85c661dc90c11c9730fc55f674cf631706fbc1c0a11c3eec7edc1fc20f1821bb4e1fe083811c16109296648645a515b4d0c0b86b60528d0e15925a111dd69be578b492788f2a8b87571329d5f61c2d68935d8c7435a779a40f93adc1789c55a7fba59a7392c575bdad82d6a631e2814468c78de0f2fc89ba6870f3725b39cd0ffe0b5c604895df4c93782f6394acb42011a796cba105cfb294571e5d7c7", @typed={0x4, 0xf0}, @nested={0x4, 0x5f}, @nested={0x4, 0x7d}]}, @nested={0x64, 0xd4, 0x0, 0x1, [@generic="08ff8fc45d405faaa68b6ff32f217b642b608060986b2c8be440955c6c0ae4aeb3c9f8d8db8254df43ecf351b1cc0eaf0ca247531f067ca73b214bf3bfbeeb280dfc6e07bfa2bef6d0bf4a051f6a44a4ec9afb2e", @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x3}]}]}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x81}, @NLBL_CIPSOV4_A_MLSCATLST={0xf, 0xc, 0x0, 0x1, [@generic="13601717712f5e237c1962"]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000040)={r3, 0x200}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 1m15.158564154s ago: executing program 34 (id=1564): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x9) r1 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x3f0, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x39c, 0x4, 0x0, 0x1, [@nested={0x8, 0x4c, 0x0, 0x1, [@nested={0x4, 0x5a}]}, @typed={0x78, 0x106, 0x0, 0x0, @binary="944288810cabb9193b6ff54891e6367d6544d9003ae81afbb0c424f11c82fb25180542198f97d885135af297fce3bf3ad5ae9ffbd17e970b854a21f65897ee7ed6ac5419c73c6c5a059dc075a72eeb9814492b764fb1afffe6c5343227c93d4775aec225704a900d11a3b2e0f73d6a47ed880b74"}, @nested={0x2b1, 0x11c, 0x0, 0x1, [@typed={0x5b, 0x14c, 0x0, 0x0, @binary="5e9deda43ced3f173c9e8c8d4cc83d891ae8f973b8919a8bd5da59d2f14551359facf1d81543ae137bc2897fc602f9b5a3f48779b859ba16765d0733ebd7e6faf1c7659b6685ed09148b78731482b906ee5ebf86b379d1"}, @generic="173a2553a8e19f0a5a18f65675aaed9fceceeef53305540db43d1aa1df9e6838b73c59aaa31cc16ad471ee5b31d81e0930063a4207abd2035c3a2103382ca95adcee1c73ce57987224b205669a26b681a7147d46ddad354f0a0bbb1ed31366c58ec2f03362f6f62fae317058fd0eedfad4e7cf8fe96a0ce93c2348a9b557fb72640dfe47ea1628fc6cc89422c554409bc46dc1297c9ceddf07a661c2edd71bfbd2b479dbf439180b4d85b9c4156a1f5b956a94032ed978d0a9a1d06cb5fa39d406ea", @generic="b4b8853eea06cb3ffa68d3d60dea65996c9d969dfefccd5ed10519c3bdaa09d0aa52e6ab11717ffb63f148ecfbdaac9bbd4c9d004d27cdf16e906aaf126e6167209bcfd8494eba739a328cda901baace71cc881238da477f1ab3cd4ee5686c507f283c23d46d3bce2ea186bf1e94958edfebf8ceb3cc00d3e3c76d4955b424d2c2fc9930190c15d011691b6b9b444b4e44ee68b561648c1318c9be9ac863a9cba85f67238eee5b57bc9e18ae54eba89cd68a38b82f3e1b11174a5df01d79b5c667", @generic="3c5d30c3b008bf9656298142102f2d3e86582bfb4a679b8e5c69a5e9b7729c7f0277df59f85c661dc90c11c9730fc55f674cf631706fbc1c0a11c3eec7edc1fc20f1821bb4e1fe083811c16109296648645a515b4d0c0b86b60528d0e15925a111dd69be578b492788f2a8b87571329d5f61c2d68935d8c7435a779a40f93adc1789c55a7fba59a7392c575bdad82d6a631e2814468c78de0f2fc89ba6870f3725b39cd0ffe0b5c604895df4c93782f6394acb42011a796cba105cfb294571e5d7c7", @typed={0x4, 0xf0}, @nested={0x4, 0x5f}, @nested={0x4, 0x7d}]}, @nested={0x64, 0xd4, 0x0, 0x1, [@generic="08ff8fc45d405faaa68b6ff32f217b642b608060986b2c8be440955c6c0ae4aeb3c9f8d8db8254df43ecf351b1cc0eaf0ca247531f067ca73b214bf3bfbeeb280dfc6e07bfa2bef6d0bf4a051f6a44a4ec9afb2e", @typed={0xc, 0xa6, 0x0, 0x0, @u64=0x3}]}]}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x81}, @NLBL_CIPSOV4_A_MLSCATLST={0xf, 0xc, 0x0, 0x1, [@generic="13601717712f5e237c1962"]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000040)={r3, 0x200}) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) 4.524711722s ago: executing program 1 (id=1915): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x40000) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) close_range$auto(r0, r1, 0xe44c) lchown$auto(&(0x7f0000000040)='./file0\x00', r4, r5) sendmsg$auto_TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0xf8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xe2, 0x9, 0x0, 0x1, [@nested={0x7f, 0xd2, 0x0, 0x1, [@typed={0x4, 0x6c}, @typed={0xc, 0x144, 0x0, 0x0, @u64=0xaf}, @nested={0x4, 0x103}, @generic="4b0ffb24499b7709116626000306a0816ac351f828abfc4cf565d2b45b48a1117455818ef9cc5d4f6eec5b269f6e0895ac9f3defc2a2247ad654dc4ca7", @nested={0x4, 0xcd}, @nested={0x4, 0x5e}, @generic="5167298e71dd1f9f645621b3898a24b73bb69eaae97d8ee239a807574581", @typed={0x4, 0x5f}]}, @generic="bb343a49f501614acfeead6583a718d6fec3d3401421a501438fe2955038d3a6f2388ca3ca2770bff3a6e9b6e0b4acee2adcec748f5e66eaa3621b94ed9b5c5b865921db8ae90f74104943a968d52789d789dae91c8770643600", @nested={0x4, 0x109}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40048}, 0x411a514550326768) 3.367418517s ago: executing program 4 (id=1920): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) rseq$auto(&(0x7f0000000200)={0xe, 0x402, 0xfb82, 0x3, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) set_mempolicy$auto(0x3, 0x0, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioperm$auto(0x7, 0x6, 0x80) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fcntl$auto_F_CREATED_QUERY(r3, 0x404, 0x7fff) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x2) open(&(0x7f0000000340)='./file0\x00', 0x101000, 0x0) getxattrat$auto(0xffffffffffffffff, 0x0, 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) sysfs$auto(0x2, 0x2000000000040, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) 3.18434308s ago: executing program 1 (id=1921): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) close_range$auto(0x2, 0x8, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x2, 0x6, 0x7, 0x2, 0xfffffffffffffffa, 0x8, 0x400820c, 0x6, 0x2, 0x9, 0x4, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x7f, 0x7, 0x2d7d01bf, 0xfffffffc, 0x2000, 0x5, 0x0, 0x84, 0x6ef, 0x0, 0x0, 0x0, 0xffffffe0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x5, 0x8000000000000003, 0x2, 0x80000001, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x55f4, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x35, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000]}, 0x1fe, 0xfffffffe) (async) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x814}, 0x0) (async) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) ioctl$auto_FITHAW(r1, 0xc0045878, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) unshare$auto(0x40000080) (async) socket(0x27, 0x5, 0x80) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) (async) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) (async) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) (async) epoll_create$auto(0x8ca0d1a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) write$auto(r3, 0x0, 0x7) (async) utime$auto(0x0, &(0x7f00000003c0)={0xffff, 0xd73}) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty58\x00', 0x800, 0x0) 3.047584709s ago: executing program 6 (id=1922): statmount$auto(0x0, 0x0, 0x1fe, 0x81) socket(0xa, 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(0x0, 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x1, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) bind$auto(r1, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 2.845193016s ago: executing program 1 (id=1923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_MM_VERIFY_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 2.613684129s ago: executing program 6 (id=1924): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x6) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6a4e40, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r0, 0x0, 0x7fd, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x243, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@link_id=0x3, 0x92f1, 0x4}, 0xa) close_range$auto(r1, r3, 0x40204c) r5 = socket(0x2b, 0x801, 0x106) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r5, 0x0, 0x24008000) 2.520061183s ago: executing program 1 (id=1925): openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace_marker\x00', 0x341, 0x0) mmap$auto(0x401000000000, 0x40000004020009, 0xc, 0x15, 0xffffffffffffffff, 0x7ffe) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) getuid() r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x301140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x7, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0xa, 0xffffffff80000000, 0xffffffffffffffff, 0x6, 0x240000100103}) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x2, 0x3) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyt1\x00', 0x129203, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x200002, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(r3, 0x1, r3) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.474923917s ago: executing program 5 (id=1926): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xe, 0x0) r0 = socket(0x2a, 0x2, 0x0) bind$auto(r0, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6b) getsockopt$auto_SO_BSDCOMPAT(r0, 0x6, 0xe, &(0x7f0000000140)='wlan1\x00', &(0x7f00000001c0)=0x5) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x3, 0x7fffffff, 0x1e, 0x401, 0x80) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = pipe2$auto(0x0, 0x80) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x80800002) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) syz_genetlink_get_family_id$auto_nl80211(0x0, r6) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd7000dddbdf272500000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.409473443s ago: executing program 4 (id=1927): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) writev$auto(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) ustat$auto(0x7, &(0x7f0000000080)={0x2, 0x8, "34ef00b43543", "3a4516b1a086"}) 2.032214315s ago: executing program 5 (id=1928): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.13/usb35/35-0:1.0/usb35-port1/uevent\x00', 0x2000, 0x0) read$auto(r0, 0x0, 0x7) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttysf\x00', 0x4001, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram11\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) 2.032093577s ago: executing program 4 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r3}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x2}, @NETDEV_A_QUEUE_TYPE={0x8}]}]}, 0x38}, 0x1, 0xf0ffff, 0x0, 0x8000}, 0x10) 1.737999238s ago: executing program 6 (id=1930): r0 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000000)=0x8) mmap$auto(0x0, 0x7ff, 0x8000, 0x4000040eb2, r0, 0xfffffffffffffff9) (async) mmap$auto(0x0, 0x7ff, 0x8000, 0x4000040eb2, r0, 0xfffffffffffffff9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1.65719613s ago: executing program 5 (id=1931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400000000000004}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x24, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ioctl$auto_BINDER_THREAD_EXIT(r4, 0x40046208, &(0x7f0000000100)="5f46b706f536ca9775ce6eac67a4944eff2b9abcc60d674810a8da80b0c45b0170b1f2ad0e72e9d3a8b8b53de35bb7be75d47824f1f1598192be08b887326ea8d0d32ff2fde5afed7b1baec85b384982d402f542a3deb2980b271846c46dc577713df4b4b4108ef8911225b35daae605110ed27a4daab1a21ed9fcf432004a25af4c68b943998d1974e5b191223b9dd530392ea34f3cfee6131eee57d57d3f4a8adeadbe9efc0ba4258f5c134cddce39b88dd5ff117522d4d8129061638b46fb48ff853022a33bb9824c9a59d648013be79c70921808f3bac09e4bf0cbb6716832d645a40bb168074bc8b2d4112c817b28d157dc49404ff42536") ioctl$auto_TIOCMGET2(r5, 0x5415, &(0x7f0000000040)="3ec6118de6a2062b81d0f49c999b902a8aafb531af905814168ecd85bee398c25616dcbfa7179b2d27df") mmap$auto(0x0, 0x1, 0xfd5, 0x12, r5, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) 1.408140109s ago: executing program 4 (id=1932): mmap$auto(0x0, 0x2020009, 0x3, 0x20002000000010, 0xfffffffffffffffa, 0x7) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r0, 0x0, 0x2b6) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)="ff84b2c53a83ebc28df53defdf8a19d364d81d314c73138e7886d3f4cf5c399ec3f9aec1db3819177c5bd6433f0e59d44cb6b5e87b61c8ba", 0x6}, 0x3) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecgroup\x00', 0x4000, 0x0) socket(0x10, 0x2, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000024c0)="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", 0xf71) (async, rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 64) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d3da02fe1b59afa8df25030000000400080004000380120001008b097914854700000040000000000000100002800c0010"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x8, 0x0, 0x2, 0x0, 0x9, 0xb52}, 0x6}, 0x40, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000ecd68f9e7ee3c38c0007000a00000008e962ad9eed52e1ed2f5873c521754974158ab81c653f0354121cdb197a8f97006c0b5f6ccb3e3d894bc7285b1542f377312a890c127b959fd35922a6c6ad51c1371057d6134969b684bfd42b4bcc026c4de5d5b52f38deb3ea46ffcdda02e044c341386f2fefb41913b54d8d556d85c860dfe175a99b432060e8db221cb72b56aa34ed93a3528cd4479c488ae88eb6444224aea29c8dda903b3147ad7d54d9aa935d12", @ANYBLOB="0be44e5b35c75ffc0a2b3897f1586acceaa0ff99ab777c2f85fb2292b0588f0009e7e7c6a7074a45e98312141e06c4ac871f3519a597e1ffbd41f14af9414f1241ad743cbb35f9b7cfa9be5721ed02b1d54818b9a73823e393450ce50e4740e255a26bc63aa621316913dab270a33753dcfb227b55e163dd60d34ef3f72596cb15436e28381a759f314149666f564155b68eab15292af5dd5f05c09d287a3a7ff951c2a47a5662408025f30ea75942351d96c9c3e1afd951e9d7fe278d133e97119f560691ba97f204fb43a0614be6c2b6501a6bb888e1b88728fdb0676d783a5b7ec9de40be99357b3d26f69a", @ANYBLOB="0801"], 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4010) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xbfe}, 0x7}, 0x3, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24008090}, 0x24044805) lstat$auto(0x0, &(0x7f0000000180)={0x12, 0x1fc5fc11, 0x3, 0x7, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x100000000, 0x7fefffff, 0x1000000046, 0x0, 0x1, 0x3, 0x40000102}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x5, 0x810004, 0xffb, 0x8004000008011, 0x3, 0x8000) (async) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r4, 0x81204101, &(0x7f00000005c0)={0xfffffffe, 0x6, 0x2, 0x0, "eed33808cb21f451258a28697e9680ce6dbaec36ae75c4e3d1a1b0e3ad4ffee25a95bb9f883d90c72e83550543f929d984e9c010c2ad5f6c72b4f44e0eb78d29", "8641e98f4a64e205c736ab1cc045049f0100c9a101f7b23f3149ab759374dae9fcbac1bfd9a81a8035810f0a2ceedde0d8510afbab8891360b0b20d406d03f45148a3025f518a6cf8869d90d86366b7f", "5a87b8c12d8c3f82f04b3fe3a31344d84f352954bad2fd17489e2846ee00cff7", 0x10000, 0x3, 0x4, 0x0, '\x00', "42609310ee5bc6a35bf8ae58c997edcc9e9df413b5ef45672a1bd643ebfa6df46f99eecf6388b08c18ff69a00ba945aafe6fe700000000000000000000000080"}) (async) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 1.22199778s ago: executing program 5 (id=1933): statmount$auto(0x0, 0x0, 0x1fe, 0x81) socket(0xa, 0x2, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(0x0, 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x1, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) bind$auto(r1, 0x0, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) 1.221832275s ago: executing program 6 (id=1934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 1.042308364s ago: executing program 1 (id=1935): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r0, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f4) 978.584564ms ago: executing program 4 (id=1936): mmap$auto(0x0, 0x402000b, 0xdf, 0xebf, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) mq_open$auto(0x0, 0x83, 0x7, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x380000}, 0x3) io_uring_setup$auto(0x5, 0x0) clock_nanosleep$auto(0xb, 0x6, 0x0, 0xfffffffffffffffd) shmctl$auto_IPC_RMID(0x7, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x1000000000df, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x9, &(0x7f0000000080)={0x0}, 0x9, 0x0, 0x7, 0xa505}, 0x8}, 0x5, 0x204004) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) close_range$auto(0x2, 0x8, 0x0) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x121641, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.9/usb27/dev\x00', 0x803, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4030ae7b, r3) 934.794686ms ago: executing program 6 (id=1937): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x4, 0x3, 0x4, 0x9b72, r0, 0x200000000000) timer_create$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00[\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000f9dbdf25010000000500070000000000080009000800000008000a000800000014001f00000000000000000000000000000000001400200000000000000000000000ffff64010101"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r3, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) r4 = socket(0x2, 0x1, 0x106) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';') r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r6) connect$auto(r4, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) read$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)='%&+#*%-\xfc\x00', 0x9) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) 786.013019ms ago: executing program 5 (id=1938): socket(0x2, 0x1, 0x0) mq_notify$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b52, 0x1) 659.520323ms ago: executing program 1 (id=1939): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r2, 0x6) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6a4e40, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r0, 0x0, 0x7fd, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x243, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@link_id=0x3, 0x92f1, 0x4}, 0xa) close_range$auto(r1, r3, 0x40204c) r5 = socket(0x2b, 0x801, 0x106) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r5, 0x0, 0x24008000) 594.051866ms ago: executing program 5 (id=1940): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) statmount$auto(0x0, &(0x7f0000000180)={0xb896, 0x1, 0x9, 0x400000, 0x20, 0x940, 0x1ffde, 0x2, 0x4, 0x7, 0x9, 0x6, 0x0, 0x8000000000000001, 0xb0, 0x7, 0x20000081, 0x3, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x1000, 0x7, 0x9, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, [0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffeffc, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x5757, 0x0, 0x2, 0x1]}, 0x7, 0x281) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4081) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x18000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x18, 0xa, 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x900, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x7}, 