last executing test programs: 2m49.917948333s ago: executing program 2 (id=1272): mmap$auto(0x0, 0x2020009, 0x3, 0x3ff, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4) mmap$auto(0x0, 0x2020009, 0x400000000003, 0xeb1, r0, 0x8003) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x2080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd, @target_fd, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92) 2m48.489484011s ago: executing program 2 (id=1275): close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a20030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r2, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2m47.405012688s ago: executing program 2 (id=1280): unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0x3, 0x3040, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x4, 0x3, 0x7c1e, 0x3, 0x7c, 0x104, 0x101, 0xffffffffffffffff}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x100076c5, 0x10000008, 0x100000000}}) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x109480, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) (async) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x119, 0x7, 0x0, 0x1, [@nested={0x14, 0xd6, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0x2}]}, @generic="789cf19555b344a9e4b4e55084", @nested={0xf2, 0x157, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xb6}, @generic="0550d0a91cf33b91d4c058b8b94ec6797959533cee509cbc55a2ebc2479f2e5955c19363ec8b99a6adb35b91b8c44b00f8bde589dd433fcdd3dcd20887c199727bd5dccc5194c751aa1121c827dc5d1a3488d96488a8b5f53673c557d47a0d01a74580d0dc9ccd1b0ab4e549558da3a65a126d580eca5c1258b0b55d7bb0b27b4b64c816534aa77db181f30829a2f864c4af9aeaf84af2403a911a5e2c05dd6ed407707fba55b91fa32b13e2dda32be4e2f1ad994a203fd4e67344d2be2004b55bb13ae0ef2506f4fee2623085e9278f0944ff71f135337642596e67125768f74910"]}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@typed={0x3b, 0x138, 0x0, 0x0, @binary="c85d0607cb68c7cde35847423721dce2423089d6cdd8623425752f48c5087256335fb9ade814b1c27e93be2b0db86b0da0e9c1de404eea"}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008050}, 0x2044080) landlock_create_ruleset$auto(&(0x7f0000000080)={0x6, 0x8000000000001, 0xc}, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) clone$auto(0x25, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x80006) prctl$auto(0x10000000024, 0x2, 0x2008, 0x5e0, 0x80001) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) 2m46.038771761s ago: executing program 2 (id=1282): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41d75856, 0x200000000001, 0x2008, 0xfffffffffffffffe, 0x3ff) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x709003, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, &(0x7f0000000100)) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) mmap$auto(0x2000, 0x400008, 0xcf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x0, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x610401, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) 2m45.030050631s ago: executing program 2 (id=1285): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4606c1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x20000, 0x0) ioctl$auto_MEMISLOCKED(r1, 0x80084d17, &(0x7f0000000080)={0x9, 0x7}) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x3, 0xb}, 0x800009}, 0x5, 0x2000d87f) open(&(0x7f0000000000)='./file0\x00', 0x204000, 0xd4) close_range$auto(0x2, 0x8, 0x0) 2m44.786183311s ago: executing program 2 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x7f47, r3}) pipe2$auto(&(0x7f0000000000)=r5, 0xda1) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0xa201, 0x0) 2m39.076762436s ago: executing program 1 (id=1301): mmap$auto(0x0, 0x400005, 0x1000000000000df, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'ipvlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) getpeername$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @empty}, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX, @ANYBLOB="080001004866520008000200", @ANYRESOCT=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00'}) sendmsg$auto_ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x8016}, 0x4000) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100000000) shutdown$auto(0x200000003, 0x2) 2m37.860104604s ago: executing program 1 (id=1303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/bcache/register_quiet\x00', 0x401, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0xdfa) r0 = socket(0x9, 0x6, 0x1) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x40000000000eb1, 0x401, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x2) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x20280, 0x0, 0x64, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x7ff) ptrace$auto_PTRACE_SETSIGINFO(0x4203, r2, 0x2, 0x3) socket(0x2, 0x1, 0x84) connect$auto(0x3, 0x0, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub7/info\x00', 0x80000, 0x0) pread64$auto(r3, 0x0, 0xad2, 0x4000fd) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) sendfile$auto(0x1, r1, 0x0, 0x40000000c07) fcntl$auto(0x3, 0x6, r2) madvise$auto(0x0, 0xffffffffffff0001, 0x3a) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000001d00)=0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2m37.506506287s ago: executing program 1 (id=1306): socket(0x12, 0x6, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, 0x0, 0x7ffffffff000, 0xfffffffffffffffe, 0x5, 0x8, 0xbff, 0x29, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) msgctl$auto(0x2, 0x1, &(0x7f0000000200)={{0xb3, 0x0, 0xffffffffffffffff, 0x10000, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0xf5, &(0x7f00000001c0)=0x3, 0x2, 0xe7, 0xa2, 0x6, 0xfffffffffffffff9, 0x0, 0xb69, 0xb, @raw=0x6, @inferred=0xffffffffffffffff}) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x403) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/177, 0xb1) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) r5 = epoll_create$auto(0x4) epoll_pwait$auto(r5, 0x0, 0x800, 0x4d, 0x0, 0x8) 2m36.114333162s ago: executing program 1 (id=1309): socket(0x12, 0x6, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) statfs$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x200000000000000, 0x0, 0x7, 0xffffffff00000000, 0x2, 0x0, 0x8, {[0x8, 0xb]}, 0x2, 0x8, 0x3, [0x0, 0x1000, 0xfffffffffffffffd, 0x7fffffff]}) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, 0x0, 0x7ffffffff000, 0xfffffffffffffffe, 0x5, 0x8, 0xbff, 0x29, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) msgctl$auto(0x2, 0x1, &(0x7f0000000200)={{0xb3, 0x0, 0xffffffffffffffff, 0x10000, 0x1, 0x1, 0x6}, &(0x7f0000000180)=0xf5, &(0x7f00000001c0)=0x3, 0x2, 0xe7, 0xa2, 0x6, 0xfffffffffffffff9, 0x0, 0xb69, 0xb, @raw=0x6, @inferred=0xffffffffffffffff}) keyctl$auto(0x1f, 0x1, 0x6, r4, 0x403) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r1, &(0x7f00000002c0)=""/177, 0xb1) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) epoll_create$auto(0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m35.011147137s ago: executing program 1 (id=1312): socket(0x2, 0x2, 0x0) r0 = io_uring_setup$auto(0x7, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram13\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffffff, 0x400008, 0x0, 0x9b76, r0, 0xfffffffffffffbff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x82) getdents$auto(r2, 0x0, 0x5f) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5407, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') unlink$auto(&(0x7f00000002c0)='}[,&*}\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(0x3, 0x0, 0x6) write$auto(0x3, 0x0, 0x6) r3 = socket(0x2, 0x80802, 0x0) getpeername$auto(r3, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) 2m34.871454416s ago: executing program 1 (id=1315): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2519000000050088000800000006005101020000000c000200ff0f000000000000"], 0x30}}, 0xc040) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, r5, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd21, 0x3, 0x7}, 0x100000000009, 0x0) landlock_restrict_self$auto(r5, 0x1) close_range$auto(r4, 0xffffffffffffffff, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0x11, 0x3, 0x0) 2m30.896110776s ago: executing program 3 (id=1329): mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0x401, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbd3fc60d1f1556ab7bb8df250400000008000c0002000000"], 0x1c}, 0x1, 0x300000000000000, 0x0, 0x4081}, 0x8800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x209, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyxc\x00', 0x20080, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) r2 = socket(0x2b, 0x1, 0x0) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/o2hb/failed_regions\x00', 0x500, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x9, 0x23, 0x940, 0x1ffde, 0x3, 0x6, 0x8000004, 0x9, 0x5, 0x0, 0x4, 0xb0, 0x7, 0x4f, 0x80000003, 0x205, 0x7, 0x0, 0x3ffff, 0x2, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x40, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x4b9, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket(0x2c, 0x3, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x5fffffff, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7}, 0x800}, 0x17, 0x4008) (async) keyctl$auto(0x0, 0xdfffffffffffffff, 0x69c9, 0x0, 0x400) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6d) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x3, 0x0, 0x1f, 0xb}, 0xa00009}, 0x7, 0x20000003) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd13/power/autosuspend_delay_ms\x00', 0x105401, 0x0) socket(0xa, 0x801, 0x84) getpid() (async) sendto$auto(0x3, 0x0, 0x7, 0x101, 0x0, 0x6) r4 = io_uring_setup$auto(0x59, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6gre0\x00'}) socket(0x11, 0x80003, 0x0) mmap$auto(0x0, 0x26, 0xdf, 0x9b72, 0x1000, 0x28000) 2m30.696233347s ago: executing program 3 (id=1330): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_TIMESTAMPING_NEW(0xffffffffffffffff, 0x9, 0x41, &(0x7f0000000000)='}(\x00', 0x8) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x8c, 0x6, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) syz_clone3(&(0x7f0000000380)={0x1200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat$auto(r2, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) write$auto(0x3, 0x0, 0xfdef) lseek$auto(r0, 0xff, 0xd0bc) ioctl$auto(0x3, 0x4b41, r1) 2m30.406135343s ago: executing program 3 (id=1331): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 2m30.326838279s ago: executing program 3 (id=1332): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x9, &(0x7f0000000000)={0x4, 0xf3, 0xb0, @raw=0xfffff034}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) mprotect$auto(0x0, 0x806121, 0x6) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x80, 0x0) read$auto(r1, 0x0, 0x20) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xc8581, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) 2m29.995167111s ago: executing program 3 (id=1334): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x11, 0x80003, 0x300) readv$auto(r0, 0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105200, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x7f) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a24, 0x100000000, 0x0, 0xb73, 0x66a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mremap$auto(0xfffffffffffffff5, 0xf06, 0x3fde, 0x3, 0x7fffffffaffc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0xa4002, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r2, 0x3b8b, 0xffffffffffffffff) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x6) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) bpf$auto(0xfffffffd, &(0x7f00000001c0)=@batch={0x5, 0x5, 0x8, 0xfffffffffffff739, 0x1000, r1, 0xfffffffffffffffd, 0x538c}, 0x6f3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x42000, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x40}, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000000100)='-@.$\x00', 0x7) 2m29.589879369s ago: executing program 32 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x12, 0x1, "5e1f970f497f9f23d63e72850177"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) mremap$auto(0x3, 0xe, 0x9, 0xb, 0x4000000000000000) execve$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r2, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)={0x7f47, r3}) pipe2$auto(&(0x7f0000000000)=r5, 0xda1) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0xa201, 0x0) 2m29.57615793s ago: executing program 3 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r2, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) setreuid$auto(0x0, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x190, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x17b, 0x1, 0x0, 0x1, [@generic="0478d99e0885780844013617e172a5344d6480b804bfa12b79fe4903731af96eac2820fdffb932658a0c51b6f29d8b7bf1fb1c4369dea2ed994a7c68c71604c4f5ee934126020a628db8a16b870a103e3d74017f52a813e252b8ee11148a965321de1f49ebf8c319825848330da380ec46", @generic="03b946c54b681a3c4d0b41e7a896ade991cabaf2452e26d120bd671d17a2f8fd49ca351cabb6d92068392db771aa5965b9855dfd47f27a50ab0374c464b4bb777d7e98aabb039d98ec8004d05ca801239de3a664321156f3352e7c8ccb5f3ae8398ca8185891b075f706e6d942d085a7514710290977e7c1fec03112", @typed={0x8, 0x9e, 0x0, 0x0, @fd=r0}, @generic="a4c10be5a9cc0dea2f5454eb47085edb3b4d7702a9d7fc07fabe59401712557339eefe242059a3d6d6019bf0e72044d69444466fcf0b7ee32f07e645c8cfd0d786bc1f4d9dbbcb410e322cca5ff05445a03b64dd06788ca0de207bf4d345f17e4c1eb468877598c4e11f", @nested={0x18, 0x79, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x86, 0x0, 0x0, @str=')..&}/,\x00'}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40800}, 0x2008000) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x16242, 0x0) close_range$auto(0x2, 0x8, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x1, 0x3, 0x0, 0x400000) write$auto(0x3, 0x0, 0x100000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0xa, 0x2, 0x3a) 2m19.349274001s ago: executing program 33 (id=1315): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000140)={0xfffffffd, 0x5, 0x7, 0x0, 0x1, 0x1}) mmap$auto(0x0, 0x2, 0xffe, 0x8000000008011, r0, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_BSS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2519000000050088000800000006005101020000000c000200ff0f000000000000"], 0x30}}, 0xc040) preadv2$auto(r0, &(0x7f0000000140)={0x0, 0x6}, 0xa, 0x3, 0x7, 0x2e) read$auto_zero_fops_mem(0xffffffffffffffff, &(0x7f0000000380)=""/187, 0xbb) inotify_init1$auto(0x41) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000010000, 0x4, 0x9f, 0x12, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, r5, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd21, 0x3, 0x7}, 0x100000000009, 0x0) landlock_restrict_self$auto(r5, 0x1) close_range$auto(r4, 0xffffffffffffffff, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000400, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') mprotect$auto(0xffd, 0x20000000401003, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() socket(0x11, 0x3, 0x0) 2m14.403444309s ago: executing program 34 (id=1336): r0 = socket$nl_generic(0x10, 0x3, 0x10) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000300)={0x14, r2, 0xe77c815741d6438d, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x42010}, 0x8cc) setreuid$auto(0x0, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000000c0)={0x190, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x17b, 0x1, 0x0, 0x1, [@generic="0478d99e0885780844013617e172a5344d6480b804bfa12b79fe4903731af96eac2820fdffb932658a0c51b6f29d8b7bf1fb1c4369dea2ed994a7c68c71604c4f5ee934126020a628db8a16b870a103e3d74017f52a813e252b8ee11148a965321de1f49ebf8c319825848330da380ec46", @generic="03b946c54b681a3c4d0b41e7a896ade991cabaf2452e26d120bd671d17a2f8fd49ca351cabb6d92068392db771aa5965b9855dfd47f27a50ab0374c464b4bb777d7e98aabb039d98ec8004d05ca801239de3a664321156f3352e7c8ccb5f3ae8398ca8185891b075f706e6d942d085a7514710290977e7c1fec03112", @typed={0x8, 0x9e, 0x0, 0x0, @fd=r0}, @generic="a4c10be5a9cc0dea2f5454eb47085edb3b4d7702a9d7fc07fabe59401712557339eefe242059a3d6d6019bf0e72044d69444466fcf0b7ee32f07e645c8cfd0d786bc1f4d9dbbcb410e322cca5ff05445a03b64dd06788ca0de207bf4d345f17e4c1eb468877598c4e11f", @nested={0x18, 0x79, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x86, 0x0, 0x0, @str=')..&}/,\x00'}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40800}, 0x2008000) openat$auto_memtype_fops_memtype(0xffffffffffffff9c, 0x0, 0x16242, 0x0) close_range$auto(0x2, 0x8, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x1, 0x3, 0x0, 0x400000) write$auto(0x3, 0x0, 0x100000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') socket(0xa, 0x2, 0x3a) 30.998770891s ago: executing program 0 (id=1680): mmap$auto(0x0, 0x2020009, 0x3, 0x3ff, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x4) mmap$auto(0x0, 0x2020009, 0x400000000003, 0xeb1, r0, 0x8003) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x2080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) bpf$auto(0x18, 0x0, 0x92) 30.367108414s ago: executing program 5 (id=1684): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x7fffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x183f41, 0x0) write$auto(r0, 0x0, 0x7) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xfb, 0xb0, @raw=0xfffff004}}) mmap$auto(0x4000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8100) unshare$auto(0x20000) syslog$auto(0x8e, &(0x7f0000000640)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1[\xc2\x9c\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xaa4X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fF\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xff|\x00)\xca\xac/\t\xa3(\xecs\xc6L\x16\xc6&\x8bl}\x8cT\xc2\xc7:\x1fF\xe3%N\xb8\x85\xe9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8[\xfc\x94\x81.