last executing test programs: 2m39.369124756s ago: executing program 0 (id=4508): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) mknod$auto(0x0, 0xcb, 0xfffffffd) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.max.depth\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/workqueue/nf_ft_offload_add/power/runtime_active_time\x00', 0x20042, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) arch_prctl$auto_ARCH_SHSTK_UNLOCK(0x5004, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) 2m35.591500608s ago: executing program 0 (id=4521): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 2m34.10427422s ago: executing program 0 (id=4528): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r0 = socket(0xa, 0x3, 0x2f) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/etherd/revalidate\x00', 0x80101, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0xe4}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000080)) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r4 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004814}, 0x20000000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) 2m33.370007034s ago: executing program 0 (id=4530): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x0, 0xeba, 0x401, 0x80000000007fff) io_uring_register$auto(0x100000001, 0x14, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x18b803, 0x0) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x809) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x1) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x10000005, 0x7fff) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dff7000f9db8de038df311e69b01b00000000000500070010000000080babd6130000000000000000007f00000000000000fc0295001500000000000000000000000000e3804062177391d9a14d68ed9c460964b3e4267d97c16e"], 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0xfdf31875370e1716) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x68881, 0x0) prctl$auto_PR_GET_FP_MODE(0x2e, 0xc2, 0x5, 0x6, 0x3) ioctl$auto(r4, 0x80845663, r4) lgetxattr$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='l2tp\x00', &(0x7f00000002c0)="59a0ec9923a2c23a37af89573c16309b015ad39544f2d8dfc51cb327be82c30e667aedde3559d5b4f9882a05ce21f4862679712b85ebba816b599cd5b1ffc09607ddc1e0ca720be15e34a5d1fc87a3cdb31f677fce95e055b8899d98e11d14e872bfbb66adfa9f5807c13e88a94db5545ad43f9cde8a8ff968f0eb272efdaf04b956b6a8f105d18f0a3273580474dd3b7f5609b307b93896c362466e4e067e0a83e86547edf2651bd7e607075d294708279ace00f1c9b800ba38ed62ba", 0x0) adjtimex$auto(0x0) madvise$auto(0x3, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x80000001) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) 2m32.750088402s ago: executing program 0 (id=4533): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064b9, 0x1e6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0xffffffffffffff66) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) mlockall$auto(0x7) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/snd_virmidi.0/sound/card2/admmidi2/power/runtime_status\x00', 0x93a03, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 2m32.636573412s ago: executing program 3 (id=4535): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.bfq.weight\x00', 0x321401, 0x0) r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x409, 0x5, 0xffffffff, 0x0) close_range$auto(0x2, r0, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x4481, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x6, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) r5 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) write$auto_proc_loginuid_operations_base(r5, 0x0, 0x0) pread64$auto(r4, 0x0, 0x10001, 0x82d) write$auto(r3, 0x0, 0xc) 2m32.064627433s ago: executing program 3 (id=4537): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 2m31.759683133s ago: executing program 0 (id=4540): openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'vlan1\x00'}) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2c00001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8cfbe030e92b6881eed45f573c000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf251d00000005000b000600000068001900355f509a0535287c41fd4b776d12e878957fbdfa9b0de5915b3bbcf06f476e42c4317d555ec2a0950f368450f608ee91c9abab9680a426eaeaf05cddc8fc64c2e0aefb087d7d5d8d7495a4a43959b3e67e81a5ae3b9cab238e60cebba7c9c718e9cddeae05000a0001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20040011}, 0x48040) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), r6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r8, 0x29, 0x20, 0x0, 0x8002) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x81e}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IF2_SEQ={0x6}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x7f}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @broadcast}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0205649, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x10000, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xeffffffe}, 0x2, 0x200, 0x4, @inferred, @integer64={0x8, 0x3, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) socket(0x11, 0x3, 0x9) 2m30.248248071s ago: executing program 3 (id=4544): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064b9, 0x1e6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0xffffffffffffff66) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/snd_virmidi.0/sound/card2/admmidi2/power/runtime_status\x00', 0x93a03, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) 2m29.080732019s ago: executing program 3 (id=4553): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 2m27.855449939s ago: executing program 3 (id=4555): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r0 = socket(0xa, 0x3, 0x2f) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/etherd/revalidate\x00', 0x80101, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0xe4}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000080)) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r4 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004814}, 0x20000000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) 2m27.377661184s ago: executing program 3 (id=4557): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x1, 0x3132, 0x1, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x7fffffffffffffff, 0x3132, 0x6, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/vlan0/anycast_delay\x00', 0x88042, 0x0) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setfsgid$auto(0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x402802, 0x0) r1 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r1, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r2, &(0x7f0000000140)=']}\x00', 0x101, 0x8) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/statistics/rx_bytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/82, 0x52) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) epoll_create$auto(0x8) setresuid$auto(0x2, 0xffffffffffffffff, 0x0) keyctl$auto(0x5, 0x0, 0x101, 0x1, 0x4000000000b90) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x100, 0x2020009, 0x40000003, 0xf9, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) 2m16.729005485s ago: executing program 32 (id=4540): openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000900)={'vlan1\x00'}) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2c00001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="8cfbe030e92b6881eed45f573c000000", @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf251d00000005000b000600000068001900355f509a0535287c41fd4b776d12e878957fbdfa9b0de5915b3bbcf06f476e42c4317d555ec2a0950f368450f608ee91c9abab9680a426eaeaf05cddc8fc64c2e0aefb087d7d5d8d7495a4a43959b3e67e81a5ae3b9cab238e60cebba7c9c718e9cddeae05000a0001000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20040011}, 0x48040) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r6 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) r7 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000140), r6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) r8 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r8, 0x29, 0x20, 0x0, 0x8002) sendmsg$auto_HSR_C_GET_NODE_LIST(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x81e}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_IF2_SEQ={0x6}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x1}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x7f}, @HSR_A_NODE_ADDR={0xa, 0x1, @broadcast}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @broadcast}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0205649, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x10000, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xeffffffe}, 0x2, 0x200, 0x4, @inferred, @integer64={0x8, 0x3, 0xf}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) socket(0x11, 0x3, 0x9) 2m12.041070034s ago: executing program 33 (id=4557): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x1, 0x3132, 0x1, 0x0) mmap$auto(0x3fffffffe000, 0x400005, 0x7fffffffffffffff, 0x3132, 0x6, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/vlan0/anycast_delay\x00', 0x88042, 0x0) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) setfsgid$auto(0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x402802, 0x0) r1 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r1, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r2, &(0x7f0000000140)=']}\x00', 0x101, 0x8) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/statistics/rx_bytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/82, 0x52) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) epoll_create$auto(0x8) setresuid$auto(0x2, 0xffffffffffffffff, 0x0) keyctl$auto(0x5, 0x0, 0x101, 0x1, 0x4000000000b90) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) mmap$auto(0x100, 0x2020009, 0x40000003, 0xf9, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syslog$auto(0x1, 0x0, 0x0) 2m11.376148234s ago: executing program 4 (id=4595): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r0 = socket(0xa, 0x3, 0x2f) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/etherd/revalidate\x00', 0x80101, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0xe4}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000080)) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r4 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004814}, 0x20000000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) 1m56.282202971s ago: executing program 34 (id=4595): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) r0 = socket(0xa, 0x3, 0x2f) r1 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000100)='/dev/etherd/revalidate\x00', 0x80101, 0x0) writev$auto(r1, &(0x7f0000000140)={0x0, 0xe4}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000080)) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x3, 0x3a) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r4 = socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004814}, 0x20000000) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x80b01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) 7.970362886s ago: executing program 5 (id=5026): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24050803}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) socket(0x1a, 0x5, 0x5) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x2, 0x7) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) 7.238146907s ago: executing program 5 (id=5028): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 5.805496815s ago: executing program 6 (id=5035): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 5.758285703s ago: executing program 2 (id=5036): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, r3, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) sendfile$auto(r4, r6, 0x0, 0x2) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendfile$auto(r7, r7, 0x0, 0x10000800000003) fcntl$auto(0x3, 0x4, 0xa553) write$auto(r5, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r9, r9, 0x0, 0x200) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.633104216s ago: executing program 5 (id=5037): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 5.570426044s ago: executing program 2 (id=5038): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 4.432806704s ago: executing program 5 (id=5040): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 4.349335118s ago: executing program 1 (id=5041): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 4.259845754s ago: executing program 6 (id=5042): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/wakeup_count\x00', 0xc0000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) write$auto(r1, 0x0, 0x2d9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x40800) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyaf\x00', 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:17/uevent\x00', 0x40380, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/86, 0x56) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev4\x00', 0x200, 0x0) ioctl$auto(r5, 0xc008561b, r4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4000000000000004, 0x6) ptrace$auto(0x8, r6, 0x2, 0x5) fcntl$auto(r5, 0x81, r6) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x7bdb, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x800000000000000, 0x40000e, 0x5, 0x1c, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) 4.035231825s ago: executing program 2 (id=5043): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 3.642586696s ago: executing program 6 (id=5044): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, r3, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r4, r6, 0x0, 0x2) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x109002, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf25090a00001e000e8089f7cf17379eef71dcb2c0f141c0d9dcf7f5e7613ef5fcbae46c0032000d022f70726f632b7379052f6e65742f697076362f0500000000000000766c616e312f72657472616e735f74696d7700000008000700912b1a68d7af5efd08785e002e66ad0640193b22820c7906fa9d1ace53a14967ce77db989e054393cc4d7431b54aed34bdb37a9b893e27ff7939a209b31dc5cfbc686b55f5a37e36acbd27d6fc856f979905e3d65e21fe7f169d1666ef5d9105ada06bd8a870b475391feb1029e469d840d5f931730db6ec1f28810052dc971af905c06f2d3f9f3749e74f92cdb608ad0fd5bb2ef8be8708c0b62dc038d598c7434c715d0a6acdcced5be9b11656a3fb8d055caa57765f6c47691b10b380318196f49718b91ebf7b69e97cafd241f84f6142a59a70b75efb0fec7371e774d2d68da886fc4a298b21a5d36f8c590b854694e2c29338e2c495ac0f235e3bfafb"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendfile$auto(r7, r7, 0x0, 0x10000800000003) fcntl$auto(0x3, 0x4, 0xa553) write$auto(r5, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r9, r9, 0x0, 0x200) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.019003943s ago: executing program 5 (id=5045): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0xfffffffffffff280, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0x7ff}, 0x7, 0x0, 0x0, 0x8) kill$auto(0x0, 0x21) lseek$auto(0x3, 0x8, 0x1) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) pread64$auto(r6, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x3ef, 0x9) bind$auto(r5, &(0x7f0000000100)=@xdp={0x2c, 0xc, 0x0, 0x1e}, 0x6b) read$auto(r4, 0x0, 0x1f42) 2.998545013s ago: executing program 1 (id=5046): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, r3, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) sendfile$auto(r4, r6, 0x0, 0x2) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendfile$auto(r7, r7, 0x0, 0x10000800000003) fcntl$auto(0x3, 0x4, 0xa553) write$auto(r5, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r9, r9, 0x0, 0x200) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.845552748s ago: executing program 2 (id=5047): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064b9, 0x1e6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0xffffffffffffff66) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/snd_virmidi.0/sound/card2/admmidi2/power/runtime_status\x00', 0x93a03, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) 2.824925901s ago: executing program 6 (id=5048): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0x15, 0x5, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x6, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0xa, 0x4, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x1]}, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000000)={r0, 0x9}) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64$auto(r6, 0x0, 0x4, 0x3) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf250100000005000a000300000006001100400000000400138005000c0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x84) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="ac009308", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf2515000000740019003d68f56930dfec1e0c9ee2d4ec5cdec5a6617f08331f1e41250fe48416dd92cea0221dc8da3d9efe89fd9d72adf19e0e892f0903c80088663c1275a54ef729132cb8005fda646285b305ef19246d6980ac71aad2e89b"], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x41001) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) arch_prctl$auto(0x1003, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) inotify_init1$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r5, 0x4004af07, &(0x7f00000001c0)=r7) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r8, &(0x7f0000000580)="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", 0xace) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) 2.596258929s ago: executing program 1 (id=5049): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x1a1d02, 0x0) mmap$auto(0x6c51, 0x30009, 0x407ffffffffff7e, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, 0x0, 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0xfa5) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x3, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x400000000005}, 0x3fc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x8) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x404c4701, 0x0) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 2.283777068s ago: executing program 1 (id=5050): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xfffffffffffffc53, &(0x7f0000000280)={&(0x7f0000001900)={0x1e8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_NAME={0x28, 0x2, '/sys/kernel/security/tomoyo/profile\x00'}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC_ADDRS={0xef, 0xa6, 0x0, 0x1, [@typed={0xc, 0x96, 0x0, 0x0, @u64=0x1}, @generic="b88a23b95e11aa11098e97f0fb0e37d3d96e825de5040cd59a9a3aa719cbf329c1c8dcbe11cfabc6e13c08051bda079a65eab40b25601f816113897bc24036a6fd8f21c34a529f4474caf2ee705edd", @typed={0x8, 0x5b, 0x0, 0x0, @uid}, @typed={0x86, 0x101, 0x0, 0x0, @binary="a5d4862708da6a3be91443f0b1456df752da16ceb865c1ebe44ee2e04c9eede288e1b796dd85b82a6e3812c93f50250209286a18dd07fc5d60fa97f3d67f1cd63f51d7210ac1115162626790b41a455591b0ca94c1664583eec77aea53489fc35f0900000000000000f488f6f21fd84f1699a635f8f51be6fc875c0b61992b4946b8"}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x5b, 0xba, "25dbf11ca762de114ebd1b5813d1e68678b26b6da7d3eec8a75fe0a07fbeb7b795c68c182663dbe27b0a2d875f1914f8b96c520af172669dacb8012ed6559313ccbf3d4d34ae1e3d4cb5f35407227f07bfadc8b04aaabe"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x8006c1}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "50ced043873d8fd0fa047a5fb299ff1e0154df13e63570695b1b42a527e04435c7897466ca2ff80d6d860c4280ca7f3a74c5d1b06050c01fe3f03088423939ce70363e098a98319485ae61aad0"}]}, 0x1e8}, 0x1, 0x0, 0x0, 0xd1361b03314ba871}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xb5d1af1605322d93) open_by_handle_at$auto(r3, &(0x7f0000000040)={0x1, 0x0, '5'}, 0xfe) shmctl$auto_SHM_UNLOCK(0x4, 0xc, &(0x7f00000000c0)={{0x80cd, 0x0, 0xee00, 0x7, 0x5, 0x7, 0x1}, 0x4, 0x8001, 0xfff, 0x2, @inferred, @raw=0x4, 0xfffa, 