0x80000007, 0x4008) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) fstatfs$auto(r2, &(0x7f0000000380)={0x7, 0x400, 0x80, 0x3d24c65d, 0x400, 0x80, 0xe6e, {[0x6, 0xf354]}, 0x3, 0x1, 0x0, [0x0, 0xb9, 0x5ac, 0x5]}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) 312.228967ms ago: executing program 4 (id=1941): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, &(0x7f0000000040)="88243316b796251e5330a2ac1cff371c2e37f69b3a95570efc173c3f03728ea659ceee95e9de3413ff9cab6c6eb7054828c1de1c5c") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages$auto(r4, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x3) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x2}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0xa}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_PHY_NAME={0x16, 0x2, '/dev/snd/midiC2D0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x1ff], {0x6, 0x6, 0xf, 0x2a3, 0x100, 0x83, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto(0x3, 0x0, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) 0s ago: executing program 6 (id=1942): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) lseek$auto(r0, 0x5, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0x8000, 0x0, 0x8, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) kernel console output (not intermixed with test programs): 0x4c0 [ 526.037267][T12171] ? __pfx___x64_sys_futex+0x10/0x10 [ 526.037286][T12171] ? xfd_validate_state+0x61/0x180 [ 526.037312][T12171] do_syscall_64+0xcd/0xfa0 [ 526.037331][T12171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.037345][T12171] RIP: 0033:0x7fd92a58f7c9 [ 526.037357][T12171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.037370][T12171] RSP: 002b:00007ffeba570668 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 526.037384][T12171] RAX: ffffffffffffffda RBX: 0000000000080da8 RCX: 00007fd92a58f7c9 [ 526.037394][T12171] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd92a7e5fac [ 526.037402][T12171] RBP: 0000000000000032 R08: 00007fd92b367000 R09: 00000016ba57095f [ 526.037411][T12171] R10: 00007ffeba570760 R11: 0000000000000246 R12: 00007fd92a7e5fac [ 526.037419][T12171] R13: 00007ffeba570760 R14: 0000000000080dda R15: 00007ffeba570780 [ 526.037437][T12171] [ 526.312661][T12180] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1486'. [ 526.495880][T12003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 526.546488][T12003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 526.584560][T12003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 526.968523][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.025614][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.058785][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.066173][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.142073][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.149224][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.105474][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.911836][T12253] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 529.042843][T12003] veth0_vlan: entered promiscuous mode [ 529.124727][T12003] veth1_vlan: entered promiscuous mode [ 529.226967][T12003] veth0_macvtap: entered promiscuous mode [ 529.323414][T12003] veth1_macvtap: entered promiscuous mode [ 529.425673][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.503025][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.542313][T12255] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 529.558899][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.632626][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.679619][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.807011][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.022263][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.074330][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.206841][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.262587][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.369871][T12268] zswap: compressor 000 not available [ 531.633607][T12321] ======================================================= [ 531.633607][T12321] WARNING: The mand mount option has been deprecated and [ 531.633607][T12321] and is ignored by this kernel. Remove the mand [ 531.633607][T12321] option from the mount to silence this warning. [ 531.633607][T12321] ======================================================= [ 531.796837][T12322] binder: 12319:12322 ioctl c0306201 0 returned -14 [ 532.775373][ T5837] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 532.859350][T12346] netlink: set zone limit has 8 unknown bytes [ 533.537089][T12363] random: crng reseeded on system resumption [ 533.839786][T12371] FAULT_INJECTION: forcing a failure. [ 533.839786][T12371] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 533.918586][T12371] CPU: 0 UID: 0 PID: 12371 Comm: syz.4.1517 Tainted: G U syzkaller #0 PREEMPT(full) [ 533.918611][T12371] Tainted: [U]=USER [ 533.918615][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.918623][T12371] Call Trace: [ 533.918628][T12371] [ 533.918634][T12371] dump_stack_lvl+0x16c/0x1f0 [ 533.918656][T12371] should_fail_ex+0x512/0x640 [ 533.918679][T12371] should_fail_alloc_page+0xe7/0x130 [ 533.918700][T12371] prepare_alloc_pages+0x3c2/0x610 [ 533.918722][T12371] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 533.918737][T12371] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 533.918758][T12371] ? __pfx___might_resched+0x10/0x10 [ 533.918774][T12371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.918788][T12371] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 533.918803][T12371] ? process_measurement+0x4a6/0x23e0 [ 533.918823][T12371] ? down_write+0x14d/0x200 [ 533.918851][T12371] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 533.918875][T12371] ? policy_nodemask+0xea/0x4e0 [ 533.918895][T12371] alloc_pages_mpol+0x1fb/0x550 [ 533.918914][T12371] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 533.918931][T12371] ? do_raw_spin_lock+0x12c/0x2b0 [ 533.918953][T12371] ? find_held_lock+0x2b/0x80 [ 533.918969][T12371] alloc_pages_noprof+0x131/0x390 [ 533.918988][T12371] __pmd_alloc+0x3b/0x8b0 [ 533.919006][T12371] ? __pud_alloc+0x51f/0x6b0 [ 533.919025][T12371] __handle_mm_fault+0xada/0x2aa0 [ 533.919047][T12371] ? mt_find+0x3e2/0xa20 [ 533.919067][T12371] ? __pfx___handle_mm_fault+0x10/0x10 [ 533.919086][T12371] ? __pfx_mt_find+0x10/0x10 [ 533.919114][T12371] ? find_vma+0xbf/0x140 [ 533.919129][T12371] ? __pfx_find_vma+0x10/0x10 [ 533.919147][T12371] handle_mm_fault+0x589/0xd10 [ 533.919169][T12371] ? __pkru_allows_pkey+0x21/0xb0 [ 533.919198][T12371] do_user_addr_fault+0x7a6/0x1370 [ 533.919213][T12371] ? rcu_is_watching+0x12/0xc0 [ 533.919230][T12371] exc_page_fault+0x64/0xc0 [ 533.919248][T12371] asm_exc_page_fault+0x26/0x30 [ 533.919262][T12371] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 533.919284][T12371] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 533.919297][T12371] RSP: 0018:ffffc90003dcfc58 EFLAGS: 00050216 [ 533.919309][T12371] RAX: 0000000000000001 RBX: 0000200000000000 RCX: 0000000000000020 [ 533.919318][T12371] RDX: fffff520007b9fac RSI: 0000200000000000 RDI: ffffc90003dcfd40 [ 533.919327][T12371] RBP: 0000000000000020 R08: 0000000000000001 R09: fffff520007b9fab [ 533.919336][T12371] R10: ffffc90003dcfd5f R11: 0000000000000001 R12: 0000000000000000 [ 533.919344][T12371] R13: ffffc90003dcfd40 R14: ffff888028d16004 R15: 0000200000000000 [ 533.919363][T12371] _copy_from_user+0x98/0xd0 [ 533.919386][T12371] io_register_clone_buffers+0xca/0x1080 [ 533.919409][T12371] ? __mutex_trylock_common+0xe9/0x250 [ 533.919429][T12371] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.919450][T12371] ? __pfx_io_register_clone_buffers+0x10/0x10 [ 533.919471][T12371] ? rcu_is_watching+0x12/0xc0 [ 533.919487][T12371] ? __mutex_lock+0x1c5/0x1060 [ 533.919509][T12371] __io_uring_register+0x3b8/0x20d0 [ 533.919530][T12371] ? __pfx___io_uring_register+0x10/0x10 [ 533.919551][T12371] ? __fget_files+0x20e/0x3c0 [ 533.919570][T12371] __x64_sys_io_uring_register+0x169/0x280 [ 533.919592][T12371] do_syscall_64+0xcd/0xfa0 [ 533.919610][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.919626][T12371] RIP: 0033:0x7fd92a58f7c9 [ 533.919637][T12371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.919649][T12371] RSP: 002b:00007fd92b366038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 533.919662][T12371] RAX: ffffffffffffffda RBX: 00007fd92a7e5fa0 RCX: 00007fd92a58f7c9 [ 533.919672][T12371] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000002 [ 533.919680][T12371] RBP: 00007fd92b366090 R08: 0000000000000000 R09: 0000000000000000 [ 533.919689][T12371] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 533.919697][T12371] R13: 00007fd92a7e6038 R14: 00007fd92a7e5fa0 R15: 00007ffeba570508 [ 533.919716][T12371] [ 534.876451][ T5837] Bluetooth: hci4: command tx timeout [ 535.084019][T12386] FAULT_INJECTION: forcing a failure. [ 535.084019][T12386] name failslab, interval 1, probability 0, space 0, times 0 [ 535.107114][T12386] CPU: 0 UID: 0 PID: 12386 Comm: syz.3.1521 Tainted: G U syzkaller #0 PREEMPT(full) [ 535.107140][T12386] Tainted: [U]=USER [ 535.107146][T12386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.107155][T12386] Call Trace: [ 535.107160][T12386] [ 535.107167][T12386] dump_stack_lvl+0x16c/0x1f0 [ 535.107189][T12386] should_fail_ex+0x512/0x640 [ 535.107210][T12386] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 535.107227][T12386] should_failslab+0xc2/0x120 [ 535.107247][T12386] kmem_cache_alloc_noprof+0x75/0x6e0 [ 535.107261][T12386] ? alloc_empty_file+0x55/0x1e0 [ 535.107285][T12386] ? alloc_empty_file+0x55/0x1e0 [ 535.107303][T12386] alloc_empty_file+0x55/0x1e0 [ 535.107323][T12386] path_openat+0xda/0x2cb0 [ 535.107345][T12386] ? __pfx_path_openat+0x10/0x10 [ 535.107361][T12386] ? __lock_acquire+0xb8a/0x1c90 [ 535.107383][T12386] do_filp_open+0x20b/0x470 [ 535.107399][T12386] ? __pfx_do_filp_open+0x10/0x10 [ 535.107428][T12386] ? alloc_fd+0x471/0x7d0 [ 535.107447][T12386] do_sys_openat2+0x11b/0x1d0 [ 535.107467][T12386] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.107490][T12386] ? __fget_files+0x20e/0x3c0 [ 535.107507][T12386] __x64_sys_openat+0x174/0x210 [ 535.107527][T12386] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.107547][T12386] ? ksys_write+0x1ac/0x250 [ 535.107568][T12386] do_syscall_64+0xcd/0xfa0 [ 535.107587][T12386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.107602][T12386] RIP: 0033:0x7f31db18f7c9 [ 535.107614][T12386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.107629][T12386] RSP: 002b:00007f31dbffd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.107643][T12386] RAX: ffffffffffffffda RBX: 00007f31db3e5fa0 RCX: 00007f31db18f7c9 [ 535.107652][T12386] RDX: 00000000001c9a01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 535.107662][T12386] RBP: 00007f31dbffd090 R08: 0000000000000000 R09: 0000000000000000 [ 535.107670][T12386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.107678][T12386] R13: 00007f31db3e6038 R14: 00007f31db3e5fa0 R15: 00007ffc3a3eb508 [ 535.107697][T12386] [ 535.860180][T12394] FAULT_INJECTION: forcing a failure. [ 535.860180][T12394] name failslab, interval 1, probability 0, space 0, times 0 [ 535.873084][T12394] CPU: 0 UID: 0 PID: 12394 Comm: syz.4.1523 Tainted: G U syzkaller #0 PREEMPT(full) [ 535.873109][T12394] Tainted: [U]=USER [ 535.873114][T12394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.873124][T12394] Call Trace: [ 535.873131][T12394] [ 535.873137][T12394] dump_stack_lvl+0x16c/0x1f0 [ 535.873160][T12394] should_fail_ex+0x512/0x640 [ 535.873181][T12394] ? __kmalloc_cache_noprof+0x5f/0x780 [ 535.873198][T12394] should_failslab+0xc2/0x120 [ 535.873218][T12394] __kmalloc_cache_noprof+0x72/0x780 [ 535.873232][T12394] ? percpu_ref_init+0xec/0x410 [ 535.873252][T12394] ? percpu_ref_init+0xec/0x410 [ 535.873268][T12394] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 535.873285][T12394] percpu_ref_init+0xec/0x410 [ 535.873304][T12394] io_uring_setup+0x4a6/0x20e0 [ 535.873323][T12394] ? __pfx_io_uring_setup+0x10/0x10 [ 535.873338][T12394] ? do_futex+0x122/0x350 [ 535.873357][T12394] ? __pfx_do_futex+0x10/0x10 [ 535.873385][T12394] ? xfd_validate_state+0x61/0x180 [ 535.873409][T12394] __x64_sys_io_uring_setup+0xc2/0x170 [ 535.873426][T12394] do_syscall_64+0xcd/0xfa0 [ 535.873444][T12394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.873460][T12394] RIP: 0033:0x7fd92a58f7c9 [ 535.873472][T12394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.873486][T12394] RSP: 002b:00007fd92b366038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 535.873501][T12394] RAX: ffffffffffffffda RBX: 00007fd92a7e5fa0 RCX: 00007fd92a58f7c9 [ 535.873511][T12394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 535.873520][T12394] RBP: 00007fd92a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 535.873528][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.873536][T12394] R13: 00007fd92a7e6038 R14: 00007fd92a7e5fa0 R15: 00007ffeba570508 [ 535.873555][T12394] [ 537.017431][T12420] blkio.reset_stats is deprecated [ 539.143715][T12470] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 539.319533][T12473] FAULT_INJECTION: forcing a failure. [ 539.319533][T12473] name failslab, interval 1, probability 0, space 0, times 0 [ 539.349622][ T30] audit: type=1800 audit(1764494912.776:13): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1546" name="SYSV00000014" dev="hugetlbfs" ino=0 res=0 errno=0 [ 539.386253][T12473] CPU: 0 UID: 0 PID: 12473 Comm: syz.5.1548 Tainted: G U syzkaller #0 PREEMPT(full) [ 539.386280][T12473] Tainted: [U]=USER [ 539.386285][T12473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 539.386294][T12473] Call Trace: [ 539.386300][T12473] [ 539.386306][T12473] dump_stack_lvl+0x16c/0x1f0 [ 539.386330][T12473] should_fail_ex+0x512/0x640 [ 539.386351][T12473] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 539.386372][T12473] should_failslab+0xc2/0x120 [ 539.386392][T12473] __kvmalloc_node_noprof+0x141/0x9c0 [ 539.386407][T12473] ? rcu_is_watching+0x12/0xc0 [ 539.386423][T12473] ? kfree+0x252/0x6d0 [ 539.386434][T12473] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 539.386458][T12473] ? snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 539.386476][T12473] snd_pcm_plugin_alloc+0x5fd/0x7f0 [ 539.386499][T12473] snd_pcm_plug_alloc+0x146/0x330 [ 539.386520][T12473] snd_pcm_oss_change_params_locked+0x19b8/0x3a30 [ 539.386548][T12473] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 539.386582][T12473] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 539.386604][T12473] snd_pcm_oss_ioctl+0x2212/0x37c0 [ 539.386624][T12473] ? hook_file_ioctl_common+0x145/0x410 [ 539.386640][T12473] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 539.386660][T12473] ? __fget_files+0x20e/0x3c0 [ 539.386678][T12473] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 539.386710][T12473] __x64_sys_ioctl+0x18e/0x210 [ 539.386734][T12473] do_syscall_64+0xcd/0xfa0 [ 539.386753][T12473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.386767][T12473] RIP: 0033:0x7f304978f7c9 [ 539.386780][T12473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.386794][T12473] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.386808][T12473] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 539.386817][T12473] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 539.386825][T12473] RBP: 00007f3049813f91 R08: 0000000000000000 R09: 0000000000000000 [ 539.386834][T12473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.386842][T12473] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 539.386861][T12473] [ 539.874331][T12482] random: crng reseeded on system resumption [ 540.529391][T12502] FAULT_INJECTION: forcing a failure. [ 540.529391][T12502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.607125][T12502] CPU: 0 UID: 0 PID: 12502 Comm: syz.1.1555 Tainted: G U syzkaller #0 PREEMPT(full) [ 540.607150][T12502] Tainted: [U]=USER [ 540.607155][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.607163][T12502] Call Trace: [ 540.607169][T12502] [ 540.607175][T12502] dump_stack_lvl+0x16c/0x1f0 [ 540.607197][T12502] should_fail_ex+0x512/0x640 [ 540.607222][T12502] _copy_from_user+0x2e/0xd0 [ 540.607246][T12502] move_addr_to_kernel+0x65/0x170 [ 540.607266][T12502] __copy_msghdr+0x386/0x470 [ 540.607280][T12502] copy_msghdr_from_user+0xc1/0x160 [ 540.607295][T12502] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 540.607312][T12502] ? __pfx__kstrtoull+0x10/0x10 [ 540.607332][T12502] ___sys_sendmsg+0xfe/0x1d0 [ 540.607347][T12502] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.607369][T12502] ? find_held_lock+0x2b/0x80 [ 540.607396][T12502] __sys_sendmmsg+0x200/0x420 [ 540.607412][T12502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 540.607432][T12502] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 540.607458][T12502] ? fput+0x9b/0xd0 [ 540.607477][T12502] ? ksys_write+0x1ac/0x250 [ 540.607492][T12502] ? __pfx_ksys_write+0x10/0x10 [ 540.607510][T12502] __x64_sys_sendmmsg+0x9c/0x100 [ 540.607524][T12502] ? lockdep_hardirqs_on+0x7c/0x110 [ 540.607541][T12502] do_syscall_64+0xcd/0xfa0 [ 540.607567][T12502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.607582][T12502] RIP: 0033:0x7f456878f7c9 [ 540.607594][T12502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.607608][T12502] RSP: 002b:00007f45669f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 540.607622][T12502] RAX: ffffffffffffffda RBX: 00007f45689e5fa0 RCX: 00007f456878f7c9 [ 540.607632][T12502] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 540.607641][T12502] RBP: 00007f45669f6090 R08: 0000000000000000 R09: 0000000000000000 [ 540.607649][T12502] R10: 00000000000000fd R11: 0000000000000246 R12: 0000000000000001 [ 540.607658][T12502] R13: 00007f45689e6038 R14: 00007f45689e5fa0 R15: 00007ffd57f8c828 [ 540.607676][T12502] [ 542.596134][T12541] random: crng reseeded on system resumption [ 544.604926][T12575] zswap: compressor not available [ 545.217524][T12593] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1570'. [ 545.496718][T12598] blktrace: Concurrent blktraces are not allowed on ram11 [ 545.788753][T12607] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1573'. [ 545.842374][T12607] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1573'. [ 546.450144][T12627] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1576'. [ 547.119054][T12627] bond0: (slave bond_slave_0): Releasing backup interface [ 547.259297][T12640] usb usb37: usbfs: process 12640 (syz.5.1580) did not claim interface 0 before use [ 547.653773][T12642] FAULT_INJECTION: forcing a failure. [ 547.653773][T12642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.773722][T12642] CPU: 0 UID: 0 PID: 12642 Comm: syz.1.1581 Tainted: G U syzkaller #0 PREEMPT(full) [ 547.773749][T12642] Tainted: [U]=USER [ 547.773755][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.773764][T12642] Call Trace: [ 547.773770][T12642] [ 547.773776][T12642] dump_stack_lvl+0x16c/0x1f0 [ 547.773816][T12642] should_fail_ex+0x512/0x640 [ 547.773838][T12642] ? page_copy_sane+0xcd/0x2d0 [ 547.773861][T12642] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 547.773882][T12642] ? fault_in_readable+0x135/0x1d0 [ 547.773901][T12642] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 547.773914][T12642] ? fault_in_readable+0x179/0x1d0 [ 547.773930][T12642] ? __pfx_fault_in_readable+0x10/0x10 [ 547.773945][T12642] ? rcu_is_watching+0x12/0xc0 [ 547.773961][T12642] ? I_BDEV+0xd/0x20 [ 547.773979][T12642] ? inode_to_bdi+0x9e/0x160 [ 547.774000][T12642] iomap_file_buffered_write+0x535/0xac0 [ 547.774029][T12642] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 547.774055][T12642] ? inode_set_ctime_current+0x2a1/0x8f0 [ 547.774093][T12642] ? __pfx_down_read+0x10/0x10 [ 547.774114][T12642] ? preempt_count_add+0x76/0x150 [ 547.774135][T12642] ? mnt_put_write_access_file+0xc1/0xf0 [ 547.774153][T12642] blkdev_write_iter+0x575/0xe00 [ 547.774174][T12642] vfs_write+0x7d3/0x11d0 [ 547.774190][T12642] ? __pfx_blkdev_write_iter+0x10/0x10 [ 547.774207][T12642] ? __pfx_vfs_write+0x10/0x10 [ 547.774221][T12642] ? find_held_lock+0x2b/0x80 [ 547.774247][T12642] ksys_write+0x12a/0x250 [ 547.774261][T12642] ? __pfx_ksys_write+0x10/0x10 [ 547.774281][T12642] do_syscall_64+0xcd/0xfa0 [ 547.774299][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.774314][T12642] RIP: 0033:0x7f456878f7c9 [ 547.774326][T12642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.774339][T12642] RSP: 002b:00007f45669f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 547.774353][T12642] RAX: ffffffffffffffda RBX: 00007f45689e5fa0 RCX: 00007f456878f7c9 [ 547.774363][T12642] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 547.774372][T12642] RBP: 00007f4568813f91 R08: 0000000000000000 R09: 0000000000000000 [ 547.774380][T12642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.774389][T12642] R13: 00007f45689e6038 R14: 00007f45689e5fa0 R15: 00007ffd57f8c828 [ 547.774409][T12642] [ 548.779144][T12665] FAULT_INJECTION: forcing a failure. [ 548.779144][T12665] name fail_futex, interval 1, probability 0, space 0, times 0 [ 548.823872][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.4.1586 Tainted: G U syzkaller #0 PREEMPT(full) [ 548.823898][T12665] Tainted: [U]=USER [ 548.823904][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 548.823912][T12665] Call Trace: [ 548.823918][T12665] [ 548.823924][T12665] dump_stack_lvl+0x16c/0x1f0 [ 548.823946][T12665] should_fail_ex+0x512/0x640 [ 548.823971][T12665] get_futex_key+0x1d0/0x1560 [ 548.823992][T12665] ? __pfx_get_futex_key+0x10/0x10 [ 548.824010][T12665] ? __pfx___schedule+0x10/0x10 [ 548.824025][T12665] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 548.824044][T12665] futex_wait_setup+0x9d/0x550 [ 548.824062][T12665] __futex_wait+0x193/0x2f0 [ 548.824076][T12665] ? __pfx___futex_wait+0x10/0x10 [ 548.824092][T12665] ? __pfx_futex_wake_mark+0x10/0x10 [ 548.824115][T12665] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 548.824135][T12665] ? __hrtimer_setup+0x176/0x280 [ 548.824157][T12665] ? ktime_add_safe+0x60/0x70 [ 548.824179][T12665] futex_wait+0xe8/0x380 [ 548.824191][T12665] ? __pfx_futex_wait+0x10/0x10 [ 548.824203][T12665] ? __lock_acquire+0xb8a/0x1c90 [ 548.824224][T12665] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 548.824251][T12665] do_futex+0x229/0x350 [ 548.824270][T12665] ? __pfx_do_futex+0x10/0x10 [ 548.824287][T12665] ? rcu_is_watching+0x12/0xc0 [ 548.824302][T12665] ? ktime_get+0x200/0x310 [ 548.824318][T12665] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.824334][T12665] ? read_tsc+0x9/0x20 [ 548.824353][T12665] __x64_sys_futex+0x1e0/0x4c0 [ 548.824374][T12665] ? __pfx___x64_sys_futex+0x10/0x10 [ 548.824393][T12665] ? xfd_validate_state+0x61/0x180 [ 548.824418][T12665] do_syscall_64+0xcd/0xfa0 [ 548.824437][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.824451][T12665] RIP: 0033:0x7fd92a58f7c9 [ 548.824463][T12665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.824477][T12665] RSP: 002b:00007ffeba570668 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 548.824491][T12665] RAX: ffffffffffffffda RBX: 0000000000086862 RCX: 00007fd92a58f7c9 [ 548.824500][T12665] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd92a7e5fac [ 548.824509][T12665] RBP: 0000000000000032 R08: 00007fd92b367000 R09: 00000015ba57095f [ 548.824518][T12665] R10: 00007ffeba570760 R11: 0000000000000246 R12: 00007fd92a7e5fac [ 548.824527][T12665] R13: 00007ffeba570760 R14: 0000000000086894 R15: 00007ffeba570780 [ 548.824545][T12665] [ 549.585129][T12642] Process accounting resumed [ 552.522460][T12712] FAULT_INJECTION: forcing a failure. [ 552.522460][T12712] name failslab, interval 1, probability 0, space 0, times 0 [ 552.634337][T12712] CPU: 0 UID: 0 PID: 12712 Comm: syz.1.1594 Tainted: G U syzkaller #0 PREEMPT(full) [ 552.634363][T12712] Tainted: [U]=USER [ 552.634368][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.634386][T12712] Call Trace: [ 552.634392][T12712] [ 552.634398][T12712] dump_stack_lvl+0x16c/0x1f0 [ 552.634420][T12712] should_fail_ex+0x512/0x640 [ 552.634440][T12712] ? fs_reclaim_acquire+0xae/0x150 [ 552.634461][T12712] should_failslab+0xc2/0x120 [ 552.634481][T12712] kmem_cache_alloc_noprof+0x75/0x6e0 [ 552.634496][T12712] ? __pfx_map_id_range_down+0x10/0x10 [ 552.634508][T12712] ? security_inode_alloc+0x3b/0x2b0 [ 552.634534][T12712] ? security_inode_alloc+0x3b/0x2b0 [ 552.634554][T12712] security_inode_alloc+0x3b/0x2b0 [ 552.634576][T12712] inode_init_always_gfp+0xce4/0x1030 [ 552.634594][T12712] alloc_inode+0x86/0x240 [ 552.634613][T12712] new_inode+0x22/0x1c0 [ 552.634630][T12712] ? proc_lookup_de+0x201/0x360 [ 552.634653][T12712] proc_get_inode+0x1d/0x780 [ 552.634673][T12712] proc_lookup_de+0x236/0x360 [ 552.634696][T12712] proc_tgid_net_lookup+0x75/0x120 [ 552.634719][T12712] __lookup_slow+0x251/0x460 [ 552.634741][T12712] ? __pfx___lookup_slow+0x10/0x10 [ 552.634772][T12712] ? lookup_fast+0x156/0x610 [ 552.634788][T12712] walk_component+0x353/0x5b0 [ 552.634803][T12712] link_path_walk+0x627/0xe20 [ 552.634823][T12712] path_openat+0x1b0/0x2cb0 [ 552.634844][T12712] ? __pfx_path_openat+0x10/0x10 [ 552.634861][T12712] ? __lock_acquire+0xb8a/0x1c90 [ 552.634883][T12712] do_filp_open+0x20b/0x470 [ 552.634899][T12712] ? __pfx_do_filp_open+0x10/0x10 [ 552.634920][T12712] ? __pfx_kfree_link+0x10/0x10 [ 552.634946][T12712] ? alloc_fd+0x471/0x7d0 [ 552.634965][T12712] do_sys_openat2+0x11b/0x1d0 [ 552.634986][T12712] ? __pfx_do_sys_openat2+0x10/0x10 [ 552.635007][T12712] ? __fget_files+0x20e/0x3c0 [ 552.635025][T12712] __x64_sys_openat+0x174/0x210 [ 552.635045][T12712] ? __pfx___x64_sys_openat+0x10/0x10 [ 552.635065][T12712] ? ksys_write+0x1ac/0x250 [ 552.635087][T12712] do_syscall_64+0xcd/0xfa0 [ 552.635105][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.635120][T12712] RIP: 0033:0x7f456878f7c9 [ 552.635132][T12712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.635146][T12712] RSP: 002b:00007f45669f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 552.635159][T12712] RAX: ffffffffffffffda RBX: 00007f45689e5fa0 RCX: 00007f456878f7c9 [ 552.635169][T12712] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 552.635178][T12712] RBP: 00007f45669f6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.635186][T12712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 552.635196][T12712] R13: 00007f45689e6038 R14: 00007f45689e5fa0 R15: 00007ffd57f8c828 [ 552.635215][T12712] [ 552.638651][T12711] FAULT_INJECTION: forcing a failure. [ 552.638651][T12711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.741858][T12711] CPU: 0 UID: 0 PID: 12711 Comm: syz.1.1594 Tainted: G U syzkaller #0 PREEMPT(full) [ 553.741883][T12711] Tainted: [U]=USER [ 553.741888][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.741897][T12711] Call Trace: [ 553.741902][T12711] [ 553.741909][T12711] dump_stack_lvl+0x16c/0x1f0 [ 553.741931][T12711] should_fail_ex+0x512/0x640 [ 553.741956][T12711] _copy_from_user+0x2e/0xd0 [ 553.741978][T12711] get_timespec64+0x8b/0x1b0 [ 553.741997][T12711] ? __pfx_get_timespec64+0x10/0x10 [ 553.742013][T12711] ? ktime_get+0x200/0x310 [ 553.742035][T12711] __x64_sys_futex+0x288/0x4c0 [ 553.742057][T12711] ? __pfx___x64_sys_futex+0x10/0x10 [ 553.742076][T12711] ? xfd_validate_state+0x61/0x180 [ 553.742103][T12711] do_syscall_64+0xcd/0xfa0 [ 553.742121][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.742136][T12711] RIP: 0033:0x7f456878f7c9 [ 553.742148][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.742162][T12711] RSP: 002b:00007ffd57f8c988 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 553.742176][T12711] RAX: ffffffffffffffda RBX: 0000000000087789 RCX: 00007f456878f7c9 [ 553.742186][T12711] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45689e5fac [ 553.742194][T12711] RBP: 0000000000000032 R08: 00007f456952f000 R09: 0000001657f8cc7f [ 553.742203][T12711] R10: 00007ffd57f8ca80 R11: 0000000000000246 R12: 00007f45689e5fac [ 553.742212][T12711] R13: 00007ffd57f8ca80 R14: 00000000000877bb R15: 00007ffd57f8caa0 [ 553.742230][T12711] [ 554.354686][T12734] FAULT_INJECTION: forcing a failure. [ 554.354686][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.395204][T12734] CPU: 0 UID: 0 PID: 12734 Comm: syz.1.1599 Tainted: G U syzkaller #0 PREEMPT(full) [ 554.395230][T12734] Tainted: [U]=USER [ 554.395234][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 554.395243][T12734] Call Trace: [ 554.395249][T12734] [ 554.395255][T12734] dump_stack_lvl+0x16c/0x1f0 [ 554.395277][T12734] should_fail_ex+0x512/0x640 [ 554.395309][T12734] _copy_from_user+0x2e/0xd0 [ 554.395332][T12734] copy_msghdr_from_user+0x98/0x160 [ 554.395348][T12734] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.395365][T12734] ? kfree+0x252/0x6d0 [ 554.395378][T12734] ? __lock_acquire+0x622/0x1c90 [ 554.395400][T12734] ___sys_recvmsg+0xdb/0x1a0 [ 554.395418][T12734] ? __pfx____sys_recvmsg+0x10/0x10 [ 554.395441][T12734] ? __pfx___might_resched+0x10/0x10 [ 554.395460][T12734] do_recvmmsg+0x2fe/0x750 [ 554.395477][T12734] ? __pfx_do_recvmmsg+0x10/0x10 [ 554.395494][T12734] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 554.395518][T12734] ? __fget_files+0x20e/0x3c0 [ 554.395537][T12734] __x64_sys_recvmmsg+0x22a/0x280 [ 554.395553][T12734] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 554.395573][T12734] do_syscall_64+0xcd/0xfa0 [ 554.395591][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.395606][T12734] RIP: 0033:0x7f456878f7c9 [ 554.395618][T12734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.395632][T12734] RSP: 002b:00007f45669d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 554.395646][T12734] RAX: ffffffffffffffda RBX: 00007f45689e6090 RCX: 00007f456878f7c9 [ 554.395656][T12734] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 554.395665][T12734] RBP: 00007f45669d5090 R08: 0000000000000000 R09: 0000000000000000 [ 554.395674][T12734] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 554.395682][T12734] R13: 00007f45689e6128 R14: 00007f45689e6090 R15: 00007ffd57f8c828 [ 554.395701][T12734] [ 554.430222][T12727] zswap: compressor 000 not available [ 555.224073][T12753] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 555.412548][T12748] zswap: compressor not available [ 556.413926][T12767] openvswitch: netlink: Flow actions attr not present in new flow. [ 557.457711][T12776] FAULT_INJECTION: forcing a failure. [ 557.457711][T12776] name failslab, interval 1, probability 0, space 0, times 0 [ 557.508720][T12776] CPU: 0 UID: 0 PID: 12776 Comm: syz.5.1609 Tainted: G U syzkaller #0 PREEMPT(full) [ 557.508745][T12776] Tainted: [U]=USER [ 557.508750][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 557.508759][T12776] Call Trace: [ 557.508764][T12776] [ 557.508771][T12776] dump_stack_lvl+0x16c/0x1f0 [ 557.508793][T12776] should_fail_ex+0x512/0x640 [ 557.508815][T12776] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 557.508831][T12776] should_failslab+0xc2/0x120 [ 557.508850][T12776] kmem_cache_alloc_noprof+0x75/0x6e0 [ 557.508865][T12776] ? security_file_alloc+0x34/0x2b0 [ 557.508884][T12776] ? security_file_alloc+0x34/0x2b0 [ 557.508907][T12776] security_file_alloc+0x34/0x2b0 [ 557.508922][T12776] init_file+0x93/0x4c0 [ 557.508941][T12776] alloc_empty_file+0x73/0x1e0 [ 557.508962][T12776] path_openat+0xda/0x2cb0 [ 557.508984][T12776] ? __pfx_path_openat+0x10/0x10 [ 557.509000][T12776] ? __lock_acquire+0xb8a/0x1c90 [ 557.509022][T12776] do_filp_open+0x20b/0x470 [ 557.509037][T12776] ? __pfx_do_filp_open+0x10/0x10 [ 557.509065][T12776] ? alloc_fd+0x471/0x7d0 [ 557.509085][T12776] do_sys_openat2+0x11b/0x1d0 [ 557.509105][T12776] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.509127][T12776] ? __fget_files+0x20e/0x3c0 [ 557.509144][T12776] __x64_sys_openat+0x174/0x210 [ 557.509165][T12776] ? __pfx___x64_sys_openat+0x10/0x10 [ 557.509184][T12776] ? ksys_write+0x1ac/0x250 [ 557.509205][T12776] do_syscall_64+0xcd/0xfa0 [ 557.509224][T12776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.509239][T12776] RIP: 0033:0x7f304978f7c9 [ 557.509251][T12776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.509265][T12776] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.509279][T12776] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 557.509288][T12776] RDX: 00000000001c9a01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 557.509297][T12776] RBP: 00007f304a6db090 R08: 0000000000000000 R09: 0000000000000000 [ 557.509306][T12776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.509314][T12776] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 557.509333][T12776] [ 558.468634][T12778] zswap: compressor not available [ 558.473933][T12781] FAULT_INJECTION: forcing a failure. [ 558.473933][T12781] name failslab, interval 1, probability 0, space 0, times 0 [ 558.548198][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.1.1610 Tainted: G U syzkaller #0 PREEMPT(full) [ 558.548224][T12781] Tainted: [U]=USER [ 558.548229][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.548238][T12781] Call Trace: [ 558.548243][T12781] [ 558.548249][T12781] dump_stack_lvl+0x16c/0x1f0 [ 558.548271][T12781] should_fail_ex+0x512/0x640 [ 558.548298][T12781] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 558.548317][T12781] should_failslab+0xc2/0x120 [ 558.548339][T12781] kmem_cache_alloc_noprof+0x75/0x6e0 [ 558.548353][T12781] ? __pmd_alloc+0xbf/0x8b0 [ 558.548375][T12781] ? __pmd_alloc+0xbf/0x8b0 [ 558.548392][T12781] __pmd_alloc+0xbf/0x8b0 [ 558.548412][T12781] __handle_mm_fault+0xada/0x2aa0 [ 558.548436][T12781] ? mt_find+0x3e2/0xa20 [ 558.548456][T12781] ? __pfx___handle_mm_fault+0x10/0x10 [ 558.548475][T12781] ? __pfx_mt_find+0x10/0x10 [ 558.548503][T12781] ? find_vma+0xbf/0x140 [ 558.548519][T12781] ? __pfx_find_vma+0x10/0x10 [ 558.548537][T12781] handle_mm_fault+0x589/0xd10 [ 558.548559][T12781] ? __pkru_allows_pkey+0x21/0xb0 [ 558.548583][T12781] do_user_addr_fault+0x7a6/0x1370 [ 558.548599][T12781] ? rcu_is_watching+0x12/0xc0 [ 558.548616][T12781] exc_page_fault+0x64/0xc0 [ 558.548634][T12781] asm_exc_page_fault+0x26/0x30 [ 558.548648][T12781] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 558.548670][T12781] Code: e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 2e 0f [ 558.548683][T12781] RSP: 0018:ffffc900046cfad8 EFLAGS: 00050202 [ 558.548695][T12781] RAX: 0000000000000030 RBX: 0000000000000002 RCX: 0000000000000002 [ 558.548704][T12781] RDX: ffffed1005689801 RSI: ffff88802b44c000 RDI: 0000000000000000 [ 558.548713][T12781] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1005689800 [ 558.548722][T12781] R10: ffff88802b44c001 R11: 0000000000000001 R12: ffffc900046cfd90 [ 558.548731][T12781] R13: 0000000000000002 R14: ffff88802b44c000 R15: 00007ffffffff000 [ 558.548750][T12781] _copy_to_iter+0x383/0x1710 [ 558.548765][T12781] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 558.548786][T12781] ? __pfx__copy_to_iter+0x10/0x10 [ 558.548799][T12781] ? kernfs_seq_stop+0xcd/0x120 [ 558.548816][T12781] ? kernfs_put_active+0x86/0xe0 [ 558.548845][T12781] seq_read_iter+0xd02/0x12d0 [ 558.548875][T12781] kernfs_fop_read_iter+0x46c/0x610 [ 558.548889][T12781] ? rw_verify_area+0xcf/0x6c0 [ 558.548905][T12781] vfs_read+0x8bf/0xcf0 [ 558.548922][T12781] ? __pfx___mutex_lock+0x10/0x10 [ 558.548940][T12781] ? __pfx_vfs_read+0x10/0x10 [ 558.548967][T12781] ksys_read+0x12a/0x250 [ 558.548982][T12781] ? __pfx_ksys_read+0x10/0x10 [ 558.549002][T12781] do_syscall_64+0xcd/0xfa0 [ 558.549020][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.549034][T12781] RIP: 0033:0x7f456878f7c9 [ 558.549045][T12781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.549058][T12781] RSP: 002b:00007f45669d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.549072][T12781] RAX: ffffffffffffffda RBX: 00007f45689e6090 RCX: 00007f456878f7c9 [ 558.549084][T12781] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 [ 558.549092][T12781] RBP: 00007f45669d5090 R08: 0000000000000000 R09: 0000000000000000 [ 558.549104][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.549113][T12781] R13: 00007f45689e6128 R14: 00007f45689e6090 R15: 00007ffd57f8c828 [ 558.549133][T12781] [ 559.721999][ T5149] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.817483][ T5149] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.881247][ T5149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.966026][ T5149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.990886][ T5149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.654881][T12783] chnl_net:caif_netlink_parms(): no params data found [ 561.120274][T12815] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.168800][T12824] FAULT_INJECTION: forcing a failure. [ 561.168800][T12824] name fail_futex, interval 1, probability 0, space 0, times 0 [ 561.219729][T12783] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.253758][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.1.1624 Tainted: G U syzkaller #0 PREEMPT(full) [ 561.253786][T12824] Tainted: [U]=USER [ 561.253791][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.253800][T12824] Call Trace: [ 561.253806][T12824] [ 561.253812][T12824] dump_stack_lvl+0x16c/0x1f0 [ 561.253834][T12824] should_fail_ex+0x512/0x640 [ 561.253859][T12824] get_futex_key+0x1d0/0x1560 [ 561.253880][T12824] ? __pfx_get_futex_key+0x10/0x10 [ 561.253908][T12824] futex_wait_setup+0x9d/0x550 [ 561.253926][T12824] __futex_wait+0x193/0x2f0 [ 561.253940][T12824] ? __pfx___futex_wait+0x10/0x10 [ 561.253956][T12824] ? __pfx_futex_wake_mark+0x10/0x10 [ 561.253979][T12824] ? futex_hash+0x2c5/0x380 [ 561.253998][T12824] ? futex_private_hash_put+0xd5/0x190 [ 561.254018][T12824] futex_wait+0xe8/0x380 [ 561.254031][T12824] ? __pfx_futex_wait+0x10/0x10 [ 561.254048][T12824] ? _copy_from_user+0x59/0xd0 [ 561.254068][T12824] ? io_uring_setup+0x16e4/0x20e0 [ 561.254088][T12824] do_futex+0x229/0x350 [ 561.254106][T12824] ? __pfx_do_futex+0x10/0x10 [ 561.254129][T12824] __x64_sys_futex+0x1e0/0x4c0 [ 561.254150][T12824] ? __pfx___x64_sys_futex+0x10/0x10 [ 561.254168][T12824] ? xfd_validate_state+0x61/0x180 [ 561.254186][T12824] ? __pfx_ksys_read+0x10/0x10 [ 561.254207][T12824] do_syscall_64+0xcd/0xfa0 [ 561.254225][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.254239][T12824] RIP: 0033:0x7f456878f7c9 [ 561.254252][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.254266][T12824] RSP: 002b:00007f45669f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 561.254280][T12824] RAX: ffffffffffffffda RBX: 00007f45689e5fa8 RCX: 00007f456878f7c9 [ 561.254289][T12824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f45689e5fa8 [ 561.254298][T12824] RBP: 00007f45689e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 561.254307][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.254315][T12824] R13: 00007f45689e6038 R14: 00007ffd57f8c740 R15: 00007ffd57f8c828 [ 561.254334][T12824] [ 561.580992][T12783] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.588242][T12783] bridge_slave_0: entered allmulticast mode [ 561.596161][T12783] bridge_slave_0: entered promiscuous mode [ 561.603672][T12783] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.610746][T12783] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.617935][T12783] bridge_slave_1: entered allmulticast mode [ 561.626096][T12783] bridge_slave_1: entered promiscuous mode [ 561.650073][T12783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.661239][T12783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.687026][T12783] team0: Port device team_slave_0 added [ 561.694400][T12783] team0: Port device team_slave_1 added [ 561.717492][T12783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.752156][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.786113][T12810] ima: policy update failed [ 561.794821][ T30] audit: type=1802 audit(1764502735.338:14): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1621" res=0 errno=0 [ 561.815146][T12783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.867211][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.902452][T12815] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.939810][T12783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.949798][T12783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.029702][T12783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.069315][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.100151][ T5149] Bluetooth: hci0: command tx timeout [ 562.152265][T12815] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.216665][ T1149] bridge0: port 3(netdevsim1) entered disabled state [ 562.256881][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 562.279064][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 562.299339][ T1149] bridge0: port 3(netdevsim1) entered disabled state [ 562.322224][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.355054][T12815] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.457470][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.647714][T12783] hsr_slave_0: entered promiscuous mode [ 562.682300][T12783] hsr_slave_1: entered promiscuous mode [ 562.705033][T12783] debugfs: 'hsr0' already exists in 'hsr' [ 562.732461][T12783] Cannot create hsr debugfs directory [ 562.853082][T12838] FAULT_INJECTION: forcing a failure. [ 562.853082][T12838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.930758][T12838] CPU: 0 UID: 0 PID: 12838 Comm: syz.4.1628 Tainted: G U syzkaller #0 PREEMPT(full) [ 562.930784][T12838] Tainted: [U]=USER [ 562.930789][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.930798][T12838] Call Trace: [ 562.930803][T12838] [ 562.930809][T12838] dump_stack_lvl+0x16c/0x1f0 [ 562.930831][T12838] should_fail_ex+0x512/0x640 [ 562.930855][T12838] _copy_from_user+0x2e/0xd0 [ 562.930878][T12838] ____sys_sendmsg+0x607/0xc70 [ 562.930898][T12838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.930918][T12838] ? __pfx__kstrtoull+0x10/0x10 [ 562.930939][T12838] ___sys_sendmsg+0x134/0x1d0 [ 562.930954][T12838] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.930976][T12838] ? find_held_lock+0x2b/0x80 [ 562.931003][T12838] __sys_sendmmsg+0x200/0x420 [ 562.931019][T12838] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.931039][T12838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.931065][T12838] ? fput+0x9b/0xd0 [ 562.931084][T12838] ? ksys_write+0x1ac/0x250 [ 562.931099][T12838] ? __pfx_ksys_write+0x10/0x10 [ 562.931117][T12838] __x64_sys_sendmmsg+0x9c/0x100 [ 562.931131][T12838] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.931148][T12838] do_syscall_64+0xcd/0xfa0 [ 562.931166][T12838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.931181][T12838] RIP: 0033:0x7fd92a58f7c9 [ 562.931192][T12838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.931206][T12838] RSP: 002b:00007fd92b366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.931221][T12838] RAX: ffffffffffffffda RBX: 00007fd92a7e5fa0 RCX: 00007fd92a58f7c9 [ 562.931231][T12838] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 562.931240][T12838] RBP: 00007fd92b366090 R08: 0000000000000000 R09: 0000000000000000 [ 562.931249][T12838] R10: 00000000000000fd R11: 0000000000000246 R12: 0000000000000001 [ 562.931257][T12838] R13: 00007fd92a7e6038 R14: 00007fd92a7e5fa0 R15: 00007ffeba570508 [ 562.931276][T12838] [ 563.859204][ T1149] bridge_slave_1: left allmulticast mode [ 563.878901][ T1149] bridge_slave_1: left promiscuous mode [ 563.898144][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.932212][ T1149] bridge_slave_0: left allmulticast mode [ 563.945083][ T1149] bridge_slave_0: left promiscuous mode [ 563.965707][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.170402][ T5149] Bluetooth: hci0: command tx timeout [ 564.884842][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.919604][ T1149] bond0 (unregistering): Released all slaves [ 565.504818][ T1149] hsr_slave_0: left promiscuous mode [ 565.546922][ T1149] hsr_slave_1: left promiscuous mode [ 565.577500][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.613771][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.654397][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.691665][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.764073][ T1149] veth0_macvtap: left promiscuous mode [ 565.804032][ T1149] veth1_vlan: left promiscuous mode [ 565.829371][ T1149] veth0_vlan: left promiscuous mode [ 566.088030][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.104564][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.238574][ T5149] Bluetooth: hci0: command tx timeout [ 567.213509][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 567.255048][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 567.608865][T12783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 567.739966][T12783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 567.786011][T12910] FAULT_INJECTION: forcing a failure. [ 567.786011][T12910] name failslab, interval 1, probability 0, space 0, times 0 [ 567.830538][T12783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 567.852075][T12910] CPU: 0 UID: 0 PID: 12910 Comm: syz.5.1639 Tainted: G U syzkaller #0 PREEMPT(full) [ 567.852102][T12910] Tainted: [U]=USER [ 567.852107][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.852117][T12910] Call Trace: [ 567.852123][T12910] [ 567.852130][T12910] dump_stack_lvl+0x16c/0x1f0 [ 567.852152][T12910] should_fail_ex+0x512/0x640 [ 567.852174][T12910] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 567.852192][T12910] should_failslab+0xc2/0x120 [ 567.852212][T12910] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 567.852228][T12910] ? __d_alloc+0x32/0xae0 [ 567.852247][T12910] ? __d_alloc+0x32/0xae0 [ 567.852262][T12910] __d_alloc+0x32/0xae0 [ 567.852279][T12910] d_alloc_pseudo+0x1c/0xc0 [ 567.852297][T12910] alloc_file_pseudo+0xcf/0x230 [ 567.852318][T12910] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 567.852337][T12910] ? alloc_fd+0x471/0x7d0 [ 567.852354][T12910] sock_alloc_file+0x50/0x210 [ 567.852371][T12910] __sys_socket+0x1c0/0x260 [ 567.852389][T12910] ? __pfx___sys_socket+0x10/0x10 [ 567.852407][T12910] ? xfd_validate_state+0x61/0x180 [ 567.852426][T12910] ? __pfx_ksys_write+0x10/0x10 [ 567.852444][T12910] __x64_sys_socket+0x72/0xb0 [ 567.852461][T12910] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.852478][T12910] do_syscall_64+0xcd/0xfa0 [ 567.852495][T12910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.852510][T12910] RIP: 0033:0x7f304978f7c9 [ 567.852522][T12910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.852536][T12910] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 567.852550][T12910] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 567.852560][T12910] RDX: 0000000000000014 RSI: 0000000000000002 RDI: 0000000000000010 [ 567.852568][T12910] RBP: 00007f3049813f91 R08: 0000000000000000 R09: 0000000000000000 [ 567.852576][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.852584][T12910] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 567.852603][T12910] [ 568.106494][T12783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.307740][ T5149] Bluetooth: hci0: command tx timeout [ 568.330721][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 568.570242][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 568.975201][T12783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.050548][T12783] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.152891][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.160043][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.343182][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.350364][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.985464][T12967] blktrace: Concurrent blktraces are not allowed on ram11 [ 570.699213][T12783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.901118][T12783] veth0_vlan: entered promiscuous mode [ 571.993238][T12783] veth1_vlan: entered promiscuous mode [ 572.115195][T12783] veth0_macvtap: entered promiscuous mode [ 572.174582][T12783] veth1_macvtap: entered promiscuous mode [ 572.443198][T13026] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1654'. [ 572.528111][T12783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.550458][T13025] ubi0: attaching mtd0 [ 572.596011][T12783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.615288][T13025] ubi0: scanning is finished [ 572.641965][T13025] ubi0: empty MTD device detected [ 572.686883][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.719013][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.761220][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.773883][T13033] Loading of unsigned module is rejected [ 572.955219][T13025] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 572.994796][T13025] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 573.017785][T13025] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 573.041900][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.064733][T13025] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 573.099189][T13025] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 573.152560][T13025] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 573.187370][T13035] blktrace: Concurrent blktraces are not allowed on ram11 [ 573.195033][T13025] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 729564269 [ 573.236988][T13025] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 573.282683][T13038] ubi0: background thread "ubi_bgt0d" started, PID 13038 [ 573.462692][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.551922][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.680748][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.728409][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.005826][T13067] FAULT_INJECTION: forcing a failure. [ 575.005826][T13067] name failslab, interval 1, probability 0, space 0, times 0 [ 575.127222][T13067] CPU: 0 UID: 0 PID: 13067 Comm: syz.5.1661 Tainted: G U syzkaller #0 PREEMPT(full) [ 575.127248][T13067] Tainted: [U]=USER [ 575.127253][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.127262][T13067] Call Trace: [ 575.127268][T13067] [ 575.127274][T13067] dump_stack_lvl+0x16c/0x1f0 [ 575.127305][T13067] should_fail_ex+0x512/0x640 [ 575.127327][T13067] ? fs_reclaim_acquire+0xae/0x150 [ 575.127347][T13067] should_failslab+0xc2/0x120 [ 575.127367][T13067] __kmalloc_noprof+0xdd/0x880 [ 575.127381][T13067] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 575.127401][T13067] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 575.127420][T13067] tomoyo_realpath_from_path+0xc2/0x6e0 [ 575.127438][T13067] ? tomoyo_profile+0x47/0x60 [ 575.127458][T13067] tomoyo_path_number_perm+0x245/0x580 [ 575.127479][T13067] ? tomoyo_path_number_perm+0x237/0x580 [ 575.127502][T13067] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.127525][T13067] ? find_held_lock+0x2b/0x80 [ 575.127556][T13067] ? find_held_lock+0x2b/0x80 [ 575.127570][T13067] ? hook_file_ioctl_common+0x145/0x410 [ 575.127589][T13067] ? __fget_files+0x20e/0x3c0 [ 575.127607][T13067] security_file_ioctl+0x9b/0x240 [ 575.127622][T13067] __x64_sys_ioctl+0xb7/0x210 [ 575.127644][T13067] do_syscall_64+0xcd/0xfa0 [ 575.127663][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.127677][T13067] RIP: 0033:0x7f304978f7c9 [ 575.127689][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.127703][T13067] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.127717][T13067] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 575.127726][T13067] RDX: 0000000000000001 RSI: 0000000000004b52 RDI: 0000000000000003 [ 575.127735][T13067] RBP: 00007f304a6db090 R08: 0000000000000000 R09: 0000000000000000 [ 575.127743][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.127752][T13067] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 575.127771][T13067] [ 575.560387][T13067] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.444520][T13096] vhci_hcd: invalid port number 9 [ 576.517102][T13096] vhci_hcd: invalid port number 9 [ 576.959499][T13108] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 577.018924][T13112] FAULT_INJECTION: forcing a failure. [ 577.018924][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 577.092869][T13106] FAULT_INJECTION: forcing a failure. [ 577.092869][T13106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.163108][T13112] CPU: 0 UID: 0 PID: 13112 Comm: syz.6.1669 Tainted: G U syzkaller #0 PREEMPT(full) [ 577.163134][T13112] Tainted: [U]=USER [ 577.163139][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.163148][T13112] Call Trace: [ 577.163153][T13112] [ 577.163159][T13112] dump_stack_lvl+0x16c/0x1f0 [ 577.163181][T13112] should_fail_ex+0x512/0x640 [ 577.163204][T13112] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 577.163221][T13112] should_failslab+0xc2/0x120 [ 577.163241][T13112] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 577.163256][T13112] ? __d_alloc+0x32/0xae0 [ 577.163285][T13112] ? __d_alloc+0x32/0xae0 [ 577.163299][T13112] __d_alloc+0x32/0xae0 [ 577.163317][T13112] d_alloc_parallel+0x111/0x1510 [ 577.163339][T13112] ? __lock_acquire+0xb8a/0x1c90 [ 577.163359][T13112] ? look_up_lock_class+0x59/0x150 [ 577.163377][T13112] ? register_lock_class+0x41/0x4c0 [ 577.163396][T13112] ? __pfx_d_alloc_parallel+0x10/0x10 [ 577.163419][T13112] ? lockdep_init_map_type+0x5c/0x280 [ 577.163439][T13112] ? lockdep_init_map_type+0x5c/0x280 [ 577.163461][T13112] __lookup_slow+0x193/0x460 [ 577.163482][T13112] ? __pfx___lookup_slow+0x10/0x10 [ 577.163513][T13112] ? lookup_fast+0x156/0x610 [ 577.163529][T13112] walk_component+0x353/0x5b0 [ 577.163544][T13112] link_path_walk+0x627/0xe20 [ 577.163564][T13112] path_openat+0x1b0/0x2cb0 [ 577.163585][T13112] ? __pfx_path_openat+0x10/0x10 [ 577.163602][T13112] ? __lock_acquire+0xb8a/0x1c90 [ 577.163622][T13112] do_filp_open+0x20b/0x470 [ 577.163638][T13112] ? __pfx_do_filp_open+0x10/0x10 [ 577.163660][T13112] ? __pfx_kfree_link+0x10/0x10 [ 577.163685][T13112] ? alloc_fd+0x471/0x7d0 [ 577.163704][T13112] do_sys_openat2+0x11b/0x1d0 [ 577.163725][T13112] ? __pfx_do_sys_openat2+0x10/0x10 [ 577.163747][T13112] ? __fget_files+0x20e/0x3c0 [ 577.163764][T13112] __x64_sys_openat+0x174/0x210 [ 577.163785][T13112] ? __pfx___x64_sys_openat+0x10/0x10 [ 577.163804][T13112] ? ksys_write+0x1ac/0x250 [ 577.163826][T13112] do_syscall_64+0xcd/0xfa0 [ 577.163844][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.163858][T13112] RIP: 0033:0x7f8a7e78f7c9 [ 577.163870][T13112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.163884][T13112] RSP: 002b:00007f8a7f59d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 577.163898][T13112] RAX: ffffffffffffffda RBX: 00007f8a7e9e6090 RCX: 00007f8a7e78f7c9 [ 577.163908][T13112] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 577.163917][T13112] RBP: 00007f8a7f59d090 R08: 0000000000000000 R09: 0000000000000000 [ 577.163925][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.163934][T13112] R13: 00007f8a7e9e6128 R14: 00007f8a7e9e6090 R15: 00007ffdf55ac668 [ 577.163953][T13112] [ 577.164130][T13106] CPU: 0 UID: 0 PID: 13106 Comm: syz.6.1669 Tainted: G U syzkaller #0 PREEMPT(full) [ 577.164150][T13106] Tainted: [U]=USER [ 577.164155][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.164163][T13106] Call Trace: [ 577.164167][T13106] [ 577.164173][T13106] dump_stack_lvl+0x16c/0x1f0 [ 577.164190][T13106] should_fail_ex+0x512/0x640 [ 577.164212][T13106] _copy_from_user+0x2e/0xd0 [ 577.164235][T13106] get_timespec64+0x8b/0x1b0 [ 577.164256][T13106] ? __pfx_get_timespec64+0x10/0x10 [ 577.164279][T13106] ? ktime_get+0x200/0x310 [ 577.164301][T13106] __x64_sys_futex+0x288/0x4c0 [ 577.164323][T13106] ? __pfx___x64_sys_futex+0x10/0x10 [ 577.164341][T13106] ? xfd_validate_state+0x61/0x180 [ 577.164368][T13106] do_syscall_64+0xcd/0xfa0 [ 577.164385][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.164399][T13106] RIP: 0033:0x7f8a7e78f7c9 [ 577.164410][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.164423][T13106] RSP: 002b:00007ffdf55ac7c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 577.164436][T13106] RAX: ffffffffffffffda RBX: 000000000008d78f RCX: 00007f8a7e78f7c9 [ 577.164445][T13106] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a7e9e5fac [ 577.164454][T13106] RBP: 0000000000000032 R08: 00007f8a7f5bf000 R09: 00000016f55acabf [ 577.164462][T13106] R10: 00007ffdf55ac8c0 R11: 0000000000000246 R12: 00007f8a7e9e5fac [ 577.164471][T13106] R13: 00007ffdf55ac8c0 R14: 000000000008d7c1 R15: 00007ffdf55ac8e0 [ 577.164489][T13106] [ 578.010494][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1668'. [ 578.504150][T13128] zswap: compressor 000 not available [ 578.695783][T13136] random: crng reseeded on system resumption [ 578.768985][T13140] netlink: 'syz.4.1675': attribute type 2 has an invalid length. [ 578.837100][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.850504][T13142] FAULT_INJECTION: forcing a failure. [ 578.850504][T13142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.912045][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.958260][T13142] CPU: 0 UID: 0 PID: 13142 Comm: syz.6.1674 Tainted: G U syzkaller #0 PREEMPT(full) [ 578.958285][T13142] Tainted: [U]=USER [ 578.958290][T13142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.958299][T13142] Call Trace: [ 578.958305][T13142] [ 578.958311][T13142] dump_stack_lvl+0x16c/0x1f0 [ 578.958336][T13142] should_fail_ex+0x512/0x640 [ 578.958359][T13142] _copy_from_user+0x2e/0xd0 [ 578.958383][T13142] copy_msghdr_from_user+0x98/0x160 [ 578.958399][T13142] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 578.958415][T13142] ? kfree+0x252/0x6d0 [ 578.958428][T13142] ? __lock_acquire+0x622/0x1c90 [ 578.958450][T13142] ___sys_recvmsg+0xdb/0x1a0 [ 578.958464][T13142] ? __pfx____sys_recvmsg+0x10/0x10 [ 578.958488][T13142] ? __pfx___might_resched+0x10/0x10 [ 578.958507][T13142] do_recvmmsg+0x2fe/0x750 [ 578.958523][T13142] ? __pfx_do_recvmmsg+0x10/0x10 [ 578.958540][T13142] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 578.958564][T13142] ? __fget_files+0x20e/0x3c0 [ 578.958583][T13142] __x64_sys_recvmmsg+0x22a/0x280 [ 578.958599][T13142] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 578.958619][T13142] do_syscall_64+0xcd/0xfa0 [ 578.958637][T13142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.958652][T13142] RIP: 0033:0x7f8a7e78f7c9 [ 578.958663][T13142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.958677][T13142] RSP: 002b:00007f8a7f59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 578.958691][T13142] RAX: ffffffffffffffda RBX: 00007f8a7e9e6090 RCX: 00007f8a7e78f7c9 [ 578.958701][T13142] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 578.958710][T13142] RBP: 00007f8a7f59d090 R08: 0000000000000000 R09: 0000000000000000 [ 578.958719][T13142] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 578.958727][T13142] R13: 00007f8a7e9e6128 R14: 00007f8a7e9e6090 R15: 00007ffdf55ac668 [ 578.958746][T13142] [ 579.361412][T13154] FAULT_INJECTION: forcing a failure. [ 579.361412][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 579.374643][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.1.1678 Tainted: G U syzkaller #0 PREEMPT(full) [ 579.374669][T13154] Tainted: [U]=USER [ 579.374674][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.374684][T13154] Call Trace: [ 579.374691][T13154] [ 579.374698][T13154] dump_stack_lvl+0x16c/0x1f0 [ 579.374722][T13154] should_fail_ex+0x512/0x640 [ 579.374744][T13154] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 579.374761][T13154] should_failslab+0xc2/0x120 [ 579.374781][T13154] kmem_cache_alloc_noprof+0x75/0x6e0 [ 579.374796][T13154] ? __pmd_alloc+0xbf/0x8b0 [ 579.374818][T13154] ? __pmd_alloc+0xbf/0x8b0 [ 579.374835][T13154] __pmd_alloc+0xbf/0x8b0 [ 579.374861][T13154] move_page_tables+0x30b7/0x4230 [ 579.374882][T13154] ? __pfx_copy_vma+0x10/0x10 [ 579.374902][T13154] ? __pfx_move_page_tables+0x10/0x10 [ 579.374926][T13154] ? rcu_is_watching+0x12/0xc0 [ 579.374940][T13154] ? finish_task_switch.isra.0+0x221/0xc10 [ 579.374956][T13154] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.374974][T13154] copy_vma_and_data+0x24e/0x790 [ 579.374990][T13154] ? __pfx_copy_vma_and_data+0x10/0x10 [ 579.375008][T13154] ? __vma_enter_locked+0x163/0x3f0 [ 579.375030][T13154] ? find_held_lock+0x2b/0x80 [ 579.375045][T13154] ? move_vma+0x52e/0x1770 [ 579.375057][T13154] ? __vm_enough_memory+0x184/0x3f0 [ 579.375078][T13154] move_vma+0x540/0x1770 [ 579.375095][T13154] ? __pfx_move_vma+0x10/0x10 [ 579.375112][T13154] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 579.375130][T13154] ? cap_mmap_addr+0x4b/0x120 [ 579.375149][T13154] ? bpf_lsm_mmap_addr+0x9/0x10 [ 579.375165][T13154] ? security_mmap_addr+0x6c/0x1e0 [ 579.375180][T13154] ? __get_unmapped_area+0x267/0x440 [ 579.375200][T13154] ? vrm_set_new_addr+0x208/0x290 [ 579.375215][T13154] mremap_to+0x1b7/0x450 [ 579.375229][T13154] do_mremap+0x13a8/0x2020 [ 579.375245][T13154] ? futex_private_hash_put+0x50/0x190 [ 579.375267][T13154] ? __pfx_do_mremap+0x10/0x10 [ 579.375285][T13154] ? ksys_write+0x190/0x250 [ 579.375304][T13154] __do_sys_mremap+0x119/0x170 [ 579.375318][T13154] ? __pfx___do_sys_mremap+0x10/0x10 [ 579.375337][T13154] ? __x64_sys_futex+0x1e0/0x4c0 [ 579.375366][T13154] do_syscall_64+0xcd/0xfa0 [ 579.375384][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.375399][T13154] RIP: 0033:0x7f456878f7c9 [ 579.375412][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.375426][T13154] RSP: 002b:00007f45669f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 579.375440][T13154] RAX: ffffffffffffffda RBX: 00007f45689e5fa0 RCX: 00007f456878f7c9 [ 579.375451][T13154] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 579.375460][T13154] RBP: 00007f4568813f91 R08: 00007fffffffe000 R09: 0000000000000000 [ 579.375469][T13154] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 579.375479][T13154] R13: 00007f45689e6038 R14: 00007f45689e5fa0 R15: 00007ffd57f8c828 [ 579.375499][T13154] [ 580.142570][T13167] FAULT_INJECTION: forcing a failure. [ 580.142570][T13167] name failslab, interval 1, probability 0, space 0, times 0 [ 580.174763][T13167] CPU: 0 UID: 0 PID: 13167 Comm: syz.5.1682 Tainted: G U syzkaller #0 PREEMPT(full) [ 580.174792][T13167] Tainted: [U]=USER [ 580.174797][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.174806][T13167] Call Trace: [ 580.174812][T13167] [ 580.174818][T13167] dump_stack_lvl+0x16c/0x1f0 [ 580.174841][T13167] should_fail_ex+0x512/0x640 [ 580.174863][T13167] ? fs_reclaim_acquire+0xae/0x150 [ 580.174883][T13167] should_failslab+0xc2/0x120 [ 580.174903][T13167] __kmalloc_noprof+0xdd/0x880 [ 580.174916][T13167] ? kfree+0x252/0x6d0 [ 580.174927][T13167] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 580.174948][T13167] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 580.174964][T13167] tomoyo_realpath_from_path+0xc2/0x6e0 [ 580.174986][T13167] tomoyo_check_open_permission+0x2ab/0x3c0 [ 580.175000][T13167] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 580.175032][T13167] ? lock_acquire+0x179/0x350 [ 580.175051][T13167] ? find_held_lock+0x2b/0x80 [ 580.175066][T13167] ? mnt_get_write_access+0x52/0x2f0 [ 580.175087][T13167] tomoyo_file_open+0x6b/0x90 [ 580.175107][T13167] security_file_open+0x84/0x1e0 [ 580.175124][T13167] do_dentry_open+0x596/0x1530 [ 580.175146][T13167] vfs_open+0x82/0x3f0 [ 580.175168][T13167] path_openat+0x1de4/0x2cb0 [ 580.175190][T13167] ? __pfx_path_openat+0x10/0x10 [ 580.175207][T13167] ? __lock_acquire+0xb8a/0x1c90 [ 580.175227][T13167] do_filp_open+0x20b/0x470 [ 580.175243][T13167] ? __pfx_do_filp_open+0x10/0x10 [ 580.175272][T13167] ? alloc_fd+0x471/0x7d0 [ 580.175292][T13167] do_sys_openat2+0x11b/0x1d0 [ 580.175312][T13167] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.175334][T13167] ? __fget_files+0x20e/0x3c0 [ 580.175352][T13167] __x64_sys_openat+0x174/0x210 [ 580.175373][T13167] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.175393][T13167] ? ksys_write+0x1ac/0x250 [ 580.175414][T13167] do_syscall_64+0xcd/0xfa0 [ 580.175433][T13167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.175447][T13167] RIP: 0033:0x7f304978f7c9 [ 580.175460][T13167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.175474][T13167] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.175488][T13167] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 580.175497][T13167] RDX: 00000000001c9a01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 580.175507][T13167] RBP: 00007f304a6db090 R08: 0000000000000000 R09: 0000000000000000 [ 580.175515][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.175528][T13167] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 580.175547][T13167] [ 580.465390][T13154] Process accounting paused [ 580.523185][T13169] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 581.035173][T13167] ERROR: Out of memory at tomoyo_realpath_from_path. [ 582.325052][T13204] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 583.300574][T13233] FAULT_INJECTION: forcing a failure. [ 583.300574][T13233] name fail_futex, interval 1, probability 0, space 0, times 0 [ 583.403009][T13233] CPU: 0 UID: 0 PID: 13233 Comm: syz.6.1701 Tainted: G U syzkaller #0 PREEMPT(full) [ 583.403036][T13233] Tainted: [U]=USER [ 583.403041][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.403050][T13233] Call Trace: [ 583.403056][T13233] [ 583.403063][T13233] dump_stack_lvl+0x16c/0x1f0 [ 583.403086][T13233] should_fail_ex+0x512/0x640 [ 583.403110][T13233] get_futex_key+0x1d0/0x1560 [ 583.403131][T13233] ? __pfx_get_futex_key+0x10/0x10 [ 583.403155][T13233] futex_wait_setup+0x9d/0x550 [ 583.403174][T13233] __futex_wait+0x193/0x2f0 [ 583.403188][T13233] ? __pfx___futex_wait+0x10/0x10 [ 583.403203][T13233] ? __pfx_futex_wake_mark+0x10/0x10 [ 583.403226][T13233] ? futex_hash+0x2c5/0x380 [ 583.403244][T13233] ? futex_private_hash_put+0xd5/0x190 [ 583.403263][T13233] futex_wait+0xe8/0x380 [ 583.403275][T13233] ? __pfx_futex_wait+0x10/0x10 [ 583.403291][T13233] ? _copy_from_user+0x59/0xd0 [ 583.403312][T13233] ? io_uring_setup+0x16e4/0x20e0 [ 583.403332][T13233] do_futex+0x229/0x350 [ 583.403350][T13233] ? __pfx_do_futex+0x10/0x10 [ 583.403373][T13233] __x64_sys_futex+0x1e0/0x4c0 [ 583.403394][T13233] ? __pfx___x64_sys_futex+0x10/0x10 [ 583.403412][T13233] ? xfd_validate_state+0x61/0x180 [ 583.403441][T13233] ? __pfx_ksys_read+0x10/0x10 [ 583.403463][T13233] do_syscall_64+0xcd/0xfa0 [ 583.403483][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.403498][T13233] RIP: 0033:0x7f8a7e78f7c9 [ 583.403511][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.403524][T13233] RSP: 002b:00007f8a7f5be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 583.403538][T13233] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa8 RCX: 00007f8a7e78f7c9 [ 583.403548][T13233] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a7e9e5fa8 [ 583.403557][T13233] RBP: 00007f8a7e9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 583.403565][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.403573][T13233] R13: 00007f8a7e9e6038 R14: 00007ffdf55ac580 R15: 00007ffdf55ac668 [ 583.403592][T13233] [ 583.634536][ C0] vkms_vblank_simulate: vblank timer overrun [ 583.705797][T13239] QAT: Stopping all acceleration devices. [ 583.712310][T13239] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1700'. [ 584.294076][T13258] ima: policy update failed [ 584.321376][T13258] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1706'. [ 584.333947][ T30] audit: type=1802 audit(1764502757.975:15): pid=13258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1706" res=0 errno=0 [ 585.756832][T13301] random: crng reseeded on system resumption [ 587.404491][T13333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 591.240885][T13436] binder: 13430:13436 ioctl 400c620e 0 returned -22 [ 591.356607][T13433] ptrace attach of "./syz-executor exec"[12783] was attempted by "./syz-executor exec"[13433] [ 591.554050][T13444] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1738'. [ 591.639342][T13446] FAULT_INJECTION: forcing a failure. [ 591.639342][T13446] name fail_futex, interval 1, probability 0, space 0, times 0 [ 591.703810][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.5.1739 Tainted: G U syzkaller #0 PREEMPT(full) [ 591.703839][T13446] Tainted: [U]=USER [ 591.703844][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.703854][T13446] Call Trace: [ 591.703859][T13446] [ 591.703866][T13446] dump_stack_lvl+0x16c/0x1f0 [ 591.703889][T13446] should_fail_ex+0x512/0x640 [ 591.703914][T13446] get_futex_key+0x1d0/0x1560 [ 591.703935][T13446] ? __pfx_get_futex_key+0x10/0x10 [ 591.703954][T13446] ? __pfx___schedule+0x10/0x10 [ 591.703968][T13446] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 591.703987][T13446] futex_wait_setup+0x9d/0x550 [ 591.704006][T13446] __futex_wait+0x193/0x2f0 [ 591.704019][T13446] ? __pfx___futex_wait+0x10/0x10 [ 591.704035][T13446] ? __pfx_futex_wake_mark+0x10/0x10 [ 591.704059][T13446] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 591.704079][T13446] ? __hrtimer_setup+0x176/0x280 [ 591.704101][T13446] ? ktime_add_safe+0x60/0x70 [ 591.704123][T13446] futex_wait+0xe8/0x380 [ 591.704136][T13446] ? __pfx_futex_wait+0x10/0x10 [ 591.704148][T13446] ? __lock_acquire+0xb8a/0x1c90 [ 591.704169][T13446] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 591.704195][T13446] do_futex+0x229/0x350 [ 591.704215][T13446] ? __pfx_do_futex+0x10/0x10 [ 591.704232][T13446] ? rcu_is_watching+0x12/0xc0 [ 591.704247][T13446] ? ktime_get+0x200/0x310 [ 591.704263][T13446] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.704280][T13446] ? read_tsc+0x9/0x20 [ 591.704299][T13446] __x64_sys_futex+0x1e0/0x4c0 [ 591.704320][T13446] ? __pfx___x64_sys_futex+0x10/0x10 [ 591.704339][T13446] ? xfd_validate_state+0x61/0x180 [ 591.704364][T13446] do_syscall_64+0xcd/0xfa0 [ 591.704383][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.704398][T13446] RIP: 0033:0x7f304978f7c9 [ 591.704411][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.704425][T13446] RSP: 002b:00007ffdaa9bbed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 591.704439][T13446] RAX: ffffffffffffffda RBX: 00000000000910ad RCX: 00007f304978f7c9 [ 591.704449][T13446] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30499e5fac [ 591.704458][T13446] RBP: 0000000000000032 R08: 00007f304a6dc000 R09: 00000015aa9bc1cf [ 591.704471][T13446] R10: 00007ffdaa9bbfd0 R11: 0000000000000246 R12: 00007f30499e5fac [ 591.704679][T13446] R13: 00007ffdaa9bbfd0 R14: 00000000000910df R15: 00007ffdaa9bbff0 [ 591.704705][T13446] [ 592.093279][T13458] random: crng reseeded on system resumption [ 592.909163][T13489] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1844722648.806441435.2278367413), cmd(2) [ 593.898365][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 595.206009][T13539] random: crng reseeded on system resumption [ 595.340203][T13539] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1756'. [ 595.448963][T13545] FAULT_INJECTION: forcing a failure. [ 595.448963][T13545] name failslab, interval 1, probability 0, space 0, times 0 [ 595.514780][T13545] CPU: 0 UID: 0 PID: 13545 Comm: syz.6.1758 Tainted: G U syzkaller #0 PREEMPT(full) [ 595.514807][T13545] Tainted: [U]=USER [ 595.514812][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 595.514822][T13545] Call Trace: [ 595.514827][T13545] [ 595.514834][T13545] dump_stack_lvl+0x16c/0x1f0 [ 595.514857][T13545] should_fail_ex+0x512/0x640 [ 595.514879][T13545] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 595.514896][T13545] should_failslab+0xc2/0x120 [ 595.514916][T13545] kmem_cache_alloc_noprof+0x75/0x6e0 [ 595.514931][T13545] ? taskstats_exit+0x654/0xbe0 [ 595.514948][T13545] ? taskstats_exit+0x654/0xbe0 [ 595.514959][T13545] ? acct_update_integrals+0x2ce/0x4a0 [ 595.514972][T13545] taskstats_exit+0x654/0xbe0 [ 595.514986][T13545] ? __pfx_taskstats_exit+0x10/0x10 [ 595.515002][T13545] ? exit_signals+0x38e/0xb40 [ 595.515021][T13545] do_exit+0x5dc/0x2bf0 [ 595.515044][T13545] ? __pfx_do_exit+0x10/0x10 [ 595.515062][T13545] ? do_raw_spin_lock+0x12c/0x2b0 [ 595.515084][T13545] ? find_held_lock+0x2b/0x80 [ 595.515102][T13545] do_group_exit+0xd3/0x2a0 [ 595.515122][T13545] get_signal+0x2671/0x26d0 [ 595.515145][T13545] ? __pfx_get_signal+0x10/0x10 [ 595.515160][T13545] ? do_futex+0x122/0x350 [ 595.515180][T13545] ? __pfx_do_futex+0x10/0x10 [ 595.515200][T13545] arch_do_signal_or_restart+0x8f/0x790 [ 595.515220][T13545] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 595.515241][T13545] ? ksys_mmap_pgoff+0x85/0x5c0 [ 595.515282][T13545] exit_to_user_mode_loop+0x85/0x130 [ 595.515305][T13545] do_syscall_64+0x426/0xfa0 [ 595.515324][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.515339][T13545] RIP: 0033:0x7f8a7e78f7c9 [ 595.515352][T13545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.515366][T13545] RSP: 