\xb7b\xd0\x9c\xa9\x8b\xb2\xad\x95d\xcdD-\x9c\x00\xc3\xae:\x81X\x06\xc9\x1e\x1b\x82\x1e\xec\xe4b\xb3\x00\x00\x00\x00', 0x7fffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(0x0, 0xc9, 0xfffffffa) prctl$auto(0x6, 0x88ab, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0xe6a9030037b8afae, 0x69) fchdir$auto(r3) ioctl$auto_BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, &(0x7f0000001140)=0x1) execve$auto(0x0, &(0x7f00000000c0)=&(0x7f0000000080)='$+{-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f0000000280)=':\x04\x00{\x9aP\xc1\x8fa,\x1b\xa4\xc8\x16)\x1f&HW\xc3\x1c\xc3o*\xb1v\xd3]\xa7\x96\xda\xf9\xe3\xa5J\xb2\x93\xcf\xbe\'\xf9\xfb=\x1dv\'\fy\xad\x91\xde\xfe&\xad8\x00f\xff\x193\x13\xfa\xba\xdb\x89Gl\xfa\x95^_\xd9\xc5K@g\x81\x94\xf3CM\x8bo\xca\xb2\xa3=\xfd\xa0\x8b7\x9bZ\xa584\xdd Od(\x1f1\xf8O1\xe9\x1ezi\xa9\xa8\x0e\x8c\x9b\xf6L\x92\xcd\xfc\xa7J\xf5H\xd1\xda/\x9a\xed\x94h]\xb4](e\xe9\xfd/`\xff') fchdir$auto(r2) mount$auto(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0xdf2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x2841, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) read$auto_ptdump_curusr_fops_(r4, &(0x7f0000001280)=""/4096, 0x1000) 29.445135723s ago: executing program 0 (id=1686): openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/vlan1\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/swradio13/dev_debug\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x109740, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000180)=0x7) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/pcmC1D0c\x00', 0x8400, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r4 = open_by_handle_at$auto(r3, &(0x7f0000000080)={0x3d, 0x3b, "8f196eb9a8b85dff50e5acaa05cdcbaafbdf68f2d5c97330faa02b23336867508dc2529b3c432dd4f3b6eaa96d84a95c0f9e5c9efd705db6d840e9d191"}, 0xffff0000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r6, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0xfa, 0x4f, "efe73f5cce80aaeb0ca0ce68dc7fdbcf2019ce2cee7458364ad7e782f27f214cfcb8a2584538d2ed8bf900de7e13798d4f55c7cc5f896f7e4329af7b632903222f758d6789eb96bebdcf7b48fa540906a87243d740d56e2b037aaf2920b2827a3bdd6392644d3c5f1a7d675453b7b1af7eaa0694817279d9f9cf8ad0dc37f6b667efdbd72e24451b3e50f272506bcf84947d048cd50068a56ea4e11592260fa771eda2cefab86e9fe8f69acb30cd5f59e8085c3a503b50a0ffe113c6227f392ebc2e086c79d17e2546c490ef61254a2d00568f1d81f0d7a7c549d10fcaed1b4a5c875d6b3ce7a3182db9df32008b237b275470191209"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, 0x0) close_range$auto(0x2, 0xa, 0x0) 28.42930562s ago: executing program 0 (id=1687): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41d75856, 0x200000000001, 0x2008, 0xfffffffffffffffe, 0x3ff) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x709003, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r3, 0x40086602, &(0x7f0000000100)) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = open(0x0, 0x40000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r5) mmap$auto(0x2000, 0x400008, 0xcf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x0, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x610401, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, 0x0, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) 28.387290434s ago: executing program 5 (id=1688): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x2, 0x0) socket(0x2, 0x5, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x56) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @rand_addr=0x640100ff}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) select$auto(0x8, &(0x7f00000000c0)={[0xa, 0x8000007, 0x4, 0x9, 0x6, 0x201, 0x6, 0x3, 0x3, 0x4618ecd2, 0x8001, 0x400, 0x6, 0x10009a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x9a28) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) memfd_secret$auto(0x4) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x87, 0x85, 0x0, 0x800007) read$auto(r0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80600, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) 27.067606135s ago: executing program 5 (id=1693): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 26.97461577s ago: executing program 0 (id=1694): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x80140, 0x0) read$auto(r0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8946, 0x24) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80600, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_fops_ulong_ro_(r0, &(0x7f0000000380)="b8db4b0873fb7d27ece48020b8433f6524f4986a71cc109b31f3c2b1c3a9b08f17001bad423790bf58cbba3e1a4a45ce3455b79024afa252548e052e8f536af39a842af7c4ca570da8ff03c4836dd5bfdab44d4ac17c9e0c43d69780fb1190af35ed3f0fd9556249d92d8de760325e30927fdc4f3c44d677d97062ae7f776e7c68e1a8bf16fd0ba5362b06af813a99027b3830b7ec45c23261bceeb0e8bc5fdf672d6075146ddcad6cf53332d9c91b233e176a5ff50b15b79e373bda9b6eb1e4ef40436b1707a421458cc5b3325761953582c08ef951177ec3828e58b570bb23074469d560882ad3bd9fb035", 0xec) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x261540, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0x0, 0x7ffffffe, 0x2, 0x9, 0x15f4da03, 0x6, 0x10001, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4, 0xd8]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa42, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x5, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x1ffffffffffe, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x401, 0x22402, 0x9, 0xfffffffd, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x0, 0x8, 0x4, 0x9, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x0, 0x10000000000002, 0x0, 0x0, 0x46, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x0, 0x0, 0xa53, 0xbd9, 0xfffffffffffffffd]}, 0x7, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd04, &(0x7f00000001c0)) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000480), r2) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/audio1\x00', 0x101800, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r4, 0x80045005, &(0x7f0000002cc0)) 25.80739918s ago: executing program 0 (id=1697): socket(0x2, 0x80002, 0x73) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x60, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r1, 0x1, 0x8070bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 24.846506411s ago: executing program 5 (id=1700): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x20400, 0x0) pread64$auto(r0, 0x0, 0x8, 0x2d) 24.727108195s ago: executing program 5 (id=1701): syz_clone(0x13121000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x4020009, 0x8000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x801, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_udc.7/udc/dummy_udc.7/soft_connect\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x3) sysfs$auto(0x2, 0x100000000000027, 0x0) r1 = fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r3, r2, 0x0, 0x40002000000a) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r1) fchmod$auto(r1, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r4, 0x100000003, 0x0) 23.957506338s ago: executing program 5 (id=1703): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb) mremap$auto(0x1a7b, 0x800007, 0x100000000003fd6, 0x3, 0x5) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r0, 0x3, &(0x7f0000000040)={{0x8, 0x3}, {0x0, 0xa2b}}, 0x0) write$auto_hwsim_fops_rx_rssi_(r0, &(0x7f0000000040)="2496665715e0d8baa44e32074e331317a44dae382611c1e87f82fbb0820ee52e238eb1a952a4665b812dbd63d872785a5716e518b3fc71edff466831f8f6d9b3b080c7a2ef4832748217d2b893714cad101162293e8de0b9e8d5e21ca64d96fe32b4cb5aa42db974ab53bf7d32465993ae86a84df11d011f4e26228e82092117a49b90d593f9928643e6af4d8ef1367ccd4689c312b061b8b52373e8d210d806c655ae6aa7ef9a49df762680a18afc371ccda67ebfe57b7c78fdf21fbf020be1da933293cea6f61e737756bc8d90545113357be143d2dd92b367597c4cc24fe04a35f3dcb18d35ecd5d2", 0xea) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf257a00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x40408c4) socket(0x10, 0x1, 0x2) read$auto(r2, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) mremap$auto(0x94, 0x0, 0x0, 0x7, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xae14, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) ioctl$auto_VHOST_SET_OWNER(r1, 0x8008af83, 0x0) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop5/hctx0/tags\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000000100)=""/169, 0xa9) lsetxattr$auto(0x0, 0x0, 0x0, 0x0, 0x7) syz_clone(0x802080, &(0x7f0000000140)="e6e7f8ba27f362b1e01f2298998a45bfbc40eadec33ba78db52504f3c899be172059672804c1a7e246640a2058e78f997f49047079e555a57bb8fc564d79df2d9f544472094dbb4290ca8092585bbde62cbd26c33c2e60fa5da88f78b6ef7c47ac67052761f4336bc1364fb7ca7810885275dad04e248e1e57b2b839fd7fc41d776066d2b3f2d2", 0x87, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") 9.922817085s ago: executing program 35 (id=1699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x60, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, r1, 0x1, 0x8070bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 8.864831437s ago: executing program 36 (id=1703): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0x83e7}, 0x5, 0xb) mremap$auto(0x1a7b, 0x800007, 0x100000000003fd6, 0x3, 0x5) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r0, 0x3, &(0x7f0000000040)={{0x8, 0x3}, {0x0, 0xa2b}}, 0x0) write$auto_hwsim_fops_rx_rssi_(r0, &(0x7f0000000040)="2496665715e0d8baa44e32074e331317a44dae382611c1e87f82fbb0820ee52e238eb1a952a4665b812dbd63d872785a5716e518b3fc71edff466831f8f6d9b3b080c7a2ef4832748217d2b893714cad101162293e8de0b9e8d5e21ca64d96fe32b4cb5aa42db974ab53bf7d32465993ae86a84df11d011f4e26228e82092117a49b90d593f9928643e6af4d8ef1367ccd4689c312b061b8b52373e8d210d806c655ae6aa7ef9a49df762680a18afc371ccda67ebfe57b7c78fdf21fbf020be1da933293cea6f61e737756bc8d90545113357be143d2dd92b367597c4cc24fe04a35f3dcb18d35ecd5d2", 0xea) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000780), 0x8000, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf257a00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x2400c815}, 0x40408c4) socket(0x10, 0x1, 0x2) read$auto(r2, 0x0, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x37, 0x67f, 0xfffffff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}, 0x1fe, 0xd) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280), 0x1) mremap$auto(0x94, 0x0, 0x0, 0x7, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xae14, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) ioctl$auto_VHOST_SET_OWNER(r1, 0x8008af83, 0x0) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop5/hctx0/tags\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000000100)=""/169, 0xa9) lsetxattr$auto(0x0, 0x0, 0x0, 0x0, 0x7) syz_clone(0x802080, &(0x7f0000000140)="e6e7f8ba27f362b1e01f2298998a45bfbc40eadec33ba78db52504f3c899be172059672804c1a7e246640a2058e78f997f49047079e555a57bb8fc564d79df2d9f544472094dbb4290ca8092585bbde62cbd26c33c2e60fa5da88f78b6ef7c47ac67052761f4336bc1364fb7ca7810885275dad04e248e1e57b2b839fd7fc41d776066d2b3f2d2", 0x87, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="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") 6.462532357s ago: executing program 4 (id=1750): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4606c1, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x20000, 0x0) ioctl$auto_MEMISLOCKED(r1, 0x80084d17, &(0x7f0000000080)={0x9, 0x7}) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x3, 0xb}, 0x800009}, 0x5, 0x2000d87f) open(&(0x7f0000000000)='./file0\x00', 0x204000, 0xd4) close_range$auto(0x2, 0x8, 0x0) 6.344853077s ago: executing program 4 (id=1751): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0xa, 0x1, 0x84) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0xb, 0xffffffffffffffff, 0x0, 0x4, 0x7a) bind$auto(0x3, &(0x7f0000000380)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x2) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r1, 0xc00455d0, &(0x7f0000000340)=0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x1, 0x6) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x1a, 0x8000) setsockopt$auto(0x3, 0x6, 0x20, 0x0, 0xfb3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_SNDCTL_SEQ_PANIC(r2, 0x5111, 0x0) 6.095098738s ago: executing program 6 (id=1752): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ncsi(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10000000084, 0x0, 0x0, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x226c1, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0xb) 5.507275592s ago: executing program 4 (id=1753): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x11, 0xa, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000140)='/dev/media11\x00', 0x40, 0x0) r0 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) (fail_nth: 6) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "0232890300"}, 0x6c) 5.005042069s ago: executing program 6 (id=1754): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffe, 0x7, 0xdf, 0xeb1, 0x401, 0x7ffd) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d") mmap$auto(0x10000, 0x5, 0xdf, 0x9b72, 0x2, 0x8000008001) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) execve$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x4008004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) 4.984164619s ago: executing program 4 (id=1760): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x5, 0x3, 0xffffffffffff6f3e, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005880)='/proc/sys/kernel/panic_print\x00', 0x80801, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_cifs(0x0, r0) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r1, 0x541c, 0xffffffffffffffff) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) read$auto_bm_status_operations_binfmt_misc(r2, &(0x7f0000000100)=""/213, 0xd5) 4.056812292s ago: executing program 4 (id=1755): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 3.711307587s ago: executing program 6 (id=1756): socket(0x2, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) pselect6$auto(0x5, &(0x7f0000000400)={[0x1000000008, 0xfffffffffffffffc, 0x5, 0x9, 0x8001, 0x6, 0xac, 0x2000009, 0xffffffffffffff81, 0x0, 0x7fffffffffffffff, 0x8000, 0x1004, 0x9, 0xa, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xffd8) lsm_get_self_attr$auto(0xbf79, &(0x7f00000001c0)={0x5, 0x30, 0x2, 0xa4, "d1975cf5d5393c758819be191be94ee867f9fba623ee2717ee9aab1231a52158dadede54847d7b67c78e41bb7a3dd3e001b908f4fda8164f689872466ecb3f1357aaf622eb084d26f96f19a17cb83ad261d6c3a410f435e14527b97c1b4ec83834cd1be57f746377646bdf9c954024968d16907f80e38330e7949b5b6e9f73e9daeb7d164718a97ba8d18a7e9fd3e112f7bb06dc57095d76fd14c5f468bfc89e9bb2f3b9"}, &(0x7f0000000300)=0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5600, r3) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x800) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 2.688720325s ago: executing program 6 (id=1757): mmap$auto(0x0, 0x2020009, 0x3, 0x3ff, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x400000000003, 0xeb1, r0, 0x8003) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x2080, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r1) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd, @target_fd, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92) 1.539647654s ago: executing program 6 (id=1758): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41d75856, 0x200000000001, 0x2008, 0xfffffffffffffffe, 0x3ff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x220bc2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mmap$auto(0x2000, 0x400008, 0xcf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x610401, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps\x00', 0x4a000, 0x0) read$auto_proc_pid_smaps_operations_internal(r6, 0x0, 0x0) write$auto_uhid_fops_uhid(0xffffffffffffffff, 0x0, 0xfccd) 1.538114913s ago: executing program 4 (id=1765): ioperm$auto(0x3, 0xe, 0x2000000000000149) mmap$auto(0x1, 0x400004, 0x800df, 0x9b72, 0x2, 0x0) clock_adjtime$auto(0x17, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xb, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1001, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x82, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1", 0x23) unshare$auto(0x40000080) mmap$auto(0x0, 0x400, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r2, 0x0, 0x100000000, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x8000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x20, 0x0) getpid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = pipe2$auto(0x0, 0x80) fcntl$auto(r3, 0x8, 0xffffffff80000000) gettid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1759): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20480, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='*?\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf250e0000000500120040000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) io_setup$auto(0x7ffe, 0x0) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x70c) epoll_ctl$auto(r1, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x2009a6, 0xc0006) r2 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/take_snapshot\x00', 0x140, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, 0xffffffffffffffff, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r4, 0xc058560f, r4) clone$auto(0x0, 0x3, &(0x7f0000000040)=0xfffffffe, &(0x7f0000000080)=0x24, 0x0) kernel console output (not intermixed with test programs): aller #0 PREEMPT(full) [ 684.947349][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.947359][T14426] Call Trace: [ 684.947365][T14426] [ 684.947371][T14426] dump_stack_lvl+0x100/0x190 [ 684.947395][T14426] should_fail_ex.cold+0x5/0xa [ 684.947417][T14426] should_failslab+0xc2/0x120 [ 684.947440][T14426] kmem_cache_alloc_noprof+0x91/0x6a0 [ 684.947458][T14426] ? stack_trace_save+0x8e/0xc0 [ 684.947480][T14426] ? alloc_empty_file+0x5b/0x1c0 [ 684.947505][T14426] alloc_empty_file+0x5b/0x1c0 [ 684.947524][T14426] path_openat+0xe7/0x4280 [ 684.947538][T14426] ? __kasan_slab_alloc+0x89/0x90 [ 684.947558][T14426] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 684.947574][T14426] ? do_getname+0x35/0x390 [ 684.947592][T14426] ? do_sys_openat2+0xc7/0x1e0 [ 684.947610][T14426] ? __x64_sys_openat+0x12d/0x210 [ 684.947629][T14426] ? do_syscall_64+0x115/0x840 [ 684.947642][T14426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.947662][T14426] ? __pfx_path_openat+0x10/0x10 [ 684.947682][T14426] do_file_open+0x20e/0x430 [ 684.947699][T14426] ? __pfx_do_file_open+0x10/0x10 [ 684.947727][T14426] ? alloc_fd+0x471/0x7a0 [ 684.947743][T14426] ? do_getname+0x191/0x390 [ 684.947763][T14426] do_sys_openat2+0x10f/0x1e0 [ 684.947783][T14426] ? __pfx_do_sys_openat2+0x10/0x10 [ 684.947803][T14426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 684.947829][T14426] ? __fget_files+0x21f/0x3d0 [ 684.947852][T14426] __x64_sys_openat+0x12d/0x210 [ 684.947872][T14426] ? __pfx___x64_sys_openat+0x10/0x10 [ 684.947891][T14426] ? ksys_write+0x1ac/0x250 [ 684.947911][T14426] do_syscall_64+0x115/0x840 [ 684.947923][T14426] ? clear_bhb_loop+0x40/0x90 [ 684.947948][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.947964][T14426] RIP: 0033:0x7f065c19de59 [ 684.947978][T14426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.947991][T14426] RSP: 002b:00007f065cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 684.948006][T14426] RAX: ffffffffffffffda RBX: 00007f065c425fa0 RCX: 00007f065c19de59 [ 684.948016][T14426] RDX: 0000000000022902 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 684.948025][T14426] RBP: 00007f065cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 684.948034][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.948042][T14426] R13: 00007f065c426038 R14: 00007f065c425fa0 R15: 00007fff2bf791d8 [ 684.948061][T14426] [ 685.584938][T14432] FAULT_INJECTION: forcing a failure. [ 685.584938][T14432] name failslab, interval 1, probability 0, space 0, times 0 [ 685.644487][T14432] CPU: 0 UID: 0 PID: 14432 Comm: syz.0.1464 Not tainted syzkaller #0 PREEMPT(full) [ 685.644509][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.644519][T14432] Call Trace: [ 685.644524][T14432] [ 685.644530][T14432] dump_stack_lvl+0x100/0x190 [ 685.644555][T14432] should_fail_ex.cold+0x5/0xa [ 685.644575][T14432] should_failslab+0xc2/0x120 [ 685.644598][T14432] __kmalloc_noprof+0xfc/0x820 [ 685.644617][T14432] ? iovec_from_user+0x8d/0x140 [ 685.644643][T14432] iovec_from_user+0x8d/0x140 [ 685.644667][T14432] __import_iovec+0x81/0x640 [ 685.644692][T14432] import_iovec+0x82/0xb0 [ 685.644716][T14432] copy_msghdr_from_user+0x2c6/0x4c0 [ 685.644741][T14432] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 685.644776][T14432] ? __pfx__kstrtoull+0x10/0x10 [ 685.644796][T14432] ___sys_sendmsg+0x106/0x1e0 [ 685.644819][T14432] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.644850][T14432] ? find_held_lock+0x2b/0x80 [ 685.644881][T14432] __sys_sendmmsg+0x20c/0x440 [ 685.644902][T14432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 685.644921][T14432] ? ksys_write+0x190/0x250 [ 685.644949][T14432] ? fput+0x79/0x100 [ 685.644966][T14432] ? ksys_write+0x1ac/0x250 [ 685.644979][T14432] ? __pfx_ksys_write+0x10/0x10 [ 685.644996][T14432] __x64_sys_sendmmsg+0x9c/0x100 [ 685.645013][T14432] ? lockdep_hardirqs_on+0x78/0x100 [ 685.645037][T14432] do_syscall_64+0x115/0x840 [ 685.645050][T14432] ? clear_bhb_loop+0x40/0x90 [ 685.645068][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.645082][T14432] RIP: 0033:0x7f065c19de59 [ 685.645095][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.645109][T14432] RSP: 002b:00007f065cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 685.645124][T14432] RAX: ffffffffffffffda RBX: 00007f065c425fa0 RCX: 00007f065c19de59 [ 685.645134][T14432] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000004 [ 685.645143][T14432] RBP: 00007f065cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 685.645152][T14432] R10: 000000002000d87f R11: 0000000000000246 R12: 0000000000000001 [ 685.645161][T14432] R13: 00007f065c426038 R14: 00007f065c425fa0 R15: 00007fff2bf791d8 [ 685.645180][T14432] [ 686.254601][T14418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.285300][T14418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.326426][T14418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.348639][T14418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.456112][T14468] FAULT_INJECTION: forcing a failure. [ 688.456112][T14468] name failslab, interval 1, probability 0, space 0, times 0 [ 688.551672][T14468] CPU: 0 UID: 0 PID: 14468 Comm: syz.5.1471 Not tainted syzkaller #0 PREEMPT(full) [ 688.551698][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 688.551708][T14468] Call Trace: [ 688.551714][T14468] [ 688.551720][T14468] dump_stack_lvl+0x100/0x190 [ 688.551746][T14468] should_fail_ex.cold+0x5/0xa [ 688.551769][T14468] should_failslab+0xc2/0x120 [ 