0x0, &(0x7f0000000440)="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", &(0x7f0000000040)="b980532bd7f376954cd88906e565587049213630100d1dd2c35580d0c2460e79fc0bf97fd5b44f7ebe3397fac5ccf0fef343be8aa5997cbc06c9339dab8d121592fa859ac82e4929e7fe4d3114fcb7c0356c5adff26a1b557688522b572a9335b6a82b514704d5f59a2b4ff102c73f7992"}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000140)={0x6, r4, 0x48, 0x3}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy2\x00', 0x100, 0x0) keyctl$auto(0xe, 0x0, 0x16efae4c, 0x8000005092, 0x61f93bdb) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptyyb\x00', 0xa2002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/profile\x00', 0x8980, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, 0x38) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) 1.708295306s ago: executing program 6 (id=5051): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 1.412450181s ago: executing program 1 (id=5052): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x800064b9, 0x1e6) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) brk$auto(0xffffffffffffff66) r4 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, 0x0, 0xda) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r5, 0x0, 0x800003, 0x270) mlockall$auto(0x7) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000001600)={{0x7b0, 0x0, 0x0, 0xd, 0x3ff, 0x7, 0xb}, &(0x7f0000000400)=0x9, &(0x7f0000000440)=0x10, 0x1, 0xd80, 0x9, 0x0, 0x8000000000000000, 0x6, 0xa, 0xfff9, @raw=0x80, @raw=0x9}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/snd_virmidi.0/sound/card2/admmidi2/power/runtime_status\x00', 0x93a03, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) 866.354554ms ago: executing program 2 (id=5053): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x400, 0x0) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) ioperm$auto(0xaf, 0xe, 0x991b) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000280), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x24050803}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x1a, 0x5, 0x5) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) sendfile$auto(r3, r3, &(0x7f0000000040)=0x2, 0x7) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) 614.73306ms ago: executing program 2 (id=5054): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12d", 0x1f) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) 383.803833ms ago: executing program 6 (id=5055): open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r0 = socket(0x10, 0x3, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x48d0) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r3 = socket(0x2, 0x3, 0xa) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4, &(0x7f00000004c0)={0x1, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0xfffb, 0x8000, 0x83, 0x0, 0x7c55, 0x34b, {0x0, 0xe}, {0x100, 0xffffffa4}, {0x81, 0x2}, {0xfff, 0xfff}, 0x1, 0x80, 0xb0, 0xfffffffb, 0x3, 0x76b3, 0x4, 0x8, 0x6, 0x20000000, 0x3, 0x4, [0x10, 0x4, 0x3, 0x523, 0x4, 0x8, 0xf, 0x1, 0x7]}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xdffe) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0xfffffffffffffffa, 0x1000, 0x63, 0x0, 0x0, 0x0, 0x1000000008, 0xffffffff7fffffff, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x80000000000005, 0x7, 0x7, 0x61}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a00040011000800", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="10002cbd7000fedbdf252f000000800004809bd689c3ae6536da7665680bb465b01444a257ba23c1ef71c0f5320903eaa7807b05eefba82b94922c0414c9120f1235c7bafe181a1048ab2e9434f2db956df94dea7870a1cda8d5088adb306ba17340aed8df6ea23813cbd73d15d96e1adc266f79048e1bdb44488d8ab964c938f4bc301d905b0800b000", @ANYRES32=r3, @ANYBLOB="0c00028008000200070000001400028008000100050000000800020001f0ffffb8000380ab006e80cd045e92b458fd1d86dfe32a25e487fbb4a1129c956062722159150d85135e89903b8b27ecbc6229a2fcefdf2cd58c173ba805957de09d0d9eda9995d67f7ee159d2b0e3e5b1af44e952d721941920edba27e6eca7c9f2a27568bffb362864004af170540ce300d389e971610560a4a5fb6580409861f5d44f69bf2f618d8e4068a94dc31ecc8aa835613e737aab085f27", @ANYRES32=r2, @ANYBLOB], 0x16c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/sunplus/remove_id\x00', 0xa881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) write$auto(0x3, 0x0, 0x81) r5 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) fcntl$auto_F_DUPFD_QUERY(r5, 0x403, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 76.428169ms ago: executing program 5 (id=5056): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r3 = fcntl$auto(0xffffffffffffffff, 0xffff, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, r3, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)={0x675d529c, 0x9f7d, 0xfffffff1, 0x101, 0x6, 0x4, "1ec4c2336d0d5d8a5db102d8cd84eca696782c75e0cb2d4b8c400f6fdc12a84264800d00000035a29c7c1ebbdcd2fe5c88e17422928a5110f6e9fef8cac28588"}) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r4, r6, 0x0, 0x2) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, 0x0, 0x80) sendfile$auto(r7, r7, 0x0, 0x10000800000003) fcntl$auto(0x3, 0x4, 0xa553) write$auto(r5, &(0x7f00000000c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r9, r9, 0x0, 0x200) setsockopt$auto(r2, 0x114, 0x8, 0x0, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=5057): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x8, &(0x7f0000000180)={0xab}, &(0x7f00000001c0)={0x2}, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) kernel console output (not intermixed with test programs): t_file_splice_eof+0x10/0x10 [ 1540.325538][T29395] ? bpf_lsm_file_permission+0x9/0x10 [ 1540.325567][T29395] ? security_file_permission+0x71/0x210 [ 1540.325596][T29395] ? rw_verify_area+0xcf/0x6c0 [ 1540.325624][T29395] do_sendfile+0xb06/0xe50 [ 1540.325658][T29395] ? __pfx_do_sendfile+0x10/0x10 [ 1540.325684][T29395] ? __sys_sendmsg+0x18c/0x220 [ 1540.325714][T29395] ? __x64_sys_futex+0x1e0/0x4c0 [ 1540.325745][T29395] ? __x64_sys_futex+0x1e9/0x4c0 [ 1540.325782][T29395] __x64_sys_sendfile64+0x1d8/0x220 [ 1540.325816][T29395] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1540.325859][T29395] do_syscall_64+0xcd/0xfa0 [ 1540.325893][T29395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.325920][T29395] RIP: 0033:0x7f0a8b58f6c9 [ 1540.325941][T29395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.325967][T29395] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1540.325992][T29395] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1540.326018][T29395] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1540.326034][T29395] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1540.326051][T29395] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1540.326068][T29395] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1540.326105][T29395] [ 1541.334023][T29402] FAULT_INJECTION: forcing a failure. [ 1541.334023][T29402] name failslab, interval 1, probability 0, space 0, times 0 [ 1541.367358][T29402] CPU: 1 UID: 0 PID: 29402 Comm: syz.5.4806 Not tainted syzkaller #0 PREEMPT(full) [ 1541.367382][T29402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1541.367392][T29402] Call Trace: [ 1541.367397][T29402] [ 1541.367403][T29402] dump_stack_lvl+0x16c/0x1f0 [ 1541.367426][T29402] should_fail_ex+0x512/0x640 [ 1541.367449][T29402] ? __kmalloc_noprof+0xca/0x880 [ 1541.367476][T29402] should_failslab+0xc2/0x120 [ 1541.367495][T29402] __kmalloc_noprof+0xdd/0x880 [ 1541.367518][T29402] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1541.367533][T29402] ? copy_splice_read+0x1a8/0xc20 [ 1541.367549][T29402] ? copy_splice_read+0x1a8/0xc20 [ 1541.367562][T29402] copy_splice_read+0x1a8/0xc20 [ 1541.367575][T29402] ? __pfx_pipe_to_null+0x10/0x10 [ 1541.367593][T29402] ? splice_from_pipe+0x80/0x140 [ 1541.367607][T29402] ? __pfx_copy_splice_read+0x10/0x10 [ 1541.367621][T29402] ? pipe_unlock+0x4a/0x70 [ 1541.367638][T29402] ? __pfx_splice_from_pipe+0x10/0x10 [ 1541.367658][T29402] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1541.367675][T29402] ? __pfx_copy_splice_read+0x10/0x10 [ 1541.367688][T29402] do_splice_read+0x285/0x370 [ 1541.367704][T29402] splice_direct_to_actor+0x2a1/0xa30 [ 1541.367720][T29402] ? __pfx_direct_splice_actor+0x10/0x10 [ 1541.367738][T29402] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1541.367757][T29402] do_splice_direct+0x174/0x240 [ 1541.367772][T29402] ? __pfx_do_splice_direct+0x10/0x10 [ 1541.367786][T29402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1541.367810][T29402] ? bpf_lsm_file_permission+0x9/0x10 [ 1541.367826][T29402] ? security_file_permission+0x71/0x210 [ 1541.367842][T29402] ? rw_verify_area+0xcf/0x6c0 [ 1541.367857][T29402] do_sendfile+0xb06/0xe50 [ 1541.367875][T29402] ? __pfx_do_sendfile+0x10/0x10 [ 1541.367889][T29402] ? __sys_sendmsg+0x18c/0x220 [ 1541.367906][T29402] ? __x64_sys_futex+0x1e0/0x4c0 [ 1541.367924][T29402] ? __x64_sys_futex+0x1e9/0x4c0 [ 1541.367945][T29402] __x64_sys_sendfile64+0x1d8/0x220 [ 1541.367964][T29402] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1541.367989][T29402] do_syscall_64+0xcd/0xfa0 [ 1541.368008][T29402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.368023][T29402] RIP: 0033:0x7f0a8b58f6c9 [ 1541.368036][T29402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1541.368057][T29402] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1541.368073][T29402] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1541.368083][T29402] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1541.368092][T29402] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1541.368101][T29402] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1541.368111][T29402] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1541.368132][T29402] [ 1542.625247][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1542.631869][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1543.376425][T29447] FAULT_INJECTION: forcing a failure. [ 1543.376425][T29447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1543.425844][T29447] CPU: 0 UID: 0 PID: 29447 Comm: syz.5.4814 Not tainted syzkaller #0 PREEMPT(full) [ 1543.425883][T29447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1543.425900][T29447] Call Trace: [ 1543.425911][T29447] [ 1543.425923][T29447] dump_stack_lvl+0x16c/0x1f0 [ 1543.425963][T29447] should_fail_ex+0x512/0x640 [ 1543.426007][T29447] should_fail_alloc_page+0xe7/0x130 [ 1543.426046][T29447] prepare_alloc_pages+0x3c2/0x610 [ 1543.426089][T29447] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1543.426122][T29447] ? stack_trace_save+0x8e/0xc0 [ 1543.426153][T29447] ? __pfx_stack_trace_save+0x10/0x10 [ 1543.426180][T29447] ? do_raw_spin_lock+0x12c/0x2b0 [ 1543.426219][T29447] ? stack_depot_save_flags+0x29/0x9c0 [ 1543.426255][T29447] ? find_held_lock+0x2b/0x80 [ 1543.426286][T29447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1543.426311][T29447] ? __kasan_kmalloc+0xaa/0xb0 [ 1543.426339][T29447] ? copy_splice_read+0x1a8/0xc20 [ 1543.426361][T29447] ? splice_direct_to_actor+0x2a1/0xa30 [ 1543.426386][T29447] ? do_splice_direct+0x174/0x240 [ 1543.426408][T29447] ? do_sendfile+0xb06/0xe50 [ 1543.426432][T29447] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1543.426466][T29447] ? do_syscall_64+0xcd/0xfa0 [ 1543.426497][T29447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.426553][T29447] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1543.426593][T29447] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1543.426630][T29447] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1543.426700][T29447] ? copy_splice_read+0x1a8/0xc20 [ 1543.426735][T29447] copy_splice_read+0x1e1/0xc20 [ 1543.426761][T29447] ? __pfx_pipe_to_null+0x10/0x10 [ 1543.426798][T29447] ? __pfx_copy_splice_read+0x10/0x10 [ 1543.426822][T29447] ? pipe_unlock+0x4a/0x70 [ 1543.426855][T29447] ? __pfx_splice_from_pipe+0x10/0x10 [ 1543.426892][T29447] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1543.426924][T29447] ? __pfx_copy_splice_read+0x10/0x10 [ 1543.426951][T29447] do_splice_read+0x285/0x370 [ 1543.426982][T29447] splice_direct_to_actor+0x2a1/0xa30 [ 1543.427013][T29447] ? __pfx_direct_splice_actor+0x10/0x10 [ 1543.427048][T29447] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1543.427088][T29447] do_splice_direct+0x174/0x240 [ 1543.427115][T29447] ? __pfx_do_splice_direct+0x10/0x10 [ 1543.427143][T29447] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1543.427188][T29447] ? bpf_lsm_file_permission+0x9/0x10 [ 1543.427216][T29447] ? security_file_permission+0x71/0x210 [ 1543.427247][T29447] ? rw_verify_area+0xcf/0x6c0 [ 1543.427277][T29447] do_sendfile+0xb06/0xe50 [ 1543.427313][T29447] ? __pfx_do_sendfile+0x10/0x10 [ 1543.427340][T29447] ? __sys_sendmsg+0x18c/0x220 [ 1543.427373][T29447] ? __x64_sys_futex+0x1e0/0x4c0 [ 1543.427408][T29447] ? __x64_sys_futex+0x1e9/0x4c0 [ 1543.427446][T29447] __x64_sys_sendfile64+0x1d8/0x220 [ 1543.427480][T29447] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1543.427525][T29447] do_syscall_64+0xcd/0xfa0 [ 1543.427561][T29447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.427589][T29447] RIP: 0033:0x7f0a8b58f6c9 [ 1543.427611][T29447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1543.427640][T29447] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1543.427674][T29447] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1543.427694][T29447] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1543.427709][T29447] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1543.427726][T29447] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1543.427743][T29447] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1543.427781][T29447] [ 1544.820073][T29472] delete_channel: no stack [ 1545.699642][T29503] FAULT_INJECTION: forcing a failure. [ 1545.699642][T29503] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.723441][T29503] CPU: 0 UID: 0 PID: 29503 Comm: syz.6.4828 Not tainted syzkaller #0 PREEMPT(full) [ 1545.723474][T29503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1545.723483][T29503] Call Trace: [ 1545.723489][T29503] [ 1545.723496][T29503] dump_stack_lvl+0x16c/0x1f0 [ 1545.723518][T29503] should_fail_ex+0x512/0x640 [ 1545.723540][T29503] ? fs_reclaim_acquire+0xae/0x150 [ 1545.723562][T29503] should_failslab+0xc2/0x120 [ 1545.723582][T29503] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1545.723597][T29503] ? __pfx_map_id_range_down+0x10/0x10 [ 1545.723610][T29503] ? security_inode_alloc+0x3b/0x2b0 [ 1545.723635][T29503] ? security_inode_alloc+0x3b/0x2b0 [ 1545.723655][T29503] security_inode_alloc+0x3b/0x2b0 [ 1545.723686][T29503] inode_init_always_gfp+0xce4/0x1030 [ 1545.723711][T29503] alloc_inode+0x86/0x240 [ 1545.723730][T29503] new_inode+0x22/0x1c0 [ 1545.723755][T29503] shmem_get_inode+0x19a/0xfb0 [ 1545.723792][T29503] shmem_mknod+0x1a8/0x450 [ 1545.723829][T29503] vfs_mknod+0x5da/0x8e0 [ 1545.723857][T29503] do_mknodat+0x30f/0x5d0 [ 1545.723874][T29503] ? __pfx_do_mknodat+0x10/0x10 [ 1545.723889][T29503] ? getname_flags.part.0+0x1c5/0x550 [ 1545.723914][T29503] __x64_sys_mknod+0x87/0xb0 [ 1545.723931][T29503] do_syscall_64+0xcd/0xfa0 [ 1545.723950][T29503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.723965][T29503] RIP: 0033:0x7f4305f8f6c9 [ 1545.723979][T29503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.723993][T29503] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1545.724007][T29503] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1545.724016][T29503] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1545.724025][T29503] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1545.724035][T29503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1545.724044][T29503] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1545.724064][T29503] [ 1546.529375][T29518] FAULT_INJECTION: forcing a failure. [ 1546.529375][T29518] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.542773][T29518] CPU: 0 UID: 0 PID: 29518 Comm: syz.5.4831 Not tainted syzkaller #0 PREEMPT(full) [ 1546.542805][T29518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1546.542818][T29518] Call Trace: [ 1546.542826][T29518] [ 1546.542836][T29518] dump_stack_lvl+0x16c/0x1f0 [ 1546.542868][T29518] should_fail_ex+0x512/0x640 [ 1546.542900][T29518] ? __kmalloc_noprof+0xca/0x880 [ 1546.542939][T29518] should_failslab+0xc2/0x120 [ 1546.542972][T29518] __kmalloc_noprof+0xdd/0x880 [ 1546.543009][T29518] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1546.543035][T29518] ? copy_splice_read+0x1a8/0xc20 [ 1546.543065][T29518] ? copy_splice_read+0x1a8/0xc20 [ 1546.543088][T29518] copy_splice_read+0x1a8/0xc20 [ 1546.543115][T29518] ? __pfx_pipe_to_null+0x10/0x10 [ 1546.543149][T29518] ? __pfx_copy_splice_read+0x10/0x10 [ 1546.543171][T29518] ? pipe_unlock+0x4a/0x70 [ 1546.543200][T29518] ? __pfx_splice_from_pipe+0x10/0x10 [ 1546.543235][T29518] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1546.543264][T29518] ? __pfx_copy_splice_read+0x10/0x10 [ 1546.543288][T29518] do_splice_read+0x285/0x370 [ 1546.543315][T29518] splice_direct_to_actor+0x2a1/0xa30 [ 1546.543344][T29518] ? __pfx_direct_splice_actor+0x10/0x10 [ 1546.543376][T29518] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1546.543412][T29518] do_splice_direct+0x174/0x240 [ 1546.543438][T29518] ? __pfx_do_splice_direct+0x10/0x10 [ 1546.543464][T29518] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1546.543504][T29518] ? bpf_lsm_file_permission+0x9/0x10 [ 1546.543533][T29518] ? security_file_permission+0x71/0x210 [ 1546.543569][T29518] ? rw_verify_area+0xcf/0x6c0 [ 1546.543597][T29518] do_sendfile+0xb06/0xe50 [ 1546.543630][T29518] ? __pfx_do_sendfile+0x10/0x10 [ 1546.543657][T29518] ? __sys_sendmsg+0x18c/0x220 [ 1546.543687][T29518] ? __x64_sys_futex+0x1e0/0x4c0 [ 1546.543719][T29518] ? __x64_sys_futex+0x1e9/0x4c0 [ 1546.543754][T29518] __x64_sys_sendfile64+0x1d8/0x220 [ 1546.543789][T29518] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1546.543835][T29518] do_syscall_64+0xcd/0xfa0 [ 1546.543868][T29518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.543894][T29518] RIP: 0033:0x7f0a8b58f6c9 [ 1546.543915][T29518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1546.543940][T29518] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1546.543965][T29518] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1546.543983][T29518] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1546.543999][T29518] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1546.544014][T29518] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1546.544030][T29518] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1546.544067][T29518] [ 1547.418293][T29526] FAULT_INJECTION: forcing a failure. [ 1547.418293][T29526] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.542182][T29526] CPU: 0 UID: 0 PID: 29526 Comm: syz.5.4835 Not tainted syzkaller #0 PREEMPT(full) [ 1547.542229][T29526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1547.542245][T29526] Call Trace: [ 1547.542256][T29526] [ 1547.542267][T29526] dump_stack_lvl+0x16c/0x1f0 [ 1547.542303][T29526] should_fail_ex+0x512/0x640 [ 1547.542341][T29526] ? __kmalloc_noprof+0xca/0x880 [ 1547.542383][T29526] should_failslab+0xc2/0x120 [ 1547.542414][T29526] __kmalloc_noprof+0xdd/0x880 [ 1547.542451][T29526] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1547.542479][T29526] ? copy_splice_read+0x1a8/0xc20 [ 1547.542508][T29526] ? copy_splice_read+0x1a8/0xc20 [ 1547.542530][T29526] copy_splice_read+0x1a8/0xc20 [ 1547.542554][T29526] ? __pfx_pipe_to_null+0x10/0x10 [ 1547.542589][T29526] ? __pfx_copy_splice_read+0x10/0x10 [ 1547.542610][T29526] ? pipe_unlock+0x4a/0x70 [ 1547.542636][T29526] ? __pfx_splice_from_pipe+0x10/0x10 [ 1547.542667][T29526] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1547.542692][T29526] ? __pfx_copy_splice_read+0x10/0x10 [ 1547.542713][T29526] do_splice_read+0x285/0x370 [ 1547.542737][T29526] splice_direct_to_actor+0x2a1/0xa30 [ 1547.542762][T29526] ? __pfx_direct_splice_actor+0x10/0x10 [ 1547.542790][T29526] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1547.542821][T29526] do_splice_direct+0x174/0x240 [ 1547.542843][T29526] ? __pfx_do_splice_direct+0x10/0x10 [ 1547.542866][T29526] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1547.542901][T29526] ? bpf_lsm_file_permission+0x9/0x10 [ 1547.542926][T29526] ? security_file_permission+0x71/0x210 [ 1547.542951][T29526] ? rw_verify_area+0xcf/0x6c0 [ 1547.542975][T29526] do_sendfile+0xb06/0xe50 [ 1547.543004][T29526] ? __pfx_do_sendfile+0x10/0x10 [ 1547.543026][T29526] ? __sys_sendmsg+0x18c/0x220 [ 1547.543052][T29526] ? __x64_sys_futex+0x1e0/0x4c0 [ 1547.543080][T29526] ? __x64_sys_futex+0x1e9/0x4c0 [ 1547.543111][T29526] __x64_sys_sendfile64+0x1d8/0x220 [ 1547.543148][T29526] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1547.543186][T29526] do_syscall_64+0xcd/0xfa0 [ 1547.543223][T29526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.543246][T29526] RIP: 0033:0x7f0a8b58f6c9 [ 1547.543265][T29526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.543287][T29526] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1547.543309][T29526] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1547.543324][T29526] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1547.543337][T29526] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1547.543350][T29526] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1547.543364][T29526] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1547.543397][T29526] [ 1548.402171][T29538] FAULT_INJECTION: forcing a failure. [ 1548.402171][T29538] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.419854][T29538] CPU: 0 UID: 0 PID: 29538 Comm: syz.5.4837 Not tainted syzkaller #0 PREEMPT(full) [ 1548.419893][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1548.419910][T29538] Call Trace: [ 1548.419919][T29538] [ 1548.419930][T29538] dump_stack_lvl+0x16c/0x1f0 [ 1548.419968][T29538] should_fail_ex+0x512/0x640 [ 1548.420005][T29538] ? __kmalloc_noprof+0xca/0x880 [ 1548.420048][T29538] should_failslab+0xc2/0x120 [ 1548.420082][T29538] __kmalloc_noprof+0xdd/0x880 [ 1548.420119][T29538] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1548.420145][T29538] ? copy_splice_read+0x1a8/0xc20 [ 1548.420176][T29538] ? copy_splice_read+0x1a8/0xc20 [ 1548.420199][T29538] copy_splice_read+0x1a8/0xc20 [ 1548.420225][T29538] ? __pfx_pipe_to_null+0x10/0x10 [ 1548.420261][T29538] ? __pfx_copy_splice_read+0x10/0x10 [ 1548.420285][T29538] ? pipe_unlock+0x4a/0x70 [ 1548.420316][T29538] ? __pfx_splice_from_pipe+0x10/0x10 [ 1548.420353][T29538] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1548.420391][T29538] ? __pfx_copy_splice_read+0x10/0x10 [ 1548.420418][T29538] do_splice_read+0x285/0x370 [ 1548.420449][T29538] splice_direct_to_actor+0x2a1/0xa30 [ 1548.420480][T29538] ? __pfx_direct_splice_actor+0x10/0x10 [ 1548.420515][T29538] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1548.420553][T29538] do_splice_direct+0x174/0x240 [ 1548.420581][T29538] ? __pfx_do_splice_direct+0x10/0x10 [ 1548.420609][T29538] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1548.420651][T29538] ? bpf_lsm_file_permission+0x9/0x10 [ 1548.420681][T29538] ? security_file_permission+0x71/0x210 [ 1548.420711][T29538] ? rw_verify_area+0xcf/0x6c0 [ 1548.420740][T29538] do_sendfile+0xb06/0xe50 [ 1548.420774][T29538] ? __pfx_do_sendfile+0x10/0x10 [ 1548.420801][T29538] ? __sys_sendmsg+0x18c/0x220 [ 1548.420831][T29538] ? __x64_sys_futex+0x1e0/0x4c0 [ 1548.420868][T29538] ? __x64_sys_futex+0x1e9/0x4c0 [ 1548.420906][T29538] __x64_sys_sendfile64+0x1d8/0x220 [ 1548.420941][T29538] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1548.420987][T29538] do_syscall_64+0xcd/0xfa0 [ 1548.421021][T29538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.421048][T29538] RIP: 0033:0x7f0a8b58f6c9 [ 1548.421070][T29538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.421097][T29538] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1548.421122][T29538] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1548.421141][T29538] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1548.421157][T29538] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1548.421173][T29538] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1548.421189][T29538] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1548.421227][T29538] [ 1549.427025][T29555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4841'. [ 1549.726986][T29559] FAULT_INJECTION: forcing a failure. [ 1549.726986][T29559] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1549.802894][T29559] CPU: 1 UID: 0 PID: 29559 Comm: syz.6.4842 Not tainted syzkaller #0 PREEMPT(full) [ 1549.802917][T29559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1549.802927][T29559] Call Trace: [ 1549.802933][T29559] [ 1549.802939][T29559] dump_stack_lvl+0x16c/0x1f0 [ 1549.802961][T29559] should_fail_ex+0x512/0x640 [ 1549.802987][T29559] should_fail_alloc_page+0xe7/0x130 [ 1549.803009][T29559] prepare_alloc_pages+0x3c2/0x610 [ 1549.803036][T29559] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1549.803060][T29559] ? stack_trace_save+0x8e/0xc0 [ 1549.803078][T29559] ? __pfx_stack_trace_save+0x10/0x10 [ 1549.803093][T29559] ? do_raw_spin_lock+0x12c/0x2b0 [ 1549.803116][T29559] ? stack_depot_save_flags+0x29/0x9c0 [ 1549.803138][T29559] ? find_held_lock+0x2b/0x80 [ 1549.803156][T29559] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1549.803171][T29559] ? __kasan_kmalloc+0xaa/0xb0 [ 1549.803187][T29559] ? copy_splice_read+0x1a8/0xc20 [ 1549.803200][T29559] ? splice_direct_to_actor+0x2a1/0xa30 [ 1549.803213][T29559] ? do_splice_direct+0x174/0x240 [ 1549.803225][T29559] ? do_sendfile+0xb06/0xe50 [ 1549.803238][T29559] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1549.803256][T29559] ? do_syscall_64+0xcd/0xfa0 [ 1549.803272][T29559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.803301][T29559] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1549.803324][T29559] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1549.803344][T29559] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1549.803358][T29559] ? copy_splice_read+0x1a8/0xc20 [ 1549.803374][T29559] copy_splice_read+0x1e1/0xc20 [ 1549.803388][T29559] ? __pfx_pipe_to_null+0x10/0x10 [ 1549.803408][T29559] ? __pfx_copy_splice_read+0x10/0x10 [ 1549.803420][T29559] ? pipe_unlock+0x4a/0x70 [ 1549.803437][T29559] ? __pfx_splice_from_pipe+0x10/0x10 [ 1549.803458][T29559] ? __pfx_copy_splice_read+0x10/0x10 [ 1549.803471][T29559] do_splice_read+0x285/0x370 [ 1549.803487][T29559] splice_direct_to_actor+0x2a1/0xa30 [ 1549.803502][T29559] ? __pfx_direct_splice_actor+0x10/0x10 [ 1549.803520][T29559] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1549.803540][T29559] do_splice_direct+0x174/0x240 [ 1549.803554][T29559] ? __pfx_do_splice_direct+0x10/0x10 [ 1549.803569][T29559] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1549.803592][T29559] ? bpf_lsm_file_permission+0x9/0x10 [ 1549.803609][T29559] ? security_file_permission+0x71/0x210 [ 1549.803625][T29559] ? rw_verify_area+0xcf/0x6c0 [ 1549.803640][T29559] do_sendfile+0xb06/0xe50 [ 1549.803658][T29559] ? __pfx_do_sendfile+0x10/0x10 [ 1549.803672][T29559] ? __sys_sendmsg+0x18c/0x220 [ 1549.803689][T29559] ? __x64_sys_futex+0x1e0/0x4c0 [ 1549.803707][T29559] ? __x64_sys_futex+0x1e9/0x4c0 [ 1549.803728][T29559] __x64_sys_sendfile64+0x1d8/0x220 [ 1549.803747][T29559] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1549.803771][T29559] do_syscall_64+0xcd/0xfa0 [ 1549.803791][T29559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.803813][T29559] RIP: 0033:0x7f4305f8f6c9 [ 1549.803833][T29559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1549.803859][T29559] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1549.803878][T29559] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1549.803889][T29559] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1549.803898][T29559] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1549.803908][T29559] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1549.803917][T29559] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1549.803937][T29559] [ 1550.162000][ C1] vkms_vblank_simulate: vblank timer overrun [ 1550.464139][T29564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1550.618138][T29565] FAULT_INJECTION: forcing a failure. [ 1550.618138][T29565] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.697974][T29565] CPU: 1 UID: 0 PID: 29565 Comm: syz.6.4843 Not tainted syzkaller #0 PREEMPT(full) [ 1550.698013][T29565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1550.698029][T29565] Call Trace: [ 1550.698038][T29565] [ 1550.698049][T29565] dump_stack_lvl+0x16c/0x1f0 [ 1550.698085][T29565] should_fail_ex+0x512/0x640 [ 1550.698122][T29565] ? fs_reclaim_acquire+0xae/0x150 [ 1550.698159][T29565] should_failslab+0xc2/0x120 [ 1550.698191][T29565] __kmalloc_noprof+0xdd/0x880 [ 1550.698228][T29565] ? kfree+0x252/0x6d0 [ 1550.698248][T29565] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1550.698282][T29565] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1550.698308][T29565] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1550.698347][T29565] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1550.698387][T29565] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1550.698455][T29565] ? lock_acquire+0x179/0x350 [ 1550.698487][T29565] ? find_held_lock+0x2b/0x80 [ 1550.698513][T29565] ? mnt_get_write_access+0x52/0x2f0 [ 1550.698558][T29565] tomoyo_file_open+0x6b/0x90 [ 1550.698592][T29565] security_file_open+0x84/0x1e0 [ 1550.698621][T29565] do_dentry_open+0x596/0x1530 [ 1550.698664][T29565] vfs_open+0x82/0x3f0 [ 1550.698704][T29565] path_openat+0x1de4/0x2cb0 [ 1550.698745][T29565] ? __pfx_path_openat+0x10/0x10 [ 1550.698775][T29565] ? __lock_acquire+0xb8a/0x1c90 [ 1550.698813][T29565] do_filp_open+0x20b/0x470 [ 1550.698842][T29565] ? __pfx_do_filp_open+0x10/0x10 [ 1550.698906][T29565] ? alloc_fd+0x471/0x7d0 [ 1550.698943][T29565] do_sys_openat2+0x11b/0x1d0 [ 1550.698981][T29565] ? __pfx_do_sys_openat2+0x10/0x10 [ 1550.699032][T29565] __x64_sys_openat+0x174/0x210 [ 1550.699069][T29565] ? __pfx___x64_sys_openat+0x10/0x10 [ 1550.699121][T29565] do_syscall_64+0xcd/0xfa0 [ 1550.699153][T29565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.699180][T29565] RIP: 0033:0x7f4305f8f6c9 [ 1550.699202][T29565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.699228][T29565] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1550.699254][T29565] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1550.699272][T29565] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1550.699290][T29565] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1550.699308][T29565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1550.699325][T29565] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1550.699363][T29565] [ 1550.699374][T29565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1551.460416][T29581] FAULT_INJECTION: forcing a failure. [ 1551.460416][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.524383][T29581] CPU: 0 UID: 0 PID: 29581 Comm: syz.5.4848 Not tainted syzkaller #0 PREEMPT(full) [ 1551.524422][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1551.524439][T29581] Call Trace: [ 1551.524449][T29581] [ 1551.524460][T29581] dump_stack_lvl+0x16c/0x1f0 [ 1551.524498][T29581] should_fail_ex+0x512/0x640 [ 1551.524534][T29581] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1551.524567][T29581] should_failslab+0xc2/0x120 [ 1551.524601][T29581] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1551.524628][T29581] ? __x64_sys_futex+0x1e0/0x4c0 [ 1551.524661][T29581] ? getname_flags.part.0+0x4c/0x550 [ 1551.524704][T29581] ? getname_flags.part.0+0x4c/0x550 [ 1551.524736][T29581] getname_flags.part.0+0x4c/0x550 [ 1551.524776][T29581] getname_flags+0x93/0xf0 [ 1551.524802][T29581] __x64_sys_mknod+0x74/0xb0 [ 1551.524831][T29581] do_syscall_64+0xcd/0xfa0 [ 1551.524864][T29581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.524891][T29581] RIP: 0033:0x7f0a8b58f6c9 [ 1551.524912][T29581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.524938][T29581] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1551.524963][T29581] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1551.524982][T29581] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1551.524999][T29581] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1551.525015][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.525031][T29581] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1551.525074][T29581] [ 1553.828631][T29608] FAULT_INJECTION: forcing a failure. [ 1553.828631][T29608] name failslab, interval 1, probability 0, space 0, times 0 [ 1553.895076][T29608] CPU: 0 UID: 0 PID: 29608 Comm: syz.5.4854 Not tainted syzkaller #0 PREEMPT(full) [ 1553.895115][T29608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1553.895132][T29608] Call Trace: [ 1553.895142][T29608] [ 1553.895154][T29608] dump_stack_lvl+0x16c/0x1f0 [ 1553.895191][T29608] should_fail_ex+0x512/0x640 [ 1553.895229][T29608] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1553.895259][T29608] should_failslab+0xc2/0x120 [ 1553.895295][T29608] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1553.895324][T29608] ? __d_lookup+0x25c/0x4a0 [ 1553.895358][T29608] ? __d_alloc+0x32/0xae0 [ 1553.895391][T29608] ? __d_alloc+0x32/0xae0 [ 1553.895417][T29608] __d_alloc+0x32/0xae0 [ 1553.895450][T29608] d_alloc+0x4a/0x1e0 [ 1553.895481][T29608] lookup_one_qstr_excl+0x175/0x250 [ 1553.895516][T29608] ? mnt_want_write+0x161/0x450 [ 1553.895555][T29608] filename_create+0x1e7/0x4a0 [ 1553.895582][T29608] ? __pfx_filename_create+0x10/0x10 [ 1553.895623][T29608] ? __might_fault+0xe3/0x190 [ 1553.895648][T29608] ? __might_fault+0xe3/0x190 [ 1553.895673][T29608] ? __might_fault+0x13b/0x190 [ 1553.895705][T29608] do_mknodat+0x18a/0x5d0 [ 1553.895738][T29608] ? __pfx_do_mknodat+0x10/0x10 [ 1553.895765][T29608] ? getname_flags.part.0+0x1c5/0x550 [ 1553.895810][T29608] __x64_sys_mknod+0x87/0xb0 [ 1553.895840][T29608] do_syscall_64+0xcd/0xfa0 [ 1553.895874][T29608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.895902][T29608] RIP: 0033:0x7f0a8b58f6c9 [ 1553.895925][T29608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.895949][T29608] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1553.895975][T29608] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1553.895993][T29608] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1553.896010][T29608] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1553.896027][T29608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.896043][T29608] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1553.896082][T29608] [ 1555.545781][T29633] FAULT_INJECTION: forcing a failure. [ 1555.545781][T29633] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.595968][T29633] CPU: 1 UID: 0 PID: 29633 Comm: syz.6.4860 Not tainted syzkaller #0 PREEMPT(full) [ 1555.596006][T29633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1555.596022][T29633] Call Trace: [ 1555.596030][T29633] [ 1555.596041][T29633] dump_stack_lvl+0x16c/0x1f0 [ 1555.596078][T29633] should_fail_ex+0x512/0x640 [ 1555.596115][T29633] ? __kmalloc_noprof+0xca/0x880 [ 1555.596156][T29633] should_failslab+0xc2/0x120 [ 1555.596189][T29633] __kmalloc_noprof+0xdd/0x880 [ 1555.596226][T29633] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1555.596251][T29633] ? copy_splice_read+0x1a8/0xc20 [ 1555.596279][T29633] ? copy_splice_read+0x1a8/0xc20 [ 1555.596301][T29633] copy_splice_read+0x1a8/0xc20 [ 1555.596327][T29633] ? __pfx_pipe_to_null+0x10/0x10 [ 1555.596362][T29633] ? __pfx_copy_splice_read+0x10/0x10 [ 1555.596385][T29633] ? pipe_unlock+0x4a/0x70 [ 1555.596414][T29633] ? __pfx_splice_from_pipe+0x10/0x10 [ 1555.596450][T29633] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1555.596480][T29633] ? __pfx_copy_splice_read+0x10/0x10 [ 1555.596505][T29633] do_splice_read+0x285/0x370 [ 1555.596533][T29633] splice_direct_to_actor+0x2a1/0xa30 [ 1555.596561][T29633] ? __pfx_direct_splice_actor+0x10/0x10 [ 1555.596594][T29633] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1555.596663][T29633] do_splice_direct+0x174/0x240 [ 1555.596692][T29633] ? __pfx_do_splice_direct+0x10/0x10 [ 1555.596718][T29633] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1555.596758][T29633] ? bpf_lsm_file_permission+0x9/0x10 [ 1555.596787][T29633] ? security_file_permission+0x71/0x210 [ 1555.596816][T29633] ? rw_verify_area+0xcf/0x6c0 [ 1555.596845][T29633] do_sendfile+0xb06/0xe50 [ 1555.596876][T29633] ? __pfx_do_sendfile+0x10/0x10 [ 1555.596900][T29633] ? __sys_sendmsg+0x18c/0x220 [ 1555.596928][T29633] ? __x64_sys_futex+0x1e0/0x4c0 [ 1555.596963][T29633] ? __x64_sys_futex+0x1e9/0x4c0 [ 1555.596999][T29633] __x64_sys_sendfile64+0x1d8/0x220 [ 1555.597033][T29633] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1555.597078][T29633] do_syscall_64+0xcd/0xfa0 [ 1555.597111][T29633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.597138][T29633] RIP: 0033:0x7f4305f8f6c9 [ 1555.597159][T29633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1555.597185][T29633] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1555.597210][T29633] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1555.597228][T29633] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1555.597245][T29633] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1555.597262][T29633] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1555.597280][T29633] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1555.597318][T29633] [ 1555.876364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1556.296096][T29645] FAULT_INJECTION: forcing a failure. [ 1556.296096][T29645] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.388396][T29645] CPU: 1 UID: 0 PID: 29645 Comm: syz.6.4862 Not tainted syzkaller #0 PREEMPT(full) [ 1556.388433][T29645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1556.388448][T29645] Call Trace: [ 1556.388457][T29645] [ 1556.388467][T29645] dump_stack_lvl+0x16c/0x1f0 [ 1556.388504][T29645] should_fail_ex+0x512/0x640 [ 1556.388539][T29645] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1556.388569][T29645] should_failslab+0xc2/0x120 [ 1556.388601][T29645] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1556.388635][T29645] ? __x64_sys_futex+0x1e0/0x4c0 [ 1556.388670][T29645] ? getname_flags.part.0+0x4c/0x550 [ 1556.388713][T29645] ? getname_flags.part.0+0x4c/0x550 [ 1556.388747][T29645] getname_flags.part.0+0x4c/0x550 [ 1556.388786][T29645] getname_flags+0x93/0xf0 [ 1556.388812][T29645] __x64_sys_mknod+0x74/0xb0 [ 1556.388840][T29645] do_syscall_64+0xcd/0xfa0 [ 1556.388872][T29645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.388896][T29645] RIP: 0033:0x7f4305f8f6c9 [ 1556.388918][T29645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.388943][T29645] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1556.388968][T29645] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1556.388987][T29645] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1556.389002][T29645] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1556.389018][T29645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1556.389032][T29645] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1556.389063][T29645] [ 1556.563508][ C1] vkms_vblank_simulate: vblank timer overrun [ 1557.633672][T29656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1559.868665][T29694] FAULT_INJECTION: forcing a failure. [ 1559.868665][T29694] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.946757][T29694] CPU: 1 UID: 0 PID: 29694 Comm: syz.6.4873 Not tainted syzkaller #0 PREEMPT(full) [ 