002b:00007f8a7f5be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 595.515380][T13545] RAX: fffffffffffffe00 RBX: 00007f8a7e9e5fa8 RCX: 00007f8a7e78f7c9 [ 595.515390][T13545] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a7e9e5fa8 [ 595.515399][T13545] RBP: 00007f8a7e9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 595.515408][T13545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.515417][T13545] R13: 00007f8a7e9e6038 R14: 00007ffdf55ac580 R15: 00007ffdf55ac668 [ 595.515435][T13545] [ 595.859400][T13547] vhci_hcd: invalid port number 0 [ 595.900338][T13547] input: jJǸ-9%vJ86 as /devices/virtual/input/input19 [ 596.002563][T13554] FAULT_INJECTION: forcing a failure. [ 596.002563][T13554] name failslab, interval 1, probability 0, space 0, times 0 [ 596.094764][T13554] CPU: 0 UID: 0 PID: 13554 Comm: syz.5.1762 Tainted: G U syzkaller #0 PREEMPT(full) [ 596.094790][T13554] Tainted: [U]=USER [ 596.094795][T13554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.094804][T13554] Call Trace: [ 596.094810][T13554] [ 596.094816][T13554] dump_stack_lvl+0x16c/0x1f0 [ 596.094838][T13554] should_fail_ex+0x512/0x640 [ 596.094859][T13554] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 596.094876][T13554] should_failslab+0xc2/0x120 [ 596.094896][T13554] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 596.094912][T13554] ? proc_alloc_inode+0x25/0x200 [ 596.094933][T13554] ? __pfx_proc_alloc_inode+0x10/0x10 [ 596.094951][T13554] ? proc_alloc_inode+0x25/0x200 [ 596.094968][T13554] proc_alloc_inode+0x25/0x200 [ 596.094986][T13554] alloc_inode+0x64/0x240 [ 596.095006][T13554] new_inode+0x22/0x1c0 [ 596.095023][T13554] ? proc_lookup_de+0x201/0x360 [ 596.095045][T13554] proc_get_inode+0x1d/0x780 [ 596.095064][T13554] proc_lookup_de+0x236/0x360 [ 596.095087][T13554] proc_lookup+0xcf/0x110 [ 596.095107][T13554] __lookup_slow+0x251/0x460 [ 596.095128][T13554] ? __pfx___lookup_slow+0x10/0x10 [ 596.095160][T13554] ? lookup_fast+0x156/0x610 [ 596.095176][T13554] walk_component+0x353/0x5b0 [ 596.095191][T13554] link_path_walk+0x627/0xe20 [ 596.095210][T13554] path_openat+0x1b0/0x2cb0 [ 596.095232][T13554] ? __pfx_path_openat+0x10/0x10 [ 596.095248][T13554] ? __lock_acquire+0xb8a/0x1c90 [ 596.095271][T13554] do_filp_open+0x20b/0x470 [ 596.095287][T13554] ? __pfx_do_filp_open+0x10/0x10 [ 596.095309][T13554] ? __pfx_kfree_link+0x10/0x10 [ 596.095334][T13554] ? alloc_fd+0x471/0x7d0 [ 596.095353][T13554] do_sys_openat2+0x11b/0x1d0 [ 596.095374][T13554] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.095396][T13554] ? __fget_files+0x20e/0x3c0 [ 596.095413][T13554] __x64_sys_openat+0x174/0x210 [ 596.095434][T13554] ? __pfx___x64_sys_openat+0x10/0x10 [ 596.095453][T13554] ? ksys_write+0x1ac/0x250 [ 596.095481][T13554] do_syscall_64+0xcd/0xfa0 [ 596.095500][T13554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.095514][T13554] RIP: 0033:0x7f304978f7c9 [ 596.095527][T13554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.095541][T13554] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.095555][T13554] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 596.095566][T13554] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 596.095575][T13554] RBP: 00007f304a6db090 R08: 0000000000000000 R09: 0000000000000000 [ 596.095584][T13554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.095593][T13554] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 596.095612][T13554] [ 596.393622][T13553] FAULT_INJECTION: forcing a failure. [ 596.393622][T13553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.407714][T13553] CPU: 0 UID: 0 PID: 13553 Comm: syz.5.1762 Tainted: G U syzkaller #0 PREEMPT(full) [ 596.407739][T13553] Tainted: [U]=USER [ 596.407744][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.407753][T13553] Call Trace: [ 596.407759][T13553] [ 596.407765][T13553] dump_stack_lvl+0x16c/0x1f0 [ 596.407788][T13553] should_fail_ex+0x512/0x640 [ 596.407813][T13553] _copy_from_user+0x2e/0xd0 [ 596.407836][T13553] get_timespec64+0x8b/0x1b0 [ 596.407855][T13553] ? __pfx_get_timespec64+0x10/0x10 [ 596.407871][T13553] ? ktime_get+0x200/0x310 [ 596.407893][T13553] __x64_sys_futex+0x288/0x4c0 [ 596.407915][T13553] ? __pfx___x64_sys_futex+0x10/0x10 [ 596.407933][T13553] ? xfd_validate_state+0x61/0x180 [ 596.407960][T13553] do_syscall_64+0xcd/0xfa0 [ 596.407978][T13553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.407993][T13553] RIP: 0033:0x7f304978f7c9 [ 596.408006][T13553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.408019][T13553] RSP: 002b:00007ffdaa9bbed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 596.408033][T13553] RAX: ffffffffffffffda RBX: 0000000000092358 RCX: 00007f304978f7c9 [ 596.408043][T13553] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30499e5fac [ 596.408052][T13553] RBP: 0000000000000032 R08: 00007f304a6dc000 R09: 00000016aa9bc1cf [ 596.408061][T13553] R10: 00007ffdaa9bbfd0 R11: 0000000000000246 R12: 00007f30499e5fac [ 596.408070][T13553] R13: 00007ffdaa9bbfd0 R14: 000000000009238a R15: 00007ffdaa9bbff0 [ 596.408089][T13553] [ 597.315829][T13565] pim6reg: entered allmulticast mode [ 598.165460][T13579] FAULT_INJECTION: forcing a failure. [ 598.165460][T13579] name fail_futex, interval 1, probability 0, space 0, times 0 [ 598.239192][T13575] zswap: compressor not available [ 598.245216][T13579] CPU: 0 UID: 0 PID: 13579 Comm: syz.6.1769 Tainted: G U syzkaller #0 PREEMPT(full) [ 598.245249][T13579] Tainted: [U]=USER [ 598.245254][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.245263][T13579] Call Trace: [ 598.245269][T13579] [ 598.245275][T13579] dump_stack_lvl+0x16c/0x1f0 [ 598.245298][T13579] should_fail_ex+0x512/0x640 [ 598.245322][T13579] get_futex_key+0x293/0x1560 [ 598.245344][T13579] ? __pfx_get_futex_key+0x10/0x10 [ 598.245362][T13579] ? __mutex_trylock_common+0xe9/0x250 [ 598.245387][T13579] futex_wake+0xea/0x530 [ 598.245410][T13579] ? __pfx_futex_wake+0x10/0x10 [ 598.245430][T13579] ? __lock_acquire+0xb8a/0x1c90 [ 598.245457][T13579] do_futex+0x1e3/0x350 [ 598.245476][T13579] ? __pfx_do_futex+0x10/0x10 [ 598.245493][T13579] ? __might_fault+0xe3/0x190 [ 598.245513][T13579] mm_release+0x24e/0x300 [ 598.245530][T13579] do_exit+0x68e/0x2bf0 [ 598.245553][T13579] ? __pfx_do_exit+0x10/0x10 [ 598.245572][T13579] ? do_raw_spin_lock+0x12c/0x2b0 [ 598.245593][T13579] ? find_held_lock+0x2b/0x80 [ 598.245611][T13579] do_group_exit+0xd3/0x2a0 [ 598.245631][T13579] get_signal+0x2671/0x26d0 [ 598.245655][T13579] ? __pfx_get_signal+0x10/0x10 [ 598.245671][T13579] ? do_futex+0x122/0x350 [ 598.245692][T13579] ? __pfx_do_futex+0x10/0x10 [ 598.245713][T13579] arch_do_signal_or_restart+0x8f/0x790 [ 598.245732][T13579] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 598.245760][T13579] exit_to_user_mode_loop+0x85/0x130 [ 598.245783][T13579] do_syscall_64+0x426/0xfa0 [ 598.245801][T13579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.245816][T13579] RIP: 0033:0x7f8a7e78f7c9 [ 598.245828][T13579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.245842][T13579] RSP: 002b:00007f8a7f5be0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 598.245857][T13579] RAX: fffffffffffffe00 RBX: 00007f8a7e9e5fa8 RCX: 00007f8a7e78f7c9 [ 598.245867][T13579] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8a7e9e5fa8 [ 598.245876][T13579] RBP: 00007f8a7e9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 598.245885][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.245894][T13579] R13: 00007f8a7e9e6038 R14: 00007ffdf55ac580 R15: 00007ffdf55ac668 [ 598.245912][T13579] [ 598.817244][T13583] FAULT_INJECTION: forcing a failure. [ 598.817244][T13583] name failslab, interval 1, probability 0, space 0, times 0 [ 598.839664][T13583] CPU: 0 UID: 0 PID: 13583 Comm: syz.6.1770 Tainted: G U syzkaller #0 PREEMPT(full) [ 598.839693][T13583] Tainted: [U]=USER [ 598.839698][T13583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.839707][T13583] Call Trace: [ 598.839713][T13583] [ 598.839720][T13583] dump_stack_lvl+0x16c/0x1f0 [ 598.839742][T13583] should_fail_ex+0x512/0x640 [ 598.839764][T13583] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 598.839784][T13583] should_failslab+0xc2/0x120 [ 598.839804][T13583] __kvmalloc_node_noprof+0x141/0x9c0 [ 598.839821][T13583] ? trace_kmalloc+0x2b/0xd0 [ 598.839837][T13583] ? __kvmalloc_node_noprof+0x3c0/0x9c0 [ 598.839852][T13583] ? io_alloc_cache_init+0x38/0x170 [ 598.839874][T13583] ? io_alloc_cache_init+0x38/0x170 [ 598.839893][T13583] io_alloc_cache_init+0x38/0x170 [ 598.839913][T13583] io_rsrc_cache_init+0x40/0x50 [ 598.839932][T13583] io_uring_setup+0x68e/0x20e0 [ 598.839999][T13583] ? __pfx_io_uring_setup+0x10/0x10 [ 598.840015][T13583] ? do_futex+0x122/0x350 [ 598.840036][T13583] ? __pfx_do_futex+0x10/0x10 [ 598.840053][T13583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 598.840083][T13583] ? xfd_validate_state+0x61/0x180 [ 598.840102][T13583] ? __pfx_do_writev+0x10/0x10 [ 598.840120][T13583] __x64_sys_io_uring_setup+0xc2/0x170 [ 598.840141][T13583] do_syscall_64+0xcd/0xfa0 [ 598.840159][T13583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.840174][T13583] RIP: 0033:0x7f8a7e78f7c9 [ 598.840186][T13583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.840199][T13583] RSP: 002b:00007f8a7f5be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 598.840213][T13583] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa0 RCX: 00007f8a7e78f7c9 [ 598.840224][T13583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 598.840232][T13583] RBP: 00007f8a7e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.840241][T13583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.840250][T13583] R13: 00007f8a7e9e6038 R14: 00007f8a7e9e5fa0 R15: 00007ffdf55ac668 [ 598.840269][T13583] [ 599.104527][T13585] FAULT_INJECTION: forcing a failure. [ 599.104527][T13585] name failslab, interval 1, probability 0, space 0, times 0 [ 599.117270][T13585] CPU: 0 UID: 0 PID: 13585 Comm: syz.6.1771 Tainted: G U syzkaller #0 PREEMPT(full) [ 599.117296][T13585] Tainted: [U]=USER [ 599.117301][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.117310][T13585] Call Trace: [ 599.117316][T13585] [ 599.117322][T13585] dump_stack_lvl+0x16c/0x1f0 [ 599.117345][T13585] should_fail_ex+0x512/0x640 [ 599.117367][T13585] ? fs_reclaim_acquire+0xae/0x150 [ 599.117387][T13585] should_failslab+0xc2/0x120 [ 599.117407][T13585] __kmalloc_noprof+0xdd/0x880 [ 599.117421][T13585] ? tomoyo_encode2+0x100/0x3e0 [ 599.117440][T13585] ? tomoyo_encode2+0x100/0x3e0 [ 599.117455][T13585] tomoyo_encode2+0x100/0x3e0 [ 599.117473][T13585] tomoyo_encode+0x29/0x50 [ 599.117488][T13585] tomoyo_realpath_from_path+0x18f/0x6e0 [ 599.117510][T13585] tomoyo_check_open_permission+0x2ab/0x3c0 [ 599.117525][T13585] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 599.117556][T13585] ? lock_acquire+0x179/0x350 [ 599.117575][T13585] ? find_held_lock+0x2b/0x80 [ 599.117590][T13585] ? mnt_get_write_access+0x52/0x2f0 [ 599.117612][T13585] tomoyo_file_open+0x6b/0x90 [ 599.117631][T13585] security_file_open+0x84/0x1e0 [ 599.117647][T13585] do_dentry_open+0x596/0x1530 [ 599.117670][T13585] vfs_open+0x82/0x3f0 [ 599.117692][T13585] path_openat+0x1de4/0x2cb0 [ 599.117714][T13585] ? __pfx_path_openat+0x10/0x10 [ 599.117731][T13585] ? __lock_acquire+0xb8a/0x1c90 [ 599.117751][T13585] do_filp_open+0x20b/0x470 [ 599.117768][T13585] ? __pfx_do_filp_open+0x10/0x10 [ 599.117797][T13585] ? alloc_fd+0x471/0x7d0 [ 599.117816][T13585] do_sys_openat2+0x11b/0x1d0 [ 599.117839][T13585] ? __pfx_do_sys_openat2+0x10/0x10 [ 599.117862][T13585] ? __fget_files+0x20e/0x3c0 [ 599.117880][T13585] __x64_sys_openat+0x174/0x210 [ 599.117900][T13585] ? __pfx___x64_sys_openat+0x10/0x10 [ 599.117920][T13585] ? ksys_write+0x1ac/0x250 [ 599.117942][T13585] do_syscall_64+0xcd/0xfa0 [ 599.117960][T13585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.117976][T13585] RIP: 0033:0x7f8a7e78f7c9 [ 599.117988][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.118002][T13585] RSP: 002b:00007f8a7f5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.118017][T13585] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa0 RCX: 00007f8a7e78f7c9 [ 599.118026][T13585] RDX: 00000000001c9a01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 599.118036][T13585] RBP: 00007f8a7f5be090 R08: 0000000000000000 R09: 0000000000000000 [ 599.118045][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.118053][T13585] R13: 00007f8a7e9e6038 R14: 00007f8a7e9e5fa0 R15: 00007ffdf55ac668 [ 599.118073][T13585] [ 599.118095][T13585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 601.505518][T13627] FAULT_INJECTION: forcing a failure. [ 601.505518][T13627] name failslab, interval 1, probability 0, space 0, times 0 [ 601.679166][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.1.1780 Tainted: G U syzkaller #0 PREEMPT(full) [ 601.679192][T13627] Tainted: [U]=USER [ 601.679197][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.679207][T13627] Call Trace: [ 601.679213][T13627] [ 601.679220][T13627] dump_stack_lvl+0x16c/0x1f0 [ 601.679242][T13627] should_fail_ex+0x512/0x640 [ 601.679263][T13627] ? __kmalloc_noprof+0xca/0x880 [ 601.679278][T13627] should_failslab+0xc2/0x120 [ 601.679297][T13627] __kmalloc_noprof+0xdd/0x880 [ 601.679310][T13627] ? proc_create_reg+0xe3/0x180 [ 601.679329][T13627] ? xfrm_hash_alloc+0xd1/0x100 [ 601.679352][T13627] ? xfrm_hash_alloc+0xd1/0x100 [ 601.679370][T13627] xfrm_hash_alloc+0xd1/0x100 [ 601.679389][T13627] xfrm_state_init+0x15f/0x640 [ 601.679411][T13627] ? __pfx_xfrm_net_init+0x10/0x10 [ 601.679431][T13627] xfrm_net_init+0x210/0xcc0 [ 601.679454][T13627] ? __pfx_xfrm_net_init+0x10/0x10 [ 601.679473][T13627] ops_init+0x1e2/0x5f0 [ 601.679490][T13627] setup_net+0x100/0x390 [ 601.679505][T13627] ? __pfx_setup_net+0x10/0x10 [ 601.679520][T13627] ? debug_mutex_init+0x37/0x70 [ 601.679537][T13627] copy_net_ns+0x2f8/0x690 [ 601.679555][T13627] create_new_namespaces+0x3ea/0xa90 [ 601.679577][T13627] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 601.679595][T13627] ksys_unshare+0x45b/0xa40 [ 601.679613][T13627] ? __pfx_ksys_unshare+0x10/0x10 [ 601.679632][T13627] ? xfd_validate_state+0x61/0x180 [ 601.679656][T13627] __x64_sys_unshare+0x31/0x40 [ 601.679674][T13627] do_syscall_64+0xcd/0xfa0 [ 601.679705][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.679720][T13627] RIP: 0033:0x7f456878f7c9 [ 601.679733][T13627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.679747][T13627] RSP: 002b:00007f45669b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 601.679762][T13627] RAX: ffffffffffffffda RBX: 00007f45689e6180 RCX: 00007f456878f7c9 [ 601.679772][T13627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 601.679780][T13627] RBP: 00007f4568813f91 R08: 0000000000000000 R09: 0000000000000000 [ 601.679789][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.679798][T13627] R13: 00007f45689e6218 R14: 00007f45689e6180 R15: 00007ffd57f8c828 [ 601.679817][T13627] [ 603.014335][T13651] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input20 [ 603.597876][T13662] bond0: option slaves: interface -]=,Don?I|a CB does not exist! [ 604.060101][T13674] FAULT_INJECTION: forcing a failure. [ 604.060101][T13674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.095018][T13678] netlink: 'syz.5.1793': attribute type 10 has an invalid length. [ 604.139099][T13674] CPU: 0 UID: 0 PID: 13674 Comm: syz.4.1792 Tainted: G U syzkaller #0 PREEMPT(full) [ 604.139127][T13674] Tainted: [U]=USER [ 604.139133][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.139142][T13674] Call Trace: [ 604.139147][T13674] [ 604.139154][T13674] dump_stack_lvl+0x16c/0x1f0 [ 604.139177][T13674] should_fail_ex+0x512/0x640 [ 604.139201][T13674] strncpy_from_user+0x3b/0x2e0 [ 604.139223][T13674] getname_flags.part.0+0x8f/0x550 [ 604.139246][T13674] getname_flags+0x93/0xf0 [ 604.139261][T13674] do_sys_openat2+0xb8/0x1d0 [ 604.139281][T13674] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.139307][T13674] __x64_sys_openat+0x174/0x210 [ 604.139327][T13674] ? __pfx___x64_sys_openat+0x10/0x10 [ 604.139353][T13674] do_syscall_64+0xcd/0xfa0 [ 604.139371][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.139385][T13674] RIP: 0033:0x7fd92a58f7c9 [ 604.139397][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.139410][T13674] RSP: 002b:00007fd92b366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.139425][T13674] RAX: ffffffffffffffda RBX: 00007fd92a7e5fa0 RCX: 00007fd92a58f7c9 [ 604.139434][T13674] RDX: 0000000000101000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 604.139443][T13674] RBP: 00007fd92a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 604.139466][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.139475][T13674] R13: 00007fd92a7e6038 R14: 00007fd92a7e5fa0 R15: 00007ffeba570508 [ 604.139495][T13674] [ 605.073208][T13699] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1799'. [ 605.539405][T13714] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 605.601344][T13710] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 606.175849][T13724] openvswitch: netlink: Message has 4 unknown bytes. [ 607.809716][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1812'. [ 608.079139][T13759] netlink: 217 bytes leftover after parsing attributes in process `syz.6.1815'. [ 608.387332][T13769] blktrace: Concurrent blktraces are not allowed on ram11 [ 610.041088][T13814] random: crng reseeded on system resumption [ 610.261703][T13820] FAULT_INJECTION: forcing a failure. [ 610.261703][T13820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 610.310459][T13820] CPU: 0 UID: 0 PID: 13820 Comm: syz.1.1832 Tainted: G U syzkaller #0 PREEMPT(full) [ 610.310485][T13820] Tainted: [U]=USER [ 610.310491][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.310500][T13820] Call Trace: [ 610.310505][T13820] [ 610.310512][T13820] dump_stack_lvl+0x16c/0x1f0 [ 610.310535][T13820] should_fail_ex+0x512/0x640 [ 610.310561][T13820] should_fail_alloc_page+0xe7/0x130 [ 610.310583][T13820] prepare_alloc_pages+0x3c2/0x610 [ 610.310605][T13820] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 610.310620][T13820] ? bpf_ksym_find+0x124/0x1c0 [ 610.310637][T13820] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 610.310654][T13820] ? is_bpf_text_address+0x94/0x1a0 [ 