688.551791][T14468] __kvmalloc_node_noprof+0x116/0x970 [ 688.551812][T14468] ? percpu_ref_init+0xec/0x3f0 [ 688.551830][T14468] ? io_alloc_cache_init+0x38/0x170 [ 688.551851][T14468] io_alloc_cache_init+0x38/0x170 [ 688.551870][T14468] io_uring_setup.cold+0x48c/0x1c2e [ 688.551898][T14468] ? __pfx_io_uring_setup+0x10/0x10 [ 688.551913][T14468] ? do_futex+0x190/0x440 [ 688.551931][T14468] ? __pfx_do_futex+0x10/0x10 [ 688.551946][T14468] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.551975][T14468] ? xfd_validate_state+0x129/0x190 [ 688.551998][T14468] __x64_sys_io_uring_setup+0xc2/0x170 [ 688.552014][T14468] do_syscall_64+0x115/0x840 [ 688.552028][T14468] ? clear_bhb_loop+0x40/0x90 [ 688.552045][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.552060][T14468] RIP: 0033:0x7f28f919de59 [ 688.552075][T14468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.552090][T14468] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 688.552105][T14468] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 688.552115][T14468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 688.552123][T14468] RBP: 00007f28f9233e6f R08: 0000000000000000 R09: 0000000000000000 [ 688.552132][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.552141][T14468] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 688.552161][T14468] [ 690.573846][T14495] FAULT_INJECTION: forcing a failure. [ 690.573846][T14495] name failslab, interval 1, probability 0, space 0, times 0 [ 690.682150][T14495] CPU: 0 UID: 0 PID: 14495 Comm: syz.4.1476 Not tainted syzkaller #0 PREEMPT(full) [ 690.682174][T14495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.682184][T14495] Call Trace: [ 690.682190][T14495] [ 690.682196][T14495] dump_stack_lvl+0x100/0x190 [ 690.682221][T14495] should_fail_ex.cold+0x5/0xa [ 690.682243][T14495] should_failslab+0xc2/0x120 [ 690.682264][T14495] __kmalloc_noprof+0xfc/0x820 [ 690.682282][T14495] ? rcu_is_watching+0x12/0xc0 [ 690.682301][T14495] ? tomoyo_realpath_from_path+0xb6/0x690 [ 690.682327][T14495] tomoyo_realpath_from_path+0xb6/0x690 [ 690.682353][T14495] tomoyo_check_open_permission+0x2af/0x3c0 [ 690.682372][T14495] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 690.682391][T14495] ? __lock_acquire+0x49f/0x1a40 [ 690.682411][T14495] ? hook_file_open+0x24f/0x8f0 [ 690.682440][T14495] ? lock_acquire+0x1b9/0x370 [ 690.682460][T14495] tomoyo_file_open+0x6b/0x90 [ 690.682475][T14495] security_file_open+0xb5/0x1e0 [ 690.682495][T14495] do_dentry_open+0x588/0x14d0 [ 690.682516][T14495] vfs_open+0x82/0x3f0 [ 690.682536][T14495] path_openat+0x2873/0x4280 [ 690.682560][T14495] ? __pfx_path_openat+0x10/0x10 [ 690.682580][T14495] do_file_open+0x20e/0x430 [ 690.682597][T14495] ? __pfx_do_file_open+0x10/0x10 [ 690.682626][T14495] ? alloc_fd+0x471/0x7a0 [ 690.682643][T14495] ? do_getname+0x191/0x390 [ 690.682663][T14495] do_sys_openat2+0x10f/0x1e0 [ 690.682683][T14495] ? __pfx_do_sys_openat2+0x10/0x10 [ 690.682703][T14495] ? do_sock_setsockopt+0x101/0x1d0 [ 690.682722][T14495] ? kfree+0x1e5/0x6c0 [ 690.682740][T14495] __x64_sys_openat+0x12d/0x210 [ 690.682760][T14495] ? __pfx___x64_sys_openat+0x10/0x10 [ 690.682788][T14495] do_syscall_64+0x115/0x840 [ 690.682802][T14495] ? clear_bhb_loop+0x40/0x90 [ 690.682820][T14495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.682835][T14495] RIP: 0033:0x7f523419de59 [ 690.682850][T14495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.682865][T14495] RSP: 002b:00007f523504b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 690.682880][T14495] RAX: ffffffffffffffda RBX: 00007f5234426090 RCX: 00007f523419de59 [ 690.682889][T14495] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 690.682899][T14495] RBP: 00007f5234233e6f R08: 0000000000000000 R09: 0000000000000000 [ 690.682908][T14495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.682917][T14495] R13: 00007f5234426128 R14: 00007f5234426090 R15: 00007ffd76f22488 [ 690.682940][T14495] [ 690.682958][T14495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.129466][T14499] FAULT_INJECTION: forcing a failure. [ 691.129466][T14499] name failslab, interval 1, probability 0, space 0, times 0 [ 691.174662][T14499] CPU: 0 UID: 0 PID: 14499 Comm: syz.5.1478 Not tainted syzkaller #0 PREEMPT(full) [ 691.174688][T14499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 691.174698][T14499] Call Trace: [ 691.174703][T14499] [ 691.174710][T14499] dump_stack_lvl+0x100/0x190 [ 691.174735][T14499] should_fail_ex.cold+0x5/0xa [ 691.174757][T14499] should_failslab+0xc2/0x120 [ 691.174778][T14499] __kmalloc_noprof+0xfc/0x820 [ 691.174797][T14499] ? sk_prot_alloc+0x10b/0x2a0 [ 691.174849][T14499] sk_prot_alloc+0x10b/0x2a0 [ 691.174879][T14499] sk_alloc+0x36/0xe80 [ 691.174901][T14499] __netlink_create+0x5e/0x2c0 [ 691.174984][T14499] ? __wake_up+0x3f/0x60 [ 691.175006][T14499] netlink_create+0x29b/0x610 [ 691.175035][T14499] ? __pfx_genl_bind+0x10/0x10 [ 691.175050][T14499] ? __pfx_genl_unbind+0x10/0x10 [ 691.175063][T14499] ? __pfx_genl_release+0x10/0x10 [ 691.175083][T14499] __sock_create+0x339/0x860 [ 691.175114][T14499] __sys_socket+0x14d/0x260 [ 691.175136][T14499] ? exc_page_fault+0x6f/0xd0 [ 691.175159][T14499] ? __pfx___sys_socket+0x10/0x10 [ 691.175186][T14499] __x64_sys_socket+0x72/0xb0 [ 691.175208][T14499] ? lockdep_hardirqs_on+0x78/0x100 [ 691.175230][T14499] do_syscall_64+0x115/0x840 [ 691.175243][T14499] ? clear_bhb_loop+0x40/0x90 [ 691.175262][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.175277][T14499] RIP: 0033:0x7f28f919f6c7 [ 691.175291][T14499] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.175305][T14499] RSP: 002b:00007f28fa0e6f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 691.175320][T14499] RAX: ffffffffffffffda RBX: 00007f28f9425fa0 RCX: 00007f28f919f6c7 [ 691.175330][T14499] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 691.175339][T14499] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 691.175348][T14499] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 691.175357][T14499] R13: 00007f28f9426038 R14: 00007f28f9425fa0 R15: 00007ffc9b618ac8 [ 691.175378][T14499] [ 691.792020][T14511] random: crng reseeded on system resumption [ 692.005691][T14515] FAULT_INJECTION: forcing a failure. [ 692.005691][T14515] name failslab, interval 1, probability 0, space 0, times 0 [ 692.061945][T14515] CPU: 0 UID: 0 PID: 14515 Comm: syz.0.1483 Not tainted syzkaller #0 PREEMPT(full) [ 692.061967][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.061977][T14515] Call Trace: [ 692.061982][T14515] [ 692.061988][T14515] dump_stack_lvl+0x100/0x190 [ 692.062012][T14515] should_fail_ex.cold+0x5/0xa [ 692.062033][T14515] should_failslab+0xc2/0x120 [ 692.062055][T14515] kmem_cache_alloc_noprof+0x91/0x6a0 [ 692.062073][T14515] ? d_instantiate+0x8a/0xb0 [ 692.062091][T14515] ? d_instantiate+0x8a/0xb0 [ 692.062107][T14515] ? alloc_empty_file+0x5b/0x1c0 [ 692.062129][T14515] alloc_empty_file+0x5b/0x1c0 [ 692.062149][T14515] alloc_file_pseudo+0x183/0x290 [ 692.062169][T14515] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 692.062193][T14515] __shmem_file_setup+0x205/0x460 [ 692.062217][T14515] ? __pfx___shmem_file_setup+0x10/0x10 [ 692.062241][T14515] ? vm_area_alloc+0x1f/0x160 [ 692.062258][T14515] shmem_zero_setup+0x96/0x1b0 [ 692.062276][T14515] __mmap_region+0x24ef/0x2db0 [ 692.062296][T14515] ? __pfx___mmap_region+0x10/0x10 [ 692.062313][T14515] ? __lock_acquire+0x49f/0x1a40 [ 692.062339][T14515] ? __lock_acquire+0x49f/0x1a40 [ 692.062353][T14515] ? do_raw_spin_unlock+0x145/0x1e0 [ 692.062371][T14515] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 692.062411][T14515] ? lockdep_hardirqs_on+0x78/0x100 [ 692.062435][T14515] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 692.062478][T14515] ? preempt_schedule_thunk+0x16/0x40 [ 692.062497][T14515] mmap_region+0x35d/0x620 [ 692.062515][T14515] ? rcu_is_watching+0x12/0xc0 [ 692.062533][T14515] ? __pfx_mmap_region+0x10/0x10 [ 692.062552][T14515] ? cap_mmap_addr+0x4b/0x120 [ 692.062567][T14515] ? bpf_lsm_mmap_addr+0x9/0x30 [ 692.062582][T14515] ? security_mmap_addr+0x71/0x1e0 [ 692.062601][T14515] ? __get_unmapped_area+0x255/0x3e0 [ 692.062625][T14515] do_mmap+0xc63/0x12f0 [ 692.062649][T14515] ? __pfx_do_mmap+0x10/0x10 [ 692.062670][T14515] ? __pfx_down_write_killable+0x10/0x10 [ 692.062689][T14515] vm_mmap_pgoff+0x29e/0x470 [ 692.062713][T14515] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 692.062737][T14515] ? __pfx_do_futex+0x10/0x10 [ 692.062757][T14515] ksys_mmap_pgoff+0xe4/0x610 [ 692.062778][T14515] ? __x64_sys_futex+0x358/0x4d0 [ 692.062795][T14515] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 692.062815][T14515] ? xfd_validate_state+0x129/0x190 [ 692.062837][T14515] __x64_sys_mmap+0x125/0x190 [ 692.062858][T14515] do_syscall_64+0x115/0x840 [ 692.062871][T14515] ? clear_bhb_loop+0x40/0x90 [ 692.062889][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.062903][T14515] RIP: 0033:0x7f065c19de59 [ 692.062922][T14515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.062935][T14515] RSP: 002b:00007f065cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 692.062950][T14515] RAX: ffffffffffffffda RBX: 00007f065c426090 RCX: 00007f065c19de59 [ 692.062960][T14515] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 692.062969][T14515] RBP: 00007f065c233e6f R08: 0000000000000401 R09: 0000000000008000 [ 692.062978][T14515] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 692.062987][T14515] R13: 00007f065c426128 R14: 00007f065c426090 R15: 00007fff2bf791d8 [ 692.063006][T14515] [ 692.702980][T14512] workqueue: Failed to create a rescuer kthread for wq "nbd4129-recv": -EINTR [ 692.704251][T14512] block (null): Could not allocate knbd recv work queue. [ 692.862003][T14512] nbd: failed to add new device [ 694.172168][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 696.590681][T14588] FAULT_INJECTION: forcing a failure. [ 696.590681][T14588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 696.669946][T14588] CPU: 0 UID: 0 PID: 14588 Comm: syz.4.1498 Not tainted syzkaller #0 PREEMPT(full) [ 696.669970][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.669979][T14588] Call Trace: [ 696.669985][T14588] [ 696.669992][T14588] dump_stack_lvl+0x100/0x190 [ 696.670016][T14588] should_fail_ex.cold+0x5/0xa [ 696.670034][T14588] ? prepare_alloc_pages+0x16d/0x5f0 [ 696.670057][T14588] should_fail_alloc_page+0xeb/0x140 [ 696.670080][T14588] prepare_alloc_pages+0x1f0/0x5f0 [ 696.670105][T14588] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 696.670126][T14588] ? __lock_acquire+0x49f/0x1a40 [ 696.670148][T14588] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 696.670167][T14588] ? is_bpf_text_address+0x8a/0x1a0 [ 696.670189][T14588] ? is_bpf_text_address+0x8a/0x1a0 [ 696.670213][T14588] ? bpf_ksym_find+0x124/0x1c0 [ 696.670230][T14588] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 696.670253][T14588] ? is_bpf_text_address+0x94/0x1a0 [ 696.670274][T14588] ? kernel_text_address+0x8d/0x100 [ 696.670300][T14588] ? arch_stack_walk+0xa6/0xf0 [ 696.670325][T14588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 696.670349][T14588] ? policy_nodemask+0xed/0x4f0 [ 696.670372][T14588] alloc_pages_mpol+0x1fb/0x540 [ 696.670394][T14588] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 696.670417][T14588] ? lock_acquire+0x1b9/0x370 [ 696.670433][T14588] alloc_pages_noprof+0x1a/0x160 [ 696.670447][T14588] __pmd_alloc+0x3b/0x950 [ 696.670479][T14588] walk_to_pmd+0x3a3/0x4c0 [ 696.670503][T14588] insert_pages+0xf1/0x5e0 [ 696.670530][T14588] ? __pfx_insert_pages+0x10/0x10 [ 696.670551][T14588] ? __pfx_down_read_trylock+0x10/0x10 [ 696.670573][T14588] vm_insert_pages+0x138/0x440 [ 696.670598][T14588] io_uring_mmap+0x4bc/0x50b [ 696.670616][T14588] ? __pfx_io_uring_mmap+0x10/0x10 [ 696.670634][T14588] ? lockdep_init_map_type+0x5c/0x250 [ 696.670651][T14588] __mmap_region+0x13c7/0x2db0 [ 696.670677][T14588] ? __pfx___mmap_region+0x10/0x10 [ 696.670691][T14588] ? __pfx___might_resched+0x10/0x10 [ 696.670719][T14588] ? down_write+0x146/0x1f0 [ 696.670741][T14588] ? process_measurement+0x1f4/0x2350 [ 696.670832][T14588] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 696.670862][T14588] ? __lock_acquire+0x49f/0x1a40 [ 696.670885][T14588] ? __lock_acquire+0x49f/0x1a40 [ 696.670928][T14588] mmap_region+0x527/0x620 [ 696.670947][T14588] ? __pfx_mmap_region+0x10/0x10 [ 696.670966][T14588] ? cap_mmap_addr+0x4b/0x120 [ 696.670979][T14588] ? bpf_lsm_mmap_addr+0x9/0x30 [ 696.670993][T14588] ? security_mmap_addr+0x71/0x1e0 [ 696.671013][T14588] ? __get_unmapped_area+0x255/0x3e0 [ 696.671036][T14588] do_mmap+0xc63/0x12f0 [ 696.671060][T14588] ? __pfx_do_mmap+0x10/0x10 [ 696.671081][T14588] ? __pfx_down_write_killable+0x10/0x10 [ 696.671101][T14588] vm_mmap_pgoff+0x29e/0x470 [ 696.671126][T14588] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 696.671145][T14588] ? __fget_files+0x215/0x3d0 [ 696.671162][T14588] ? __fget_files+0x21f/0x3d0 [ 696.671180][T14588] ksys_mmap_pgoff+0x3cb/0x610 [ 696.671202][T14588] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 696.671221][T14588] ? fput+0x79/0x100 [ 696.671238][T14588] ? ksys_write+0x1ac/0x250 [ 696.671252][T14588] ? __pfx_ksys_write+0x10/0x10 [ 696.671268][T14588] __x64_sys_mmap+0x125/0x190 [ 696.671290][T14588] do_syscall_64+0x115/0x840 [ 696.671303][T14588] ? clear_bhb_loop+0x40/0x90 [ 696.671321][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.671337][T14588] RIP: 0033:0x7f523419de59 [ 696.671351][T14588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.671366][T14588] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 696.671381][T14588] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 696.671391][T14588] RDX: fffffff7fffffe01 RSI: 0000000004000002 RDI: 0000000000000000 [ 696.671400][T14588] RBP: 00007f523506c090 R08: 0000000000000003 R09: 0000000000000000 [ 696.671409][T14588] R10: 0000000000008051 R11: 0000000000000246 R12: 0000000000000001 [ 696.671417][T14588] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 696.671437][T14588] [ 697.291132][T14596] bcache: register_bcache() error : failed to open device [ 699.183368][T14621] random: crng reseeded on system resumption [ 699.217311][ T30] audit: type=1800 audit(1782903704.652:5): pid=14620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1504" name="dbroot" dev="configfs" ino=63635 res=0 errno=0 [ 700.313793][T14633] FAULT_INJECTION: forcing a failure. [ 700.313793][T14633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.402982][T14633] CPU: 0 UID: 0 PID: 14633 Comm: syz.4.1506 Not tainted syzkaller #0 PREEMPT(full) [ 700.403005][T14633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.403015][T14633] Call Trace: [ 700.403020][T14633] [ 700.403026][T14633] dump_stack_lvl+0x100/0x190 [ 700.403052][T14633] should_fail_ex.cold+0x5/0xa [ 700.403073][T14633] _copy_from_user+0x2e/0xd0 [ 700.403097][T14633] copy_msghdr_from_user+0x9f/0x4c0 [ 700.403122][T14633] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 700.403148][T14633] ? rcu_is_watching+0x12/0xc0 [ 700.403167][T14633] ? kfree+0x1e5/0x6c0 [ 700.403184][T14633] ___sys_recvmsg+0xdd/0x1a0 [ 700.403207][T14633] ? __pfx____sys_recvmsg+0x10/0x10 [ 700.403239][T14633] ? __pfx___might_resched+0x10/0x10 [ 700.403269][T14633] ? ktime_get_ts64+0x318/0x420 [ 700.403282][T14633] ? ktime_get_ts64+0x257/0x420 [ 700.403298][T14633] do_recvmmsg+0x2f3/0x740 [ 700.403323][T14633] ? __pfx_do_recvmmsg+0x10/0x10 [ 700.403344][T14633] ? __might_fault+0xc5/0x140 [ 700.403368][T14633] ? __fget_files+0x21f/0x3d0 [ 700.403387][T14633] __x64_sys_recvmmsg+0x199/0x280 [ 700.403407][T14633] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 700.403430][T14633] do_syscall_64+0x115/0x840 [ 700.403444][T14633] ? clear_bhb_loop+0x40/0x90 [ 700.403463][T14633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.403478][T14633] RIP: 0033:0x7f523419de59 [ 700.403492][T14633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.403505][T14633] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 700.403521][T14633] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 700.403530][T14633] RDX: 0000000070000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 700.403540][T14633] RBP: 00007f523506c090 R08: 0000200000000400 R09: 0000000000000000 [ 700.403549][T14633] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 700.403557][T14633] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 700.403576][T14633] [ 704.785987][T14696] FAULT_INJECTION: forcing a failure. [ 704.785987][T14696] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 704.872488][T14696] CPU: 0 UID: 0 PID: 14696 Comm: syz.5.1520 Not tainted syzkaller #0 PREEMPT(full) [ 704.872510][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.872520][T14696] Call Trace: [ 704.872525][T14696] [ 704.872531][T14696] dump_stack_lvl+0x100/0x190 [ 704.872558][T14696] should_fail_ex.cold+0x5/0xa [ 704.872576][T14696] ? prepare_alloc_pages+0x16d/0x5f0 [ 704.872600][T14696] should_fail_alloc_page+0xeb/0x140 [ 704.872631][T14696] prepare_alloc_pages+0x1f0/0x5f0 [ 704.872656][T14696] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 704.872677][T14696] ? register_lock_class+0x40/0x560 [ 704.872691][T14696] ? find_held_lock+0x2b/0x80 [ 704.872711][T14696] ? ima_match_policy+0x8c4/0x2350 [ 704.872732][T14696] ? ima_match_policy+0x8c4/0x2350 [ 704.872755][T14696] ? __lock_acquire+0x49f/0x1a40 [ 704.872771][T14696] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 704.872796][T14696] ? __pfx___might_resched+0x10/0x10 [ 704.872824][T14696] ? down_write+0x146/0x1f0 [ 704.872842][T14696] ? vma_is_special_huge+0x23f/0x2d0 [ 704.872863][T14696] ? __pfx_vma_is_special_huge+0x10/0x10 [ 704.872885][T14696] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 704.872908][T14696] ? policy_nodemask+0xed/0x4f0 [ 704.872932][T14696] alloc_pages_mpol+0x1fb/0x540 [ 704.872954][T14696] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 704.872978][T14696] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 704.873005][T14696] alloc_pages_noprof+0x1a/0x160 [ 704.873020][T14696] __pmd_alloc+0x3b/0x950 [ 704.873045][T14696] __handle_mm_fault+0xa9c/0x2a00 [ 704.873063][T14696] ? mt_find+0x45e/0x8e0 [ 704.873081][T14696] ? __pfx___handle_mm_fault+0x10/0x10 [ 704.873095][T14696] ? __pfx_mt_find+0x10/0x10 [ 704.873122][T14696] ? find_vma+0xbf/0x140 [ 704.873141][T14696] ? __pfx_find_vma+0x10/0x10 [ 704.873162][T14696] handle_mm_fault+0x37b/0xa30 [ 704.873181][T14696] do_user_addr_fault+0x74c/0x12f0 [ 704.873209][T14696] exc_page_fault+0x6f/0xd0 [ 704.873233][T14696] asm_exc_page_fault+0x26/0x30 [ 704.873249][T14696] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 704.873270][T14696] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 [ 704.873285][T14696] RSP: 0018:ffffc900056b7b98 EFLAGS: 00050206 [ 704.873298][T14696] RAX: 0000000000000001 RBX: ffff88805c86bba0 RCX: 0000000000000005 [ 704.873308][T14696] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805c86bba0 [ 704.873317][T14696] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b90d774 [ 704.873327][T14696] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900056b7d80 [ 704.873336][T14696] R13: 0000000000000000 R14: 0000000000000005 R15: 0000000000000000 [ 704.873355][T14696] _copy_from_iter+0x355/0x1690 [ 704.873384][T14696] ? __pfx__copy_from_iter+0x10/0x10 [ 704.873404][T14696] ? trace_kmalloc+0xeb/0x110 [ 704.873424][T14696] ? __kasan_kmalloc+0xaa/0xb0 [ 704.873444][T14696] ? __kmalloc_noprof+0x343/0x820 [ 704.873463][T14696] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 704.873485][T14696] kernfs_fop_write_iter+0x186/0x5f0 [ 704.873505][T14696] vfs_write+0x6ac/0x1050 [ 704.873521][T14696] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 704.873541][T14696] ? __pfx_vfs_write+0x10/0x10 [ 704.873568][T14696] ksys_write+0x12a/0x250 [ 704.873582][T14696] ? __pfx_ksys_write+0x10/0x10 [ 704.873602][T14696] do_syscall_64+0x115/0x840 [ 704.873620][T14696] ? clear_bhb_loop+0x40/0x90 [ 704.873639][T14696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.873654][T14696] RIP: 0033:0x7f28f919de59 [ 704.873667][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.873681][T14696] RSP: 002b:00007f28fa0e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.873694][T14696] RAX: ffffffffffffffda RBX: 00007f28f9425fa0 RCX: 