1559.946793][T29694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1559.946808][T29694] Call Trace: [ 1559.946817][T29694] [ 1559.946826][T29694] dump_stack_lvl+0x16c/0x1f0 [ 1559.946863][T29694] should_fail_ex+0x512/0x640 [ 1559.946901][T29694] ? fs_reclaim_acquire+0xae/0x150 [ 1559.946940][T29694] should_failslab+0xc2/0x120 [ 1559.946972][T29694] __kmalloc_noprof+0xdd/0x880 [ 1559.947010][T29694] ? tomoyo_encode2+0x100/0x3e0 [ 1559.947053][T29694] ? tomoyo_encode2+0x100/0x3e0 [ 1559.947081][T29694] tomoyo_encode2+0x100/0x3e0 [ 1559.947116][T29694] tomoyo_encode+0x29/0x50 [ 1559.947144][T29694] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1559.947186][T29694] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1559.947235][T29694] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1559.947309][T29694] ? lock_acquire+0x179/0x350 [ 1559.947344][T29694] ? find_held_lock+0x2b/0x80 [ 1559.947372][T29694] ? mnt_get_write_access+0x52/0x2f0 [ 1559.947410][T29694] tomoyo_file_open+0x6b/0x90 [ 1559.947445][T29694] security_file_open+0x84/0x1e0 [ 1559.947474][T29694] do_dentry_open+0x596/0x1530 [ 1559.947515][T29694] vfs_open+0x82/0x3f0 [ 1559.947555][T29694] path_openat+0x1de4/0x2cb0 [ 1559.947595][T29694] ? __pfx_path_openat+0x10/0x10 [ 1559.947626][T29694] ? __lock_acquire+0xb8a/0x1c90 [ 1559.947664][T29694] do_filp_open+0x20b/0x470 [ 1559.947693][T29694] ? __pfx_do_filp_open+0x10/0x10 [ 1559.947748][T29694] ? alloc_fd+0x471/0x7d0 [ 1559.947784][T29694] do_sys_openat2+0x11b/0x1d0 [ 1559.947819][T29694] ? __pfx_do_sys_openat2+0x10/0x10 [ 1559.947889][T29694] __x64_sys_openat+0x174/0x210 [ 1559.947927][T29694] ? __pfx___x64_sys_openat+0x10/0x10 [ 1559.947979][T29694] do_syscall_64+0xcd/0xfa0 [ 1559.948013][T29694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1559.948048][T29694] RIP: 0033:0x7f4305f8f6c9 [ 1559.948071][T29694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1559.948097][T29694] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1559.948122][T29694] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1559.948140][T29694] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1559.948157][T29694] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1559.948174][T29694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.948191][T29694] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1559.948230][T29694] [ 1559.949091][T29694] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1560.838274][T29703] FAULT_INJECTION: forcing a failure. [ 1560.838274][T29703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.859000][T29703] CPU: 0 UID: 0 PID: 29703 Comm: syz.6.4877 Not tainted syzkaller #0 PREEMPT(full) [ 1560.859038][T29703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1560.859056][T29703] Call Trace: [ 1560.859066][T29703] [ 1560.859076][T29703] dump_stack_lvl+0x16c/0x1f0 [ 1560.859114][T29703] should_fail_ex+0x512/0x640 [ 1560.859166][T29703] strncpy_from_user+0x3b/0x2e0 [ 1560.859206][T29703] getname_flags.part.0+0x8f/0x550 [ 1560.859248][T29703] getname_flags+0x93/0xf0 [ 1560.859275][T29703] __x64_sys_mknod+0x74/0xb0 [ 1560.859304][T29703] do_syscall_64+0xcd/0xfa0 [ 1560.859335][T29703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.859361][T29703] RIP: 0033:0x7f4305f8f6c9 [ 1560.859383][T29703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1560.859408][T29703] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1560.859434][T29703] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1560.859458][T29703] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1560.859475][T29703] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1560.859492][T29703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1560.859508][T29703] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1560.859544][T29703] [ 1562.694990][T29731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4881'. [ 1563.815949][T29743] FAULT_INJECTION: forcing a failure. [ 1563.815949][T29743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1563.842953][T29743] CPU: 0 UID: 0 PID: 29743 Comm: syz.5.4885 Not tainted syzkaller #0 PREEMPT(full) [ 1563.842991][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1563.843007][T29743] Call Trace: [ 1563.843016][T29743] [ 1563.843027][T29743] dump_stack_lvl+0x16c/0x1f0 [ 1563.843063][T29743] should_fail_ex+0x512/0x640 [ 1563.843106][T29743] should_fail_alloc_page+0xe7/0x130 [ 1563.843142][T29743] prepare_alloc_pages+0x3c2/0x610 [ 1563.843180][T29743] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1563.843212][T29743] ? stack_trace_save+0x8e/0xc0 [ 1563.843241][T29743] ? __pfx_stack_trace_save+0x10/0x10 [ 1563.843268][T29743] ? do_raw_spin_lock+0x12c/0x2b0 [ 1563.843307][T29743] ? stack_depot_save_flags+0x29/0x9c0 [ 1563.843343][T29743] ? find_held_lock+0x2b/0x80 [ 1563.843373][T29743] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1563.843397][T29743] ? __kasan_kmalloc+0xaa/0xb0 [ 1563.843424][T29743] ? copy_splice_read+0x1a8/0xc20 [ 1563.843447][T29743] ? splice_direct_to_actor+0x2a1/0xa30 [ 1563.843472][T29743] ? do_splice_direct+0x174/0x240 [ 1563.843495][T29743] ? do_sendfile+0xb06/0xe50 [ 1563.843518][T29743] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1563.843555][T29743] ? do_syscall_64+0xcd/0xfa0 [ 1563.843582][T29743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.843634][T29743] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1563.843675][T29743] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1563.843711][T29743] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1563.843736][T29743] ? copy_splice_read+0x1a8/0xc20 [ 1563.843768][T29743] copy_splice_read+0x1e1/0xc20 [ 1563.843794][T29743] ? __pfx_pipe_to_null+0x10/0x10 [ 1563.843828][T29743] ? __pfx_copy_splice_read+0x10/0x10 [ 1563.843852][T29743] ? pipe_unlock+0x4a/0x70 [ 1563.843889][T29743] ? __pfx_splice_from_pipe+0x10/0x10 [ 1563.843929][T29743] ? __pfx_copy_splice_read+0x10/0x10 [ 1563.843951][T29743] do_splice_read+0x285/0x370 [ 1563.843979][T29743] splice_direct_to_actor+0x2a1/0xa30 [ 1563.844007][T29743] ? __pfx_direct_splice_actor+0x10/0x10 [ 1563.844038][T29743] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1563.844076][T29743] do_splice_direct+0x174/0x240 [ 1563.844099][T29743] ? __pfx_do_splice_direct+0x10/0x10 [ 1563.844123][T29743] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1563.844161][T29743] ? bpf_lsm_file_permission+0x9/0x10 [ 1563.844190][T29743] ? security_file_permission+0x71/0x210 [ 1563.844221][T29743] ? rw_verify_area+0xcf/0x6c0 [ 1563.844251][T29743] do_sendfile+0xb06/0xe50 [ 1563.844284][T29743] ? __pfx_do_sendfile+0x10/0x10 [ 1563.844310][T29743] ? __sys_sendmsg+0x18c/0x220 [ 1563.844339][T29743] ? __x64_sys_futex+0x1e0/0x4c0 [ 1563.844373][T29743] ? __x64_sys_futex+0x1e9/0x4c0 [ 1563.844409][T29743] __x64_sys_sendfile64+0x1d8/0x220 [ 1563.844443][T29743] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1563.844487][T29743] do_syscall_64+0xcd/0xfa0 [ 1563.844520][T29743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.844546][T29743] RIP: 0033:0x7f0a8b58f6c9 [ 1563.844568][T29743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.844592][T29743] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1563.844619][T29743] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1563.844637][T29743] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1563.844653][T29743] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1563.844669][T29743] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1563.844686][T29743] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1563.844723][T29743] [ 1564.387695][T29748] FAULT_INJECTION: forcing a failure. [ 1564.387695][T29748] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.421946][T29748] CPU: 0 UID: 0 PID: 29748 Comm: syz.6.4886 Not tainted syzkaller #0 PREEMPT(full) [ 1564.421981][T29748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1564.421998][T29748] Call Trace: [ 1564.422006][T29748] [ 1564.422022][T29748] dump_stack_lvl+0x16c/0x1f0 [ 1564.422059][T29748] should_fail_ex+0x512/0x640 [ 1564.422095][T29748] ? __kmalloc_noprof+0xca/0x880 [ 1564.422136][T29748] should_failslab+0xc2/0x120 [ 1564.422167][T29748] __kmalloc_noprof+0xdd/0x880 [ 1564.422201][T29748] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1564.422225][T29748] ? copy_splice_read+0x1a8/0xc20 [ 1564.422255][T29748] ? copy_splice_read+0x1a8/0xc20 [ 1564.422279][T29748] copy_splice_read+0x1a8/0xc20 [ 1564.422303][T29748] ? __pfx_pipe_to_null+0x10/0x10 [ 1564.422329][T29748] ? __pfx_copy_splice_read+0x10/0x10 [ 1564.422355][T29748] ? pipe_unlock+0x4a/0x70 [ 1564.422386][T29748] ? __pfx_splice_from_pipe+0x10/0x10 [ 1564.422419][T29748] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1564.422448][T29748] ? __pfx_copy_splice_read+0x10/0x10 [ 1564.422471][T29748] do_splice_read+0x285/0x370 [ 1564.422498][T29748] splice_direct_to_actor+0x2a1/0xa30 [ 1564.422526][T29748] ? __pfx_direct_splice_actor+0x10/0x10 [ 1564.422557][T29748] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1564.422605][T29748] do_splice_direct+0x174/0x240 [ 1564.422634][T29748] ? __pfx_do_splice_direct+0x10/0x10 [ 1564.422662][T29748] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1564.422706][T29748] ? bpf_lsm_file_permission+0x9/0x10 [ 1564.422733][T29748] ? security_file_permission+0x71/0x210 [ 1564.422761][T29748] ? rw_verify_area+0xcf/0x6c0 [ 1564.422788][T29748] do_sendfile+0xb06/0xe50 [ 1564.422820][T29748] ? __pfx_do_sendfile+0x10/0x10 [ 1564.422844][T29748] ? __sys_sendmsg+0x18c/0x220 [ 1564.422874][T29748] ? __x64_sys_futex+0x1e0/0x4c0 [ 1564.422902][T29748] ? __x64_sys_futex+0x1e9/0x4c0 [ 1564.422942][T29748] __x64_sys_sendfile64+0x1d8/0x220 [ 1564.422976][T29748] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1564.423018][T29748] do_syscall_64+0xcd/0xfa0 [ 1564.423048][T29748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.423083][T29748] RIP: 0033:0x7f4305f8f6c9 [ 1564.423103][T29748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.423126][T29748] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1564.423153][T29748] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1564.423168][T29748] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1564.423183][T29748] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1564.423199][T29748] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1564.423214][T29748] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1564.423248][T29748] [ 1565.195456][T29763] FAULT_INJECTION: forcing a failure. [ 1565.195456][T29763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1565.679533][T29763] CPU: 1 UID: 0 PID: 29763 Comm: syz.6.4889 Not tainted syzkaller #0 PREEMPT(full) [ 1565.679571][T29763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1565.679586][T29763] Call Trace: [ 1565.679594][T29763] [ 1565.679605][T29763] dump_stack_lvl+0x16c/0x1f0 [ 1565.679642][T29763] should_fail_ex+0x512/0x640 [ 1565.679687][T29763] should_fail_alloc_page+0xe7/0x130 [ 1565.679723][T29763] prepare_alloc_pages+0x3c2/0x610 [ 1565.679765][T29763] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1565.679798][T29763] ? stack_trace_save+0x8e/0xc0 [ 1565.679827][T29763] ? __pfx_stack_trace_save+0x10/0x10 [ 1565.679854][T29763] ? do_raw_spin_lock+0x12c/0x2b0 [ 1565.679892][T29763] ? stack_depot_save_flags+0x29/0x9c0 [ 1565.679927][T29763] ? find_held_lock+0x2b/0x80 [ 1565.679956][T29763] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1565.679979][T29763] ? __kasan_kmalloc+0xaa/0xb0 [ 1565.680003][T29763] ? copy_splice_read+0x1a8/0xc20 [ 1565.680024][T29763] ? splice_direct_to_actor+0x2a1/0xa30 [ 1565.680046][T29763] ? do_splice_direct+0x174/0x240 [ 1565.680069][T29763] ? do_sendfile+0xb06/0xe50 [ 1565.680092][T29763] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1565.680123][T29763] ? do_syscall_64+0xcd/0xfa0 [ 1565.680152][T29763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.680204][T29763] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1565.680241][T29763] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1565.680278][T29763] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1565.680304][T29763] ? copy_splice_read+0x1a8/0xc20 [ 1565.680333][T29763] copy_splice_read+0x1e1/0xc20 [ 1565.680359][T29763] ? __pfx_pipe_to_null+0x10/0x10 [ 1565.680393][T29763] ? __pfx_copy_splice_read+0x10/0x10 [ 1565.680416][T29763] ? pipe_unlock+0x4a/0x70 [ 1565.680446][T29763] ? __pfx_splice_from_pipe+0x10/0x10 [ 1565.680491][T29763] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1565.680524][T29763] ? __pfx_copy_splice_read+0x10/0x10 [ 1565.680548][T29763] do_splice_read+0x285/0x370 [ 1565.680576][T29763] splice_direct_to_actor+0x2a1/0xa30 [ 1565.680605][T29763] ? __pfx_direct_splice_actor+0x10/0x10 [ 1565.680637][T29763] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1565.680675][T29763] do_splice_direct+0x174/0x240 [ 1565.680702][T29763] ? __pfx_do_splice_direct+0x10/0x10 [ 1565.680728][T29763] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1565.680767][T29763] ? bpf_lsm_file_permission+0x9/0x10 [ 1565.680794][T29763] ? security_file_permission+0x71/0x210 [ 1565.680837][T29763] ? rw_verify_area+0xcf/0x6c0 [ 1565.680877][T29763] do_sendfile+0xb06/0xe50 [ 1565.680908][T29763] ? __pfx_do_sendfile+0x10/0x10 [ 1565.680931][T29763] ? __sys_sendmsg+0x18c/0x220 [ 1565.680957][T29763] ? __x64_sys_futex+0x1e0/0x4c0 [ 1565.680988][T29763] ? __x64_sys_futex+0x1e9/0x4c0 [ 1565.681025][T29763] __x64_sys_sendfile64+0x1d8/0x220 [ 1565.681058][T29763] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1565.681101][T29763] do_syscall_64+0xcd/0xfa0 [ 1565.681134][T29763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.681161][T29763] RIP: 0033:0x7f4305f8f6c9 [ 1565.681183][T29763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.681208][T29763] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1565.681233][T29763] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1565.681252][T29763] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1565.681268][T29763] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1565.681284][T29763] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1565.681301][T29763] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1565.681339][T29763] [ 1566.036998][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.363223][T29779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4893'. [ 1566.868671][T29784] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4894'. [ 1567.024240][T29794] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1567.555564][T29800] FAULT_INJECTION: forcing a failure. [ 1567.555564][T29800] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.592634][T29800] CPU: 1 UID: 0 PID: 29800 Comm: syz.5.4897 Not tainted syzkaller #0 PREEMPT(full) [ 1567.592672][T29800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1567.592688][T29800] Call Trace: [ 1567.592698][T29800] [ 1567.592709][T29800] dump_stack_lvl+0x16c/0x1f0 [ 1567.592745][T29800] should_fail_ex+0x512/0x640 [ 1567.592784][T29800] ? __kmalloc_noprof+0xca/0x880 [ 1567.592828][T29800] should_failslab+0xc2/0x120 [ 1567.592862][T29800] __kmalloc_noprof+0xdd/0x880 [ 1567.592900][T29800] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1567.592926][T29800] ? copy_splice_read+0x1a8/0xc20 [ 1567.592957][T29800] ? copy_splice_read+0x1a8/0xc20 [ 1567.592980][T29800] copy_splice_read+0x1a8/0xc20 [ 1567.593006][T29800] ? __pfx_pipe_to_null+0x10/0x10 [ 1567.593041][T29800] ? __pfx_copy_splice_read+0x10/0x10 [ 1567.593064][T29800] ? pipe_unlock+0x4a/0x70 [ 1567.593093][T29800] ? __pfx_splice_from_pipe+0x10/0x10 [ 1567.593128][T29800] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1567.593158][T29800] ? __pfx_copy_splice_read+0x10/0x10 [ 1567.593182][T29800] do_splice_read+0x285/0x370 [ 1567.593258][T29800] splice_direct_to_actor+0x2a1/0xa30 [ 1567.593288][T29800] ? __pfx_direct_splice_actor+0x10/0x10 [ 1567.593335][T29800] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1567.593374][T29800] do_splice_direct+0x174/0x240 [ 1567.593403][T29800] ? __pfx_do_splice_direct+0x10/0x10 [ 1567.593432][T29800] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1567.593537][T29800] ? bpf_lsm_file_permission+0x9/0x10 [ 1567.593569][T29800] ? security_file_permission+0x71/0x210 [ 1567.593599][T29800] ? rw_verify_area+0xcf/0x6c0 [ 1567.593624][T29800] do_sendfile+0xb06/0xe50 [ 1567.593657][T29800] ? __pfx_do_sendfile+0x10/0x10 [ 1567.593682][T29800] ? __sys_sendmsg+0x18c/0x220 [ 1567.593710][T29800] ? __x64_sys_futex+0x1e0/0x4c0 [ 1567.593745][T29800] ? __x64_sys_futex+0x1e9/0x4c0 [ 1567.593793][T29800] __x64_sys_sendfile64+0x1d8/0x220 [ 1567.593829][T29800] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1567.593875][T29800] do_syscall_64+0xcd/0xfa0 [ 1567.593909][T29800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1567.593935][T29800] RIP: 0033:0x7f0a8b58f6c9 [ 1567.593959][T29800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1567.593984][T29800] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1567.594011][T29800] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1567.594030][T29800] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1567.594047][T29800] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1567.594062][T29800] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1567.594079][T29800] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1567.594116][T29800] [ 1567.874494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1568.238301][T29812] FAULT_INJECTION: forcing a failure. [ 1568.238301][T29812] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.251245][T29812] CPU: 1 UID: 0 PID: 29812 Comm: syz.6.4900 Not tainted syzkaller #0 PREEMPT(full) [ 1568.251284][T29812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1568.251301][T29812] Call Trace: [ 1568.251310][T29812] [ 1568.251320][T29812] dump_stack_lvl+0x16c/0x1f0 [ 1568.251356][T29812] should_fail_ex+0x512/0x640 [ 1568.251391][T29812] ? __kmalloc_noprof+0xca/0x880 [ 1568.251439][T29812] should_failslab+0xc2/0x120 [ 1568.251476][T29812] __kmalloc_noprof+0xdd/0x880 [ 1568.251516][T29812] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1568.251542][T29812] ? copy_splice_read+0x1a8/0xc20 [ 1568.251572][T29812] ? copy_splice_read+0x1a8/0xc20 [ 1568.251596][T29812] copy_splice_read+0x1a8/0xc20 [ 1568.251622][T29812] ? __pfx_pipe_to_null+0x10/0x10 [ 1568.251658][T29812] ? __pfx_copy_splice_read+0x10/0x10 [ 1568.251680][T29812] ? pipe_unlock+0x4a/0x70 [ 1568.251710][T29812] ? __pfx_splice_from_pipe+0x10/0x10 [ 1568.251744][T29812] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1568.251773][T29812] ? __pfx_copy_splice_read+0x10/0x10 [ 1568.251798][T29812] do_splice_read+0x285/0x370 [ 1568.251828][T29812] splice_direct_to_actor+0x2a1/0xa30 [ 1568.251857][T29812] ? __pfx_direct_splice_actor+0x10/0x10 [ 1568.251891][T29812] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1568.251928][T29812] do_splice_direct+0x174/0x240 [ 1568.251955][T29812] ? __pfx_do_splice_direct+0x10/0x10 [ 1568.251982][T29812] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1568.252023][T29812] ? bpf_lsm_file_permission+0x9/0x10 [ 1568.252052][T29812] ? security_file_permission+0x71/0x210 [ 1568.252081][T29812] ? rw_verify_area+0xcf/0x6c0 [ 1568.252110][T29812] do_sendfile+0xb06/0xe50 [ 1568.252144][T29812] ? __pfx_do_sendfile+0x10/0x10 [ 1568.252169][T29812] ? __sys_sendmsg+0x18c/0x220 [ 1568.252199][T29812] ? __x64_sys_futex+0x1e0/0x4c0 [ 1568.252231][T29812] ? __x64_sys_futex+0x1e9/0x4c0 [ 1568.252271][T29812] __x64_sys_sendfile64+0x1d8/0x220 [ 1568.252306][T29812] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1568.252347][T29812] do_syscall_64+0xcd/0xfa0 [ 1568.252379][T29812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.252403][T29812] RIP: 0033:0x7f4305f8f6c9 [ 