610.310673][T13820] ? kernel_text_address+0x8d/0x100 [ 610.310686][T13820] ? __kernel_text_address+0xd/0x40 [ 610.310699][T13820] ? unwind_get_return_address+0x59/0xa0 [ 610.310714][T13820] ? arch_stack_walk+0xa6/0x100 [ 610.310729][T13820] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 610.310750][T13820] ? __pfx_stack_trace_save+0x10/0x10 [ 610.310768][T13820] ? check_path.constprop.0+0x24/0x50 [ 610.310785][T13820] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 610.310809][T13820] ? policy_nodemask+0xea/0x4e0 [ 610.310828][T13820] alloc_pages_mpol+0x1fb/0x550 [ 610.310856][T13820] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 610.310880][T13820] alloc_pages_noprof+0x131/0x390 [ 610.310900][T13820] pte_alloc_one+0x1e/0x350 [ 610.310917][T13820] do_pte_missing+0x1acf/0x3ba0 [ 610.310938][T13820] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 610.310961][T13820] ? __pmd_alloc+0x64f/0x8b0 [ 610.310980][T13820] __handle_mm_fault+0x1556/0x2aa0 [ 610.311003][T13820] ? mt_find+0x3e2/0xa20 [ 610.311022][T13820] ? __pfx___handle_mm_fault+0x10/0x10 [ 610.311041][T13820] ? __pfx_mt_find+0x10/0x10 [ 610.311069][T13820] ? find_vma+0xbf/0x140 [ 610.311084][T13820] ? __pfx_find_vma+0x10/0x10 [ 610.311110][T13820] handle_mm_fault+0x589/0xd10 [ 610.311132][T13820] ? __pkru_allows_pkey+0x21/0xb0 [ 610.311156][T13820] do_user_addr_fault+0x7a6/0x1370 [ 610.311172][T13820] ? rcu_is_watching+0x12/0xc0 [ 610.311190][T13820] exc_page_fault+0x64/0xc0 [ 610.311213][T13820] asm_exc_page_fault+0x26/0x30 [ 610.311228][T13820] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 610.311250][T13820] Code: 3c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 610.311264][T13820] RSP: 0018:ffffc90004a87b98 EFLAGS: 00050206 [ 610.311276][T13820] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 610.311285][T13820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888078408000 [ 610.311293][T13820] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100f0811ff [ 610.311302][T13820] R10: ffff888078408fff R11: 0000000000000000 R12: ffffc90004a87d90 [ 610.311310][T13820] R13: 0000000000001000 R14: ffff888078408000 R15: 00007ffffffff000 [ 610.311329][T13820] _copy_from_iter+0x383/0x1720 [ 610.311356][T13820] ? __pfx__copy_from_iter+0x10/0x10 [ 610.311376][T13820] ? rcu_is_watching+0x12/0xc0 [ 610.311391][T13820] ? trace_kmalloc+0x2b/0xd0 [ 610.311410][T13820] ? __kmalloc_noprof+0x34f/0x880 [ 610.311424][T13820] ? kernfs_fop_write_iter+0x237/0x570 [ 610.311442][T13820] kernfs_fop_write_iter+0x19a/0x570 [ 610.311458][T13820] vfs_write+0x7d3/0x11d0 [ 610.311474][T13820] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 610.311489][T13820] ? __pfx___mutex_lock+0x10/0x10 [ 610.311506][T13820] ? __pfx_vfs_write+0x10/0x10 [ 610.311533][T13820] ksys_write+0x12a/0x250 [ 610.311548][T13820] ? __pfx_ksys_write+0x10/0x10 [ 610.311569][T13820] do_syscall_64+0xcd/0xfa0 [ 610.311587][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.311600][T13820] RIP: 0033:0x7f456878f7c9 [ 610.311613][T13820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.311626][T13820] RSP: 002b:00007f45669f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.311639][T13820] RAX: ffffffffffffffda RBX: 00007f45689e5fa0 RCX: 00007f456878f7c9 [ 610.311648][T13820] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 610.311657][T13820] RBP: 00007f4568813f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.311665][T13820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.311674][T13820] R13: 00007f45689e6038 R14: 00007f45689e5fa0 R15: 00007ffd57f8c828 [ 610.311693][T13820] [ 611.181330][T13819] Process accounting resumed [ 611.524392][T13839] random: crng reseeded on system resumption [ 612.607633][T13865] bcache: register_bcache() error : failed to open device [ 612.844678][T13869] FAULT_INJECTION: forcing a failure. [ 612.844678][T13869] name failslab, interval 1, probability 0, space 0, times 0 [ 612.909619][T13869] CPU: 0 UID: 0 PID: 13869 Comm: syz.5.1846 Tainted: G U syzkaller #0 PREEMPT(full) [ 612.909647][T13869] Tainted: [U]=USER [ 612.909653][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 612.909662][T13869] Call Trace: [ 612.909667][T13869] [ 612.909674][T13869] dump_stack_lvl+0x16c/0x1f0 [ 612.909697][T13869] should_fail_ex+0x512/0x640 [ 612.909719][T13869] ? __kmalloc_cache_noprof+0x5f/0x780 [ 612.909737][T13869] should_failslab+0xc2/0x120 [ 612.909756][T13869] __kmalloc_cache_noprof+0x72/0x780 [ 612.909771][T13869] ? resv_map_alloc+0x7e/0x400 [ 612.909793][T13869] ? resv_map_alloc+0x7e/0x400 [ 612.909811][T13869] resv_map_alloc+0x7e/0x400 [ 612.909839][T13869] hugetlb_reserve_pages+0x53c/0xf40 [ 612.909863][T13869] ? __vma_enter_locked+0x163/0x3f0 [ 612.909887][T13869] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 612.909910][T13869] ? atime_needs_update+0x8b/0x710 [ 612.909936][T13869] hugetlbfs_file_mmap+0x4a1/0x730 [ 612.909956][T13869] __mmap_region+0x1309/0x27a0 [ 612.909973][T13869] ? __pfx___mmap_region+0x10/0x10 [ 612.909987][T13869] ? find_held_lock+0x2b/0x80 [ 612.910003][T13869] ? is_bpf_text_address+0x8a/0x1a0 [ 612.910022][T13869] ? bpf_ksym_find+0x124/0x1c0 [ 612.910038][T13869] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.910056][T13869] ? is_bpf_text_address+0x94/0x1a0 [ 612.910088][T13869] ? __pfx_stack_trace_save+0x10/0x10 [ 612.910128][T13869] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 612.910153][T13869] mmap_region+0x1ab/0x3f0 [ 612.910167][T13869] ? __get_unmapped_area+0x267/0x440 [ 612.910187][T13869] do_mmap+0xa3e/0x1210 [ 612.910208][T13869] ? __pfx_do_mmap+0x10/0x10 [ 612.910235][T13869] ? __pfx_down_write_killable+0x10/0x10 [ 612.910261][T13869] vm_mmap_pgoff+0x29e/0x470 [ 612.910284][T13869] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 612.910301][T13869] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 612.910323][T13869] ? hugetlbfs_get_inode+0x31f/0x730 [ 612.910350][T13869] ksys_mmap_pgoff+0x1c8/0x5c0 [ 612.910371][T13869] __x64_sys_mmap+0x125/0x190 [ 612.910393][T13869] do_syscall_64+0xcd/0xfa0 [ 612.910412][T13869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.910426][T13869] RIP: 0033:0x7f304978f7c9 [ 612.910439][T13869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.910454][T13869] RSP: 002b:00007f304a6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 612.910469][T13869] RAX: ffffffffffffffda RBX: 00007f30499e5fa0 RCX: 00007f304978f7c9 [ 612.910479][T13869] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 00000000f4000000 [ 612.910487][T13869] RBP: 00007f3049813f91 R08: 0000000000000401 R09: 0000300000000000 [ 612.910496][T13869] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 612.910505][T13869] R13: 00007f30499e6038 R14: 00007f30499e5fa0 R15: 00007ffdaa9bbd78 [ 612.910525][T13869] [ 613.427155][T13875] sysfs_service_op_show: Client not running :-5: [ 613.532308][T13867] zswap: compressor 000 not available [ 613.926766][T13892] FAULT_INJECTION: forcing a failure. [ 613.926766][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.009714][T13854] Bluetooth: hci3: command 0x0406 tx timeout [ 614.064914][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.6.1851 Tainted: G U syzkaller #0 PREEMPT(full) [ 614.064941][T13892] Tainted: [U]=USER [ 614.064946][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.064956][T13892] Call Trace: [ 614.064961][T13892] [ 614.064967][T13892] dump_stack_lvl+0x16c/0x1f0 [ 614.064990][T13892] should_fail_ex+0x512/0x640 [ 614.065015][T13892] _copy_from_user+0x2e/0xd0 [ 614.065037][T13892] copy_msghdr_from_user+0x98/0x160 [ 614.065053][T13892] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 614.065070][T13892] ? kfree+0x252/0x6d0 [ 614.065083][T13892] ? __lock_acquire+0x622/0x1c90 [ 614.065105][T13892] ___sys_recvmsg+0xdb/0x1a0 [ 614.065120][T13892] ? __pfx____sys_recvmsg+0x10/0x10 [ 614.065143][T13892] ? __pfx___might_resched+0x10/0x10 [ 614.065163][T13892] do_recvmmsg+0x2fe/0x750 [ 614.065179][T13892] ? __pfx_do_recvmmsg+0x10/0x10 [ 614.065196][T13892] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 614.065220][T13892] ? __fget_files+0x20e/0x3c0 [ 614.065240][T13892] __x64_sys_recvmmsg+0x22a/0x280 [ 614.065256][T13892] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 614.065276][T13892] do_syscall_64+0xcd/0xfa0 [ 614.065294][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.065309][T13892] RIP: 0033:0x7f8a7e78f7c9 [ 614.065320][T13892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.065334][T13892] RSP: 002b:00007f8a7f59d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 614.065349][T13892] RAX: ffffffffffffffda RBX: 00007f8a7e9e6090 RCX: 00007f8a7e78f7c9 [ 614.065359][T13892] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 614.065368][T13892] RBP: 00007f8a7f59d090 R08: 0000000000000000 R09: 0000000000000000 [ 614.065376][T13892] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 614.065385][T13892] R13: 00007f8a7e9e6128 R14: 00007f8a7e9e6090 R15: 00007ffdf55ac668 [ 614.065404][T13892] [ 614.577373][T13900] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 614.622840][T13904] FAULT_INJECTION: forcing a failure. [ 614.622840][T13904] name fail_futex, interval 1, probability 0, space 0, times 0 [ 614.682600][T13904] CPU: 0 UID: 0 PID: 13904 Comm: syz.5.1852 Tainted: G U syzkaller #0 PREEMPT(full) [ 614.682651][T13904] Tainted: [U]=USER [ 614.682657][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.682667][T13904] Call Trace: [ 614.682673][T13904] [ 614.682679][T13904] dump_stack_lvl+0x16c/0x1f0 [ 614.682706][T13904] should_fail_ex+0x512/0x640 [ 614.682734][T13904] get_futex_key+0x293/0x1560 [ 614.682758][T13904] ? __pfx_get_futex_key+0x10/0x10 [ 614.682776][T13904] ? __mutex_trylock_common+0xe9/0x250 [ 614.682804][T13904] futex_wake+0xea/0x530 [ 614.682829][T13904] ? __pfx_futex_wake+0x10/0x10 [ 614.682849][T13904] ? __lock_acquire+0xb8a/0x1c90 [ 614.682877][T13904] do_futex+0x1e3/0x350 [ 614.682897][T13904] ? __pfx_do_futex+0x10/0x10 [ 614.682915][T13904] ? __might_fault+0xe3/0x190 [ 614.682937][T13904] mm_release+0x24e/0x300 [ 614.682955][T13904] do_exit+0x68e/0x2bf0 [ 614.682980][T13904] ? __pfx_do_exit+0x10/0x10 [ 614.682999][T13904] ? do_raw_spin_lock+0x12c/0x2b0 [ 614.683021][T13904] ? find_held_lock+0x2b/0x80 [ 614.683039][T13904] do_group_exit+0xd3/0x2a0 [ 614.683060][T13904] get_signal+0x2671/0x26d0 [ 614.683085][T13904] ? __pfx_get_signal+0x10/0x10 [ 614.683101][T13904] ? do_futex+0x122/0x350 [ 614.683121][T13904] ? __pfx_do_futex+0x10/0x10 [ 614.683141][T13904] arch_do_signal_or_restart+0x8f/0x790 [ 614.683162][T13904] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 614.683191][T13904] exit_to_user_mode_loop+0x85/0x130 [ 614.683215][T13904] do_syscall_64+0x426/0xfa0 [ 614.683236][T13904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.683252][T13904] RIP: 0033:0x7f304978f7c9 [ 614.683266][T13904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.683281][T13904] RSP: 002b:00007f304a6db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 614.683296][T13904] RAX: fffffffffffffe00 RBX: 00007f30499e5fa8 RCX: 00007f304978f7c9 [ 614.683306][T13904] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f30499e5fa8 [ 614.683315][T13904] RBP: 00007f30499e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 614.683324][T13904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.683334][T13904] R13: 00007f30499e6038 R14: 00007ffdaa9bbc90 R15: 00007ffdaa9bbd78 [ 614.683353][T13904] [ 615.934005][T13923] zswap: compressor not available [ 617.903537][ T30] audit: type=1800 audit(1764503818.733:16): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1872" name="dbroot" dev="configfs" ino=47264 res=0 errno=0 [ 619.478488][T13994] zswap: compressor not available [ 619.667080][T14005] FAULT_INJECTION: forcing a failure. [ 619.667080][T14005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.715430][T14005] CPU: 0 UID: 0 PID: 14005 Comm: syz.6.1881 Tainted: G U syzkaller #0 PREEMPT(full) [ 619.715457][T14005] Tainted: [U]=USER [ 619.715462][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.715471][T14005] Call Trace: [ 619.715477][T14005] [ 619.715483][T14005] dump_stack_lvl+0x16c/0x1f0 [ 619.715507][T14005] should_fail_ex+0x512/0x640 [ 619.715534][T14005] should_fail_alloc_page+0xe7/0x130 [ 619.715555][T14005] prepare_alloc_pages+0x3c2/0x610 [ 619.715578][T14005] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 619.715595][T14005] ? stack_trace_save+0x8e/0xc0 [ 619.715612][T14005] ? __pfx_stack_trace_save+0x10/0x10 [ 619.715628][T14005] ? stack_depot_save_flags+0x29/0x9c0 [ 619.715648][T14005] ? trace_mm_page_alloc+0x11f/0x1a0 [ 619.715670][T14005] ? kasan_save_stack+0x42/0x60 [ 619.715686][T14005] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 619.715700][T14005] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 619.715715][T14005] ? __handle_mm_fault+0xada/0x2aa0 [ 619.715737][T14005] ? do_user_addr_fault+0x7a6/0x1370 [ 619.715754][T14005] ? exc_page_fault+0x64/0xc0 [ 619.715770][T14005] ? asm_exc_page_fault+0x26/0x30 [ 619.715784][T14005] ? rep_movs_alternative+0xf/0x90 [ 619.715805][T14005] ? _copy_from_user+0x98/0xd0 [ 619.715825][T14005] ? ____sys_sendmsg+0x607/0xc70 [ 619.715842][T14005] ? ___sys_sendmsg+0x134/0x1d0 [ 619.715862][T14005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.715887][T14005] ? policy_nodemask+0xea/0x4e0 [ 619.715909][T14005] alloc_pages_mpol+0x1fb/0x550 [ 619.715928][T14005] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 619.715952][T14005] alloc_pages_noprof+0x131/0x390 [ 619.715971][T14005] pte_alloc_one+0x1e/0x350 [ 619.715987][T14005] do_pte_missing+0x1acf/0x3ba0 [ 619.716009][T14005] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 619.716038][T14005] ? __pmd_alloc+0x64f/0x8b0 [ 619.716058][T14005] __handle_mm_fault+0x1556/0x2aa0 [ 619.716082][T14005] ? mt_find+0x3e2/0xa20 [ 619.716101][T14005] ? __pfx___handle_mm_fault+0x10/0x10 [ 619.716121][T14005] ? __pfx_mt_find+0x10/0x10 [ 619.716149][T14005] ? find_vma+0xbf/0x140 [ 619.716165][T14005] ? __pfx_find_vma+0x10/0x10 [ 619.716183][T14005] handle_mm_fault+0x589/0xd10 [ 619.716205][T14005] ? __pkru_allows_pkey+0x21/0xb0 [ 619.716228][T14005] do_user_addr_fault+0x7a6/0x1370 [ 619.716243][T14005] ? rcu_is_watching+0x12/0xc0 [ 619.716262][T14005] exc_page_fault+0x64/0xc0 [ 619.716278][T14005] asm_exc_page_fault+0x26/0x30 [ 619.716291][T14005] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 619.716313][T14005] Code: c4 10 e9 84 3c 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 3c 04 00 66 66 [ 619.716327][T14005] RSP: 0018:ffffc9000b1b79c0 EFLAGS: 00050206 [ 619.716340][T14005] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000003 [ 619.716349][T14005] RDX: fffff52001636f4a RSI: 0000000000000000 RDI: ffffc9000b1b7a48 [ 619.716358][T14005] RBP: 0000000000000003 R08: 0000000000000001 R09: fffff52001636f49 [ 619.716367][T14005] R10: ffffc9000b1b7a4a R11: 0000000000000001 R12: 0000000000000000 [ 619.716375][T14005] R13: ffffc9000b1b7a48 R14: 1ffff92001636f43 R15: ffffc9000b1b7d7c [ 619.716394][T14005] _copy_from_user+0x98/0xd0 [ 619.716416][T14005] ____sys_sendmsg+0x607/0xc70 [ 619.716439][T14005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.716460][T14005] ? __pfx__kstrtoull+0x10/0x10 [ 619.716480][T14005] ___sys_sendmsg+0x134/0x1d0 [ 619.716495][T14005] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.716518][T14005] ? find_held_lock+0x2b/0x80 [ 619.716546][T14005] __sys_sendmmsg+0x200/0x420 [ 619.716562][T14005] ? __pfx___sys_sendmmsg+0x10/0x10 [ 619.716582][T14005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.716608][T14005] ? fput+0x9b/0xd0 [ 619.716627][T14005] ? ksys_write+0x1ac/0x250 [ 619.716642][T14005] ? __pfx_ksys_write+0x10/0x10 [ 619.716660][T14005] __x64_sys_sendmmsg+0x9c/0x100 [ 619.716674][T14005] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.716690][T14005] do_syscall_64+0xcd/0xfa0 [ 619.716708][T14005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.716721][T14005] RIP: 0033:0x7f8a7e78f7c9 [ 619.716734][T14005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.716747][T14005] RSP: 002b:00007f8a7f5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 619.716761][T14005] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa0 RCX: 00007f8a7e78f7c9 [ 619.716770][T14005] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 619.716778][T14005] RBP: 00007f8a7f5be090 R08: 0000000000000000 R09: 0000000000000000 [ 619.716787][T14005] R10: 00000000000000fd R11: 0000000000000246 R12: 0000000000000001 [ 619.716796][T14005] R13: 00007f8a7e9e6038 R14: 00007f8a7e9e5fa0 R15: 00007ffdf55ac668 [ 619.716815][T14005] [ 620.215572][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.222486][ C0] hrtimer: interrupt took 505256828 ns [ 620.322525][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.899702][T14017] FAULT_INJECTION: forcing a failure. [ 620.899702][T14017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 620.919586][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.5.1885 Tainted: G U syzkaller #0 PREEMPT(full) [ 620.919614][T14017] Tainted: [U]=USER [ 620.919620][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 620.919630][T14017] Call Trace: [ 620.919635][T14017] [ 620.919641][T14017] dump_stack_lvl+0x16c/0x1f0 [ 620.919664][T14017] should_fail_ex+0x512/0x640 [ 620.919688][T14017] get_futex_key+0x1d0/0x1560 [ 620.919710][T14017] ? __pfx_get_futex_key+0x10/0x10 [ 620.919735][T14017] futex_wake+0xea/0x530 [ 620.919755][T14017] ? futex_wait+0x120/0x380 [ 620.919767][T14017] ? __pfx_futex_wait+0x10/0x10 [ 620.919780][T14017] ? __pfx_futex_wake+0x10/0x10 [ 620.919808][T14017] do_futex+0x1e3/0x350 [ 620.919827][T14017] ? __pfx_do_futex+0x10/0x10 [ 620.919857][T14017] ? set_dumpable+0x103/0x160 [ 620.919873][T14017] ? __pfx_set_dumpable+0x10/0x10 [ 620.919890][T14017] __x64_sys_futex+0x1e0/0x4c0 [ 620.919913][T14017] ? __pfx___x64_sys_futex+0x10/0x10 [ 620.919934][T14017] ? __pfx___do_sys_prctl+0x10/0x10 [ 620.919960][T14017] do_syscall_64+0xcd/0xfa0 [ 620.919978][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.919993][T14017] RIP: 0033:0x7f304978f7c9 [ 620.920006][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.920019][T14017] RSP: 002b:00007f304a6db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 620.920033][T14017] RAX: ffffffffffffffda RBX: 00007f30499e5fa8 RCX: 00007f304978f7c9 [ 620.920043][T14017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f30499e5fac [ 620.920053][T14017] RBP: 00007f30499e5fa0 R08: 00007f304a6dc000 R09: 0000000000000000 [ 620.920061][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.920070][T14017] R13: 00007f30499e6038 R14: 00007ffdaa9bbc90 R15: 00007ffdaa9bbd78 [ 620.920088][T14017] [ 622.119900][T14030] writes to the poll attribute are ignored. [ 622.145746][T14030] please use driver specific parameters instead. [ 627.221891][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.229369][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.459054][T14113] FAULT_INJECTION: forcing a failure. [ 627.459054][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 627.543951][T14113] CPU: 0 UID: 0 PID: 14113 Comm: syz.6.1910 Tainted: G U syzkaller #0 PREEMPT(full) [ 627.543985][T14113] Tainted: [U]=USER [ 627.543991][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.544002][T14113] Call Trace: [ 627.544019][T14113] [ 627.544028][T14113] dump_stack_lvl+0x16c/0x1f0 [ 627.544058][T14113] should_fail_ex+0x512/0x640 [ 627.544082][T14113] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 627.544103][T14113] should_failslab+0xc2/0x120 [ 627.544127][T14113] kmem_cache_alloc_noprof+0x75/0x6e0 [ 627.544142][T14113] ? sk_prot_alloc+0x60/0x2a0 [ 627.544164][T14113] ? sk_prot_alloc+0x60/0x2a0 [ 627.544179][T14113] ? find_held_lock+0x2b/0x80 [ 627.544194][T14113] sk_prot_alloc+0x60/0x2a0 [ 627.544214][T14113] sk_alloc+0x36/0xc20 [ 627.544239][T14113] inet_create+0x3a1/0x1040 [ 627.544530][T14113] ? inet_create+0x93/0x1040 [ 627.544556][T14113] __sock_create+0x338/0x8d0 [ 627.544582][T14113] __sys_socket+0x14d/0x260 [ 627.544604][T14113] ? __pfx___sys_socket+0x10/0x10 [ 627.544623][T14113] ? xfd_validate_state+0x61/0x180 [ 627.544644][T14113] ? __pfx_ksys_write+0x10/0x10 [ 627.544664][T14113] __x64_sys_socket+0x72/0xb0 [ 627.544683][T14113] ? lockdep_hardirqs_on+0x7c/0x110 [ 627.544702][T14113] do_syscall_64+0xcd/0xfa0 [ 627.544721][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.544736][T14113] RIP: 0033:0x7f8a7e78f7c9 [ 627.544751][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.544765][T14113] RSP: 002b:00007f8a7f5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 627.544779][T14113] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa0 RCX: 00007f8a7e78f7c9 [ 627.544789][T14113] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 627.544798][T14113] RBP: 00007f8a7e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 627.544808][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.544817][T14113] R13: 00007f8a7e9e6038 R14: 00007f8a7e9e5fa0 R15: 00007ffdf55ac668 [ 627.544837][T14113] [ 629.010536][T14113] FAULT_INJECTION: forcing a failure. [ 629.010536][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 629.059966][T14130] netlink: 334 bytes leftover after parsing attributes in process `syz.5.1914'. [ 629.080552][T14113] CPU: 0 UID: 0 PID: 14113 Comm: syz.6.1910 Tainted: G U syzkaller #0 PREEMPT(full) [ 629.080580][T14113] Tainted: [U]=USER [ 629.080586][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 629.080594][T14113] Call Trace: [ 629.080601][T14113] [ 629.080608][T14113] dump_stack_lvl+0x16c/0x1f0 [ 629.080633][T14113] should_fail_ex+0x512/0x640 [ 629.080657][T14113] ? __kmalloc_cache_noprof+0x5f/0x780 [ 629.080675][T14113] should_failslab+0xc2/0x120 [ 629.080695][T14113] __kmalloc_cache_noprof+0x72/0x780 [ 629.080709][T14113] ? mem_cgroup_css_online+0x5c/0x640 [ 629.080726][T14113] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 629.080739][T14113] ? mem_cgroup_css_online+0x5c/0x640 [ 629.080753][T14113] mem_cgroup_css_online+0x5c/0x640 [ 629.080766][T14113] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 629.080780][T14113] online_css+0xb2/0x350 [ 629.080800][T14113] cgroup_apply_control_enable+0x702/0xbb0 [ 629.080829][T14113] cgroup_mkdir+0x5e0/0x1310 [ 629.080845][T14113] ? __pfx_cgroup_mkdir+0x10/0x10 [ 629.080859][T14113] kernfs_iop_mkdir+0x111/0x190 [ 629.080878][T14113] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 629.080894][T14113] vfs_mkdir+0x593/0x8c0 [ 629.080917][T14113] do_mkdirat+0x304/0x3e0 [ 629.080935][T14113] ? __pfx_do_mkdirat+0x10/0x10 [ 629.080952][T14113] ? getname_flags.part.0+0x1c5/0x550 [ 629.080975][T14113] __x64_sys_mkdir+0xef/0x140 [ 629.080991][T14113] do_syscall_64+0xcd/0xfa0 [ 629.081009][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.081024][T14113] RIP: 0033:0x7f8a7e78f7c9 [ 629.081036][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.081050][T14113] RSP: 002b:00007f8a7f5be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 629.081065][T14113] RAX: ffffffffffffffda RBX: 00007f8a7e9e5fa0 RCX: 00007f8a7e78f7c9 [ 629.081075][T14113] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 629.081084][T14113] RBP: 00007f8a7e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.081093][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.081101][T14113] R13: 00007f8a7e9e6038 R14: 00007f8a7e9e5fa0 R15: 00007ffdf55ac668 [ 629.081120][T14113] [ 629.830986][T14146] blktrace: Concurrent blktraces are not allowed on ram11 [ 631.056217][T14170] futex_wake_op: syz.5.1926 tries to shift op by -2048; fix this program [ 631.120230][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1926'. [ 631.491678][T14183] blktrace: Concurrent blktraces are not allowed on ram11 [ 631.991278][ T30] audit: type=1804 audit(1764503832.897:17): pid=14191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1931" name="/newroot/119/file0" dev="tmpfs" ino=635 res=1 errno=0 [ 632.232593][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1934'. [ 633.077100][ T30] audit: type=1800 audit(1764503833.992:18): pid=14209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1937" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 633.127522][T14216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1940'. [ 633.554080][T14231] Console: switching to colour VGA+ 80x25 [ 633.582002][T14216] bond0: (slave bond_slave_0): Releasing backup interface [ 633.653246][T14231] ================================================================== [ 633.653263][T14231] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 633.653294][T14231] Read of size 62 at addr ffff888066ae496e by task syz.6.1942/14231 [ 633.653308][T14231] [ 633.653318][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.6.1942 Tainted: G U syzkaller #0 PREEMPT(full) [ 633.653338][T14231] Tainted: [U]=USER [ 633.653343][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.653352][T14231] Call Trace: [ 633.653358][T14231] [ 633.653364][T14231] dump_stack_lvl+0x116/0x1f0 [ 633.653383][T14231] print_report+0xcd/0x630 [ 633.653403][T14231] ? __virt_addr_valid+0x81/0x610 [ 633.653420][T14231] ? __phys_addr+0xe8/0x180 [ 633.653437][T14231] ? fbcon_prepare_logo+0xa03/0xc70 [ 633.653457][T14231] kasan_report+0xe0/0x110 [ 633.653474][T14231] ? fbcon_prepare_logo+0xa03/0xc70 [ 633.653495][T14231] kasan_check_range+0x100/0x1b0 [ 633.653515][T14231] __asan_memcpy+0x23/0x60 [ 633.653529][T14231] fbcon_prepare_logo+0xa03/0xc70 [ 633.653551][T14231] fbcon_init+0xd77/0x1900 [ 633.653571][T14231] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 633.653592][T14231] visual_init+0x320/0x620 [ 633.653612][T14231] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 633.653628][T14231] store_bind+0x61d/0x760 [ 633.653642][T14231] ? sysfs_file_kobj+0xe4/0x290 [ 633.653659][T14231] ? __pfx_store_bind+0x10/0x10 [ 633.653672][T14231] dev_attr_store+0x58/0x80 [ 633.653693][T14231] ? __pfx_dev_attr_store+0x10/0x10 [ 633.653711][T14231] sysfs_kf_write+0xf2/0x150 [ 633.653726][T14231] kernfs_fop_write_iter+0x3af/0x570 [ 633.653739][T14231] ? __pfx_sysfs_kf_write+0x10/0x10 [ 633.653754][T14231] iter_file_splice_write+0xa24/0x12e0 [ 633.653774][T14231] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.653790][T14231] ? __pfx_copy_splice_read+0x10/0x10 [ 633.653807][T14231] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.653822][T14231] direct_splice_actor+0x192/0x6c0 [ 633.653836][T14231] splice_direct_to_actor+0x345/0xa30 [ 633.653850][T14231] ? __pfx_direct_splice_actor+0x10/0x10 [ 633.653874][T14231] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 633.653892][T14231] do_splice_direct+0x174/0x240 [ 633.653910][T14231] ? __pfx_do_splice_direct+0x10/0x10 [ 633.653925][T14231] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 633.653949][T14231] ? rw_verify_area+0xcf/0x6c0 [ 633.653963][T14231] do_sendfile+0xb06/0xe50 [ 633.653978][T14231] ? __pfx_do_sendfile+0x10/0x10 [ 633.653991][T14231] ? __pfx___might_resched+0x10/0x10 [ 633.654007][T14231] ? __x64_sys_futex+0x1e0/0x4c0 [ 633.654025][T14231] ? __x64_sys_futex+0x1e9/0x4c0 [ 633.654043][T14231] __x64_sys_sendfile64+0x1d8/0x220 [ 633.654061][T14231] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 633.654081][T14231] do_syscall_64+0xcd/0xfa0 [ 633.654099][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.654113][T14231] RIP: 0033:0x7f8a7e78f7c9 [ 633.654125][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.654140][T14231] RSP: 002b:00007f8a7f59d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 633.654154][T14231] RAX: ffffffffffffffda RBX: 00007f8a7e9e6090 RCX: 00007f8a7e78f7c9 [ 633.654164][T14231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 633.654173][T14231] RBP: 00007f8a7e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.654181][T14231] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 633.654190][T14231] R13: 00007f8a7e9e6128 R14: 00007f8a7e9e6090 R15: 00007ffdf55ac668 [ 633.654205][T14231] [ 633.654211][T14231] [ 633.654215][T14231] Allocated by task 12: [ 633.654222][T14231] kasan_save_stack+0x33/0x60 [ 633.654238][T14231] kasan_save_track+0x14/0x30 [ 633.654252][T14231] __kasan_kmalloc+0xaa/0xb0 [ 633.654266][T14231] __kmalloc_noprof+0x32f/0x880 [ 633.654278][T14231] fib6_info_alloc+0x40/0x160 [ 633.654293][T14231] ip6_route_info_create+0x14c/0x870 [ 633.654306][T14231] ip6_route_add.part.0+0x22/0x1d0 [ 633.654318][T14231] ip6_route_add+0x45/0x60 [ 633.654328][T14231] addrconf_prefix_route+0x2fd/0x510 [ 633.654341][T14231] addrconf_add_linklocal+0x329/0x500 [ 633.654357][T14231] addrconf_addr_gen+0x364/0x3b0 [ 633.654372][T14231] addrconf_init_auto_addrs+0x2ba/0x810 [ 633.654388][T14231] addrconf_notify+0x6e2/0x19e0 [ 633.654406][T14231] notifier_call_chain+0xbc/0x410 [ 633.654422][T14231] call_netdevice_notifiers_info+0xbe/0x140 [ 633.654440][T14231] netif_state_change+0x165/0x3b0 [ 633.654455][T14231] linkwatch_do_dev+0x12b/0x160 [ 633.654471][T14231] __linkwatch_run_queue+0x2a7/0x8a0 [ 633.654487][T14231] linkwatch_event+0x8f/0xc0 [ 633.654502][T14231] process_one_work+0x9cf/0x1b70 [ 633.654521][T14231] worker_thread+0x6c8/0xf10 [ 633.654532][T14231] kthread+0x3c5/0x780 [ 633.654548][T14231] ret_from_fork+0x675/0x7d0 [ 633.654567][T14231] ret_from_fork_asm+0x1a/0x30 [ 633.654584][T14231] [ 633.654588][T14231] The buggy address belongs to the object at ffff888066ae4800 [ 633.654588][T14231] which belongs to the cache kmalloc-512 of size 512 [ 633.654599][T14231] The buggy address is located 62 bytes to the right of [ 633.654599][T14231] allocated 304-byte region [ffff888066ae4800, ffff888066ae4930) [ 633.654614][T14231] [ 633.654618][T14231] The buggy address belongs to the physical page: [ 633.654625][T14231] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66ae4 [ 633.654638][T14231] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 633.654649][T14231] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 633.654663][T14231] page_type: f5(slab) [ 633.654676][T14231] raw: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 633.654688][T14231] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 633.654701][T14231] head: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 633.654713][T14231] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 633.654726][T14231] head: 00fff00000000002 ffffea00019ab901 00000000ffffffff 00000000ffffffff [ 633.654739][T14231] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 633.654748][T14231] page dumped because: kasan: bad access detected [ 633.654755][T14231] page_owner tracks the page as allocated [ 633.654760][T14231] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11503, tgid 11502 (syz.1.1365), ts 482572825358, free_ts 479104368907 [ 633.654786][T14231] post_alloc_hook+0x1af/0x220 [ 633.654806][T14231] get_page_from_freelist+0x10a3/0x3a30 [ 633.654818][T14231] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 633.654832][T14231] alloc_pages_mpol+0x1fb/0x550 [ 633.654848][T14231] new_slab+0x24a/0x360 [ 633.654875][T14231] ___slab_alloc+0xd79/0x1a50 [ 633.654895][T14231] __slab_alloc.constprop.0+0x63/0x110 [ 633.654916][T14231] __kmalloc_noprof+0x501/0x880 [ 633.654927][T14231] copy_splice_read+0x1a8/0xc20 [ 633.654940][T14231] do_splice_read+0x285/0x370 [ 633.654951][T14231] splice_direct_to_actor+0x2a1/0xa30 [ 633.654965][T14231] do_splice_direct+0x174/0x240 [ 633.654977][T14231] do_sendfile+0xb06/0xe50 [ 633.654990][T14231] __x64_sys_sendfile64+0x1d8/0x220 [ 633.655006][T14231] do_syscall_64+0xcd/0xfa0 [ 633.655021][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.655035][T14231] page last free pid 11476 tgid 11476 stack trace: [ 633.655043][T14231] __free_frozen_pages+0x7df/0x1160 [ 633.655061][T14231] __put_partials+0x130/0x170 [ 633.655072][T14231] qlist_free_all+0x4d/0x120 [ 633.655086][T14231] kasan_quarantine_reduce+0x195/0x1e0 [ 633.655100][T14231] __kasan_slab_alloc+0x69/0x90 [ 633.655116][T14231] kmem_cache_alloc_noprof+0x250/0x6e0 [ 633.655128][T14231] ptlock_alloc+0x1f/0x70 [ 633.655146][T14231] pte_alloc_one+0x84/0x350 [ 633.655160][T14231] do_pte_missing+0x1acf/0x3ba0 [ 633.655178][T14231] __handle_mm_fault+0x1556/0x2aa0 [ 633.655196][T14231] handle_mm_fault+0x589/0xd10 [ 633.655214][T14231] do_user_addr_fault+0x60c/0x1370 [ 633.655225][T14231] exc_page_fault+0x64/0xc0 [ 633.655239][T14231] asm_exc_page_fault+0x26/0x30 [ 633.655251][T14231] [ 633.655254][T14231] Memory state around the buggy address: [ 633.655262][T14231] ffff888066ae4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 633.655271][T14231] ffff888066ae4880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 633.655281][T14231] >ffff888066ae4900: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 633.655289][T14231] ^ [ 633.655297][T14231] ffff888066ae4980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 633.655306][T14231] ffff888066ae4a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 633.655314][T14231] ================================================================== [ 633.713320][T14231] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 633.713341][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.6.1942 Tainted: G U syzkaller #0 PREEMPT(full) [ 633.713365][T14231] Tainted: [U]=USER [ 633.713371][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 633.713380][T14231] Call Trace: [ 633.713387][T14231] [ 633.713393][T14231] dump_stack_lvl+0x3d/0x1f0 [ 633.713415][T14231] vpanic+0x640/0x6f0 [ 633.713438][T14231] panic+0xca/0xd0 [ 633.713456][T14231] ? __pfx_panic+0x10/0x10 [ 633.713475][T14231] ? fbcon_prepare_logo+0xa03/0xc70 [ 633.713495][T14231] ? preempt_schedule_common+0x44/0xc0 [ 633.713512][T14231] ? preempt_schedule_thunk+0x16/0x30 [ 633.713534][T14231] check_panic_on_warn+0xab/0xb0 [ 633.713553][T14231] end_report+0x107/0x170 [ 633.713571][T14231] kasan_report+0xee/0x110 [ 633.713589][T14231] ? fbcon_prepare_logo+0xa03/0xc70 [ 633.713610][T14231] kasan_check_range+0x100/0x1b0 [ 633.713630][T14231] __asan_memcpy+0x23/0x60 [ 633.713644][T14231] fbcon_prepare_logo+0xa03/0xc70 [ 633.713667][T14231] fbcon_init+0xd77/0x1900 [ 633.713687][T14231] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 633.713708][T14231] visual_init+0x320/0x620 [ 633.713729][T14231] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 633.713746][T14231] store_bind+0x61d/0x760 [ 633.713762][T14231] ? sysfs_file_kobj+0xe4/0x290 [ 633.713778][T14231] ? __pfx_store_bind+0x10/0x10 [ 633.713791][T14231] dev_attr_store+0x58/0x80 [ 633.713811][T14231] ? __pfx_dev_attr_store+0x10/0x10 [ 633.713829][T14231] sysfs_kf_write+0xf2/0x150 [ 633.713845][T14231] kernfs_fop_write_iter+0x3af/0x570 [ 633.713868][T14231] ? __pfx_sysfs_kf_write+0x10/0x10 [ 633.713885][T14231] iter_file_splice_write+0xa24/0x12e0 [ 633.713907][T14231] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.713925][T14231] ? __pfx_copy_splice_read+0x10/0x10 [ 633.713943][T14231] ? __pfx_iter_file_splice_write+0x10/0x10 [ 633.713960][T14231] direct_splice_actor+0x192/0x6c0 [ 633.713976][T14231] splice_direct_to_actor+0x345/0xa30 [ 633.713990][T14231] ? __pfx_direct_splice_actor+0x10/0x10 [ 633.714006][T14231] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 633.714022][T14231] do_splice_direct+0x174/0x240 [ 633.714036][T14231] ? __pfx_do_splice_direct+0x10/0x10 [ 633.714050][T14231] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 633.714072][T14231] ? rw_verify_area+0xcf/0x6c0 [ 633.714087][T14231] do_sendfile+0xb06/0xe50 [ 633.714102][T14231] ? __pfx_do_sendfile+0x10/0x10 [ 633.714115][T14231] ? __pfx___might_resched+0x10/0x10 [ 633.714131][T14231] ? __x64_sys_futex+0x1e0/0x4c0 [ 633.714149][T14231] ? __x64_sys_futex+0x1e9/0x4c0 [ 633.714168][T14231] __x64_sys_sendfile64+0x1d8/0x220 [ 633.714186][T14231] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 633.714206][T14231] do_syscall_64+0xcd/0xfa0 [ 633.714223][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.714238][T14231] RIP: 0033:0x7f8a7e78f7c9 [ 633.714251][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.714266][T14231] RSP: 002b:00007f8a7f59d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 633.714283][T14231] RAX: ffffffffffffffda RBX: 00007f8a7e9e6090 RCX: 00007f8a7e78f7c9 [ 633.714292][T14231] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 633.714302][T14231] RBP: 00007f8a7e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 633.714311][T14231] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 633.714324][T14231] R13: 00007f8a7e9e6128 R14: 00007f8a7e9e6090 R15: 00007ffdf55ac668 [ 633.714338][T14231] [ 633.714412][T14231] Kernel Offset: disabled