00007f28f919de59 [ 704.873705][T14696] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 704.873713][T14696] RBP: 00007f28fa0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 704.873722][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.873731][T14696] R13: 00007f28f9426038 R14: 00007f28f9425fa0 R15: 00007ffc9b618ac8 [ 704.873751][T14696] [ 706.213078][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1522'. [ 706.311887][T14704] veth0_macvtap: left promiscuous mode [ 706.512347][T14712] FAULT_INJECTION: forcing a failure. [ 706.512347][T14712] name failslab, interval 1, probability 0, space 0, times 0 [ 706.578115][T14712] CPU: 0 UID: 0 PID: 14712 Comm: syz.4.1524 Not tainted syzkaller #0 PREEMPT(full) [ 706.578138][T14712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 706.578148][T14712] Call Trace: [ 706.578154][T14712] [ 706.578160][T14712] dump_stack_lvl+0x100/0x190 [ 706.578185][T14712] should_fail_ex.cold+0x5/0xa [ 706.578207][T14712] should_failslab+0xc2/0x120 [ 706.578229][T14712] kmem_cache_alloc_noprof+0x91/0x6a0 [ 706.578248][T14712] ? __pfx_map_id_range_down+0x10/0x10 [ 706.578271][T14712] ? security_inode_alloc+0x3b/0x2c0 [ 706.578292][T14712] security_inode_alloc+0x3b/0x2c0 [ 706.578309][T14712] inode_init_always_gfp+0xc77/0xfb0 [ 706.578328][T14712] alloc_inode+0x8e/0x250 [ 706.578348][T14712] sock_alloc+0x44/0x280 [ 706.578366][T14712] ? security_socket_create+0x7f/0x250 [ 706.578383][T14712] __sock_create+0xc2/0x860 [ 706.578409][T14712] __sys_socket+0x14d/0x260 [ 706.578430][T14712] ? exc_page_fault+0x6f/0xd0 [ 706.578454][T14712] ? __pfx___sys_socket+0x10/0x10 [ 706.578482][T14712] __x64_sys_socket+0x72/0xb0 [ 706.578504][T14712] ? lockdep_hardirqs_on+0x78/0x100 [ 706.578527][T14712] do_syscall_64+0x115/0x840 [ 706.578540][T14712] ? clear_bhb_loop+0x40/0x90 [ 706.578559][T14712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.578574][T14712] RIP: 0033:0x7f523419f6c7 [ 706.578587][T14712] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.578602][T14712] RSP: 002b:00007f5235049f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 706.578617][T14712] RAX: ffffffffffffffda RBX: 00007f5234426090 RCX: 00007f523419f6c7 [ 706.578627][T14712] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 706.578636][T14712] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 706.578646][T14712] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 706.578654][T14712] R13: 00007f5234426128 R14: 00007f5234426090 R15: 00007ffd76f22488 [ 706.578674][T14712] [ 706.578692][T14712] socket: no more sockets [ 707.588055][T14728] FAULT_INJECTION: forcing a failure. [ 707.588055][T14728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.731008][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.5.1528 Not tainted syzkaller #0 PREEMPT(full) [ 707.731032][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 707.731042][T14728] Call Trace: [ 707.731048][T14728] [ 707.731054][T14728] dump_stack_lvl+0x100/0x190 [ 707.731079][T14728] should_fail_ex.cold+0x5/0xa [ 707.731097][T14728] ? prepare_alloc_pages+0x16d/0x5f0 [ 707.731122][T14728] should_fail_alloc_page+0xeb/0x140 [ 707.731145][T14728] prepare_alloc_pages+0x1f0/0x5f0 [ 707.731171][T14728] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 707.731190][T14728] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 707.731211][T14728] ? find_held_lock+0x2b/0x80 [ 707.731234][T14728] ? mark_held_locks+0x40/0x70 [ 707.731260][T14728] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 707.731279][T14728] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 707.731298][T14728] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 707.731319][T14728] ? __lock_acquire+0x49f/0x1a40 [ 707.731334][T14728] ? look_up_lock_class+0x55/0x120 [ 707.731360][T14728] ? register_lock_class+0x40/0x560 [ 707.731380][T14728] ? __lock_acquire+0x49f/0x1a40 [ 707.731395][T14728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 707.731418][T14728] ? policy_nodemask+0xed/0x4f0 [ 707.731442][T14728] alloc_pages_mpol+0x1fb/0x540 [ 707.731465][T14728] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 707.731486][T14728] ? __pfx___mutex_lock+0x10/0x10 [ 707.731506][T14728] alloc_pages_noprof+0x1a/0x160 [ 707.731521][T14728] __pmd_alloc+0x3b/0x950 [ 707.731542][T14728] ? mt_find+0x687/0x8e0 [ 707.731560][T14728] huge_pte_alloc+0x5ee/0x730 [ 707.731578][T14728] hugetlb_fault+0x369/0x1410 [ 707.731596][T14728] ? __pfx_hugetlb_fault+0x10/0x10 [ 707.731619][T14728] ? find_vma+0xbf/0x140 [ 707.731638][T14728] ? __pfx_find_vma+0x10/0x10 [ 707.731660][T14728] handle_mm_fault+0x5ff/0xa30 [ 707.731679][T14728] do_user_addr_fault+0x74c/0x12f0 [ 707.731707][T14728] exc_page_fault+0x6f/0xd0 [ 707.731730][T14728] asm_exc_page_fault+0x26/0x30 [ 707.731745][T14728] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 707.731772][T14728] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 707.731786][T14728] RSP: 0018:ffffc90005fb79b0 EFLAGS: 00050216 [ 707.731799][T14728] RAX: 3866666666666666 RBX: 0000000000000033 RCX: 0000000000000033 [ 707.731809][T14728] RDX: 0000000000000001 RSI: ffff8880542a4001 RDI: 0000000000000000 [ 707.731819][T14728] RBP: ffffc90005fb7bc0 R08: 0000000000000000 R09: ffffed100a854806 [ 707.731829][T14728] R10: ffff8880542a4033 R11: 0000000000000000 R12: ffff8880542a4001 [ 707.731839][T14728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000033 [ 707.731858][T14728] _copy_to_iter+0x4c5/0x1720 [ 707.731887][T14728] ? __pfx__copy_to_iter+0x10/0x10 [ 707.731907][T14728] ? s_next+0x7f/0xb0 [ 707.731925][T14728] ? s_stop+0x9/0x10 [ 707.731939][T14728] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 707.731971][T14728] seq_read_iter+0x691/0x1270 [ 707.731996][T14728] ? aa_file_perm+0x7f3/0x14d0 [ 707.732024][T14728] seq_read+0x344/0x4d0 [ 707.732049][T14728] ? __pfx_seq_read+0x10/0x10 [ 707.732085][T14728] ? __pfx_seq_read+0x10/0x10 [ 707.732108][T14728] proc_reg_read+0x240/0x330 [ 707.732123][T14728] ? __pfx_proc_reg_read+0x10/0x10 [ 707.732138][T14728] vfs_read+0x1e4/0xb40 [ 707.732155][T14728] ? __pfx_vfs_read+0x10/0x10 [ 707.732167][T14728] ? find_held_lock+0x2b/0x80 [ 707.732186][T14728] ? __fget_files+0x215/0x3d0 [ 707.732200][T14728] ? __fget_files+0x215/0x3d0 [ 707.732217][T14728] ? __fget_files+0x21f/0x3d0 [ 707.732236][T14728] __x64_sys_pread64+0x1eb/0x250 [ 707.732252][T14728] ? __pfx___x64_sys_pread64+0x10/0x10 [ 707.732276][T14728] do_syscall_64+0x115/0x840 [ 707.732289][T14728] ? clear_bhb_loop+0x40/0x90 [ 707.732308][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.732324][T14728] RIP: 0033:0x7f28f919de59 [ 707.732336][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.732350][T14728] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 707.732364][T14728] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 707.732374][T14728] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 707.732383][T14728] RBP: 00007f28fa0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 707.732393][T14728] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 707.732401][T14728] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 707.732422][T14728] [ 708.236215][T14731] FAULT_INJECTION: forcing a failure. [ 708.236215][T14731] name failslab, interval 1, probability 0, space 0, times 0 [ 708.249843][T14731] CPU: 0 UID: 0 PID: 14731 Comm: syz.4.1529 Not tainted syzkaller #0 PREEMPT(full) [ 708.249867][T14731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.249877][T14731] Call Trace: [ 708.249883][T14731] [ 708.249889][T14731] dump_stack_lvl+0x100/0x190 [ 708.249914][T14731] should_fail_ex.cold+0x5/0xa [ 708.249937][T14731] should_failslab+0xc2/0x120 [ 708.249958][T14731] kmem_cache_alloc_noprof+0x91/0x6a0 [ 708.249977][T14731] ? __pfx_map_id_range_down+0x10/0x10 [ 708.250000][T14731] ? security_inode_alloc+0x3b/0x2c0 [ 708.250021][T14731] security_inode_alloc+0x3b/0x2c0 [ 708.250038][T14731] inode_init_always_gfp+0xc77/0xfb0 [ 708.250057][T14731] alloc_inode+0x8e/0x250 [ 708.250076][T14731] sock_alloc+0x44/0x280 [ 708.250094][T14731] ? security_socket_create+0x7f/0x250 [ 708.250111][T14731] __sock_create+0xc2/0x860 [ 708.250136][T14731] __sys_socket+0x14d/0x260 [ 708.250158][T14731] ? exc_page_fault+0x6f/0xd0 [ 708.250181][T14731] ? __pfx___sys_socket+0x10/0x10 [ 708.250209][T14731] __x64_sys_socket+0x72/0xb0 [ 708.250231][T14731] ? lockdep_hardirqs_on+0x78/0x100 [ 708.250255][T14731] do_syscall_64+0x115/0x840 [ 708.250269][T14731] ? clear_bhb_loop+0x40/0x90 [ 708.250288][T14731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.250304][T14731] RIP: 0033:0x7f523419f6c7 [ 708.250319][T14731] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.250342][T14731] RSP: 002b:00007f523506af98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 708.250358][T14731] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419f6c7 [ 708.250369][T14731] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 708.250379][T14731] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 708.250389][T14731] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 708.250398][T14731] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 708.250419][T14731] [ 708.250443][T14731] socket: no more sockets [ 709.820786][T14718] Process accounting paused [ 710.518868][T12023] Bluetooth: hci6: unexpected subevent 0x01 length: 1 < 18 [ 713.554024][T14806] FAULT_INJECTION: forcing a failure. [ 713.554024][T14806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.619632][T14806] CPU: 0 UID: 0 PID: 14806 Comm: syz.5.1546 Not tainted syzkaller #0 PREEMPT(full) [ 713.619655][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.619665][T14806] Call Trace: [ 713.619671][T14806] [ 713.619678][T14806] dump_stack_lvl+0x100/0x190 [ 713.619710][T14806] should_fail_ex.cold+0x5/0xa [ 713.619731][T14806] _copy_from_user+0x2e/0xd0 [ 713.619754][T14806] dev_set_hwtstamp+0x14b/0x7a0 [ 713.619852][T14806] ? __pfx_dev_set_hwtstamp+0x10/0x10 [ 713.619869][T14806] ? __lock_acquire+0x49f/0x1a40 [ 713.619884][T14806] ? __x64_sys_ioctl+0xb7/0x210 [ 713.619905][T14806] ? do_syscall_64+0x115/0x840 [ 713.619933][T14806] ? netdev_name_node_lookup+0x107/0x150 [ 713.619975][T14806] dev_ifsioc+0x491/0x1f10 [ 713.619995][T14806] ? __pfx_dev_ifsioc+0x10/0x10 [ 713.620010][T14806] ? __pfx___mutex_lock+0x10/0x10 [ 713.620031][T14806] ? dev_load+0x8e/0x240 [ 713.620046][T14806] ? dev_load+0x8e/0x240 [ 713.620067][T14806] dev_ioctl+0x342/0x1070 [ 713.620086][T14806] sock_do_ioctl+0x1a0/0x280 [ 713.620107][T14806] ? __pfx_sock_do_ioctl+0x10/0x10 [ 713.620132][T14806] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 713.620158][T14806] sock_ioctl+0x599/0x6b0 [ 713.620182][T14806] ? __pfx_sock_ioctl+0x10/0x10 [ 713.620203][T14806] ? hook_file_ioctl_common+0x140/0x440 [ 713.620227][T14806] ? __fget_files+0x21f/0x3d0 [ 713.620245][T14806] ? __pfx_sock_ioctl+0x10/0x10 [ 713.620269][T14806] __x64_sys_ioctl+0x18e/0x210 [ 713.620292][T14806] do_syscall_64+0x115/0x840 [ 713.620305][T14806] ? clear_bhb_loop+0x40/0x90 [ 713.620324][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.620339][T14806] RIP: 0033:0x7f28f919de59 [ 713.620353][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.620367][T14806] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.620383][T14806] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 713.620393][T14806] RDX: 0000200000000080 RSI: 00000000000089b0 RDI: 0000000000000003 [ 713.620403][T14806] RBP: 00007f28fa0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 713.620412][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.620421][T14806] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 713.620441][T14806] [ 715.289367][T14821] FAULT_INJECTION: forcing a failure. [ 715.289367][T14821] name failslab, interval 1, probability 0, space 0, times 0 [ 715.353052][T14821] CPU: 0 UID: 0 PID: 14821 Comm: syz.5.1549 Not tainted syzkaller #0 PREEMPT(full) [ 715.353077][T14821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.353087][T14821] Call Trace: [ 715.353093][T14821] [ 715.353100][T14821] dump_stack_lvl+0x100/0x190 [ 715.353125][T14821] should_fail_ex.cold+0x5/0xa [ 715.353147][T14821] should_failslab+0xc2/0x120 [ 715.353169][T14821] kmem_cache_alloc_noprof+0x91/0x6a0 [ 715.353189][T14821] ? trace_kmem_cache_alloc+0xdd/0x100 [ 715.353210][T14821] ? security_file_alloc+0x34/0x2c0 [ 715.353233][T14821] security_file_alloc+0x34/0x2c0 [ 715.353253][T14821] init_file+0x95/0x480 [ 715.353272][T14821] alloc_empty_file+0x79/0x1c0 [ 715.353292][T14821] path_openat+0xe7/0x4280 [ 715.353307][T14821] ? __kasan_slab_alloc+0x89/0x90 [ 715.353325][T14821] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 715.353343][T14821] ? do_getname+0x35/0x390 [ 715.353360][T14821] ? do_sys_openat2+0xc7/0x1e0 [ 715.353378][T14821] ? __x64_sys_openat+0x12d/0x210 [ 715.353397][T14821] ? do_syscall_64+0x115/0x840 [ 715.353410][T14821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.353431][T14821] ? __pfx_path_openat+0x10/0x10 [ 715.353452][T14821] do_file_open+0x20e/0x430 [ 715.353468][T14821] ? __pfx_do_file_open+0x10/0x10 [ 715.353503][T14821] ? alloc_fd+0x471/0x7a0 [ 715.353520][T14821] ? do_getname+0x191/0x390 [ 715.353541][T14821] do_sys_openat2+0x10f/0x1e0 [ 715.353562][T14821] ? __pfx_do_sys_openat2+0x10/0x10 [ 715.353583][T14821] ? do_sock_setsockopt+0x101/0x1d0 [ 715.353604][T14821] ? kfree+0x1e5/0x6c0 [ 715.353621][T14821] __x64_sys_openat+0x12d/0x210 [ 715.353642][T14821] ? __pfx___x64_sys_openat+0x10/0x10 [ 715.353669][T14821] do_syscall_64+0x115/0x840 [ 715.353682][T14821] ? clear_bhb_loop+0x40/0x90 [ 715.353701][T14821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.353717][T14821] RIP: 0033:0x7f28f919de59 [ 715.353732][T14821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.353746][T14821] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 715.353762][T14821] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 715.353772][T14821] RDX: 000000000000a001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 715.353783][T14821] RBP: 00007f28f9233e6f R08: 0000000000000000 R09: 0000000000000000 [ 715.353793][T14821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.353803][T14821] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 715.353823][T14821] [ 716.404491][T14837] FAULT_INJECTION: forcing a failure. [ 716.404491][T14837] name failslab, interval 1, probability 0, space 0, times 0 [ 716.470810][T14837] CPU: 0 UID: 0 PID: 14837 Comm: syz.5.1553 Not tainted syzkaller #0 PREEMPT(full) [ 716.470834][T14837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 716.470844][T14837] Call Trace: [ 716.470851][T14837] [ 716.470858][T14837] dump_stack_lvl+0x100/0x190 [ 716.470884][T14837] should_fail_ex.cold+0x5/0xa [ 716.470906][T14837] should_failslab+0xc2/0x120 [ 716.470928][T14837] kmem_cache_alloc_noprof+0x91/0x6a0 [ 716.470948][T14837] ? trace_kmem_cache_alloc+0xdd/0x100 [ 716.470969][T14837] ? security_file_alloc+0x34/0x2c0 [ 716.470998][T14837] security_file_alloc+0x34/0x2c0 [ 716.471021][T14837] init_file+0x95/0x480 [ 716.471041][T14837] alloc_empty_file+0x79/0x1c0 [ 716.471060][T14837] path_openat+0xe7/0x4280 [ 716.471075][T14837] ? __kasan_slab_alloc+0x89/0x90 [ 716.471098][T14837] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 716.471116][T14837] ? do_getname+0x35/0x390 [ 716.471136][T14837] ? do_sys_openat2+0xc7/0x1e0 [ 716.471157][T14837] ? __x64_sys_openat+0x12d/0x210 [ 716.471176][T14837] ? do_syscall_64+0x115/0x840 [ 716.471190][T14837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.471214][T14837] ? __pfx_path_openat+0x10/0x10 [ 716.471238][T14837] do_file_open+0x20e/0x430 [ 716.471255][T14837] ? __pfx_do_file_open+0x10/0x10 [ 716.471285][T14837] ? alloc_fd+0x471/0x7a0 [ 716.471302][T14837] ? do_getname+0x191/0x390 [ 716.471322][T14837] do_sys_openat2+0x10f/0x1e0 [ 716.471346][T14837] ? __pfx_do_sys_openat2+0x10/0x10 [ 716.471366][T14837] ? do_sock_setsockopt+0x101/0x1d0 [ 716.471386][T14837] ? kfree+0x1e5/0x6c0 [ 716.471404][T14837] __x64_sys_openat+0x12d/0x210 [ 716.471437][T14837] ? __pfx___x64_sys_openat+0x10/0x10 [ 716.471468][T14837] do_syscall_64+0x115/0x840 [ 716.471482][T14837] ? clear_bhb_loop+0x40/0x90 [ 716.471501][T14837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.471518][T14837] RIP: 0033:0x7f28f919de59 [ 716.471532][T14837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.471547][T14837] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 716.471563][T14837] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 716.471573][T14837] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 716.471584][T14837] RBP: 00007f28f9233e6f R08: 0000000000000000 R09: 0000000000000000 [ 716.471594][T14837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.471604][T14837] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 716.471624][T14837] [ 718.974528][T14884] FAULT_INJECTION: forcing a failure. [ 718.974528][T14884] name failslab, interval 1, probability 0, space 0, times 0 [ 719.049270][T14884] CPU: 0 UID: 0 PID: 14884 Comm: syz.6.1564 Not tainted syzkaller #0 PREEMPT(full) [ 719.049294][T14884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.049305][T14884] Call Trace: [ 719.049311][T14884] [ 719.049318][T14884] dump_stack_lvl+0x100/0x190 [ 719.049343][T14884] should_fail_ex.cold+0x5/0xa [ 719.049364][T14884] should_failslab+0xc2/0x120 [ 719.049386][T14884] __kmalloc_cache_noprof+0x91/0x6c0 [ 719.049402][T14884] ? lockdep_init_map_type+0x5c/0x250 [ 719.049417][T14884] ? landlock_merge_ruleset+0x118/0x8b0 [ 719.049439][T14884] landlock_merge_ruleset+0x118/0x8b0 [ 719.049457][T14884] ? prepare_creds+0x5ee/0x950 [ 719.049482][T14884] __do_sys_landlock_restrict_self+0x2af/0x9e0 [ 719.049503][T14884] do_syscall_64+0x115/0x840 [ 719.049516][T14884] ? clear_bhb_loop+0x40/0x90 [ 719.049535][T14884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.049551][T14884] RIP: 0033:0x7f41e759de59 [ 719.049568][T14884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.049583][T14884] RSP: 002b:00007f41e8480028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 719.049598][T14884] RAX: ffffffffffffffda RBX: 00007f41e7826090 RCX: 00007f41e759de59 [ 719.049608][T14884] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000004 [ 719.049617][T14884] RBP: 00007f41e8480090 R08: 0000000000000000 R09: 0000000000000000 [ 719.049626][T14884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.049636][T14884] R13: 00007f41e7826128 R14: 00007f41e7826090 R15: 00007ffc9da30ea8 [ 719.049655][T14884] [ 719.818406][T14892] FAULT_INJECTION: forcing a failure. [ 719.818406][T14892] name failslab, interval 1, probability 0, space 0, times 0 [ 719.866452][T14892] CPU: 0 UID: 0 PID: 14892 Comm: syz.6.1567 Not tainted syzkaller #0 PREEMPT(full) [ 719.866476][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 719.866487][T14892] Call Trace: [ 719.866494][T14892] [ 719.866501][T14892] dump_stack_lvl+0x100/0x190 [ 719.866526][T14892] should_fail_ex.cold+0x5/0xa [ 719.866547][T14892] should_failslab+0xc2/0x120 [ 719.866572][T14892] kmem_cache_alloc_noprof+0x91/0x6a0 [ 719.866591][T14892] ? mas_next_range+0x9b/0xf0 [ 719.866609][T14892] ? vm_area_alloc+0x1f/0x160 [ 719.866628][T14892] vm_area_alloc+0x1f/0x160 [ 719.866642][T14892] __mmap_region+0x1033/0x2db0 [ 719.866662][T14892] ? __page_table_check_zero+0x338/0x410 [ 719.866689][T14892] ? __pfx___mmap_region+0x10/0x10 [ 719.866718][T14892] ? mas_prev_slot+0x760/0x1d20 [ 719.866757][T14892] ? __pfx_unmapped_area_topdown+0x10/0x10 [ 719.866807][T14892] mmap_region+0x35d/0x620 [ 719.866826][T14892] ? __pfx_mmap_region+0x10/0x10 [ 719.866843][T14892] ? thp_get_unmapped_area_vmflags+0x27f/0x2d0 [ 719.866870][T14892] ? cap_mmap_addr+0x4b/0x120 [ 719.866884][T14892] ? bpf_lsm_mmap_addr+0x9/0x30 [ 719.866899][T14892] ? security_mmap_addr+0x71/0x1e0 [ 719.866919][T14892] ? __get_unmapped_area+0x255/0x3e0 [ 719.866943][T14892] do_mmap+0xc63/0x12f0 [ 719.866976][T14892] ? __pfx_do_mmap+0x10/0x10 [ 719.866997][T14892] ? __pfx_down_write_killable+0x10/0x10 [ 719.867018][T14892] vm_mmap_pgoff+0x29e/0x470 [ 719.867043][T14892] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 719.867067][T14892] ? find_held_lock+0x2b/0x80 [ 719.867086][T14892] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 719.867109][T14892] ksys_mmap_pgoff+0xe4/0x610 [ 719.867131][T14892] ? find_held_lock+0x2b/0x80 [ 