1568.252425][T29812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.252456][T29812] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1568.252481][T29812] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1568.252499][T29812] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1568.252515][T29812] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1568.252530][T29812] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1568.252545][T29812] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1568.252578][T29812] [ 1568.940453][T29821] FAULT_INJECTION: forcing a failure. [ 1568.940453][T29821] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.976175][T29821] CPU: 0 UID: 0 PID: 29821 Comm: syz.6.4902 Not tainted syzkaller #0 PREEMPT(full) [ 1568.976212][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1568.976226][T29821] Call Trace: [ 1568.976235][T29821] [ 1568.976244][T29821] dump_stack_lvl+0x16c/0x1f0 [ 1568.976277][T29821] should_fail_ex+0x512/0x640 [ 1568.976320][T29821] ? __kmalloc_noprof+0xca/0x880 [ 1568.976359][T29821] should_failslab+0xc2/0x120 [ 1568.976389][T29821] __kmalloc_noprof+0xdd/0x880 [ 1568.976423][T29821] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1568.976449][T29821] ? copy_splice_read+0x1a8/0xc20 [ 1568.976473][T29821] ? copy_splice_read+0x1a8/0xc20 [ 1568.976495][T29821] copy_splice_read+0x1a8/0xc20 [ 1568.976518][T29821] ? __pfx_pipe_to_null+0x10/0x10 [ 1568.976552][T29821] ? __pfx_copy_splice_read+0x10/0x10 [ 1568.976573][T29821] ? pipe_unlock+0x4a/0x70 [ 1568.976602][T29821] ? __pfx_splice_from_pipe+0x10/0x10 [ 1568.976634][T29821] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1568.976664][T29821] ? __pfx_copy_splice_read+0x10/0x10 [ 1568.976688][T29821] do_splice_read+0x285/0x370 [ 1568.976717][T29821] splice_direct_to_actor+0x2a1/0xa30 [ 1568.976745][T29821] ? __pfx_direct_splice_actor+0x10/0x10 [ 1568.976778][T29821] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1568.976816][T29821] do_splice_direct+0x174/0x240 [ 1568.976843][T29821] ? __pfx_do_splice_direct+0x10/0x10 [ 1568.976871][T29821] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1568.976912][T29821] ? bpf_lsm_file_permission+0x9/0x10 [ 1568.976941][T29821] ? security_file_permission+0x71/0x210 [ 1568.976971][T29821] ? rw_verify_area+0xcf/0x6c0 [ 1568.977000][T29821] do_sendfile+0xb06/0xe50 [ 1568.977034][T29821] ? __pfx_do_sendfile+0x10/0x10 [ 1568.977060][T29821] ? __sys_sendmsg+0x18c/0x220 [ 1568.977089][T29821] ? __x64_sys_futex+0x1e0/0x4c0 [ 1568.977128][T29821] ? __x64_sys_futex+0x1e9/0x4c0 [ 1568.977168][T29821] __x64_sys_sendfile64+0x1d8/0x220 [ 1568.977203][T29821] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1568.977246][T29821] do_syscall_64+0xcd/0xfa0 [ 1568.977279][T29821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.977305][T29821] RIP: 0033:0x7f4305f8f6c9 [ 1568.977335][T29821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1568.977363][T29821] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1568.977390][T29821] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1568.977409][T29821] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1568.977426][T29821] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1568.977442][T29821] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1568.977459][T29821] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1568.977496][T29821] [ 1569.660735][T29831] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4904'. [ 1569.737963][T29833] mkiss: ax0: crc mode is auto. [ 1569.754320][T29842] FAULT_INJECTION: forcing a failure. [ 1569.754320][T29842] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.865545][T29842] CPU: 1 UID: 0 PID: 29842 Comm: syz.5.4905 Not tainted syzkaller #0 PREEMPT(full) [ 1569.865583][T29842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1569.865599][T29842] Call Trace: [ 1569.865609][T29842] [ 1569.865619][T29842] dump_stack_lvl+0x16c/0x1f0 [ 1569.865656][T29842] should_fail_ex+0x512/0x640 [ 1569.865694][T29842] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1569.865726][T29842] should_failslab+0xc2/0x120 [ 1569.865759][T29842] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1569.865784][T29842] ? kasan_save_stack+0x42/0x60 [ 1569.865812][T29842] ? kasan_save_stack+0x33/0x60 [ 1569.865839][T29842] ? kasan_save_track+0x14/0x30 [ 1569.865866][T29842] ? __d_alloc+0x32/0xae0 [ 1569.865900][T29842] ? __d_alloc+0x32/0xae0 [ 1569.865925][T29842] ? do_filp_open+0x20b/0x470 [ 1569.865950][T29842] __d_alloc+0x32/0xae0 [ 1569.865976][T29842] ? put_dec_trunc8+0x28b/0x370 [ 1569.866013][T29842] d_alloc_parallel+0x111/0x1510 [ 1569.866062][T29842] ? __pfx_number+0x10/0x10 [ 1569.866100][T29842] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1569.866141][T29842] ? lockdep_init_map_type+0x5c/0x280 [ 1569.866178][T29842] ? lockdep_init_map_type+0x5c/0x280 [ 1569.866217][T29842] __lookup_slow+0x193/0x460 [ 1569.866251][T29842] ? __pfx___lookup_slow+0x10/0x10 [ 1569.866288][T29842] ? __mod_node_page_state+0x50/0x1d0 [ 1569.866328][T29842] ? __mod_node_page_state+0x50/0x1d0 [ 1569.866358][T29842] ? d_lookup+0xe7/0x190 [ 1569.866399][T29842] lookup_noperm+0xe1/0x110 [ 1569.866436][T29842] simple_start_creating+0xd1/0x1b0 [ 1569.866478][T29842] debugfs_start_creating.part.0+0x82/0x190 [ 1569.866507][T29842] debugfs_create_dir+0x6c/0x5f0 [ 1569.866536][T29842] drm_debugfs_clients_add+0x6f/0x200 [ 1569.866571][T29842] drm_file_alloc+0x5c6/0xb40 [ 1569.866610][T29842] drm_open_helper+0x204/0x550 [ 1569.866649][T29842] drm_open+0x1a0/0x3e0 [ 1569.866683][T29842] ? __pfx_drm_open+0x10/0x10 [ 1569.866716][T29842] drm_stub_open+0x20f/0x380 [ 1569.866751][T29842] ? __pfx_drm_stub_open+0x10/0x10 [ 1569.866785][T29842] chrdev_open+0x234/0x6a0 [ 1569.866814][T29842] ? __pfx_apparmor_file_open+0x10/0x10 [ 1569.866873][T29842] ? __pfx_chrdev_open+0x10/0x10 [ 1569.866908][T29842] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1569.866946][T29842] do_dentry_open+0x982/0x1530 [ 1569.866978][T29842] ? __pfx_chrdev_open+0x10/0x10 [ 1569.867015][T29842] vfs_open+0x82/0x3f0 [ 1569.867060][T29842] path_openat+0x1de4/0x2cb0 [ 1569.867102][T29842] ? __pfx_path_openat+0x10/0x10 [ 1569.867135][T29842] ? __lock_acquire+0xb8a/0x1c90 [ 1569.867172][T29842] do_filp_open+0x20b/0x470 [ 1569.867201][T29842] ? __pfx_do_filp_open+0x10/0x10 [ 1569.867257][T29842] ? alloc_fd+0x471/0x7d0 [ 1569.867293][T29842] do_sys_openat2+0x11b/0x1d0 [ 1569.867323][T29842] ? __pfx_do_sys_openat2+0x10/0x10 [ 1569.867373][T29842] __x64_sys_openat+0x174/0x210 [ 1569.867408][T29842] ? __pfx___x64_sys_openat+0x10/0x10 [ 1569.867458][T29842] do_syscall_64+0xcd/0xfa0 [ 1569.867491][T29842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.867517][T29842] RIP: 0033:0x7f0a8b58f6c9 [ 1569.867546][T29842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1569.867571][T29842] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1569.867597][T29842] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1569.867616][T29842] RDX: 0000000000000440 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1569.867632][T29842] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1569.867648][T29842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.867663][T29842] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1569.867701][T29842] [ 1570.258065][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4909'. [ 1571.224956][T29860] FAULT_INJECTION: forcing a failure. [ 1571.224956][T29860] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1571.282420][T29860] CPU: 0 UID: 0 PID: 29860 Comm: syz.5.4911 Not tainted syzkaller #0 PREEMPT(full) [ 1571.282460][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1571.282477][T29860] Call Trace: [ 1571.282486][T29860] [ 1571.282498][T29860] dump_stack_lvl+0x16c/0x1f0 [ 1571.282536][T29860] should_fail_ex+0x512/0x640 [ 1571.282579][T29860] should_fail_alloc_page+0xe7/0x130 [ 1571.282615][T29860] prepare_alloc_pages+0x3c2/0x610 [ 1571.282655][T29860] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1571.282686][T29860] ? stack_trace_save+0x8e/0xc0 [ 1571.282716][T29860] ? __pfx_stack_trace_save+0x10/0x10 [ 1571.282744][T29860] ? do_raw_spin_lock+0x12c/0x2b0 [ 1571.282781][T29860] ? stack_depot_save_flags+0x29/0x9c0 [ 1571.282817][T29860] ? find_held_lock+0x2b/0x80 [ 1571.282849][T29860] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1571.282875][T29860] ? __kasan_kmalloc+0xaa/0xb0 [ 1571.282902][T29860] ? copy_splice_read+0x1a8/0xc20 [ 1571.282926][T29860] ? splice_direct_to_actor+0x2a1/0xa30 [ 1571.282950][T29860] ? do_splice_direct+0x174/0x240 [ 1571.282974][T29860] ? do_sendfile+0xb06/0xe50 [ 1571.282998][T29860] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1571.283029][T29860] ? do_syscall_64+0xcd/0xfa0 [ 1571.283057][T29860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.283111][T29860] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1571.283172][T29860] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1571.283211][T29860] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1571.283238][T29860] ? copy_splice_read+0x1a8/0xc20 [ 1571.283271][T29860] copy_splice_read+0x1e1/0xc20 [ 1571.283298][T29860] ? __pfx_pipe_to_null+0x10/0x10 [ 1571.283332][T29860] ? __pfx_copy_splice_read+0x10/0x10 [ 1571.283359][T29860] ? pipe_unlock+0x4a/0x70 [ 1571.283389][T29860] ? __pfx_splice_from_pipe+0x10/0x10 [ 1571.283426][T29860] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1571.283455][T29860] ? __pfx_copy_splice_read+0x10/0x10 [ 1571.283480][T29860] do_splice_read+0x285/0x370 [ 1571.283510][T29860] splice_direct_to_actor+0x2a1/0xa30 [ 1571.283539][T29860] ? __pfx_direct_splice_actor+0x10/0x10 [ 1571.283571][T29860] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1571.283607][T29860] do_splice_direct+0x174/0x240 [ 1571.283634][T29860] ? __pfx_do_splice_direct+0x10/0x10 [ 1571.283660][T29860] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1571.283702][T29860] ? bpf_lsm_file_permission+0x9/0x10 [ 1571.283731][T29860] ? security_file_permission+0x71/0x210 [ 1571.283760][T29860] ? rw_verify_area+0xcf/0x6c0 [ 1571.283789][T29860] do_sendfile+0xb06/0xe50 [ 1571.283822][T29860] ? __pfx_do_sendfile+0x10/0x10 [ 1571.283847][T29860] ? __sys_sendmsg+0x18c/0x220 [ 1571.283877][T29860] ? __x64_sys_futex+0x1e0/0x4c0 [ 1571.283906][T29860] ? __x64_sys_futex+0x1e9/0x4c0 [ 1571.283938][T29860] __x64_sys_sendfile64+0x1d8/0x220 [ 1571.283970][T29860] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1571.284011][T29860] do_syscall_64+0xcd/0xfa0 [ 1571.284044][T29860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.284071][T29860] RIP: 0033:0x7f0a8b58f6c9 [ 1571.284093][T29860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.284120][T29860] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1571.284146][T29860] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1571.284173][T29860] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1571.284189][T29860] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1571.284206][T29860] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1571.284224][T29860] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1571.284262][T29860] [ 1572.019332][T29876] FAULT_INJECTION: forcing a failure. [ 1572.019332][T29876] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.037134][T29876] CPU: 1 UID: 0 PID: 29876 Comm: syz.5.4915 Not tainted syzkaller #0 PREEMPT(full) [ 1572.037158][T29876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1572.037168][T29876] Call Trace: [ 1572.037174][T29876] [ 1572.037181][T29876] dump_stack_lvl+0x16c/0x1f0 [ 1572.037205][T29876] should_fail_ex+0x512/0x640 [ 1572.037228][T29876] ? __kmalloc_noprof+0xca/0x880 [ 1572.037252][T29876] should_failslab+0xc2/0x120 [ 1572.037271][T29876] __kmalloc_noprof+0xdd/0x880 [ 1572.037293][T29876] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1572.037308][T29876] ? copy_splice_read+0x1a8/0xc20 [ 1572.037323][T29876] ? copy_splice_read+0x1a8/0xc20 [ 1572.037336][T29876] copy_splice_read+0x1a8/0xc20 [ 1572.037350][T29876] ? __pfx_pipe_to_null+0x10/0x10 [ 1572.037369][T29876] ? __pfx_copy_splice_read+0x10/0x10 [ 1572.037381][T29876] ? pipe_unlock+0x4a/0x70 [ 1572.037398][T29876] ? __pfx_splice_from_pipe+0x10/0x10 [ 1572.037417][T29876] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1572.037433][T29876] ? __pfx_copy_splice_read+0x10/0x10 [ 1572.037446][T29876] do_splice_read+0x285/0x370 [ 1572.037462][T29876] splice_direct_to_actor+0x2a1/0xa30 [ 1572.037477][T29876] ? __pfx_direct_splice_actor+0x10/0x10 [ 1572.037495][T29876] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1572.037515][T29876] do_splice_direct+0x174/0x240 [ 1572.037529][T29876] ? __pfx_do_splice_direct+0x10/0x10 [ 1572.037544][T29876] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1572.037567][T29876] ? bpf_lsm_file_permission+0x9/0x10 [ 1572.037584][T29876] ? security_file_permission+0x71/0x210 [ 1572.037600][T29876] ? rw_verify_area+0xcf/0x6c0 [ 1572.037615][T29876] do_sendfile+0xb06/0xe50 [ 1572.037633][T29876] ? __pfx_do_sendfile+0x10/0x10 [ 1572.037648][T29876] ? __sys_sendmsg+0x18c/0x220 [ 1572.037664][T29876] ? __x64_sys_futex+0x1e0/0x4c0 [ 1572.037682][T29876] ? __x64_sys_futex+0x1e9/0x4c0 [ 1572.037703][T29876] __x64_sys_sendfile64+0x1d8/0x220 [ 1572.037723][T29876] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1572.037748][T29876] do_syscall_64+0xcd/0xfa0 [ 1572.037768][T29876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.037783][T29876] RIP: 0033:0x7f0a8b58f6c9 [ 1572.037795][T29876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.037810][T29876] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1572.037824][T29876] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1572.037834][T29876] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1572.037843][T29876] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1572.037851][T29876] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1572.037860][T29876] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1572.037879][T29876] [ 1572.412020][T29880] FAULT_INJECTION: forcing a failure. [ 1572.412020][T29880] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.424748][T29880] CPU: 1 UID: 0 PID: 29880 Comm: syz.6.4916 Not tainted syzkaller #0 PREEMPT(full) [ 1572.424780][T29880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1572.424795][T29880] Call Trace: [ 1572.424804][T29880] [ 1572.424813][T29880] dump_stack_lvl+0x16c/0x1f0 [ 1572.424859][T29880] should_fail_ex+0x512/0x640 [ 1572.424894][T29880] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1572.424923][T29880] should_failslab+0xc2/0x120 [ 1572.424955][T29880] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1572.424981][T29880] ? __x64_sys_futex+0x1e0/0x4c0 [ 1572.425013][T29880] ? getname_flags.part.0+0x4c/0x550 [ 1572.425052][T29880] ? getname_flags.part.0+0x4c/0x550 [ 1572.425082][T29880] getname_flags.part.0+0x4c/0x550 [ 1572.425117][T29880] getname_flags+0x93/0xf0 [ 1572.425141][T29880] __x64_sys_mknod+0x74/0xb0 [ 1572.425168][T29880] do_syscall_64+0xcd/0xfa0 [ 1572.425199][T29880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.425222][T29880] RIP: 0033:0x7f4305f8f6c9 [ 1572.425243][T29880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.425267][T29880] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1572.425293][T29880] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1572.425310][T29880] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1572.425326][T29880] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1572.425340][T29880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1572.425354][T29880] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1572.425386][T29880] [ 1572.868334][T29891] hub 1-0:1.0: USB hub found [ 1572.883821][T29891] hub 1-0:1.0: 1 port detected [ 1572.891734][T29891] FAULT_INJECTION: forcing a failure. [ 1572.891734][T29891] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.908262][T29891] CPU: 0 UID: 0 PID: 29891 Comm: syz.5.4918 Not tainted syzkaller #0 PREEMPT(full) [ 1572.908295][T29891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1572.908311][T29891] Call Trace: [ 1572.908319][T29891] [ 1572.908330][T29891] dump_stack_lvl+0x16c/0x1f0 [ 1572.908365][T29891] should_fail_ex+0x512/0x640 [ 1572.908401][T29891] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1572.908432][T29891] should_failslab+0xc2/0x120 [ 1572.908468][T29891] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1572.908494][T29891] ? __kernfs_new_node+0xd2/0x8e0 [ 1572.908532][T29891] ? __kernfs_new_node+0xd2/0x8e0 [ 1572.908561][T29891] __kernfs_new_node+0xd2/0x8e0 [ 1572.908597][T29891] ? __pfx___kernfs_new_node+0x10/0x10 [ 1572.908635][T29891] ? find_held_lock+0x2b/0x80 [ 1572.908662][T29891] ? kernfs_root+0xee/0x2a0 [ 1572.908698][T29891] kernfs_new_node+0x13c/0x1e0 [ 1572.908739][T29891] __kernfs_create_file+0x53/0x350 [ 1572.908770][T29891] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1572.908809][T29891] sysfs_merge_group+0x1aa/0x340 [ 1572.908842][T29891] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1572.908879][T29891] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1572.908917][T29891] ? bus_to_subsys+0x131/0x160 [ 1572.908958][T29891] dpm_sysfs_add+0x237/0x280 [ 1572.908993][T29891] device_add+0x9a6/0x1aa0 [ 1572.909017][T29891] ? __pfx_device_add+0x10/0x10 [ 1572.909038][T29891] ? lockdep_init_map_type+0x5c/0x280 [ 1572.909060][T29891] ? __init_waitqueue_head+0xca/0x150 [ 1572.909080][T29891] usb_hub_create_port_device+0x3a1/0xde0 [ 1572.909101][T29891] hub_probe+0x203b/0x3480 [ 1572.909121][T29891] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1572.909143][T29891] ? __pfx_hub_probe+0x10/0x10 [ 1572.909155][T29891] ? mark_held_locks+0x49/0x80 [ 1572.909173][T29891] ? __smp_text_poke_batch_add+0x6e0/0x7a0 [ 1572.909192][T29891] ? mark_held_locks+0x49/0x80 [ 1572.909210][T29891] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1572.909230][T29891] usb_probe_interface+0x303/0xa40 [ 1572.909249][T29891] ? __pfx_usb_probe_interface+0x10/0x10 [ 1572.909267][T29891] really_probe+0x241/0xa90 [ 1572.909288][T29891] __driver_probe_device+0x1de/0x440 [ 1572.909309][T29891] driver_probe_device+0x4c/0x1b0 [ 1572.909329][T29891] __device_attach_driver+0x1df/0x310 [ 1572.909350][T29891] ? __pfx___device_attach_driver+0x10/0x10 [ 1572.909368][T29891] bus_for_each_drv+0x159/0x1e0 [ 1572.909385][T29891] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1572.909401][T29891] ? lockdep_hardirqs_on+0x7c/0x110 [ 1572.909418][T29891] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1572.909436][T29891] __device_attach+0x1e4/0x4b0 [ 1572.909455][T29891] ? __pfx___device_attach+0x10/0x10 [ 1572.909475][T29891] ? do_raw_spin_unlock+0x172/0x230 [ 1572.909492][T29891] bus_probe_device+0x17f/0x1c0 [ 1572.909510][T29891] device_add+0x1148/0x1aa0 [ 1572.909534][T29891] ? __pfx_device_add+0x10/0x10 [ 1572.909555][T29891] ? mark_held_locks+0x49/0x80 [ 1572.909579][T29891] usb_set_configuration+0x1187/0x1e20 [ 1572.909606][T29891] bConfigurationValue_store+0x100/0x180 [ 1572.909622][T29891] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 1572.909637][T29891] ? find_held_lock+0x2b/0x80 [ 1572.909652][T29891] ? sysfs_file_kobj+0xe4/0x290 [ 1572.909669][T29891] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 1572.909685][T29891] dev_attr_store+0x58/0x80 [ 1572.909707][T29891] ? __pfx_dev_attr_store+0x10/0x10 [ 1572.909727][T29891] sysfs_kf_write+0xf2/0x150 [ 1572.909744][T29891] kernfs_fop_write_iter+0x3af/0x570 [ 1572.909757][T29891] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1572.909775][T29891] iter_file_splice_write+0xa24/0x12e0 [ 1572.909803][T29891] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1572.909822][T29891] ? __pfx_copy_splice_read+0x10/0x10 [ 