719.867150][T14892] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 719.867172][T14892] ? exc_page_fault+0x6f/0xd0 [ 719.867202][T14892] __x64_sys_mmap+0x125/0x190 [ 719.867225][T14892] do_syscall_64+0x115/0x840 [ 719.867239][T14892] ? clear_bhb_loop+0x40/0x90 [ 719.867258][T14892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.867275][T14892] RIP: 0033:0x7f41e759dbc2 [ 719.867288][T14892] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 719.867303][T14892] RSP: 002b:00007f41e849fd08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 719.867319][T14892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41e759dbc2 [ 719.867329][T14892] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 719.867339][T14892] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 719.867348][T14892] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 719.867358][T14892] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f41e76514dc [ 719.867377][T14892] [ 720.988380][T14905] random: crng reseeded on system resumption [ 721.334897][T14894] FAULT_INJECTION: forcing a failure. [ 721.334897][T14894] name failslab, interval 1, probability 0, space 0, times 0 [ 721.442754][T14894] CPU: 0 UID: 0 PID: 14894 Comm: syz.5.1566 Not tainted syzkaller #0 PREEMPT(full) [ 721.442778][T14894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 721.442789][T14894] Call Trace: [ 721.442795][T14894] [ 721.442802][T14894] dump_stack_lvl+0x100/0x190 [ 721.442828][T14894] should_fail_ex.cold+0x5/0xa [ 721.442851][T14894] should_failslab+0xc2/0x120 [ 721.442874][T14894] __kmalloc_noprof+0xfc/0x820 [ 721.442899][T14894] ? rcu_is_watching+0x12/0xc0 [ 721.442920][T14894] ? tomoyo_realpath_from_path+0xb6/0x690 [ 721.442948][T14894] tomoyo_realpath_from_path+0xb6/0x690 [ 721.442975][T14894] tomoyo_check_open_permission+0x2af/0x3c0 [ 721.442995][T14894] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 721.443013][T14894] ? __lock_acquire+0x49f/0x1a40 [ 721.443033][T14894] ? hook_file_open+0x24f/0x8f0 [ 721.443061][T14894] ? lock_acquire+0x1b9/0x370 [ 721.443081][T14894] tomoyo_file_open+0x6b/0x90 [ 721.443097][T14894] security_file_open+0xb5/0x1e0 [ 721.443118][T14894] do_dentry_open+0x588/0x14d0 [ 721.443139][T14894] vfs_open+0x82/0x3f0 [ 721.443160][T14894] path_openat+0x2873/0x4280 [ 721.443184][T14894] ? __pfx_path_openat+0x10/0x10 [ 721.443206][T14894] do_file_open+0x20e/0x430 [ 721.443223][T14894] ? __pfx_do_file_open+0x10/0x10 [ 721.443252][T14894] ? alloc_fd+0x471/0x7a0 [ 721.443269][T14894] ? do_getname+0x191/0x390 [ 721.443290][T14894] do_sys_openat2+0x10f/0x1e0 [ 721.443310][T14894] ? __pfx_do_sys_openat2+0x10/0x10 [ 721.443330][T14894] ? do_sock_setsockopt+0x101/0x1d0 [ 721.443351][T14894] ? kfree+0x1e5/0x6c0 [ 721.443369][T14894] __x64_sys_openat+0x12d/0x210 [ 721.443390][T14894] ? __pfx___x64_sys_openat+0x10/0x10 [ 721.443423][T14894] do_syscall_64+0x115/0x840 [ 721.443438][T14894] ? clear_bhb_loop+0x40/0x90 [ 721.443457][T14894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.443473][T14894] RIP: 0033:0x7f28f919de59 [ 721.443487][T14894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.443502][T14894] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 721.443518][T14894] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 721.443529][T14894] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 721.443540][T14894] RBP: 00007f28f9233e6f R08: 0000000000000000 R09: 0000000000000000 [ 721.443550][T14894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.443560][T14894] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 721.443581][T14894] [ 721.443589][T14894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 723.813527][T14945] random: crng reseeded on system resumption [ 724.474372][T14964] FAULT_INJECTION: forcing a failure. [ 724.474372][T14964] name fail_futex, interval 1, probability 0, space 0, times 0 [ 724.539799][T14964] CPU: 0 UID: 0 PID: 14964 Comm: syz.6.1583 Not tainted syzkaller #0 PREEMPT(full) [ 724.539824][T14964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 724.539834][T14964] Call Trace: [ 724.539841][T14964] [ 724.539848][T14964] dump_stack_lvl+0x100/0x190 [ 724.539873][T14964] should_fail_ex.cold+0x5/0xa [ 724.539895][T14964] get_futex_key+0x1d2/0x14f0 [ 724.539914][T14964] ? __pfx_get_futex_key+0x10/0x10 [ 724.539931][T14964] ? __pfx_map_create+0x10/0x10 [ 724.539988][T14964] futex_wait_setup+0x91/0x540 [ 724.540015][T14964] __futex_wait+0x19f/0x300 [ 724.540038][T14964] ? __pfx___futex_wait+0x10/0x10 [ 724.540057][T14964] ? futex_hash+0x311/0x400 [ 724.540074][T14964] ? __pfx_futex_wake_mark+0x10/0x10 [ 724.540097][T14964] ? __pfx_futex_hash+0x10/0x10 [ 724.540111][T14964] ? get_pid_task+0xfc/0x250 [ 724.540131][T14964] ? get_pid_task+0xfc/0x250 [ 724.540153][T14964] futex_wait+0xe6/0x370 [ 724.540173][T14964] ? __pfx_futex_wait+0x10/0x10 [ 724.540197][T14964] ? rcu_read_lock_any_held+0x6a/0xa0 [ 724.540222][T14964] do_futex+0x265/0x440 [ 724.540240][T14964] ? __pfx_do_futex+0x10/0x10 [ 724.540262][T14964] __x64_sys_futex+0x34f/0x4d0 [ 724.540281][T14964] ? __pfx___x64_sys_futex+0x10/0x10 [ 724.540306][T14964] do_syscall_64+0x115/0x840 [ 724.540321][T14964] ? clear_bhb_loop+0x40/0x90 [ 724.540339][T14964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.540358][T14964] RIP: 0033:0x7f41e759de59 [ 724.540373][T14964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.540388][T14964] RSP: 002b:00007f41e84800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 724.540403][T14964] RAX: ffffffffffffffda RBX: 00007f41e7826098 RCX: 00007f41e759de59 [ 724.540414][T14964] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f41e7826098 [ 724.540424][T14964] RBP: 00007f41e7826090 R08: 0000000000000000 R09: 0000000000000000 [ 724.540433][T14964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.540443][T14964] R13: 00007f41e7826128 R14: 00007ffc9da30dc0 R15: 00007ffc9da30ea8 [ 724.540463][T14964] [ 725.030781][T14973] FAULT_INJECTION: forcing a failure. [ 725.030781][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 725.074741][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.5.1585 Not tainted syzkaller #0 PREEMPT(full) [ 725.074765][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.074775][T14973] Call Trace: [ 725.074781][T14973] [ 725.074788][T14973] dump_stack_lvl+0x100/0x190 [ 725.074812][T14973] should_fail_ex.cold+0x5/0xa [ 725.074834][T14973] should_failslab+0xc2/0x120 [ 725.074856][T14973] kmem_cache_alloc_noprof+0x91/0x6a0 [ 725.074876][T14973] ? trace_kmem_cache_alloc+0xdd/0x100 [ 725.074898][T14973] ? security_file_alloc+0x34/0x2c0 [ 725.074921][T14973] security_file_alloc+0x34/0x2c0 [ 725.074941][T14973] init_file+0x95/0x480 [ 725.074961][T14973] alloc_empty_file+0x79/0x1c0 [ 725.074980][T14973] path_openat+0xe7/0x4280 [ 725.074996][T14973] ? __kasan_slab_alloc+0x89/0x90 [ 725.075016][T14973] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 725.075033][T14973] ? do_getname+0x35/0x390 [ 725.075051][T14973] ? do_sys_openat2+0xc7/0x1e0 [ 725.075070][T14973] ? __x64_sys_openat+0x12d/0x210 [ 725.075089][T14973] ? do_syscall_64+0x115/0x840 [ 725.075103][T14973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.075124][T14973] ? __pfx_path_openat+0x10/0x10 [ 725.075158][T14973] do_file_open+0x20e/0x430 [ 725.075176][T14973] ? __pfx_do_file_open+0x10/0x10 [ 725.075204][T14973] ? alloc_fd+0x471/0x7a0 [ 725.075222][T14973] ? do_getname+0x191/0x390 [ 725.075243][T14973] do_sys_openat2+0x10f/0x1e0 [ 725.075263][T14973] ? __pfx_do_sys_openat2+0x10/0x10 [ 725.075284][T14973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.075310][T14973] ? __fget_files+0x21f/0x3d0 [ 725.075327][T14973] __x64_sys_openat+0x12d/0x210 [ 725.075348][T14973] ? __pfx___x64_sys_openat+0x10/0x10 [ 725.075367][T14973] ? ksys_write+0x1ac/0x250 [ 725.075387][T14973] do_syscall_64+0x115/0x840 [ 725.075400][T14973] ? clear_bhb_loop+0x40/0x90 [ 725.075419][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.075434][T14973] RIP: 0033:0x7f28f919de59 [ 725.075448][T14973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.075462][T14973] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 725.075478][T14973] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 725.075488][T14973] RDX: 0000000000080600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 725.075498][T14973] RBP: 00007f28fa0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 725.075508][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.075517][T14973] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 725.075536][T14973] [ 726.443592][T15000] random: crng reseeded on system resumption [ 726.668372][T15006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1591'. [ 726.896067][T15006] ipvlan1: entered promiscuous mode [ 726.952217][T15006] ipvlan1: entered allmulticast mode [ 726.985627][T15006] veth0_vlan: entered allmulticast mode [ 728.244037][T15026] bcache: register_bcache() error : failed to open device [ 728.409796][T15028] FAULT_INJECTION: forcing a failure. [ 728.409796][T15028] name failslab, interval 1, probability 0, space 0, times 0 [ 728.469930][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.0.1595 Not tainted syzkaller #0 PREEMPT(full) [ 728.469953][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.469963][T15028] Call Trace: [ 728.469969][T15028] [ 728.469975][T15028] dump_stack_lvl+0x100/0x190 [ 728.470000][T15028] should_fail_ex.cold+0x5/0xa [ 728.470022][T15028] should_failslab+0xc2/0x120 [ 728.470044][T15028] kmem_cache_alloc_noprof+0x91/0x6a0 [ 728.470064][T15028] ? lock_acquire+0x1b9/0x370 [ 728.470077][T15028] ? __pmd_alloc+0xbf/0x950 [ 728.470103][T15028] __pmd_alloc+0xbf/0x950 [ 728.470126][T15028] walk_to_pmd+0x3a3/0x4c0 [ 728.470151][T15028] insert_pages+0xf1/0x5e0 [ 728.470179][T15028] ? __pfx_insert_pages+0x10/0x10 [ 728.470207][T15028] ? __pfx_down_read_trylock+0x10/0x10 [ 728.470230][T15028] vm_insert_pages+0x138/0x440 [ 728.470256][T15028] io_uring_mmap+0x4bc/0x50b [ 728.470278][T15028] ? __pfx_io_uring_mmap+0x10/0x10 [ 728.470296][T15028] ? lockdep_init_map_type+0x5c/0x250 [ 728.470313][T15028] __mmap_region+0x13c7/0x2db0 [ 728.470334][T15028] ? __pfx___mmap_region+0x10/0x10 [ 728.470349][T15028] ? __pfx___might_resched+0x10/0x10 [ 728.470377][T15028] ? down_write+0x146/0x1f0 [ 728.470399][T15028] ? process_measurement+0x1f4/0x2350 [ 728.470422][T15028] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 728.470452][T15028] ? __lock_acquire+0x49f/0x1a40 [ 728.470475][T15028] ? __lock_acquire+0x49f/0x1a40 [ 728.470519][T15028] mmap_region+0x527/0x620 [ 728.470539][T15028] ? __pfx_mmap_region+0x10/0x10 [ 728.470558][T15028] ? cap_mmap_addr+0x4b/0x120 [ 728.470572][T15028] ? bpf_lsm_mmap_addr+0x9/0x30 [ 728.470587][T15028] ? security_mmap_addr+0x71/0x1e0 [ 728.470608][T15028] ? __get_unmapped_area+0x255/0x3e0 [ 728.470631][T15028] do_mmap+0xc63/0x12f0 [ 728.470656][T15028] ? __pfx_do_mmap+0x10/0x10 [ 728.470677][T15028] ? __pfx_down_write_killable+0x10/0x10 [ 728.470697][T15028] vm_mmap_pgoff+0x29e/0x470 [ 728.470722][T15028] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 728.470741][T15028] ? __fget_files+0x215/0x3d0 [ 728.470760][T15028] ? __fget_files+0x21f/0x3d0 [ 728.470777][T15028] ksys_mmap_pgoff+0x3cb/0x610 [ 728.470800][T15028] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 728.470819][T15028] ? fput+0x79/0x100 [ 728.470836][T15028] ? ksys_write+0x1ac/0x250 [ 728.470850][T15028] ? __pfx_ksys_write+0x10/0x10 [ 728.470866][T15028] __x64_sys_mmap+0x125/0x190 [ 728.470888][T15028] do_syscall_64+0x115/0x840 [ 728.470901][T15028] ? clear_bhb_loop+0x40/0x90 [ 728.470920][T15028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.470935][T15028] RIP: 0033:0x7f065c19de59 [ 728.470950][T15028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.470964][T15028] RSP: 002b:00007f065cfd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 728.470980][T15028] RAX: ffffffffffffffda RBX: 00007f065c425fa0 RCX: 00007f065c19de59 [ 728.470990][T15028] RDX: fffffff7fffffe01 RSI: 0000000004000002 RDI: 0000000000000000 [ 728.470999][T15028] RBP: 00007f065cfd5090 R08: 0000000000000003 R09: 0000000000000000 [ 728.471009][T15028] R10: 0000000000008051 R11: 0000000000000246 R12: 0000000000000001 [ 728.471018][T15028] R13: 00007f065c426038 R14: 00007f065c425fa0 R15: 00007fff2bf791d8 [ 728.471038][T15028] [ 728.979020][T15033] FAULT_INJECTION: forcing a failure. [ 728.979020][T15033] name failslab, interval 1, probability 0, space 0, times 0 [ 728.991765][T15033] CPU: 0 UID: 0 PID: 15033 Comm: syz.5.1596 Not tainted syzkaller #0 PREEMPT(full) [ 728.991787][T15033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.991797][T15033] Call Trace: [ 728.991804][T15033] [ 728.991811][T15033] dump_stack_lvl+0x100/0x190 [ 728.991836][T15033] should_fail_ex.cold+0x5/0xa [ 728.991858][T15033] should_failslab+0xc2/0x120 [ 728.991880][T15033] kmem_cache_alloc_noprof+0x91/0x6a0 [ 728.991899][T15033] ? trace_kmem_cache_alloc+0xdd/0x100 [ 728.991921][T15033] ? security_file_alloc+0x34/0x2c0 [ 728.991945][T15033] security_file_alloc+0x34/0x2c0 [ 728.991965][T15033] init_file+0x95/0x480 [ 728.991984][T15033] alloc_empty_file+0x79/0x1c0 [ 728.992004][T15033] path_openat+0xe7/0x4280 [ 728.992019][T15033] ? __kasan_slab_alloc+0x89/0x90 [ 728.992038][T15033] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 728.992055][T15033] ? do_getname+0x35/0x390 [ 728.992073][T15033] ? do_sys_openat2+0xc7/0x1e0 [ 728.992092][T15033] ? __x64_sys_openat+0x12d/0x210 [ 728.992110][T15033] ? do_syscall_64+0x115/0x840 [ 728.992125][T15033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.992146][T15033] ? __pfx_path_openat+0x10/0x10 [ 728.992167][T15033] do_file_open+0x20e/0x430 [ 728.992184][T15033] ? __pfx_do_file_open+0x10/0x10 [ 728.992219][T15033] ? alloc_fd+0x471/0x7a0 [ 728.992236][T15033] ? do_getname+0x191/0x390 [ 728.992256][T15033] do_sys_openat2+0x10f/0x1e0 [ 728.992276][T15033] ? __pfx_do_sys_openat2+0x10/0x10 [ 728.992296][T15033] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 728.992323][T15033] ? __fget_files+0x21f/0x3d0 [ 728.992340][T15033] __x64_sys_openat+0x12d/0x210 [ 728.992360][T15033] ? __pfx___x64_sys_openat+0x10/0x10 [ 728.992379][T15033] ? ksys_write+0x1ac/0x250 [ 728.992399][T15033] do_syscall_64+0x115/0x840 [ 728.992413][T15033] ? clear_bhb_loop+0x40/0x90 [ 728.992430][T15033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.992446][T15033] RIP: 0033:0x7f28f919de59 [ 728.992460][T15033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.992475][T15033] RSP: 002b:00007f28fa0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 728.992491][T15033] RAX: ffffffffffffffda RBX: 00007f28f9426090 RCX: 00007f28f919de59 [ 728.992501][T15033] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 728.992511][T15033] RBP: 00007f28fa0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 728.992520][T15033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.992529][T15033] R13: 00007f28f9426128 R14: 00007f28f9426090 R15: 00007ffc9b618ac8 [ 728.992549][T15033] [ 734.028232][T15090] cougar: G6 mapped to space [ 740.243927][T15151] Process accounting resumed [ 742.376275][T15220] FAULT_INJECTION: forcing a failure. [ 742.376275][T15220] name failslab, interval 1, probability 0, space 0, times 0 [ 742.472961][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.0.1626 Not tainted syzkaller #0 PREEMPT(full) [ 742.472985][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.472996][T15220] Call Trace: [ 742.473002][T15220] [ 742.473009][T15220] dump_stack_lvl+0x100/0x190 [ 742.473037][T15220] should_fail_ex.cold+0x5/0xa [ 742.473060][T15220] should_failslab+0xc2/0x120 [ 742.473084][T15220] kmem_cache_alloc_noprof+0x91/0x6a0 [ 742.473104][T15220] ? trace_kmem_cache_alloc+0xdd/0x100 [ 742.473126][T15220] ? security_file_alloc+0x34/0x2c0 [ 742.473151][T15220] security_file_alloc+0x34/0x2c0 [ 742.473171][T15220] init_file+0x95/0x480 [ 742.473191][T15220] alloc_empty_file+0x79/0x1c0 [ 742.473210][T15220] path_openat+0xe7/0x4280 [ 742.473225][T15220] ? __kasan_slab_alloc+0x89/0x90 [ 742.473245][T15220] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 742.473271][T15220] ? do_getname+0x35/0x390 [ 742.473305][T15220] ? do_sys_openat2+0xc7/0x1e0 [ 742.473324][T15220] ? __x64_sys_openat+0x12d/0x210 [ 742.473343][T15220] ? do_syscall_64+0x115/0x840 [ 742.473358][T15220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.473380][T15220] ? __pfx_path_openat+0x10/0x10 [ 742.473401][T15220] do_file_open+0x20e/0x430 [ 742.473418][T15220] ? __pfx_do_file_open+0x10/0x10 [ 742.473447][T15220] ? alloc_fd+0x471/0x7a0 [ 742.473465][T15220] ? do_getname+0x191/0x390 [ 742.473485][T15220] do_sys_openat2+0x10f/0x1e0 [ 742.473505][T15220] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.473526][T15220] ? do_sock_setsockopt+0x101/0x1d0 [ 742.473549][T15220] ? kfree+0x1e5/0x6c0 [ 742.473567][T15220] __x64_sys_openat+0x12d/0x210 [ 742.473588][T15220] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.473675][T15220] do_syscall_64+0x115/0x840 [ 742.473689][T15220] ? clear_bhb_loop+0x40/0x90 [ 742.473708][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.473724][T15220] RIP: 0033:0x7f065c19de59 [ 742.473739][T15220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.473753][T15220] RSP: 002b:00007f065cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.473769][T15220] RAX: ffffffffffffffda RBX: 00007f065c426090 RCX: 00007f065c19de59 [ 742.473779][T15220] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 742.473789][T15220] RBP: 00007f065c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 742.473799][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.473809][T15220] R13: 00007f065c426128 R14: 00007f065c426090 R15: 00007fff2bf791d8 [ 742.473829][T15220] [ 743.560569][T15233] FAULT_INJECTION: forcing a failure. [ 743.560569][T15233] name failslab, interval 1, probability 0, space 0, times 0 [ 743.604697][T15233] CPU: 0 UID: 0 PID: 15233 Comm: syz.4.1630 Not tainted syzkaller #0 PREEMPT(full) [ 743.604722][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 743.604733][T15233] Call Trace: [ 743.604739][T15233] [ 743.604745][T15233] dump_stack_lvl+0x100/0x190 [ 743.604770][T15233] should_fail_ex.cold+0x5/0xa [ 743.604793][T15233] should_failslab+0xc2/0x120 [ 743.604816][T15233] kmem_cache_alloc_noprof+0x91/0x6a0 [ 743.604835][T15233] ? trace_kmem_cache_alloc+0xdd/0x100 [ 743.604857][T15233] ? security_file_alloc+0x34/0x2c0 [ 743.604881][T15233] security_file_alloc+0x34/0x2c0 [ 743.604901][T15233] init_file+0x95/0x480 [ 743.604927][T15233] alloc_empty_file+0x79/0x1c0 [ 743.604948][T15233] path_openat+0xe7/0x4280 [ 743.604964][T15233] ? __kasan_slab_alloc+0x89/0x90 [ 743.604984][T15233] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 743.605002][T15233] ? do_getname+0x35/0x390 [ 743.605021][T15233] ? do_sys_openat2+0xc7/0x1e0 [ 743.605039][T15233] ? __x64_sys_openat+0x12d/0x210 [ 743.605058][T15233] ? do_syscall_64+0x115/0x840 [ 743.605072][T15233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.605094][T15233] ? __pfx_path_openat+0x10/0x10 [ 743.605114][T15233] do_file_open+0x20e/0x430 [ 743.605132][T15233] ? __pfx_do_file_open+0x10/0x10 [ 743.605160][T15233] ? alloc_fd+0x471/0x7a0 [ 743.605178][T15233] ? do_getname+0x191/0x390 [ 743.605199][T15233] do_sys_openat2+0x10f/0x1e0 [ 743.605220][T15233] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.605240][T15233] ? do_sock_setsockopt+0x101/0x1d0 [ 743.605260][T15233] ? kfree+0x1e5/0x6c0 [ 743.605279][T15233] __x64_sys_openat+0x12d/0x210 [ 743.605299][T15233] ? __pfx___x64_sys_openat+0x10/0x10 [ 743.605331][T15233] do_syscall_64+0x115/0x840 [ 743.605345][T15233] ? clear_bhb_loop+0x40/0x90 [ 743.605363][T15233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.605378][T15233] RIP: 0033:0x7f523419de59 [ 743.605392][T15233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.605407][T15233] RSP: 002b:00007f523504b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 743.605423][T15233] RAX: ffffffffffffffda RBX: 00007f5234426090 RCX: 00007f523419de59 [ 743.605433][T15233] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 743.605443][T15233] RBP: 00007f5234233e6f R08: 0000000000000000 R09: 0000000000000000 [ 743.605452][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.605461][T15233] R13: 00007f5234426128 R14: 00007f5234426090 R15: 00007ffd76f22488 [ 743.605481][T15233] [ 745.388485][T15255] FAULT_INJECTION: forcing a failure. [ 745.388485][T15255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.550656][T15255] CPU: 0 UID: 0 PID: 15255 Comm: syz.5.1635 Not tainted syzkaller #0 PREEMPT(full) [ 745.550680][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.550691][T15255] Call Trace: [ 745.550697][T15255] [ 745.550703][T15255] dump_stack_lvl+0x100/0x190 [ 745.550729][T15255] should_fail_ex.cold+0x5/0xa [ 745.550751][T15255] _copy_to_user+0x32/0xd0 [ 745.550776][T15255] simple_read_from_buffer+0xcb/0x170 [ 745.550803][T15255] proc_fail_nth_read+0x1af/0x230 [ 745.550825][T15255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.550847][T15255] ? rw_verify_area+0xce/0x6d0 [ 745.550870][T15255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.550890][T15255] vfs_read+0x1e4/0xb40 [ 745.550906][T15255] ? __pfx_vfs_read+0x10/0x10 [ 745.550920][T15255] ? __fget_files+0x215/0x3d0 [ 745.550938][T15255] ? __fget_files+0x21f/0x3d0 [ 745.550957][T15255] ksys_read+0x12a/0x250 [ 745.550971][T15255] ? __pfx_ksys_read+0x10/0x10 [ 745.550990][T15255] do_syscall_64+0x115/0x840 [ 745.551004][T15255] ? clear_bhb_loop+0x40/0x90 [ 745.551023][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.551038][T15255] RIP: 0033:0x7f28f915e68e [ 745.551051][T15255] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.551066][T15255] RSP: 002b:00007f28fa0e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.551081][T15255] RAX: ffffffffffffffda RBX: 00007f28fa0e86c0 RCX: 00007f28f915e68e [ 745.551091][T15255] RDX: 000000000000000f RSI: 00007f28fa0e80a0 RDI: 0000000000000004 [ 745.551101][T15255] RBP: 00007f28fa0e8090 R08: 0000000000000000 R09: 0000000000000000 [ 745.551110][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.551119][T15255] R13: 00007f28f9426038 R14: 00007f28f9425fa0 R15: 00007ffc9b618ac8 [ 745.551139][T15255] [ 746.073577][T15269] FAULT_INJECTION: forcing a failure. [ 746.073577][T15269] name failslab, interval 1, probability 0, space 0, times 0 [ 746.151655][T15269] CPU: 0 UID: 0 PID: 15269 Comm: syz.0.1641 Not tainted syzkaller #0 PREEMPT(full) [ 746.151684][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.151694][T15269] Call Trace: [ 746.151700][T15269] [ 746.151706][T15269] dump_stack_lvl+0x100/0x190 [ 746.151730][T15269] should_fail_ex.cold+0x5/0xa [ 746.151751][T15269] should_failslab+0xc2/0x120 [ 746.151774][T15269] kmem_cache_alloc_noprof+0x91/0x6a0 [ 746.151795][T15269] ? __break_lease+0x2d4/0x1b70 [ 746.151841][T15269] __break_lease+0x2d4/0x1b70 [ 746.151857][T15269] ? __pfx_hook_file_open+0x10/0x10 [ 746.151879][T15269] ? __lock_acquire+0x49f/0x1a40 [ 746.151895][T15269] ? __pfx___break_lease+0x10/0x10 [ 746.151917][T15269] ? apparmor_file_open+0x1a6/0xb70 [ 746.151936][T15269] ? __pfx_apparmor_file_open+0x10/0x10 [ 746.151952][T15269] ? path_get+0x61/0x80 [ 746.151968][T15269] ? path_get+0x61/0x80 [ 746.151985][T15269] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 746.152007][T15269] do_dentry_open+0xccb/0x14d0 [ 746.152027][T15269] vfs_open+0x82/0x3f0 [ 746.152048][T15269] path_openat+0x2873/0x4280 [ 746.152071][T15269] ? __pfx_path_openat+0x10/0x10 [ 746.152086][T15269] ? stack_trace_save+0x8e/0xc0 [ 746.152108][T15269] ? __pfx_stack_trace_save+0x10/0x10 [ 746.152131][T15269] do_file_open+0x20e/0x430 [ 746.152148][T15269] ? __pfx_do_file_open+0x10/0x10 [ 746.152163][T15269] ? __kasan_slab_alloc+0x89/0x90 [ 746.152182][T15269] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 746.152199][T15269] ? do_getname+0x35/0x390 [ 746.152232][T15269] ? __lock_acquire+0x49f/0x1a40 [ 746.152261][T15269] do_open_execat+0xd1/0x360 [ 746.152284][T15269] ? __pfx_do_open_execat+0x10/0x10 [ 746.152308][T15269] ? __might_fault+0xc5/0x140 [ 746.152326][T15269] ? __might_fault+0xc5/0x140 [ 746.152345][T15269] alloc_bprm+0x2d/0x9d0 [ 746.152368][T15269] do_execveat_common.isra.0+0x19c/0x580 [ 746.152393][T15269] ? do_getname+0x191/0x390 [ 746.152413][T15269] __x64_sys_execve+0x93/0xd0 [ 746.152437][T15269] do_syscall_64+0x115/0x840 [ 746.152451][T15269] ? clear_bhb_loop+0x40/0x90 [ 746.152469][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.152484][T15269] RIP: 0033:0x7f065c19de59 [ 746.152498][T15269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.152512][T15269] RSP: 002b:00007f065cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 746.152528][T15269] RAX: ffffffffffffffda RBX: 00007f065c425fa0 RCX: 00007f065c19de59 [ 746.152538][T15269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 746.152548][T15269] RBP: 00007f065cfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 746.152557][T15269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.152566][T15269] R13: 00007f065c426038 R14: 00007f065c425fa0 R15: 00007fff2bf791d8 [ 746.152586][T15269] [ 746.951487][T15280] random: crng reseeded on system resumption [ 747.188233][T15283] FAULT_INJECTION: forcing a failure. [ 747.188233][T15283] name failslab, interval 1, probability 0, space 0, times 0 [ 747.217878][T15283] CPU: 0 UID: 0 PID: 15283 Comm: syz.4.1645 Not tainted syzkaller #0 PREEMPT(full) [ 747.217902][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 747.217912][T15283] Call Trace: [ 747.217918][T15283] [ 747.217925][T15283] dump_stack_lvl+0x100/0x190 [ 747.217950][T15283] should_fail_ex.cold+0x5/0xa [ 747.217971][T15283] should_failslab+0xc2/0x120 [ 747.217993][T15283] __kmalloc_noprof+0xfc/0x820 [ 747.218012][T15283] ? rcu_is_watching+0x12/0xc0 [ 747.218031][T15283] ? tomoyo_realpath_from_path+0xb6/0x690 [ 747.218057][T15283] tomoyo_realpath_from_path+0xb6/0x690 [ 747.218084][T15283] tomoyo_path_perm+0x276/0x460 [ 747.218100][T15283] ? tomoyo_path_perm+0x262/0x460 [ 747.218119][T15283] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 747.218146][T15283] ? __pfx_apparmor_file_open+0x10/0x10 [ 747.218178][T15283] ? __pfx_ima_file_check+0x10/0x10 [ 747.218197][T15283] ? hook_file_truncate+0xba/0x280 [ 747.218221][T15283] security_file_truncate+0xb5/0x1e0 [ 747.218243][T15283] path_openat+0x3584/0x4280 [ 747.218269][T15283] ? __pfx_path_openat+0x10/0x10 [ 747.218290][T15283] do_file_open+0x20e/0x430 [ 747.218307][T15283] ? __pfx_do_file_open+0x10/0x10 [ 747.218337][T15283] ? alloc_fd+0x471/0x7a0 [ 747.218354][T15283] ? do_getname+0x191/0x390 [ 747.218375][T15283] do_sys_openat2+0x10f/0x1e0 [ 747.218395][T15283] ? __pfx_do_sys_openat2+0x10/0x10 [ 747.218416][T15283] ? do_raw_spin_lock+0x128/0x260 [ 747.218439][T15283] __x64_sys_openat+0x12d/0x210 [ 747.218459][T15283] ? __pfx___x64_sys_openat+0x10/0x10 [ 747.218487][T15283] do_syscall_64+0x115/0x840 [ 747.218502][T15283] ? clear_bhb_loop+0x40/0x90 [ 747.218520][T15283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.218536][T15283] RIP: 0033:0x7f523419de59 [ 747.218554][T15283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.218569][T15283] RSP: 002b:00007f523504b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 747.218585][T15283] RAX: ffffffffffffffda RBX: 00007f5234426090 RCX: 00007f523419de59 [ 747.218596][T15283] RDX: 0000000000002202 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 747.218606][T15283] RBP: 00007f5234233e6f R08: 0000000000000000 R09: 0000000000000000 [ 747.218617][T15283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.218626][T15283] R13: 00007f5234426128 R14: 00007f5234426090 R15: 00007ffd76f22488 [ 747.218646][T15283] [ 747.218655][T15283] ERROR: Out of memory at tomoyo_realpath_from_path. [ 747.546954][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.556472][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.557820][T15322] FAULT_INJECTION: forcing a failure. [ 749.557820][T15322] name failslab, interval 1, probability 0, space 0, times 0 [ 749.623105][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.0.1651 Not tainted syzkaller #0 PREEMPT(full) [ 749.623129][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.623138][T15322] Call Trace: [ 749.623144][T15322] [ 749.623150][T15322] dump_stack_lvl+0x100/0x190 [ 749.623174][T15322] should_fail_ex.cold+0x5/0xa [ 749.623196][T15322] should_failslab+0xc2/0x120 [ 749.623218][T15322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 749.623237][T15322] ? mas_data_end+0x17b/0x2a0 [ 749.623260][T15322] ? vm_area_dup+0x27/0x8e0 [ 749.623278][T15322] vm_area_dup+0x27/0x8e0 [ 749.623294][T15322] __split_vma+0x18c/0xda0 [ 749.623313][T15322] ? __pfx___split_vma+0x10/0x10 [ 749.623333][T15322] ? __pfx_mas_prev+0x10/0x10 [ 749.623354][T15322] vms_gather_munmap_vmas+0x3a5/0x1720 [ 749.623372][T15322] ? validate_mm+0x392/0x4e0 [ 749.623388][T15322] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 749.623404][T15322] ? __pfx_validate_mm+0x10/0x10 [ 749.623431][T15322] do_vmi_align_munmap+0x287/0x5f0 [ 749.623451][T15322] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 749.623467][T15322] ? cap_mmap_addr+0x4b/0x120 [ 749.623516][T15322] do_vmi_munmap+0x1f8/0x3e0 [ 749.623535][T15322] __vm_munmap+0x196/0x390 [ 749.623554][T15322] ? __pfx___vm_munmap+0x10/0x10 [ 749.623583][T15322] __x64_sys_munmap+0x59/0x80 [ 749.623605][T15322] do_syscall_64+0x115/0x840 [ 749.623619][T15322] ? clear_bhb_loop+0x40/0x90 [ 749.623638][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.623653][T15322] RIP: 0033:0x7f065c19dc87 [ 749.623666][T15322] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.623680][T15322] RSP: 002b:00007f065cfd3d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 749.623695][T15322] RAX: ffffffffffffffda RBX: 00007f0654000000 RCX: 00007f065c19dc87 [ 749.623705][T15322] RDX: 0000000000000000 RSI: 0000000001e00000 RDI: 00007f0652200000 [ 749.623715][T15322] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 749.623724][T15322] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 749.623733][T15322] R13: 0000000000001000 R14: 00007f0658000000 R15: 0000000001e00000 [ 749.623753][T15322] [ 749.879256][T15327] FAULT_INJECTION: forcing a failure. [ 749.879256][T15327] name failslab, interval 1, probability 0, space 0, times 0 [ 749.892272][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.4.1653 Not tainted syzkaller #0 PREEMPT(full) [ 749.892296][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.892306][T15327] Call Trace: [ 749.892313][T15327] [ 749.892321][T15327] dump_stack_lvl+0x100/0x190 [ 749.892345][T15327] should_fail_ex.cold+0x5/0xa [ 749.892366][T15327] should_failslab+0xc2/0x120 [ 749.892389][T15327] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 749.892410][T15327] ? __d_alloc+0x35/0xa50 [ 749.892430][T15327] __d_alloc+0x35/0xa50 [ 749.892448][T15327] d_alloc_parallel+0x105/0x14b0 [ 749.892477][T15327] ? __pfx_d_alloc_parallel+0x10/0x10 [ 749.892511][T15327] ? __pfx___might_resched+0x10/0x10 [ 749.892536][T15327] ? find_held_lock+0x2b/0x80 [ 749.892558][T15327] ? down_read+0x13b/0x4c0 [ 749.892575][T15327] ? __pfx_down_read+0x10/0x10 [ 749.892593][T15327] __lookup_slow+0x98/0x320 [ 749.892615][T15327] lookup_slow+0x50/0x70 [ 749.892635][T15327] link_path_walk+0x1377/0x1cc0 [ 749.892665][T15327] path_openat+0x1c9/0x4280 [ 749.892680][T15327] ? __kasan_slab_alloc+0x89/0x90 [ 749.892700][T15327] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 749.892717][T15327] ? do_getname+0x35/0x390 [ 749.892735][T15327] ? __x64_sys_openat+0x12d/0x210 [ 749.892762][T15327] ? __pfx_path_openat+0x10/0x10 [ 749.892790][T15327] do_file_open+0x20e/0x430 [ 749.892808][T15327] ? __pfx_do_file_open+0x10/0x10 [ 749.892837][T15327] ? alloc_fd+0x471/0x7a0 [ 749.892854][T15327] ? do_getname+0x191/0x390 [ 749.892875][T15327] do_sys_openat2+0x10f/0x1e0 [ 749.892895][T15327] ? __pfx_do_sys_openat2+0x10/0x10 [ 749.892916][T15327] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 749.892942][T15327] ? __fget_files+0x21f/0x3d0 [ 749.892959][T15327] __x64_sys_openat+0x12d/0x210 [ 749.892980][T15327] ? __pfx___x64_sys_openat+0x10/0x10 [ 749.892999][T15327] ? ksys_write+0x1ac/0x250 [ 749.893019][T15327] do_syscall_64+0x115/0x840 [ 749.893033][T15327] ? clear_bhb_loop+0x40/0x90 [ 749.893051][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.893066][T15327] RIP: 0033:0x7f523419de59 [ 749.893081][T15327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.893096][T15327] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 749.893111][T15327] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 749.893121][T15327] RDX: 0000000000022902 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 749.893131][T15327] RBP: 00007f523506c090 R08: 0000000000000000 R09: 0000000000000000 [ 749.893140][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.893149][T15327] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 749.893169][T15327] [ 750.452025][T15337] [ 753.317904][T15385] futex_wake_op: syz.0.1665 tries to shift op by -2048; fix this program [ 753.497953][T15385] futex_wake_op: syz.0.1665 tries to shift op by -2048; fix this program [ 753.612777][T15394] 0x000000000001-0x000000020000 : "" [ 753.701037][T15394] ftl_cs: FTL header corrupt! [ 755.179350][T15425] FAULT_INJECTION: forcing a failure. [ 755.179350][T15425] name failslab, interval 1, probability 0, space 0, times 0 [ 755.243138][T15425] CPU: 0 UID: 0 PID: 15425 Comm: syz.6.1672 Not tainted syzkaller #0 PREEMPT(full) [ 755.243161][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.243172][T15425] Call Trace: [ 755.243178][T15425] [ 755.243184][T15425] dump_stack_lvl+0x100/0x190 [ 755.243209][T15425] should_fail_ex.cold+0x5/0xa [ 755.243230][T15425] should_failslab+0xc2/0x120 [ 755.243259][T15425] __kmalloc_noprof+0xfc/0x820 [ 755.243277][T15425] ? rcu_is_watching+0x12/0xc0 [ 755.243297][T15425] ? tomoyo_realpath_from_path+0xb6/0x690 [ 755.243323][T15425] tomoyo_realpath_from_path+0xb6/0x690 [ 755.243349][T15425] tomoyo_check_open_permission+0x2af/0x3c0 [ 755.243368][T15425] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 755.243395][T15425] ? hook_file_open+0x24f/0x8f0 [ 755.243428][T15425] ? path_get+0x61/0x80 [ 755.243448][T15425] tomoyo_file_open+0x6b/0x90 [ 755.243463][T15425] security_file_open+0xb5/0x1e0 [ 755.243484][T15425] do_dentry_open+0x588/0x14d0 [ 755.243505][T15425] vfs_open+0x82/0x3f0 [ 755.243526][T15425] path_openat+0x2873/0x4280 [ 755.243550][T15425] ? __pfx_path_openat+0x10/0x10 [ 755.243571][T15425] do_file_open+0x20e/0x430 [ 755.243588][T15425] ? __pfx_do_file_open+0x10/0x10 [ 755.243617][T15425] ? alloc_fd+0x471/0x7a0 [ 755.243634][T15425] ? do_getname+0x191/0x390 [ 755.243655][T15425] do_sys_openat2+0x10f/0x1e0 [ 755.243674][T15425] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.243695][T15425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 755.243721][T15425] ? __fget_files+0x21f/0x3d0 [ 755.243738][T15425] __x64_sys_openat+0x12d/0x210 [ 755.243759][T15425] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.243778][T15425] ? ksys_write+0x1ac/0x250 [ 755.243799][T15425] do_syscall_64+0x115/0x840 [ 755.243812][T15425] ? clear_bhb_loop+0x40/0x90 [ 755.243831][T15425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.243846][T15425] RIP: 0033:0x7f41e759de59 [ 755.243860][T15425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.243875][T15425] RSP: 002b:00007f41e8480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.243891][T15425] RAX: ffffffffffffffda RBX: 00007f41e7826090 RCX: 00007f41e759de59 [ 755.243901][T15425] RDX: 0000000000080600 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 755.243911][T15425] RBP: 00007f41e8480090 R08: 0000000000000000 R09: 0000000000000000 [ 755.243921][T15425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.243930][T15425] R13: 00007f41e7826128 R14: 00007f41e7826090 R15: 00007ffc9da30ea8 [ 755.243950][T15425] [ 755.785153][T15425] ERROR: Out of memory at tomoyo_realpath_from_path. [ 756.126443][T15433] FAULT_INJECTION: forcing a failure. [ 756.126443][T15433] name failslab, interval 1, probability 0, space 0, times 0 [ 756.178279][T15433] CPU: 0 UID: 0 PID: 15433 Comm: syz.6.1674 Not tainted syzkaller #0 PREEMPT(full) [ 756.178302][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 756.178311][T15433] Call Trace: [ 756.178317][T15433] [ 756.178323][T15433] dump_stack_lvl+0x100/0x190 [ 756.178348][T15433] should_fail_ex.cold+0x5/0xa [ 756.178369][T15433] should_failslab+0xc2/0x120 [ 756.178392][T15433] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 756.178415][T15433] ? __alloc_skb+0x140/0x710 [ 756.178505][T15433] __alloc_skb+0x140/0x710 [ 756.178520][T15433] ? __alloc_skb+0x5b7/0x710 [ 756.178536][T15433] ? __pfx___alloc_skb+0x10/0x10 [ 756.178558][T15433] alloc_skb_with_frags+0xdd/0x760 [ 756.178580][T15433] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 756.178605][T15433] sock_alloc_send_pskb+0x801/0x980 [ 756.178628][T15433] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 756.178645][T15433] ? __lock_acquire+0x49f/0x1a40 [ 756.178661][T15433] ? __lock_acquire+0x49f/0x1a40 [ 756.178678][T15433] __ip6_append_data+0x272f/0x4bd0 [ 756.178744][T15433] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 756.178824][T15433] ? __pfx___ip6_append_data+0x10/0x10 [ 756.178841][T15433] ? __pfx_ip6_mtu+0x10/0x10 [ 756.178902][T15433] ? ip6_setup_cork+0x5be/0x14c0 [ 756.178920][T15433] ip6_append_data+0x10b/0x410 [ 756.178937][T15433] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 756.178965][T15433] udpv6_sendmsg+0x14cb/0x2c20 [ 756.179035][T15433] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 756.179068][T15433] ? __lock_acquire+0x49f/0x1a40 [ 756.179095][T15433] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 756.179113][T15433] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 756.179138][T15433] ? inet6_sendmsg+0x105/0x140 [ 756.179170][T15433] inet6_sendmsg+0x105/0x140 [ 756.179192][T15433] ____sys_sendmsg+0x704/0xbe0 [ 756.179217][T15433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.179242][T15433] ? __pfx__kstrtoull+0x10/0x10 [ 756.179263][T15433] ___sys_sendmsg+0x190/0x1e0 [ 756.179287][T15433] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.179319][T15433] ? find_held_lock+0x2b/0x80 [ 756.179351][T15433] __sys_sendmmsg+0x20c/0x440 [ 756.179371][T15433] ? __pfx___sys_sendmmsg+0x10/0x10 [ 756.179388][T15433] ? ksys_write+0x190/0x250 [ 756.179417][T15433] ? fput+0x79/0x100 [ 756.179434][T15433] ? ksys_write+0x1ac/0x250 [ 756.179447][T15433] ? __pfx_ksys_write+0x10/0x10 [ 756.179465][T15433] __x64_sys_sendmmsg+0x9c/0x100 [ 756.179483][T15433] ? lockdep_hardirqs_on+0x78/0x100 [ 756.179508][T15433] do_syscall_64+0x115/0x840 [ 756.179521][T15433] ? clear_bhb_loop+0x40/0x90 [ 756.179540][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.179555][T15433] RIP: 0033:0x7f41e759de59 [ 756.179569][T15433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.179584][T15433] RSP: 002b:00007f41e8480028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 756.179600][T15433] RAX: ffffffffffffffda RBX: 00007f41e7826090 RCX: 00007f41e759de59 [ 756.179610][T15433] RDX: 00000000000009a6 RSI: 0000200000000000 RDI: 0000000000000003 [ 756.179619][T15433] RBP: 00007f41e8480090 R08: 0000000000000000 R09: 0000000000000000 [ 756.179628][T15433] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 756.179637][T15433] R13: 00007f41e7826128 R14: 00007f41e7826090 R15: 00007ffc9da30ea8 [ 756.179657][T15433] [ 756.611879][T15435] random: crng reseeded on system resumption [ 756.622327][T15435] FAULT_INJECTION: forcing a failure. [ 756.622327][T15435] name failslab, interval 1, probability 0, space 0, times 0 [ 756.635245][T15435] CPU: 0 UID: 0 PID: 15435 Comm: syz.6.1675 Not tainted syzkaller #0 PREEMPT(full) [ 756.635267][T15435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 756.635277][T15435] Call Trace: [ 756.635283][T15435] [ 756.635289][T15435] dump_stack_lvl+0x100/0x190 [ 756.635314][T15435] should_fail_ex.cold+0x5/0xa [ 756.635335][T15435] should_failslab+0xc2/0x120 [ 756.635357][T15435] __kmalloc_noprof+0xfc/0x820 [ 756.635376][T15435] ? rcu_is_watching+0x12/0xc0 [ 756.635395][T15435] ? tomoyo_realpath_from_path+0xb6/0x690 [ 756.635421][T15435] tomoyo_realpath_from_path+0xb6/0x690 [ 756.635447][T15435] tomoyo_path_number_perm+0x23c/0x580 [ 756.635464][T15435] ? tomoyo_path_number_perm+0x22e/0x580 [ 756.635484][T15435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 756.635521][T15435] ? find_held_lock+0x2b/0x80 [ 756.635540][T15435] ? __fget_files+0x215/0x3d0 [ 