1572.909846][T29891] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1572.909863][T29891] direct_splice_actor+0x192/0x6c0 [ 1572.909880][T29891] splice_direct_to_actor+0x345/0xa30 [ 1572.909896][T29891] ? __pfx_direct_splice_actor+0x10/0x10 [ 1572.909914][T29891] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1572.909948][T29891] do_splice_direct+0x174/0x240 [ 1572.909965][T29891] ? __pfx_do_splice_direct+0x10/0x10 [ 1572.909981][T29891] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1572.910008][T29891] ? rw_verify_area+0xcf/0x6c0 [ 1572.910025][T29891] do_sendfile+0xb06/0xe50 [ 1572.910044][T29891] ? __pfx_do_sendfile+0x10/0x10 [ 1572.910062][T29891] ? __x64_sys_futex+0x1e0/0x4c0 [ 1572.910081][T29891] ? __x64_sys_futex+0x1e9/0x4c0 [ 1572.910102][T29891] __x64_sys_sendfile64+0x1d8/0x220 [ 1572.910121][T29891] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1572.910146][T29891] do_syscall_64+0xcd/0xfa0 [ 1572.910166][T29891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.910181][T29891] RIP: 0033:0x7f0a8b58f6c9 [ 1572.910194][T29891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1572.910209][T29891] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1572.910224][T29891] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1572.910234][T29891] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 1572.910243][T29891] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1572.910252][T29891] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1572.910261][T29891] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1572.910282][T29891] [ 1573.443412][T29891] hub 1-0:1.0: couldn't create port1 device. [ 1573.449704][T29891] hub 1-0:1.0: config failed, out of memory (err -12) [ 1574.564557][T29909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1575.268483][T29921] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4925'. [ 1575.600844][T29927] FAULT_INJECTION: forcing a failure. [ 1575.600844][T29927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1575.636328][T29927] CPU: 1 UID: 0 PID: 29927 Comm: syz.6.4927 Not tainted syzkaller #0 PREEMPT(full) [ 1575.636364][T29927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1575.636380][T29927] Call Trace: [ 1575.636389][T29927] [ 1575.636399][T29927] dump_stack_lvl+0x16c/0x1f0 [ 1575.636438][T29927] should_fail_ex+0x512/0x640 [ 1575.636484][T29927] should_fail_alloc_page+0xe7/0x130 [ 1575.636521][T29927] prepare_alloc_pages+0x3c2/0x610 [ 1575.636563][T29927] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1575.636594][T29927] ? stack_trace_save+0x8e/0xc0 [ 1575.636624][T29927] ? __pfx_stack_trace_save+0x10/0x10 [ 1575.636659][T29927] ? do_raw_spin_lock+0x12c/0x2b0 [ 1575.636700][T29927] ? stack_depot_save_flags+0x29/0x9c0 [ 1575.636738][T29927] ? find_held_lock+0x2b/0x80 [ 1575.636771][T29927] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1575.636798][T29927] ? __kasan_kmalloc+0xaa/0xb0 [ 1575.636827][T29927] ? copy_splice_read+0x1a8/0xc20 [ 1575.636850][T29927] ? splice_direct_to_actor+0x2a1/0xa30 [ 1575.636873][T29927] ? do_splice_direct+0x174/0x240 [ 1575.636896][T29927] ? do_sendfile+0xb06/0xe50 [ 1575.636920][T29927] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1575.636949][T29927] ? do_syscall_64+0xcd/0xfa0 [ 1575.636975][T29927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.637026][T29927] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1575.637066][T29927] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1575.637103][T29927] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1575.637128][T29927] ? copy_splice_read+0x1a8/0xc20 [ 1575.637160][T29927] copy_splice_read+0x1e1/0xc20 [ 1575.637187][T29927] ? __pfx_pipe_to_null+0x10/0x10 [ 1575.637221][T29927] ? __pfx_copy_splice_read+0x10/0x10 [ 1575.637243][T29927] ? pipe_unlock+0x4a/0x70 [ 1575.637272][T29927] ? __pfx_splice_from_pipe+0x10/0x10 [ 1575.637310][T29927] ? __pfx_copy_splice_read+0x10/0x10 [ 1575.637337][T29927] do_splice_read+0x285/0x370 [ 1575.637367][T29927] splice_direct_to_actor+0x2a1/0xa30 [ 1575.637396][T29927] ? __pfx_direct_splice_actor+0x10/0x10 [ 1575.637427][T29927] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1575.637465][T29927] do_splice_direct+0x174/0x240 [ 1575.637491][T29927] ? __pfx_do_splice_direct+0x10/0x10 [ 1575.637519][T29927] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1575.637560][T29927] ? bpf_lsm_file_permission+0x9/0x10 [ 1575.637590][T29927] ? security_file_permission+0x71/0x210 [ 1575.637619][T29927] ? rw_verify_area+0xcf/0x6c0 [ 1575.637646][T29927] do_sendfile+0xb06/0xe50 [ 1575.637688][T29927] ? __pfx_do_sendfile+0x10/0x10 [ 1575.637714][T29927] ? __sys_sendmsg+0x18c/0x220 [ 1575.637744][T29927] ? __x64_sys_futex+0x1e0/0x4c0 [ 1575.637776][T29927] ? __x64_sys_futex+0x1e9/0x4c0 [ 1575.637813][T29927] __x64_sys_sendfile64+0x1d8/0x220 [ 1575.637847][T29927] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1575.637892][T29927] do_syscall_64+0xcd/0xfa0 [ 1575.637924][T29927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.637950][T29927] RIP: 0033:0x7f4305f8f6c9 [ 1575.637973][T29927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1575.637997][T29927] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1575.638023][T29927] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1575.638041][T29927] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1575.638056][T29927] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1575.638070][T29927] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1575.638086][T29927] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1575.638119][T29927] [ 1575.987498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1575.993507][ C1] hrtimer: interrupt took 357219746 ns [ 1576.093527][ C1] vkms_vblank_simulate: vblank timer overrun [ 1576.441721][T29935] netlink: 93 bytes leftover after parsing attributes in process `syz.6.4929'. [ 1576.558877][T29944] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4930'. [ 1576.716806][T29947] netlink: 93 bytes leftover after parsing attributes in process `syz.1.4931'. [ 1577.155801][T29962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1577.189363][T29964] random: crng reseeded on system resumption [ 1578.589693][T29983] FAULT_INJECTION: forcing a failure. [ 1578.589693][T29983] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.632751][T29983] CPU: 1 UID: 0 PID: 29983 Comm: syz.6.4939 Not tainted syzkaller #0 PREEMPT(full) [ 1578.632787][T29983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1578.632803][T29983] Call Trace: [ 1578.632812][T29983] [ 1578.632822][T29983] dump_stack_lvl+0x16c/0x1f0 [ 1578.632856][T29983] should_fail_ex+0x512/0x640 [ 1578.632894][T29983] ? __kmalloc_noprof+0xca/0x880 [ 1578.632937][T29983] should_failslab+0xc2/0x120 [ 1578.632970][T29983] __kmalloc_noprof+0xdd/0x880 [ 1578.633007][T29983] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1578.633032][T29983] ? copy_splice_read+0x1a8/0xc20 [ 1578.633061][T29983] ? copy_splice_read+0x1a8/0xc20 [ 1578.633083][T29983] copy_splice_read+0x1a8/0xc20 [ 1578.633108][T29983] ? __pfx_pipe_to_null+0x10/0x10 [ 1578.633141][T29983] ? splice_from_pipe+0x80/0x140 [ 1578.633166][T29983] ? __pfx_copy_splice_read+0x10/0x10 [ 1578.633188][T29983] ? pipe_unlock+0x4a/0x70 [ 1578.633217][T29983] ? __pfx_splice_from_pipe+0x10/0x10 [ 1578.633249][T29983] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1578.633276][T29983] ? __pfx_copy_splice_read+0x10/0x10 [ 1578.633296][T29983] do_splice_read+0x285/0x370 [ 1578.633322][T29983] splice_direct_to_actor+0x2a1/0xa30 [ 1578.633355][T29983] ? __pfx_direct_splice_actor+0x10/0x10 [ 1578.633388][T29983] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1578.633426][T29983] do_splice_direct+0x174/0x240 [ 1578.633465][T29983] ? __pfx_do_splice_direct+0x10/0x10 [ 1578.633492][T29983] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1578.633533][T29983] ? bpf_lsm_file_permission+0x9/0x10 [ 1578.633561][T29983] ? security_file_permission+0x71/0x210 [ 1578.633590][T29983] ? rw_verify_area+0xcf/0x6c0 [ 1578.633618][T29983] do_sendfile+0xb06/0xe50 [ 1578.633651][T29983] ? __pfx_do_sendfile+0x10/0x10 [ 1578.633677][T29983] ? __sys_sendmsg+0x18c/0x220 [ 1578.633706][T29983] ? __x64_sys_futex+0x1e0/0x4c0 [ 1578.633738][T29983] ? __x64_sys_futex+0x1e9/0x4c0 [ 1578.633775][T29983] __x64_sys_sendfile64+0x1d8/0x220 [ 1578.633805][T29983] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1578.633844][T29983] do_syscall_64+0xcd/0xfa0 [ 1578.633876][T29983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.633902][T29983] RIP: 0033:0x7f4305f8f6c9 [ 1578.633923][T29983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.633948][T29983] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1578.633974][T29983] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1578.633992][T29983] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1578.634006][T29983] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1578.634022][T29983] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1578.634039][T29983] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1578.634073][T29983] [ 1578.921697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1579.068568][T29987] FAULT_INJECTION: forcing a failure. [ 1579.068568][T29987] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.100306][T29987] CPU: 0 UID: 0 PID: 29987 Comm: syz.5.4937 Not tainted syzkaller #0 PREEMPT(full) [ 1579.100340][T29987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1579.100356][T29987] Call Trace: [ 1579.100365][T29987] [ 1579.100375][T29987] dump_stack_lvl+0x16c/0x1f0 [ 1579.100411][T29987] should_fail_ex+0x512/0x640 [ 1579.100446][T29987] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1579.100476][T29987] should_failslab+0xc2/0x120 [ 1579.100509][T29987] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1579.100540][T29987] ? ptlock_alloc+0x1f/0x70 [ 1579.100585][T29987] ? ptlock_alloc+0x1f/0x70 [ 1579.100621][T29987] ptlock_alloc+0x1f/0x70 [ 1579.100658][T29987] pte_alloc_one+0x84/0x350 [ 1579.100688][T29987] copy_huge_pmd+0x1ae/0x3470 [ 1579.100731][T29987] ? do_raw_spin_lock+0x12c/0x2b0 [ 1579.100769][T29987] ? find_held_lock+0x2b/0x80 [ 1579.100797][T29987] ? __pmd_alloc+0x64a/0x8b0 [ 1579.100828][T29987] ? __pfx_copy_huge_pmd+0x10/0x10 [ 1579.100865][T29987] ? do_raw_spin_unlock+0x172/0x230 [ 1579.100889][T29987] ? _raw_spin_unlock+0x28/0x50 [ 1579.100922][T29987] copy_page_range+0x1e25/0x6930 [ 1579.101005][T29987] ? __pfx_copy_page_range+0x10/0x10 [ 1579.101047][T29987] ? mas_store+0x860/0x1030 [ 1579.101094][T29987] ? __pfx___might_resched+0x10/0x10 [ 1579.101123][T29987] ? find_held_lock+0x2b/0x80 [ 1579.101150][T29987] ? __pfx_mas_store+0x10/0x10 [ 1579.101181][T29987] ? __vma_enter_locked+0x163/0x3f0 [ 1579.101238][T29987] dup_mmap+0xe80/0x2280 [ 1579.101286][T29987] ? __pfx_dup_mmap+0x10/0x10 [ 1579.101344][T29987] copy_process+0x3f0c/0x76a0 [ 1579.101376][T29987] ? __pfx___futex_wait+0x10/0x10 [ 1579.101399][T29987] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1579.101442][T29987] ? __pfx_copy_process+0x10/0x10 [ 1579.101472][T29987] ? find_held_lock+0x2b/0x80 [ 1579.101505][T29987] ? futex_private_hash_put+0xd5/0x190 [ 1579.101544][T29987] kernel_clone+0xfc/0x930 [ 1579.101578][T29987] ? __pfx_kernel_clone+0x10/0x10 [ 1579.101631][T29987] __do_sys_clone+0xce/0x120 [ 1579.101662][T29987] ? __pfx___do_sys_clone+0x10/0x10 [ 1579.101693][T29987] ? __sys_sendmsg+0x18c/0x220 [ 1579.101734][T29987] ? xfd_validate_state+0x61/0x180 [ 1579.101782][T29987] do_syscall_64+0xcd/0xfa0 [ 1579.101823][T29987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.101852][T29987] RIP: 0033:0x7f0a8b58f6c9 [ 1579.101874][T29987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1579.101900][T29987] RSP: 002b:00007f0a8c3bbfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1579.101925][T29987] RAX: ffffffffffffffda RBX: 00007f0a8b7e6360 RCX: 00007f0a8b58f6c9 [ 1579.101943][T29987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1579.101959][T29987] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1579.101976][T29987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1579.101993][T29987] R13: 00007f0a8b7e63f8 R14: 00007f0a8b7e6360 R15: 00007ffdbe2b6408 [ 1579.102037][T29987] [ 1580.246816][T30008] netlink: 93 bytes leftover after parsing attributes in process `syz.5.4942'. [ 1580.342919][T30013] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1581.763804][T30034] FAULT_INJECTION: forcing a failure. [ 1581.763804][T30034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1581.856398][T30034] CPU: 1 UID: 0 PID: 30034 Comm: syz.6.4946 Not tainted syzkaller #0 PREEMPT(full) [ 1581.856423][T30034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1581.856432][T30034] Call Trace: [ 1581.856438][T30034] [ 1581.856444][T30034] dump_stack_lvl+0x16c/0x1f0 [ 1581.856466][T30034] should_fail_ex+0x512/0x640 [ 1581.856493][T30034] should_fail_alloc_page+0xe7/0x130 [ 1581.856515][T30034] prepare_alloc_pages+0x3c2/0x610 [ 1581.856537][T30034] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1581.856554][T30034] ? stack_trace_save+0x8e/0xc0 [ 1581.856571][T30034] ? __pfx_stack_trace_save+0x10/0x10 [ 1581.856586][T30034] ? do_raw_spin_lock+0x12c/0x2b0 [ 1581.856608][T30034] ? stack_depot_save_flags+0x29/0x9c0 [ 1581.856630][T30034] ? __lock_acquire+0x622/0x1c90 [ 1581.856651][T30034] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1581.856665][T30034] ? __kasan_kmalloc+0xaa/0xb0 [ 1581.856680][T30034] ? copy_splice_read+0x1a8/0xc20 [ 1581.856693][T30034] ? splice_direct_to_actor+0x2a1/0xa30 [ 1581.856706][T30034] ? do_splice_direct+0x174/0x240 [ 1581.856718][T30034] ? do_sendfile+0xb06/0xe50 [ 1581.856732][T30034] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1581.856749][T30034] ? do_syscall_64+0xcd/0xfa0 [ 1581.856765][T30034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.856793][T30034] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1581.856814][T30034] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1581.856837][T30034] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1581.856852][T30034] ? copy_splice_read+0x1a8/0xc20 [ 1581.856868][T30034] copy_splice_read+0x1e1/0xc20 [ 1581.856883][T30034] ? __pfx_pipe_to_null+0x10/0x10 [ 1581.856902][T30034] ? __pfx_copy_splice_read+0x10/0x10 [ 1581.856914][T30034] ? pipe_unlock+0x4a/0x70 [ 1581.856931][T30034] ? __pfx_splice_from_pipe+0x10/0x10 [ 1581.856950][T30034] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1581.856967][T30034] ? __pfx_copy_splice_read+0x10/0x10 [ 1581.856980][T30034] do_splice_read+0x285/0x370 [ 1581.856996][T30034] splice_direct_to_actor+0x2a1/0xa30 [ 1581.857011][T30034] ? __pfx_direct_splice_actor+0x10/0x10 [ 1581.857029][T30034] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1581.857049][T30034] do_splice_direct+0x174/0x240 [ 1581.857070][T30034] ? __pfx_do_splice_direct+0x10/0x10 [ 1581.857103][T30034] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1581.857142][T30034] ? bpf_lsm_file_permission+0x9/0x10 [ 1581.857167][T30034] ? security_file_permission+0x71/0x210 [ 1581.857195][T30034] ? rw_verify_area+0xcf/0x6c0 [ 1581.857216][T30034] do_sendfile+0xb06/0xe50 [ 1581.857234][T30034] ? __pfx_do_sendfile+0x10/0x10 [ 1581.857248][T30034] ? __sys_sendmsg+0x18c/0x220 [ 1581.857266][T30034] ? __x64_sys_futex+0x1e0/0x4c0 [ 1581.857284][T30034] ? __x64_sys_futex+0x1e9/0x4c0 [ 1581.857305][T30034] __x64_sys_sendfile64+0x1d8/0x220 [ 1581.857324][T30034] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1581.857348][T30034] do_syscall_64+0xcd/0xfa0 [ 1581.857367][T30034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.857382][T30034] RIP: 0033:0x7f4305f8f6c9 [ 1581.857395][T30034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1581.857409][T30034] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.857424][T30034] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1581.857434][T30034] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1581.857443][T30034] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1581.857452][T30034] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1581.857461][T30034] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1581.857481][T30034] [ 1583.512393][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4953'. [ 1583.737576][T30068] FAULT_INJECTION: forcing a failure. [ 1583.737576][T30068] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.762451][T30068] CPU: 0 UID: 0 PID: 30068 Comm: syz.5.4954 Not tainted syzkaller #0 PREEMPT(full) [ 1583.762490][T30068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1583.762506][T30068] Call Trace: [ 1583.762516][T30068] [ 1583.762526][T30068] dump_stack_lvl+0x16c/0x1f0 [ 1583.762564][T30068] should_fail_ex+0x512/0x640 [ 1583.762600][T30068] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1583.762631][T30068] should_failslab+0xc2/0x120 [ 1583.762672][T30068] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1583.762698][T30068] ? __x64_sys_futex+0x1e0/0x4c0 [ 1583.762730][T30068] ? getname_flags.part.0+0x4c/0x550 [ 1583.762780][T30068] ? getname_flags.part.0+0x4c/0x550 [ 1583.762816][T30068] getname_flags.part.0+0x4c/0x550 [ 1583.762857][T30068] getname_flags+0x93/0xf0 [ 1583.762883][T30068] __x64_sys_mknod+0x74/0xb0 [ 1583.762912][T30068] do_syscall_64+0xcd/0xfa0 [ 1583.762943][T30068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.762970][T30068] RIP: 0033:0x7f0a8b58f6c9 [ 1583.762992][T30068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.763016][T30068] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1583.763041][T30068] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1583.763059][T30068] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1583.763075][T30068] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1583.763092][T30068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.763108][T30068] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1583.763145][T30068] [ 1584.470768][T30074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4956'. [ 1586.406063][T30103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4961'. [ 1587.409794][T30120] FAULT_INJECTION: forcing a failure. [ 1587.409794][T30120] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.436959][T30120] CPU: 1 UID: 0 PID: 30120 Comm: syz.5.4963 Not tainted syzkaller #0 PREEMPT(full) [ 1587.436997][T30120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1587.437012][T30120] Call Trace: [ 1587.437021][T30120] [ 1587.437032][T30120] dump_stack_lvl+0x16c/0x1f0 [ 1587.437067][T30120] should_fail_ex+0x512/0x640 [ 1587.437103][T30120] ? __kmalloc_noprof+0xca/0x880 [ 1587.437145][T30120] should_failslab+0xc2/0x120 [ 1587.437177][T30120] __kmalloc_noprof+0xdd/0x880 [ 1587.437210][T30120] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1587.437236][T30120] ? copy_splice_read+0x1a8/0xc20 [ 1587.437262][T30120] ? copy_splice_read+0x1a8/0xc20 [ 1587.437281][T30120] copy_splice_read+0x1a8/0xc20 [ 1587.437305][T30120] ? __pfx_pipe_to_null+0x10/0x10 [ 1587.437341][T30120] ? __pfx_copy_splice_read+0x10/0x10 [ 1587.437365][T30120] ? pipe_unlock+0x4a/0x70 [ 1587.437394][T30120] ? __pfx_splice_from_pipe+0x10/0x10 [ 1587.437424][T30120] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1587.437453][T30120] ? __pfx_copy_splice_read+0x10/0x10 [ 1587.437476][T30120] do_splice_read+0x285/0x370 [ 1587.437504][T30120] splice_direct_to_actor+0x2a1/0xa30 [ 1587.437531][T30120] ? __pfx_direct_splice_actor+0x10/0x10 [ 1587.437568][T30120] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1587.437604][T30120] do_splice_direct+0x174/0x240 [ 1587.437630][T30120] ? __pfx_do_splice_direct+0x10/0x10 [ 1587.437656][T30120] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1587.437696][T30120] ? bpf_lsm_file_permission+0x9/0x10 [ 