756.635554][T15435] ? hook_file_ioctl_common+0x140/0x440 [ 756.635572][T15435] ? __fget_files+0x215/0x3d0 [ 756.635589][T15435] ? __fget_files+0x21f/0x3d0 [ 756.635606][T15435] security_file_ioctl+0xd3/0x230 [ 756.635625][T15435] __x64_sys_ioctl+0xb7/0x210 [ 756.635648][T15435] do_syscall_64+0x115/0x840 [ 756.635663][T15435] ? clear_bhb_loop+0x40/0x90 [ 756.635681][T15435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.635697][T15435] RIP: 0033:0x7f41e759de59 [ 756.635711][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.635726][T15435] RSP: 002b:00007f41e84a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.635741][T15435] RAX: ffffffffffffffda RBX: 00007f41e7825fa0 RCX: 00007f41e759de59 [ 756.635751][T15435] RDX: 0000000000000000 RSI: 0000000040043311 RDI: 0000000000000003 [ 756.635761][T15435] RBP: 00007f41e84a1090 R08: 0000000000000000 R09: 0000000000000000 [ 756.635770][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.635779][T15435] R13: 00007f41e7826038 R14: 00007f41e7825fa0 R15: 00007ffc9da30ea8 [ 756.635799][T15435] [ 756.635844][T15435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 757.453781][T15452] FAULT_INJECTION: forcing a failure. [ 757.453781][T15452] name failslab, interval 1, probability 0, space 0, times 0 [ 757.490609][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.0.1678 Not tainted syzkaller #0 PREEMPT(full) [ 757.490632][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.490642][T15452] Call Trace: [ 757.490649][T15452] [ 757.490656][T15452] dump_stack_lvl+0x100/0x190 [ 757.490680][T15452] should_fail_ex.cold+0x5/0xa [ 757.490701][T15452] should_failslab+0xc2/0x120 [ 757.490724][T15452] __kmalloc_noprof+0xfc/0x820 [ 757.490742][T15452] ? rcu_is_watching+0x12/0xc0 [ 757.490761][T15452] ? tomoyo_realpath_from_path+0xb6/0x690 [ 757.490788][T15452] tomoyo_realpath_from_path+0xb6/0x690 [ 757.490813][T15452] tomoyo_check_open_permission+0x2af/0x3c0 [ 757.490833][T15452] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 757.490858][T15452] ? hook_file_open+0x24f/0x8f0 [ 757.490891][T15452] ? path_get+0x61/0x80 [ 757.490910][T15452] tomoyo_file_open+0x6b/0x90 [ 757.490925][T15452] security_file_open+0xb5/0x1e0 [ 757.490953][T15452] do_dentry_open+0x588/0x14d0 [ 757.490974][T15452] vfs_open+0x82/0x3f0 [ 757.490996][T15452] path_openat+0x2873/0x4280 [ 757.491020][T15452] ? __pfx_path_openat+0x10/0x10 [ 757.491042][T15452] do_file_open+0x20e/0x430 [ 757.491058][T15452] ? __pfx_do_file_open+0x10/0x10 [ 757.491088][T15452] ? alloc_fd+0x471/0x7a0 [ 757.491105][T15452] ? do_getname+0x191/0x390 [ 757.491126][T15452] do_sys_openat2+0x10f/0x1e0 [ 757.491146][T15452] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.491167][T15452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 757.491193][T15452] ? __fget_files+0x21f/0x3d0 [ 757.491210][T15452] __x64_sys_openat+0x12d/0x210 [ 757.491231][T15452] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.491250][T15452] ? ksys_write+0x1ac/0x250 [ 757.491272][T15452] do_syscall_64+0x115/0x840 [ 757.491285][T15452] ? clear_bhb_loop+0x40/0x90 [ 757.491304][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.491319][T15452] RIP: 0033:0x7f065c19de59 [ 757.491333][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.491348][T15452] RSP: 002b:00007f065cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.491363][T15452] RAX: ffffffffffffffda RBX: 00007f065c426090 RCX: 00007f065c19de59 [ 757.491374][T15452] RDX: 0000000000101800 RSI: 0000200000002c80 RDI: ffffffffffffff9c [ 757.491383][T15452] RBP: 00007f065cfb4090 R08: 0000000000000000 R09: 0000000000000000 [ 757.491393][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.491402][T15452] R13: 00007f065c426128 R14: 00007f065c426090 R15: 00007fff2bf791d8 [ 757.491422][T15452] [ 757.491429][T15452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.190200][T15473] netlink: 'syz.6.1681': attribute type 1 has an invalid length. [ 759.221171][T15473] nbd: error processing sock list [ 759.463274][T15475] FAULT_INJECTION: forcing a failure. [ 759.463274][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 759.554529][T15475] CPU: 0 UID: 0 PID: 15475 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 759.554553][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 759.554564][T15475] Call Trace: [ 759.554571][T15475] [ 759.554578][T15475] dump_stack_lvl+0x100/0x190 [ 759.554605][T15475] should_fail_ex.cold+0x5/0xa [ 759.554628][T15475] should_failslab+0xc2/0x120 [ 759.554652][T15475] kmem_cache_alloc_noprof+0x91/0x6a0 [ 759.554671][T15475] ? trace_kmem_cache_alloc+0xdd/0x100 [ 759.554694][T15475] ? security_file_alloc+0x34/0x2c0 [ 759.554717][T15475] security_file_alloc+0x34/0x2c0 [ 759.554737][T15475] init_file+0x95/0x480 [ 759.554756][T15475] alloc_empty_file+0x79/0x1c0 [ 759.554776][T15475] path_openat+0xe7/0x4280 [ 759.554791][T15475] ? __kasan_slab_alloc+0x89/0x90 [ 759.554810][T15475] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 759.554827][T15475] ? do_getname+0x35/0x390 [ 759.554844][T15475] ? do_sys_openat2+0xc7/0x1e0 [ 759.554863][T15475] ? __x64_sys_openat+0x12d/0x210 [ 759.554882][T15475] ? do_syscall_64+0x115/0x840 [ 759.554896][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.554917][T15475] ? __pfx_path_openat+0x10/0x10 [ 759.554938][T15475] do_file_open+0x20e/0x430 [ 759.554955][T15475] ? __pfx_do_file_open+0x10/0x10 [ 759.554985][T15475] ? alloc_fd+0x471/0x7a0 [ 759.555002][T15475] ? do_getname+0x191/0x390 [ 759.555024][T15475] do_sys_openat2+0x10f/0x1e0 [ 759.555045][T15475] ? __pfx_do_sys_openat2+0x10/0x10 [ 759.555066][T15475] ? do_sock_setsockopt+0x101/0x1d0 [ 759.555085][T15475] ? kfree+0x1e5/0x6c0 [ 759.555104][T15475] __x64_sys_openat+0x12d/0x210 [ 759.555124][T15475] ? __pfx___x64_sys_openat+0x10/0x10 [ 759.555152][T15475] do_syscall_64+0x115/0x840 [ 759.555166][T15475] ? clear_bhb_loop+0x40/0x90 [ 759.555184][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.555200][T15475] RIP: 0033:0x7f065c19de59 [ 759.555214][T15475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.555237][T15475] RSP: 002b:00007f065cfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 759.555253][T15475] RAX: ffffffffffffffda RBX: 00007f065c426090 RCX: 00007f065c19de59 [ 759.555264][T15475] RDX: 000000000000a001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 759.555274][T15475] RBP: 00007f065c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 759.555284][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.555294][T15475] R13: 00007f065c426128 R14: 00007f065c426090 R15: 00007fff2bf791d8 [ 759.555314][T15475] [ 760.773649][T15496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1686'. syzkaller syzkaller login: [ 762.272310][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 763.139915][T15529] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1691'. [ 764.301783][T15561] FAULT_INJECTION: forcing a failure. [ 764.301783][T15561] name failslab, interval 1, probability 0, space 0, times 0 [ 764.351976][T15561] CPU: 0 UID: 0 PID: 15561 Comm: syz.0.1697 Not tainted syzkaller #0 PREEMPT(full) [ 764.352001][T15561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 764.352011][T15561] Call Trace: [ 764.352017][T15561] [ 764.352024][T15561] dump_stack_lvl+0x100/0x190 [ 764.352049][T15561] should_fail_ex.cold+0x5/0xa [ 764.352068][T15561] ? sctp_get_port_local+0xbb3/0x1630 [ 764.352186][T15561] should_failslab+0xc2/0x120 [ 764.352209][T15561] __kmalloc_cache_noprof+0x91/0x6c0 [ 764.352226][T15561] ? sctp_add_bind_addr+0xae/0x3e0 [ 764.352245][T15561] sctp_add_bind_addr+0xae/0x3e0 [ 764.352263][T15561] sctp_do_bind+0x36c/0x760 [ 764.352311][T15561] sctp_connect_new_asoc+0x5e7/0x770 [ 764.352334][T15561] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 764.352359][T15561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 764.352387][T15561] __sctp_connect+0x3e7/0xc70 [ 764.352421][T15561] ? __pfx___sctp_connect+0x10/0x10 [ 764.352444][T15561] ? __pfx_sctp_inet_connect+0x10/0x10 [ 764.352467][T15561] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 764.352491][T15561] ? __pfx_sctp_inet_connect+0x10/0x10 [ 764.352511][T15561] sctp_inet_connect+0x15f/0x220 [ 764.352534][T15561] __sys_connect_file+0x141/0x1a0 [ 764.352552][T15561] __sys_connect+0x141/0x170 [ 764.352567][T15561] ? __pfx___sys_connect+0x10/0x10 [ 764.352595][T15561] __x64_sys_connect+0x72/0xb0 [ 764.352610][T15561] ? lockdep_hardirqs_on+0x78/0x100 [ 764.352633][T15561] do_syscall_64+0x115/0x840 [ 764.352647][T15561] ? clear_bhb_loop+0x40/0x90 [ 764.352665][T15561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.352681][T15561] RIP: 0033:0x7f065c19de59 [ 764.352695][T15561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.352710][T15561] RSP: 002b:00007f065cfb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 764.352726][T15561] RAX: ffffffffffffffda RBX: 00007f065c426090 RCX: 00007f065c19de59 [ 764.352737][T15561] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 764.352747][T15561] RBP: 00007f065c233e6f R08: 0000000000000000 R09: 0000000000000000 [ 764.352757][T15561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.352767][T15561] R13: 00007f065c426128 R14: 00007f065c426090 R15: 00007fff2bf791d8 [ 764.352787][T15561] [ 764.910964][T12009] Bluetooth: hci4: command 0x0406 tx timeout [ 765.285630][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1701'. [ 770.093372][T15650] FAULT_INJECTION: forcing a failure. [ 770.093372][T15650] name failslab, interval 1, probability 0, space 0, times 0 [ 770.126286][T15650] CPU: 0 UID: 0 PID: 15650 Comm: syz.4.1713 Not tainted syzkaller #0 PREEMPT(full) [ 770.126310][T15650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 770.126320][T15650] Call Trace: [ 770.126329][T15650] [ 770.126335][T15650] dump_stack_lvl+0x100/0x190 [ 770.126360][T15650] should_fail_ex.cold+0x5/0xa [ 770.126381][T15650] should_failslab+0xc2/0x120 [ 770.126405][T15650] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 770.126426][T15650] ? __alloc_skb+0x140/0x710 [ 770.126448][T15650] __alloc_skb+0x140/0x710 [ 770.126463][T15650] ? __alloc_skb+0x5b7/0x710 [ 770.126479][T15650] ? __pfx___alloc_skb+0x10/0x10 [ 770.126496][T15650] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 770.126515][T15650] ? ip6_dst_lookup_tail.constprop.0+0x7bc/0x2110 [ 770.126536][T15650] __ip6_append_data+0x34f0/0x4bd0 [ 770.126557][T15650] ? __pfx_raw6_getfrag+0x10/0x10 [ 770.126587][T15650] ? __pfx___ip6_append_data+0x10/0x10 [ 770.126603][T15650] ? __pfx_ip6_mtu+0x10/0x10 [ 770.126624][T15650] ? ip6_setup_cork+0x5be/0x14c0 [ 770.126642][T15650] ip6_append_data+0x10b/0x410 [ 770.126658][T15650] ? __pfx_raw6_getfrag+0x10/0x10 [ 770.126682][T15650] rawv6_sendmsg+0x169c/0x4420 [ 770.126712][T15650] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 770.126734][T15650] ? __lock_acquire+0x49f/0x1a40 [ 770.126757][T15650] ? __pfx___might_resched+0x10/0x10 [ 770.126786][T15650] ? aa_sk_perm+0x309/0xaa0 [ 770.126815][T15650] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 770.126830][T15650] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 770.126854][T15650] ? inet_sendmsg+0x11c/0x140 [ 770.126942][T15650] inet_sendmsg+0x11c/0x140 [ 770.126960][T15650] ____sys_sendmsg+0x9c9/0xbe0 [ 770.126982][T15650] ? __pfx_inet_sendmsg+0x10/0x10 [ 770.127000][T15650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 770.127024][T15650] ? rcu_is_watching+0x12/0xc0 [ 770.127042][T15650] ? ___sys_sendmsg+0x19d/0x1e0 [ 770.127064][T15650] ? kfree+0x1e5/0x6c0 [ 770.127081][T15650] ___sys_sendmsg+0x190/0x1e0 [ 770.127106][T15650] ? __pfx____sys_sendmsg+0x10/0x10 [ 770.127146][T15650] ? __pfx___might_resched+0x10/0x10 [ 770.127173][T15650] __sys_sendmmsg+0x20c/0x440 [ 770.127195][T15650] ? __pfx___sys_sendmmsg+0x10/0x10 [ 770.127212][T15650] ? ksys_write+0x190/0x250 [ 770.127241][T15650] ? fput+0x79/0x100 [ 770.127282][T15650] ? ksys_write+0x1ac/0x250 [ 770.127296][T15650] ? __pfx_ksys_write+0x10/0x10 [ 770.127313][T15650] __x64_sys_sendmmsg+0x9c/0x100 [ 770.127331][T15650] ? lockdep_hardirqs_on+0x78/0x100 [ 770.127358][T15650] do_syscall_64+0x115/0x840 [ 770.127371][T15650] ? clear_bhb_loop+0x40/0x90 [ 770.127390][T15650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.127406][T15650] RIP: 0033:0x7f523419de59 [ 770.127420][T15650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.127435][T15650] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 770.127450][T15650] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 770.127460][T15650] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 770.127469][T15650] RBP: 00007f523506c090 R08: 0000000000000000 R09: 0000000000000000 [ 770.127478][T15650] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.127488][T15650] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 770.127508][T15650] [ 771.720190][T15667] ecryptfs_parse_packet_length: Five-byte packet length not supported [ 771.739601][T15667] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 775.128287][T15722] random: crng reseeded on system resumption [ 775.136512][T12009] Bluetooth: hci5: command 0x0406 tx timeout [ 775.254998][T15725] binder: 15719:15725 ioctl c018620c 200000000040 returned -1 [ 775.835240][T15732] FAULT_INJECTION: forcing a failure. [ 775.835240][T15732] name failslab, interval 1, probability 0, space 0, times 0 [ 775.871274][T15732] CPU: 0 UID: 0 PID: 15732 Comm: syz.4.1726 Not tainted syzkaller #0 PREEMPT(full) [ 775.871298][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.871309][T15732] Call Trace: [ 775.871314][T15732] [ 775.871321][T15732] dump_stack_lvl+0x100/0x190 [ 775.871345][T15732] should_fail_ex.cold+0x5/0xa [ 775.871363][T15732] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 775.871391][T15732] should_failslab+0xc2/0x120 [ 775.871413][T15732] kmem_cache_alloc_noprof+0x91/0x6a0 [ 775.871434][T15732] ? skb_clone+0x190/0x400 [ 775.871455][T15732] skb_clone+0x190/0x400 [ 775.871474][T15732] netlink_deliver_tap+0xaed/0xcc0 [ 775.871502][T15732] netlink_unicast+0x62b/0x850 [ 775.871528][T15732] ? __pfx_netlink_unicast+0x10/0x10 [ 775.871556][T15732] netlink_sendmsg+0x8b0/0xda0 [ 775.871583][T15732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.871608][T15732] ? apparmor_socket_sendmsg+0x15b/0x270 [ 775.871627][T15732] ____sys_sendmsg+0xa4d/0xbe0 [ 775.871649][T15732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.871673][T15732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 775.871704][T15732] ___sys_sendmsg+0x190/0x1e0 [ 775.871728][T15732] ? __pfx____sys_sendmsg+0x10/0x10 [ 775.871749][T15732] ? __lock_acquire+0x49f/0x1a40 [ 775.871764][T15732] ? get_pid_task+0x106/0x250 [ 775.871806][T15732] __sys_sendmsg+0x160/0x210 [ 775.871824][T15732] ? __pfx___sys_sendmsg+0x10/0x10 [ 775.871853][T15732] do_syscall_64+0x115/0x840 [ 775.871867][T15732] ? clear_bhb_loop+0x40/0x90 [ 775.871886][T15732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.871901][T15732] RIP: 0033:0x7f523419de59 [ 775.871915][T15732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.871930][T15732] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.871945][T15732] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 775.871955][T15732] RDX: 0000000000080000 RSI: 0000200000001dc0 RDI: 0000000000000003 [ 775.871965][T15732] RBP: 00007f523506c090 R08: 0000000000000000 R09: 0000000000000000 [ 775.871974][T15732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.871983][T15732] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 775.872003][T15732] [ 777.962077][T15761] FAULT_INJECTION: forcing a failure. [ 777.962077][T15761] name failslab, interval 1, probability 0, space 0, times 0 [ 778.021388][T15761] CPU: 0 UID: 0 PID: 15761 Comm: syz.6.1734 Not tainted syzkaller #0 PREEMPT(full) [ 778.021411][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 778.021421][T15761] Call Trace: [ 778.021427][T15761] [ 778.021433][T15761] dump_stack_lvl+0x100/0x190 [ 778.021458][T15761] should_fail_ex.cold+0x5/0xa [ 778.021480][T15761] should_failslab+0xc2/0x120 [ 778.021502][T15761] __kmalloc_noprof+0xfc/0x820 [ 778.021521][T15761] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 778.021545][T15761] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 778.021566][T15761] genl_family_rcv_msg_doit+0xc7/0x300 [ 778.021584][T15761] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 778.021600][T15761] ? genl_get_cmd+0x3e7/0x760 [ 778.021619][T15761] ? bpf_lsm_capable+0x9/0x10 [ 778.021637][T15761] ? security_capable+0x80/0x260 [ 778.021653][T15761] ? ns_capable+0xd2/0xf0 [ 778.021672][T15761] genl_rcv_msg+0x560/0x800 [ 778.021690][T15761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.021707][T15761] ? __pfx_tipc_nl_bearer_add+0x10/0x10 [ 778.021820][T15761] netlink_rcv_skb+0x159/0x420 [ 778.021844][T15761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.021867][T15761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.021898][T15761] ? netlink_deliver_tap+0x1ae/0xcc0 [ 778.021923][T15761] genl_rcv+0x28/0x40 [ 778.021936][T15761] netlink_unicast+0x585/0x850 [ 778.021962][T15761] ? __pfx_netlink_unicast+0x10/0x10 [ 778.021990][T15761] netlink_sendmsg+0x8b0/0xda0 [ 778.022016][T15761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.022042][T15761] ? apparmor_socket_sendmsg+0x15b/0x270 [ 778.022061][T15761] ____sys_sendmsg+0xa4d/0xbe0 [ 778.022083][T15761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.022107][T15761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 778.022138][T15761] ___sys_sendmsg+0x190/0x1e0 [ 778.022163][T15761] ? __pfx____sys_sendmsg+0x10/0x10 [ 778.022184][T15761] ? __lock_acquire+0x49f/0x1a40 [ 778.022199][T15761] ? get_pid_task+0x106/0x250 [ 778.022243][T15761] __sys_sendmsg+0x160/0x210 [ 778.022262][T15761] ? __pfx___sys_sendmsg+0x10/0x10 [ 778.022290][T15761] do_syscall_64+0x115/0x840 [ 778.022304][T15761] ? clear_bhb_loop+0x40/0x90 [ 778.022323][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.022338][T15761] RIP: 0033:0x7f41e759de59 [ 778.022353][T15761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.022368][T15761] RSP: 002b:00007f41e84a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.022383][T15761] RAX: ffffffffffffffda RBX: 00007f41e7825fa0 RCX: 00007f41e759de59 [ 778.022393][T15761] RDX: 0000000024000840 RSI: 0000200000000280 RDI: 0000000000000003 [ 778.022402][T15761] RBP: 00007f41e84a1090 R08: 0000000000000000 R09: 0000000000000000 [ 778.022412][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.022421][T15761] R13: 00007f41e7826038 R14: 00007f41e7825fa0 R15: 00007ffc9da30ea8 [ 778.022441][T15761] [ 780.240217][T15784] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 780.251791][T15784] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 780.262360][T15784] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 780.271453][T15784] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 780.279165][T15784] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 780.425841][T15784] Bluetooth: hci6: command 0x0406 tx timeout [ 781.480596][T15784] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 781.493490][T15784] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 781.502283][T15784] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 781.510128][T15784] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 781.519035][T15784] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 781.868234][T15819] FAULT_INJECTION: forcing a failure. [ 781.868234][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 781.944134][T15819] CPU: 0 UID: 0 PID: 15819 Comm: syz.4.1745 Not tainted syzkaller #0 PREEMPT(full) [ 781.944157][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.944167][T15819] Call Trace: [ 781.944173][T15819] [ 781.944179][T15819] dump_stack_lvl+0x100/0x190 [ 781.944204][T15819] should_fail_ex.cold+0x5/0xa [ 781.944225][T15819] should_failslab+0xc2/0x120 [ 781.944258][T15819] __kmalloc_cache_noprof+0x91/0x6c0 [ 781.944273][T15819] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 781.944299][T15819] ? kvm_init_irq_routing+0x43/0xf0 [ 781.944359][T15819] kvm_init_irq_routing+0x43/0xf0 [ 781.944379][T15819] kvm_dev_ioctl+0x7d4/0x1a50 [ 781.944429][T15819] ? find_held_lock+0x2b/0x80 [ 781.944449][T15819] ? __fget_files+0x215/0x3d0 [ 781.944465][T15819] ? hook_file_ioctl_common+0x140/0x440 [ 781.944487][T15819] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 