1587.437724][T30120] ? security_file_permission+0x71/0x210 [ 1587.437755][T30120] ? rw_verify_area+0xcf/0x6c0 [ 1587.437785][T30120] do_sendfile+0xb06/0xe50 [ 1587.437817][T30120] ? __pfx_do_sendfile+0x10/0x10 [ 1587.437843][T30120] ? __sys_sendmsg+0x18c/0x220 [ 1587.437872][T30120] ? __x64_sys_futex+0x1e0/0x4c0 [ 1587.437904][T30120] ? __x64_sys_futex+0x1e9/0x4c0 [ 1587.437941][T30120] __x64_sys_sendfile64+0x1d8/0x220 [ 1587.437975][T30120] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1587.438019][T30120] do_syscall_64+0xcd/0xfa0 [ 1587.438049][T30120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.438076][T30120] RIP: 0033:0x7f0a8b58f6c9 [ 1587.438096][T30120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.438121][T30120] RSP: 002b:00007f0a8c41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1587.438145][T30120] RAX: ffffffffffffffda RBX: 00007f0a8b7e6090 RCX: 00007f0a8b58f6c9 [ 1587.438163][T30120] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1587.438179][T30120] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1587.438194][T30120] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1587.438211][T30120] R13: 00007f0a8b7e6128 R14: 00007f0a8b7e6090 R15: 00007ffdbe2b6408 [ 1587.438247][T30120] [ 1588.485179][T30134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4966'. [ 1589.167592][T30143] FAULT_INJECTION: forcing a failure. [ 1589.167592][T30143] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.237313][T30143] CPU: 0 UID: 0 PID: 30143 Comm: syz.6.4967 Not tainted syzkaller #0 PREEMPT(full) [ 1589.237351][T30143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1589.237373][T30143] Call Trace: [ 1589.237383][T30143] [ 1589.237394][T30143] dump_stack_lvl+0x16c/0x1f0 [ 1589.237434][T30143] should_fail_ex+0x512/0x640 [ 1589.237468][T30143] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1589.237496][T30143] should_failslab+0xc2/0x120 [ 1589.237529][T30143] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1589.237556][T30143] ? __d_lookup+0x25c/0x4a0 [ 1589.237591][T30143] ? __d_alloc+0x32/0xae0 [ 1589.237625][T30143] ? __d_alloc+0x32/0xae0 [ 1589.237649][T30143] __d_alloc+0x32/0xae0 [ 1589.237676][T30143] d_alloc+0x4a/0x1e0 [ 1589.237702][T30143] lookup_one_qstr_excl+0x175/0x250 [ 1589.237735][T30143] ? mnt_want_write+0x161/0x450 [ 1589.237774][T30143] filename_create+0x1e7/0x4a0 [ 1589.237799][T30143] ? __pfx_filename_create+0x10/0x10 [ 1589.237825][T30143] ? __might_fault+0xe3/0x190 [ 1589.237848][T30143] ? __might_fault+0xe3/0x190 [ 1589.237871][T30143] ? __might_fault+0x13b/0x190 [ 1589.237900][T30143] do_mknodat+0x18a/0x5d0 [ 1589.237933][T30143] ? __pfx_do_mknodat+0x10/0x10 [ 1589.237960][T30143] ? getname_flags.part.0+0x1c5/0x550 [ 1589.238003][T30143] __x64_sys_mknod+0x87/0xb0 [ 1589.238034][T30143] do_syscall_64+0xcd/0xfa0 [ 1589.238068][T30143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.238093][T30143] RIP: 0033:0x7f4305f8f6c9 [ 1589.238113][T30143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.238138][T30143] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1589.238164][T30143] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1589.238181][T30143] RDX: 00000000000007fc RSI: 00000000000063c1 RDI: 0000200000000340 [ 1589.238197][T30143] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1589.238212][T30143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.238227][T30143] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1589.238260][T30143] [ 1589.264243][T30152] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1590.382889][T30170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4972'. [ 1590.799717][T30175] netlink: 93 bytes leftover after parsing attributes in process `syz.1.4973'. [ 1591.112379][T30187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4974'. [ 1592.273102][T30202] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4977'. [ 1592.753025][T30209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1594.808823][T30253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4984'. [ 1595.989376][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4988'. [ 1596.775581][T30285] FAULT_INJECTION: forcing a failure. [ 1596.775581][T30285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1596.894232][T30285] CPU: 0 UID: 0 PID: 30285 Comm: syz.5.4989 Not tainted syzkaller #0 PREEMPT(full) [ 1596.894267][T30285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1596.894292][T30285] Call Trace: [ 1596.894302][T30285] [ 1596.894320][T30285] dump_stack_lvl+0x16c/0x1f0 [ 1596.894358][T30285] should_fail_ex+0x512/0x640 [ 1596.894401][T30285] should_fail_alloc_page+0xe7/0x130 [ 1596.894436][T30285] prepare_alloc_pages+0x3c2/0x610 [ 1596.894475][T30285] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1596.894506][T30285] ? stack_trace_save+0x8e/0xc0 [ 1596.894536][T30285] ? __pfx_stack_trace_save+0x10/0x10 [ 1596.894562][T30285] ? do_raw_spin_lock+0x12c/0x2b0 [ 1596.894600][T30285] ? stack_depot_save_flags+0x29/0x9c0 [ 1596.894633][T30285] ? find_held_lock+0x2b/0x80 [ 1596.894664][T30285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1596.894690][T30285] ? __kasan_kmalloc+0xaa/0xb0 [ 1596.894718][T30285] ? copy_splice_read+0x1a8/0xc20 [ 1596.894741][T30285] ? splice_direct_to_actor+0x2a1/0xa30 [ 1596.894765][T30285] ? do_splice_direct+0x174/0x240 [ 1596.894787][T30285] ? do_sendfile+0xb06/0xe50 [ 1596.894811][T30285] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1596.894840][T30285] ? do_syscall_64+0xcd/0xfa0 [ 1596.894867][T30285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.894919][T30285] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1596.894958][T30285] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1596.894995][T30285] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1596.895020][T30285] ? copy_splice_read+0x1a8/0xc20 [ 1596.895062][T30285] copy_splice_read+0x1e1/0xc20 [ 1596.895090][T30285] ? __pfx_pipe_to_null+0x10/0x10 [ 1596.895125][T30285] ? __pfx_copy_splice_read+0x10/0x10 [ 1596.895149][T30285] ? pipe_unlock+0x4a/0x70 [ 1596.895180][T30285] ? __pfx_splice_from_pipe+0x10/0x10 [ 1596.895217][T30285] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1596.895246][T30285] ? __pfx_copy_splice_read+0x10/0x10 [ 1596.895269][T30285] do_splice_read+0x285/0x370 [ 1596.895298][T30285] splice_direct_to_actor+0x2a1/0xa30 [ 1596.895336][T30285] ? __pfx_direct_splice_actor+0x10/0x10 [ 1596.895369][T30285] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1596.895406][T30285] do_splice_direct+0x174/0x240 [ 1596.895434][T30285] ? __pfx_do_splice_direct+0x10/0x10 [ 1596.895461][T30285] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1596.895512][T30285] ? bpf_lsm_file_permission+0x9/0x10 [ 1596.895543][T30285] ? security_file_permission+0x71/0x210 [ 1596.895570][T30285] ? rw_verify_area+0xcf/0x6c0 [ 1596.895596][T30285] do_sendfile+0xb06/0xe50 [ 1596.895623][T30285] ? __pfx_do_sendfile+0x10/0x10 [ 1596.895642][T30285] ? __sys_sendmsg+0x18c/0x220 [ 1596.895667][T30285] ? __x64_sys_futex+0x1e0/0x4c0 [ 1596.895700][T30285] ? __x64_sys_futex+0x1e9/0x4c0 [ 1596.895735][T30285] __x64_sys_sendfile64+0x1d8/0x220 [ 1596.895769][T30285] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1596.895813][T30285] do_syscall_64+0xcd/0xfa0 [ 1596.895843][T30285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1596.895869][T30285] RIP: 0033:0x7f0a8b58f6c9 [ 1596.895890][T30285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1596.895925][T30285] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1596.895951][T30285] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1596.895968][T30285] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1596.895982][T30285] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1596.895996][T30285] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1596.896012][T30285] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1596.896044][T30285] [ 1598.317608][T30313] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4995'. [ 1598.715450][T30331] syz.6.4997 (30331): attempted to duplicate a private mapping with mremap. This is not supported. [ 1598.851074][T30334] netlink: 93 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1599.335144][T30336] FAULT_INJECTION: forcing a failure. [ 1599.335144][T30336] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.416307][T30336] CPU: 0 UID: 0 PID: 30336 Comm: syz.5.4999 Not tainted syzkaller #0 PREEMPT(full) [ 1599.416345][T30336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1599.416369][T30336] Call Trace: [ 1599.416378][T30336] [ 1599.416390][T30336] dump_stack_lvl+0x16c/0x1f0 [ 1599.416426][T30336] should_fail_ex+0x512/0x640 [ 1599.416465][T30336] ? __kmalloc_noprof+0xca/0x880 [ 1599.416505][T30336] should_failslab+0xc2/0x120 [ 1599.416538][T30336] __kmalloc_noprof+0xdd/0x880 [ 1599.416571][T30336] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1599.416596][T30336] ? copy_splice_read+0x1a8/0xc20 [ 1599.416626][T30336] ? copy_splice_read+0x1a8/0xc20 [ 1599.416649][T30336] copy_splice_read+0x1a8/0xc20 [ 1599.416675][T30336] ? __pfx_pipe_to_null+0x10/0x10 [ 1599.416711][T30336] ? __pfx_copy_splice_read+0x10/0x10 [ 1599.416733][T30336] ? pipe_unlock+0x4a/0x70 [ 1599.416761][T30336] ? __pfx_splice_from_pipe+0x10/0x10 [ 1599.416796][T30336] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1599.416827][T30336] ? __pfx_copy_splice_read+0x10/0x10 [ 1599.416850][T30336] do_splice_read+0x285/0x370 [ 1599.416875][T30336] splice_direct_to_actor+0x2a1/0xa30 [ 1599.416902][T30336] ? __pfx_direct_splice_actor+0x10/0x10 [ 1599.416934][T30336] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1599.416971][T30336] do_splice_direct+0x174/0x240 [ 1599.416997][T30336] ? __pfx_do_splice_direct+0x10/0x10 [ 1599.417025][T30336] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1599.417066][T30336] ? bpf_lsm_file_permission+0x9/0x10 [ 1599.417095][T30336] ? security_file_permission+0x71/0x210 [ 1599.417124][T30336] ? rw_verify_area+0xcf/0x6c0 [ 1599.417156][T30336] do_sendfile+0xb06/0xe50 [ 1599.417191][T30336] ? __pfx_do_sendfile+0x10/0x10 [ 1599.417218][T30336] ? __sys_sendmsg+0x18c/0x220 [ 1599.417248][T30336] ? __x64_sys_futex+0x1e0/0x4c0 [ 1599.417281][T30336] ? __x64_sys_futex+0x1e9/0x4c0 [ 1599.417318][T30336] __x64_sys_sendfile64+0x1d8/0x220 [ 1599.417360][T30336] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1599.417406][T30336] do_syscall_64+0xcd/0xfa0 [ 1599.417439][T30336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.417467][T30336] RIP: 0033:0x7f0a8b58f6c9 [ 1599.417489][T30336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.417514][T30336] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1599.417540][T30336] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1599.417559][T30336] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1599.417575][T30336] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1599.417591][T30336] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1599.417607][T30336] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1599.417643][T30336] [ 1599.893804][T30345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1600.283169][T30354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 1600.728498][T28338] Bluetooth: hci4: command 0x0406 tx timeout [ 1600.751912][T30355] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1600.782790][T30355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1600.788988][T30355] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.795158][T30355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1600.826044][T30355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1600.866625][T30355] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1600.942871][T30355] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1600.970714][T30355] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1601.000886][T30355] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1601.034891][T30355] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1601.058968][T30355] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1601.080069][T30355] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1601.322194][T30375] netlink: 93 bytes leftover after parsing attributes in process `syz.1.5009'. [ 1601.355649][T30376] netlink: 93 bytes leftover after parsing attributes in process `syz.6.5007'. [ 1601.955602][T30386] FAULT_INJECTION: forcing a failure. [ 1601.955602][T30386] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1601.977249][T30386] CPU: 1 UID: 0 PID: 30386 Comm: syz.6.5011 Not tainted syzkaller #0 PREEMPT(full) [ 1601.977287][T30386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1601.977304][T30386] Call Trace: [ 1601.977314][T30386] [ 1601.977326][T30386] dump_stack_lvl+0x16c/0x1f0 [ 1601.977362][T30386] should_fail_ex+0x512/0x640 [ 1601.977405][T30386] should_fail_alloc_page+0xe7/0x130 [ 1601.977442][T30386] prepare_alloc_pages+0x3c2/0x610 [ 1601.977481][T30386] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1601.977512][T30386] ? stack_trace_save+0x8e/0xc0 [ 1601.977542][T30386] ? __pfx_stack_trace_save+0x10/0x10 [ 1601.977570][T30386] ? do_raw_spin_lock+0x12c/0x2b0 [ 1601.977608][T30386] ? stack_depot_save_flags+0x29/0x9c0 [ 1601.977647][T30386] ? __lock_acquire+0x622/0x1c90 [ 1601.977684][T30386] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1601.977711][T30386] ? __kasan_kmalloc+0xaa/0xb0 [ 1601.977739][T30386] ? copy_splice_read+0x1a8/0xc20 [ 1601.977763][T30386] ? splice_direct_to_actor+0x2a1/0xa30 [ 1601.977796][T30386] ? do_splice_direct+0x174/0x240 [ 1601.977820][T30386] ? do_sendfile+0xb06/0xe50 [ 1601.977845][T30386] ? __x64_sys_sendfile64+0x1d8/0x220 [ 1601.977879][T30386] ? do_syscall_64+0xcd/0xfa0 [ 1601.977907][T30386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.977960][T30386] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1601.978000][T30386] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1601.978035][T30386] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1601.978061][T30386] ? copy_splice_read+0x1a8/0xc20 [ 1601.978087][T30386] copy_splice_read+0x1e1/0xc20 [ 1601.978113][T30386] ? __pfx_pipe_to_null+0x10/0x10 [ 1601.978148][T30386] ? __pfx_copy_splice_read+0x10/0x10 [ 1601.978172][T30386] ? pipe_unlock+0x4a/0x70 [ 1601.978203][T30386] ? __pfx_splice_from_pipe+0x10/0x10 [ 1601.978239][T30386] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1601.978282][T30386] ? __pfx_copy_splice_read+0x10/0x10 [ 1601.978308][T30386] do_splice_read+0x285/0x370 [ 1601.978339][T30386] splice_direct_to_actor+0x2a1/0xa30 [ 1601.978370][T30386] ? __pfx_direct_splice_actor+0x10/0x10 [ 1601.978404][T30386] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1601.978442][T30386] do_splice_direct+0x174/0x240 [ 1601.978469][T30386] ? __pfx_do_splice_direct+0x10/0x10 [ 1601.978496][T30386] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1601.978538][T30386] ? bpf_lsm_file_permission+0x9/0x10 [ 1601.978567][T30386] ? security_file_permission+0x71/0x210 [ 1601.978596][T30386] ? rw_verify_area+0xcf/0x6c0 [ 1601.978624][T30386] do_sendfile+0xb06/0xe50 [ 1601.978657][T30386] ? __pfx_do_sendfile+0x10/0x10 [ 1601.978683][T30386] ? __sys_sendmsg+0x18c/0x220 [ 1601.978713][T30386] ? __x64_sys_futex+0x1e0/0x4c0 [ 1601.978746][T30386] ? __x64_sys_futex+0x1e9/0x4c0 [ 1601.978791][T30386] __x64_sys_sendfile64+0x1d8/0x220 [ 1601.978827][T30386] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1601.978873][T30386] do_syscall_64+0xcd/0xfa0 [ 1601.978906][T30386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.978933][T30386] RIP: 0033:0x7f4305f8f6c9 [ 1601.978955][T30386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1601.978980][T30386] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1601.979007][T30386] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1601.979025][T30386] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 1601.979041][T30386] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1601.979057][T30386] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1601.979074][T30386] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1601.979111][T30386] [ 1602.563651][T22632] Bluetooth: hci0: command 0x0406 tx timeout [ 1602.792797][T22632] Bluetooth: hci3: command 0x0406 tx timeout [ 1602.799768][T28338] Bluetooth: hci2: command 0x0406 tx timeout [ 1602.806671][T28338] Bluetooth: hci1: command 0x0406 tx timeout [ 1602.863060][T30392] FAULT_INJECTION: forcing a failure. [ 1602.863060][T30392] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.875860][T30398] Bluetooth: hci4: command 0x0406 tx timeout [ 1602.883498][T30392] CPU: 0 UID: 0 PID: 30392 Comm: syz.5.5014 Not tainted syzkaller #0 PREEMPT(full) [ 1602.883520][T30392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1602.883529][T30392] Call Trace: [ 1602.883535][T30392] [ 1602.883541][T30392] dump_stack_lvl+0x16c/0x1f0 [ 1602.883574][T30392] should_fail_ex+0x512/0x640 [ 1602.883598][T30392] ? __kmalloc_noprof+0xca/0x880 [ 1602.883623][T30392] should_failslab+0xc2/0x120 [ 1602.883643][T30392] __kmalloc_noprof+0xdd/0x880 [ 1602.883665][T30392] ? splice_from_pipe_next+0x1f7/0x5d0 [ 1602.883680][T30392] ? copy_splice_read+0x1a8/0xc20 [ 1602.883696][T30392] ? copy_splice_read+0x1a8/0xc20 [ 1602.883708][T30392] copy_splice_read+0x1a8/0xc20 [ 1602.883723][T30392] ? __pfx_pipe_to_null+0x10/0x10 [ 1602.883745][T30392] ? __pfx_copy_splice_read+0x10/0x10 [ 1602.883757][T30392] ? pipe_unlock+0x4a/0x70 [ 1602.883774][T30392] ? __pfx_splice_from_pipe+0x10/0x10 [ 1602.883794][T30392] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1602.883811][T30392] ? __pfx_copy_splice_read+0x10/0x10 [ 1602.883824][T30392] do_splice_read+0x285/0x370 [ 1602.883840][T30392] splice_direct_to_actor+0x2a1/0xa30 [ 1602.883855][T30392] ? __pfx_direct_splice_actor+0x10/0x10 [ 1602.883873][T30392] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1602.883893][T30392] do_splice_direct+0x174/0x240 [ 1602.883908][T30392] ? __pfx_do_splice_direct+0x10/0x10 [ 1602.883922][T30392] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1602.883947][T30392] ? bpf_lsm_file_permission+0x9/0x10 [ 1602.883964][T30392] ? security_file_permission+0x71/0x210 [ 1602.883986][T30392] ? rw_verify_area+0xcf/0x6c0 [ 1602.884002][T30392] do_sendfile+0xb06/0xe50 [ 1602.884020][T30392] ? __pfx_do_sendfile+0x10/0x10 [ 1602.884034][T30392] ? __sys_sendmsg+0x18c/0x220 [ 1602.884051][T30392] ? __x64_sys_futex+0x1e0/0x4c0 [ 1602.884070][T30392] ? __x64_sys_futex+0x1e9/0x4c0 [ 1602.884092][T30392] __x64_sys_sendfile64+0x1d8/0x220 [ 1602.884111][T30392] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1602.884136][T30392] do_syscall_64+0xcd/0xfa0 [ 1602.884160][T30392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.884185][T30392] RIP: 0033:0x7f0a8b58f6c9 [ 1602.884204][T30392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.884228][T30392] RSP: 002b:00007f0a8c440038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1602.884252][T30392] RAX: ffffffffffffffda RBX: 00007f0a8b7e5fa0 RCX: 00007f0a8b58f6c9 [ 1602.884268][T30392] RDX: 0000000000000000 RSI: 000000000000000c RDI: 000000000000000c [ 1602.884282][T30392] RBP: 00007f0a8b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1602.884295][T30392] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 1602.884310][T30392] R13: 00007f0a8b7e6038 R14: 00007f0a8b7e5fa0 R15: 00007ffdbe2b6408 [ 1602.884343][T30392] [ 1603.165239][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.183724][T30398] Bluetooth: hci5: command 0x0c1a tx timeout [ 1603.189787][T30398] Bluetooth: hci6: command 0x0c1a tx timeout [ 1603.759921][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1603.766524][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1603.794861][T30418] netlink: 93 bytes leftover after parsing attributes in