781.944512][T15819] ? __fget_files+0x21f/0x3d0 [ 781.944529][T15819] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 781.944553][T15819] __x64_sys_ioctl+0x18e/0x210 [ 781.944579][T15819] do_syscall_64+0x115/0x840 [ 781.944602][T15819] ? clear_bhb_loop+0x40/0x90 [ 781.944621][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.944636][T15819] RIP: 0033:0x7f523419de59 [ 781.944650][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.944665][T15819] RSP: 002b:00007f523506c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 781.944681][T15819] RAX: ffffffffffffffda RBX: 00007f5234425fa0 RCX: 00007f523419de59 [ 781.944691][T15819] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 781.944700][T15819] RBP: 00007f523506c090 R08: 0000000000000000 R09: 0000000000000000 [ 781.944710][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.944719][T15819] R13: 00007f5234426038 R14: 00007f5234425fa0 R15: 00007ffd76f22488 [ 781.944743][T15819] [ 782.368557][T15784] Bluetooth: hci7: command tx timeout [ 782.543224][T15783] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.607707][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.641927][T15783] bridge_slave_0: entered allmulticast mode [ 782.684927][T15783] bridge_slave_0: entered promiscuous mode [ 782.722981][T15783] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.759121][T15783] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.786491][T15783] bridge_slave_1: entered allmulticast mode [ 782.818013][T15783] bridge_slave_1: entered promiscuous mode [ 783.015636][T15783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.079073][T15783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.203707][T15783] team0: Port device team_slave_0 added [ 783.252085][T15783] team0: Port device team_slave_1 added [ 783.450944][T15783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.468727][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.549192][T15783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.589585][T15783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.608516][T15783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.641801][T15784] Bluetooth: hci8: command tx timeout [ 783.661835][T15783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.835721][T15783] hsr_slave_0: entered promiscuous mode [ 783.860108][T15783] hsr_slave_1: entered promiscuous mode [ 783.883241][T15783] debugfs: 'hsr0' already exists in 'hsr' [ 783.902849][T15783] Cannot create hsr debugfs directory [ 784.417127][T15784] Bluetooth: hci7: command tx timeout [ 784.451547][T15869] FAULT_INJECTION: forcing a failure. [ 784.451547][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 784.502969][T15869] CPU: 0 UID: 0 PID: 15869 Comm: syz.4.1753 Not tainted syzkaller #0 PREEMPT(full) [ 784.502994][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 784.503004][T15869] Call Trace: [ 784.503010][T15869] [ 784.503016][T15869] dump_stack_lvl+0x100/0x190 [ 784.503042][T15869] should_fail_ex.cold+0x5/0xa [ 784.503064][T15869] should_failslab+0xc2/0x120 [ 784.503087][T15869] kmem_cache_alloc_noprof+0x91/0x6a0 [ 784.503107][T15869] ? mas_preallocate+0x1105/0x14a0 [ 784.503203][T15869] mas_preallocate+0x1105/0x14a0 [ 784.503225][T15869] ? __pfx_mas_preallocate+0x10/0x10 [ 784.503248][T15869] ? anon_vma_name+0x5a/0x250 [ 784.503275][T15869] __split_vma+0x33d/0xda0 [ 784.503301][T15869] ? __pfx___split_vma+0x10/0x10 [ 784.503320][T15869] ? __pfx_mas_prev+0x10/0x10 [ 784.503341][T15869] vms_gather_munmap_vmas+0x3a5/0x1720 [ 784.503359][T15869] ? validate_mm+0x392/0x4e0 [ 784.503375][T15869] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 784.503391][T15869] ? __pfx_validate_mm+0x10/0x10 [ 784.503418][T15869] do_vmi_align_munmap+0x287/0x5f0 [ 784.503437][T15869] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 784.503454][T15869] ? cap_mmap_addr+0x4b/0x120 [ 784.503497][T15869] do_vmi_munmap+0x1f8/0x3e0 [ 784.503516][T15869] __vm_munmap+0x196/0x390 [ 784.503535][T15869] ? __pfx___vm_munmap+0x10/0x10 [ 784.503565][T15869] __x64_sys_munmap+0x59/0x80 [ 784.503587][T15869] do_syscall_64+0x115/0x840 [ 784.503601][T15869] ? clear_bhb_loop+0x40/0x90 [ 784.503620][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.503635][T15869] RIP: 0033:0x7f523419dc87 [ 784.503650][T15869] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.503665][T15869] RSP: 002b:00007f523506ad18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 784.503680][T15869] RAX: ffffffffffffffda RBX: 00007f522c000000 RCX: 00007f523419dc87 [ 784.503691][T15869] RDX: 0000000000000000 RSI: 0000000001e00000 RDI: 00007f522a200000 [ 784.503700][T15869] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 784.503710][T15869] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 784.503719][T15869] R13: 0000000000001000 R14: 00007f5230000000 R15: 0000000001e00000 [ 784.503739][T15869] [ 784.823292][T15783] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 784.908681][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.916795][T15783] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 784.928863][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.989696][T15783] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 785.004534][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 785.038502][T15783] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 785.073924][T15783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 785.321814][T15807] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.335051][T15807] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.359778][T15807] bridge_slave_0: entered allmulticast mode [ 785.376019][T15807] bridge_slave_0: entered promiscuous mode [ 785.408117][T15807] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.420609][T15807] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.436507][T15807] bridge_slave_1: entered allmulticast mode [ 785.457966][T15807] bridge_slave_1: entered promiscuous mode [ 785.553493][T15807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.579336][T15783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.589443][T15807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.641803][T15807] team0: Port device team_slave_0 added [ 785.654420][T15807] team0: Port device team_slave_1 added [ 785.664192][T15783] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.698335][T15784] Bluetooth: hci8: command tx timeout [ 785.927904][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.935069][T15112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.999472][T15807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.021378][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.110081][T15807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.159603][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.166809][T15115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.198049][T15807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.221688][T15807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.310705][T15807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.496427][T15784] Bluetooth: hci7: command tx timeout [ 786.520007][T15807] hsr_slave_0: entered promiscuous mode [ 786.553848][T15807] hsr_slave_1: entered promiscuous mode [ 786.596947][T15807] debugfs: 'hsr0' already exists in 'hsr' [ 786.616010][T15807] Cannot create hsr debugfs directory [ 786.982624][T15899] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1756'. [ 787.776520][T12023] Bluetooth: hci8: command tx timeout [ 787.909354][T15807] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 787.948530][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.972618][T15807] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 788.000188][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.040518][T15807] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 788.073061][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.094429][T15807] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.126015][T15807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.145493][T15783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.430916][T15807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.510786][T15807] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.567705][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.574851][T12460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.583082][T12023] Bluetooth: hci7: command tx timeout [ 788.641375][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.649712][T12460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.098352][T15932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.760437][T15932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.860828][T12023] Bluetooth: hci8: command tx timeout [ 789.953949][T15932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.014773][T15783] veth0_vlan: entered promiscuous mode [ 790.115669][T15932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.173016][T15783] veth1_vlan: entered promiscuous mode [ 790.338052][ T31] INFO: task syz-executor:5629 blocked for more than 142 seconds. [ 790.345944][ T31] Not tainted syzkaller #0 [ 790.365110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 790.414215][ T31] task:syz-executor state:D stack:22552 pid:5629 tgid:5629 ppid:1 task_flags:0x400140 flags:0x00080002 [ 790.448184][T15783] veth0_macvtap: entered promiscuous mode [ 790.501273][ T31] Call Trace: [ 790.519391][ T31] [ 790.529146][ T31] __schedule+0x125c/0x6730 [ 790.549685][ T31] ? do_raw_spin_lock+0x128/0x260 [ 790.579162][ T31] ? __pfx___schedule+0x10/0x10 [ 790.597158][T15783] veth1_macvtap: entered promiscuous mode [ 790.614903][ T31] ? find_held_lock+0x2b/0x80 [ 790.639080][ T31] ? schedule+0x225/0x2c0 [ 790.661904][ T31] schedule+0xdd/0x2c0 [ 790.712088][ T31] schedule_preempt_disabled+0x13/0x30 [ 790.767231][ T31] __mutex_lock+0xccc/0x1bd0 [ 790.809898][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 790.845156][ T31] ? __lock_acquire+0x49f/0x1a40 [ 790.866529][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 790.884589][ T31] ? net_generic+0xea/0x2a0 [ 790.897835][ T31] ? net_generic+0xea/0x2a0 [ 790.913998][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 790.936581][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 790.955831][ T31] nfsd_umount+0x3b/0x60 [ 790.968404][ T31] deactivate_locked_super+0xc1/0x1b0 [ 790.980712][ T31] deactivate_super+0xe7/0x110 [ 790.993358][ T31] cleanup_mnt+0x21f/0x450 [ 791.002874][ T31] task_work_run+0x150/0x240 [ 791.013954][ T31] ? __pfx_task_work_run+0x10/0x10 [ 791.028311][ T31] exit_to_user_mode_loop+0x1d8/0x6f0 [ 791.040458][ T31] ? rcu_is_watching+0x12/0xc0 [ 791.050175][ T31] do_syscall_64+0x652/0x840 [ 791.060631][ T31] ? clear_bhb_loop+0x40/0x90 [ 791.070045][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.082263][ T31] RIP: 0033:0x7f625099f097 [ 791.094504][ T31] RSP: 002b:00007ffd71624c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 791.117895][ T31] RAX: 0000000000000000 RBX: 00007f6250a332ca RCX: 00007f625099f097 [ 791.132708][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd71624ce0 [ 791.154673][ T31] RBP: 00007ffd71624ce0 R08: 00007ffd71625ce0 R09: 00000000ffffffff [ 791.172197][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd71625d70 [ 791.189970][ T31] R13: 00007f6250a332ca R14: 000000000009c47e R15: 00007ffd71625db0 [ 791.205751][ T31] [ 791.214598][ T31] INFO: task syz-executor:5630 blocked for more than 143 seconds. [ 791.288596][ T31] Not tainted syzkaller #0 [ 791.330594][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.390641][ T31] task:syz-executor state:D stack:21872 pid:5630 tgid:5630 ppid:1 task_flags:0x400140 flags:0x00080002 [ 791.467917][ T31] Call Trace: [ 791.490230][ T31] [ 791.512119][ T31] __schedule+0x125c/0x6730 [ 791.535145][ T31] ? __pfx___schedule+0x10/0x10 [ 791.565561][ T31] ? find_held_lock+0x2b/0x80 [ 791.595395][ T31] ? schedule+0x225/0x2c0 [ 791.629239][ T31] schedule+0xdd/0x2c0 [ 791.663764][ T31] schedule_preempt_disabled+0x13/0x30 [ 791.688601][ T31] __mutex_lock+0xccc/0x1bd0 [ 791.715179][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 791.744157][ T31] ? __lock_acquire+0x49f/0x1a40 [ 791.780861][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 791.819870][ T31] ? net_generic+0xea/0x2a0 [ 791.844327][ T31] ? net_generic+0xea/0x2a0 [ 791.867509][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 791.892395][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 791.912137][ T31] nfsd_umount+0x3b/0x60 [ 791.922194][ T31] deactivate_locked_super+0xc1/0x1b0 [ 791.937445][ T31] deactivate_super+0xe7/0x110 [ 791.946674][ T31] cleanup_mnt+0x21f/0x450 [ 791.956480][ T31] task_work_run+0x150/0x240 [ 791.966404][ T31] ? __pfx_task_work_run+0x10/0x10 [ 791.976419][ T31] exit_to_user_mode_loop+0x1d8/0x6f0 [ 791.987896][ T31] ? rcu_is_watching+0x12/0xc0 [ 791.997886][ T31] do_syscall_64+0x652/0x840 [ 792.009356][ T31] ? clear_bhb_loop+0x40/0x90 [ 792.021372][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.038866][ T31] RIP: 0033:0x7f27d6d9f097 [ 792.044790][ T31] RSP: 002b:00007ffd1b942328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 792.066222][ T31] RAX: 0000000000000000 RBX: 00007f27d6e332ca RCX: 00007f27d6d9f097 [ 792.086277][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1b9423e0 [ 792.096067][ T31] RBP: 00007ffd1b9423e0 R08: 00007ffd1b9433e0 R09: 00000000ffffffff [ 792.116302][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1b943470 [ 792.136345][ T31] R13: 00007f27d6e332ca R14: 000000000009b02c R15: 00007ffd1b9434b0 [ 792.153581][ T31] [ 792.161617][ T31] [ 792.161617][ T31] Showing all locks held in the system: [ 792.197848][ T31] 1 lock held by khungtaskd/31: [ 792.205973][ T31] #0: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 792.230110][ T31] 2 locks held by syz-executor/5628: [ 792.243866][ T31] #0: ffff88807d6c60d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 792.270573][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 792.296312][ T31] 2 locks held by syz-executor/5629: [ 792.301635][ T31] #0: ffff88807c5700d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 792.326471][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 792.353540][ T31] 2 locks held by syz-executor/5630: [ 792.366253][ T31] #0: ffff88805aa9c0d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 792.387887][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 792.407917][ T31] 5 locks held by kworker/u10:1/12014: [ 792.426253][ T31] #0: ffff88801c6c6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 792.446270][ T31] #1: ffffc900057e7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 792.466249][ T31] #2: ffffffff906288e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 792.489407][ T31] #3: ffffffff90641500 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 792.516224][ T31] #4: ffffffff8e7f1968 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 792.536207][ T31] 2 locks held by syz.2.1288/13503: [ 792.542918][ T31] #0: ffffffff906efda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 792.568184][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 792.586262][ T31] 3 locks held by syz-executor/13719: [ 792.593175][ T31] #0: ffff888055e28ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 792.616782][ T31] #1: ffff888055e280b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 792.646270][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 792.666244][ T31] 2 locks held by syz-executor/13867: [ 792.671759][ T31] #0: ffff88805616a0d8 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 792.696787][ T31] #1: ffffffff8ec6ef00 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 792.717722][ T31] 3 locks held by syz-executor/13951: [ 792.736382][ T31] #0: ffff88805a778ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 792.756282][ T31] #1: ffff88805a7780b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 792.776274][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 792.796835][ T31] 3 locks held by kworker/u10:21/15118: [ 792.803847][ T31] #0: ffff88803300f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 792.831319][ T31] #1: ffffc900059d7d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 792.856242][ T31] #2: ffffffff90641500 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 792.876477][ T31] 2 locks held by getty/15502: [ 792.886253][ T31] #0: ffff8880334960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 792.916256][ T31] #1: ffffc90003c8f2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 792.931603][ T31] 4 locks held by syz-executor/15783: [ 792.946694][ T31] #0: ffff88807b240ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 792.966260][ T31] #1: ffff88807b2400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 792.986520][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 793.007809][ T31] #3: ffff8880341242f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 793.027740][ T31] 3 locks held by syz-executor/15807: [ 793.048924][ T31] #0: ffff88805a2ecea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 793.066253][ T31] #1: ffff88805a2ec0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x37e/0x13c0 [ 793.086285][ T31] #2: ffffffff908cbc60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 793.106269][ T31] 3 locks held by syz.6.1759/15962: [ 793.141155][ T31] [ 793.162519][ T31] ============================================= [ 793.162519][ T31] [ 793.207269][ T31] NMI backtrace for cpu 0 [ 793.207287][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 793.207306][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.207316][ T31] Call Trace: [ 793.207322][ T31] [ 793.207328][ T31] dump_stack_lvl+0x100/0x190 [ 793.207353][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 793.207381][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 793.207422][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 793.207446][ T31] sys_info+0x141/0x190 [ 793.207467][ T31] watchdog+0xcb1/0x1030 [ 793.207494][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.207518][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.207540][ T31] ? __kthread_parkme+0x18c/0x230 [ 793.207560][ T31] ? kthread+0x13a/0x450 [ 793.207579][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.207600][ T31] kthread+0x370/0x450 [ 793.207619][ T31] ? __pfx_kthread+0x10/0x10 [ 793.207640][ T31] ret_from_fork+0x72b/0xd50 [ 793.207660][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 793.207680][ T31] ? __switch_to+0x800/0x10f0 [ 793.207693][ T31] ? __switch_to_asm+0x39/0x70 [ 793.207715][ T31] ? __pfx_kthread+0x10/0x10 [ 793.207736][ T31] ret_from_fork_asm+0x1a/0x30 [ 793.207766][ T31] [ 793.662923][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 793.669822][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 793.678918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 793.688959][ T31] Call Trace: [ 793.692223][ T31] [ 793.695140][ T31] dump_stack_lvl+0x100/0x190 [ 793.699819][ T31] vpanic+0x552/0x970 [ 793.703815][ T31] ? __pfx_vpanic+0x10/0x10 [ 793.708447][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 793.714627][ T31] panic+0xd1/0xe0 [ 793.718340][ T31] ? __pfx_panic+0x10/0x10 [ 793.722763][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 793.728920][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 793.735067][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 793.741319][ T31] ? watchdog.cold+0x1ec/0x234 [ 793.746092][ T31] ? watchdog+0xcc1/0x1030 [ 793.750532][ T31] watchdog.cold+0x1fd/0x234 [ 793.755148][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 793.760973][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.765673][ T31] ? __kthread_parkme+0x18c/0x230 [ 793.770690][ T31] ? kthread+0x13a/0x450 [ 793.774947][ T31] ? __pfx_watchdog+0x10/0x10 [ 793.779646][ T31] kthread+0x370/0x450 [ 793.783707][ T31] ? __pfx_kthread+0x10/0x10 [ 793.788292][ T31] ret_from_fork+0x72b/0xd50 [ 793.793050][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 793.798693][ T31] ? __switch_to+0x800/0x10f0 [ 793.803355][ T31] ? __switch_to_asm+0x39/0x70 [ 793.808173][ T31] ? __pfx_kthread+0x10/0x10 [ 793.812755][ T31] ret_from_fork_asm+0x1a/0x30 [ 793.817521][ T31] [ 793.820602][ T31] Kernel Offset: disabled [ 793.824931][ T31] Rebooting in 86400 seconds..