process `syz.1.5018'. [ 1604.030413][T30423] netlink: 330 bytes leftover after parsing attributes in process `syz.2.5019'. [ 1604.040543][T30423] –õ\­: renamed from lo [ 1604.575156][T30422] futex_wake_op: syz.1.5020 tries to shift op by -2048; fix this program [ 1604.877892][T30449] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1604.947126][T22628] Bluetooth: hci4: command 0x0406 tx timeout [ 1604.975355][T30452] netlink: 93 bytes leftover after parsing attributes in process `syz.5.5026'. [ 1605.268797][T22628] Bluetooth: hci6: command 0x0c1a tx timeout [ 1605.276264][T30398] Bluetooth: hci5: command 0x0c1a tx timeout [ 1605.636285][T30464] netlink: 93 bytes leftover after parsing attributes in process `syz.6.5029'. [ 1606.492992][T30477] FAULT_INJECTION: forcing a failure. [ 1606.492992][T30477] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.564342][T30477] CPU: 0 UID: 0 PID: 30477 Comm: syz.6.5031 Not tainted syzkaller #0 PREEMPT(full) [ 1606.564388][T30477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1606.564404][T30477] Call Trace: [ 1606.564413][T30477] [ 1606.564424][T30477] dump_stack_lvl+0x16c/0x1f0 [ 1606.564460][T30477] should_fail_ex+0x512/0x640 [ 1606.564498][T30477] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1606.564528][T30477] should_failslab+0xc2/0x120 [ 1606.564561][T30477] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1606.564586][T30477] ? prepare_creds+0x2c/0x7d0 [ 1606.564626][T30477] ? prepare_creds+0x2c/0x7d0 [ 1606.564660][T30477] prepare_creds+0x2c/0x7d0 [ 1606.564699][T30477] __sys_setuid+0x9a/0x440 [ 1606.564728][T30477] do_syscall_64+0xcd/0xfa0 [ 1606.564760][T30477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.564785][T30477] RIP: 0033:0x7f4305f8f6c9 [ 1606.564806][T30477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.564832][T30477] RSP: 002b:00007f4306d61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 1606.564857][T30477] RAX: ffffffffffffffda RBX: 00007f43061e5fa0 RCX: 00007f4305f8f6c9 [ 1606.564873][T30477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1606.564888][T30477] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1606.564902][T30477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.564916][T30477] R13: 00007f43061e6038 R14: 00007f43061e5fa0 R15: 00007ffc23219d28 [ 1606.564950][T30477] [ 1607.331042][T22628] Bluetooth: hci6: command 0x0c1a tx timeout [ 1607.337074][T30398] Bluetooth: hci5: command 0x0c1a tx timeout [ 1609.197219][T30539] FAULT_INJECTION: forcing a failure. [ 1609.197219][T30539] name failslab, interval 1, probability 0, space 0, times 0 [ 1609.228663][T30539] CPU: 1 UID: 0 PID: 30539 Comm: syz.6.5044 Not tainted syzkaller #0 PREEMPT(full) [ 1609.228686][T30539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1609.228696][T30539] Call Trace: [ 1609.228702][T30539] [ 1609.228710][T30539] dump_stack_lvl+0x16c/0x1f0 [ 1609.228732][T30539] should_fail_ex+0x512/0x640 [ 1609.228755][T30539] ? fs_reclaim_acquire+0xae/0x150 [ 1609.228777][T30539] should_failslab+0xc2/0x120 [ 1609.228796][T30539] __kmalloc_noprof+0xdd/0x880 [ 1609.228819][T30539] ? tomoyo_encode2+0x100/0x3e0 [ 1609.228839][T30539] ? tomoyo_encode2+0x100/0x3e0 [ 1609.228853][T30539] tomoyo_encode2+0x100/0x3e0 [ 1609.228871][T30539] tomoyo_encode+0x29/0x50 [ 1609.228886][T30539] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1609.228908][T30539] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1609.228932][T30539] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1609.228973][T30539] ? lock_acquire+0x179/0x350 [ 1609.228992][T30539] ? find_held_lock+0x2b/0x80 [ 1609.229008][T30539] ? mnt_get_write_access+0x52/0x2f0 [ 1609.229029][T30539] tomoyo_file_open+0x6b/0x90 [ 1609.229048][T30539] security_file_open+0x84/0x1e0 [ 1609.229065][T30539] do_dentry_open+0x596/0x1530 [ 1609.229088][T30539] vfs_open+0x82/0x3f0 [ 1609.229110][T30539] path_openat+0x1de4/0x2cb0 [ 1609.229133][T30539] ? __pfx_path_openat+0x10/0x10 [ 1609.229160][T30539] ? __lock_acquire+0xb8a/0x1c90 [ 1609.229182][T30539] do_filp_open+0x20b/0x470 [ 1609.229199][T30539] ? __pfx_do_filp_open+0x10/0x10 [ 1609.229248][T30539] ? alloc_fd+0x471/0x7d0 [ 1609.229269][T30539] do_sys_openat2+0x11b/0x1d0 [ 1609.229291][T30539] ? __pfx_do_sys_openat2+0x10/0x10 [ 1609.229321][T30539] __x64_sys_openat+0x174/0x210 [ 1609.229344][T30539] ? __pfx___x64_sys_openat+0x10/0x10 [ 1609.229373][T30539] do_syscall_64+0xcd/0xfa0 [ 1609.229396][T30539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1609.229412][T30539] RIP: 0033:0x7f4305f8f6c9 [ 1609.229427][T30539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1609.229608][T30539] RSP: 002b:00007f4306d40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1609.229628][T30539] RAX: ffffffffffffffda RBX: 00007f43061e6090 RCX: 00007f4305f8f6c9 [ 1609.229639][T30539] RDX: 0000000000040001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1609.229649][T30539] RBP: 00007f4306011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1609.229659][T30539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1609.229668][T30539] R13: 00007f43061e6128 R14: 00007f43061e6090 R15: 00007ffc23219d28 [ 1609.229692][T30539] [ 1609.229718][T30539] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1610.012643][T30553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1611.312110][T30576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5052'. [ 1611.919077][T30585] netlink: 93 bytes leftover after parsing attributes in process `syz.2.5053'. [ 1612.676031][ T31] INFO: task syz-executor:5825 blocked for more than 143 seconds. [ 1612.683987][ T31] Not tainted syzkaller #0 [ 1612.705432][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1612.724605][ T31] task:syz-executor state:D stack:23896 pid:5825 tgid:5825 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1612.764167][ T31] Call Trace: [ 1612.767925][ T31] [ 1612.776864][ T31] __schedule+0x1190/0x5de0 [ 1612.787066][ T31] ? check_path.constprop.0+0x24/0x50 [ 1612.798337][ T31] ? __pfx___schedule+0x10/0x10 [ 1612.825112][ T31] ? find_held_lock+0x2b/0x80 [ 1612.829985][ T31] ? schedule+0x2d7/0x3a0 [ 1612.841185][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1612.910237][ T31] schedule+0xe7/0x3a0 [ 1612.975214][ T31] schedule_preempt_disabled+0x13/0x30 [ 1612.994112][ T31] __mutex_lock+0x818/0x1060 [ 1613.033964][ T31] ? __lock_acquire+0x622/0x1c90 [ 1613.064081][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1613.073744][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.101595][ T31] ? net_generic+0xea/0x2a0 [ 1613.106465][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1613.133543][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1613.186786][ T31] nfsd_umount+0x48/0xe0 [ 1613.191091][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1613.212079][ T31] deactivate_super+0xde/0x100 [ 1613.223580][ T31] cleanup_mnt+0x225/0x450 [ 1613.232657][ T31] task_work_run+0x150/0x240 [ 1613.238979][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1613.246082][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1613.262811][ T31] exit_to_user_mode_loop+0xec/0x130 [ 1613.268189][ T31] do_syscall_64+0x426/0xfa0 [ 1613.302660][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.308618][ T31] RIP: 0033:0x7f4e223909f7 [ 1613.313933][ T31] RSP: 002b:00007ffec95a0458 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1613.325744][ T31] RAX: 0000000000000000 RBX: 00007f4e22411d7d RCX: 00007f4e223909f7 [ 1613.335774][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec95a0510 [ 1613.352559][ T31] RBP: 00007ffec95a0510 R08: 0000000000000000 R09: 0000000000000000 [ 1613.375045][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec95a15a0 [ 1613.402553][ T31] R13: 00007f4e22411d7d R14: 0000000000166712 R15: 00007ffec95a15e0 [ 1613.415895][ T31] [ 1613.422358][ T31] INFO: task syz.0.4540:28107 blocked for more than 144 seconds. [ 1613.467289][ T31] Not tainted syzkaller #0 [ 1613.482195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1613.490871][ T31] task:syz.0.4540 state:D stack:27896 pid:28107 tgid:28103 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 1613.502937][ T31] Call Trace: [ 1613.506228][ T31] [ 1613.509149][ T31] __schedule+0x1190/0x5de0 [ 1613.513689][ T31] ? check_path.constprop.0+0x24/0x50 [ 1613.519106][ T31] ? __pfx___schedule+0x10/0x10 [ 1613.524196][ T31] ? find_held_lock+0x2b/0x80 [ 1613.528894][ T31] ? schedule+0x2d7/0x3a0 [ 1613.533261][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1613.539079][ T31] schedule+0xe7/0x3a0 [ 1613.543264][ T31] schedule_preempt_disabled+0x13/0x30 [ 1613.548738][ T31] __mutex_lock+0x818/0x1060 [ 1613.553374][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1613.559207][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1613.564489][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1613.570444][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1613.575950][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1613.581877][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1613.587536][ T31] ? rcu_is_watching+0x12/0xc0 [ 1613.592417][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1613.598586][ T31] ? __nla_parse+0x40/0x60 [ 1613.603121][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1613.610511][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1613.617950][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1613.623653][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1613.629754][ T31] ? rcu_is_watching+0x12/0xc0 [ 1613.634568][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1613.639261][ T31] ? security_capable+0x7e/0x260 [ 1613.644309][ T31] genl_rcv_msg+0x55c/0x800 [ 1613.648836][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1613.653915][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1613.660089][ T31] netlink_rcv_skb+0x158/0x420 [ 1613.665070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1613.670120][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1613.675455][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1613.680799][ T31] genl_rcv+0x28/0x40 [ 1613.684799][ T31] netlink_unicast+0x5aa/0x870 [ 1613.689560][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1613.694992][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1613.699778][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.705223][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1613.711380][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1613.716160][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1613.721399][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.726732][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1613.731576][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.736784][ T31] ? __lock_acquire+0x622/0x1c90 [ 1613.742148][ T31] __sys_sendmsg+0x16d/0x220 [ 1613.746747][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1613.751936][ T31] ? find_held_lock+0x2b/0x80 [ 1613.756630][ T31] ? xfd_validate_state+0x61/0x180 [ 1613.761789][ T31] ? do_user_addr_fault+0x843/0x1370 [ 1613.767172][ T31] do_syscall_64+0xcd/0xfa0 [ 1613.771756][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.777666][ T31] RIP: 0033:0x7eff5618f6c9 [ 1613.782127][ T31] RSP: 002b:00007eff543d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.790602][ T31] RAX: ffffffffffffffda RBX: 00007eff563e6090 RCX: 00007eff5618f6c9 [ 1613.798588][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000005 [ 1613.806641][ T31] RBP: 00007eff56211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1613.814746][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1613.822781][ T31] R13: 00007eff563e6128 R14: 00007eff563e6090 R15: 00007fff339e6338 [ 1613.830815][ T31] [ 1613.838625][ T31] [ 1613.838625][ T31] Showing all locks held in the system: [ 1613.903789][ T31] 2 locks held by ksoftirqd/0/15: [ 1613.908855][ T31] 1 lock held by khungtaskd/31: [ 1613.929784][ T31] #0: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1613.949880][ T31] 2 locks held by getty/5588: [ 1613.954691][ T31] #0: ffff88814dd1c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1613.979397][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1614.011039][ T31] 2 locks held by syz-executor/5825: [ 1614.016367][ T31] #0: ffff88807913a0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1614.028023][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1614.038056][ T31] 2 locks held by syz.2.940/10782: [ 1614.043541][ T31] #0: ffff88805c3540e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1614.054331][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1614.064772][ T31] 3 locks held by kworker/1:3/20265: [ 1614.070419][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1614.081369][ T31] #1: ffffc9000b90fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1614.091459][ T31] #2: ffffffff8e3cfb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1614.101879][ T31] 5 locks held by kworker/u11:0/22627: [ 1614.107358][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1614.118249][ T31] #1: ffffc900044dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1614.128542][ T31] #2: ffffffff900d4810 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 1614.137976][ T31] #3: ffffffff900eac48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1614.147592][ T31] #4: ffffffff8e3cfb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1614.158148][ T31] 2 locks held by syz.1.3463/22946: [ 1614.163741][ T31] #0: ffff888032c000e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1614.174831][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1614.185451][ T31] 2 locks held by syz.0.4540/28104: [ 1614.190961][ T31] #0: ffffffff9018e9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1614.199570][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1614.210680][ T31] 2 locks held by syz.0.4540/28107: [ 1614.215898][ T31] #0: ffffffff9018e9d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1614.224600][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1614.235073][ T31] 2 locks held by syz.4.4595/28405: [ 1614.241451][ T31] #0: ffff8880296660e0 (&type->s_umount_key#49/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 1614.254792][ T31] #1: ffffffff8e7ed208 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1614.264882][ T31] 2 locks held by syz.6.5055/30596: [ 1614.270144][ T31] #0: ffffffff900d4810 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 1614.279807][ T31] #1: ffffffff900eac48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1614.289223][ T31] 1 lock held by syz.5.5056/30600: [ 1614.294339][ T31] #0: ffffffff900eac48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1614.303597][ T31] [ 1614.305983][ T31] ============================================= [ 1614.305983][ T31] [ 1614.315324][ T31] NMI backtrace for cpu 1 [ 1614.315344][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1614.315373][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1614.315388][ T31] Call Trace: [ 1614.315396][ T31] [ 1614.315406][ T31] dump_stack_lvl+0x116/0x1f0 [ 1614.315440][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1614.315473][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1614.315502][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1614.315536][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1614.315574][ T31] watchdog+0xf3f/0x1170 [ 1614.315603][ T31] ? rcu_is_watching+0x12/0xc0 [ 1614.315629][ T31] ? __pfx_watchdog+0x10/0x10 [ 1614.315651][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1614.315681][ T31] ? __kthread_parkme+0x19e/0x250 [ 1614.315712][ T31] ? __pfx_watchdog+0x10/0x10 [ 1614.315733][ T31] kthread+0x3c5/0x780 [ 1614.315766][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.315801][ T31] ? rcu_is_watching+0x12/0xc0 [ 1614.315826][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.315860][ T31] ret_from_fork+0x675/0x7d0 [ 1614.315899][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.315932][ T31] ret_from_fork_asm+0x1a/0x30 [ 1614.315980][ T31] [ 1614.315989][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1614.443988][ C0] NMI backtrace for cpu 0 [ 1614.444006][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1614.444035][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1614.444050][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1614.444083][ C0] Code: 97 6f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b3 2c 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1614.444108][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 1614.444127][ C0] RAX: 0000000000f56241 RBX: 0000000000000000 RCX: ffffffff8b5d72a9 [ 1614.444144][ C0] RDX: 0000000000000000 RSI: ffffffff8da28539 RDI: ffffffff8bf075c0 [ 1614.444160][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 1614.444176][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 1614.444192][ C0] R13: ffffffff8e097a00 R14: ffffffff908244d0 R15: 0000000000000000 [ 1614.444209][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 1614.444232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1614.444248][ C0] CR2: 0000000000000000 CR3: 000000007e758000 CR4: 00000000003526f0 [ 1614.444264][ C0] Call Trace: [ 1614.444271][ C0] [ 1614.444280][ C0] default_idle+0x13/0x20 [ 1614.444312][ C0] default_idle_call+0x6c/0xb0 [ 1614.444343][ C0] do_idle+0x38d/0x500 [ 1614.444370][ C0] ? __pfx_do_idle+0x10/0x10 [ 1614.444393][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 1614.444432][ C0] cpu_startup_entry+0x4f/0x60 [ 1614.444456][ C0] rest_init+0x16b/0x2b0 [ 1614.444488][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1614.444522][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1614.444546][ C0] start_kernel+0x3f6/0x4e0 [ 1614.444581][ C0] x86_64_start_reservations+0x18/0x30 [ 1614.444624][ C0] x86_64_start_kernel+0x130/0x190 [ 1614.444660][ C0] common_startup_64+0x13e/0x148 [ 1614.444694][ C0] [ 1614.971498][T22627] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.081156][T22627] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.182075][T22627] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.272113][T22627] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.399134][T22627] team0: left allmulticast mode [ 1615.404426][T22627] team_slave_0: left allmulticast mode [ 1615.409922][T22627] team_slave_1: left allmulticast mode [ 1615.415575][T22627] team0: left promiscuous mode [ 1615.420344][T22627] team_slave_0: left promiscuous mode [ 1615.426431][T22627] team_slave_1: left promiscuous mode [ 1615.435477][T22627] bridge0: port 3(team0) entered disabled state [ 1615.445398][T22627] bridge_slave_1: left allmulticast mode [ 1615.451037][T22627] bridge_slave_1: left promiscuous mode [ 1615.458413][T22627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.468688][T22627] bridge_slave_0: left allmulticast mode [ 1615.476102][T22627] bridge_slave_0: left promiscuous mode [ 1615.481774][T22627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.855675][T22627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.869071][T22627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.879195][T22627] bond0 (unregistering): Released all slaves [ 1616.201577][T22627] hsr_slave_0: left promiscuous mode [ 1616.208065][T22627] hsr_slave_1: left promiscuous mode [ 1616.221582][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1616.230046][T22627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1616.238428][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1616.246490][T22627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1616.286519][T22627] veth1_macvtap: left promiscuous mode [ 1616.300458][T22627] veth0_macvtap: left promiscuous mode [ 1616.306179][T22627] veth1_vlan: left promiscuous mode [ 1616.312722][T22627] veth0_vlan: left promiscuous mode [ 1616.851198][T22627] team0 (unregistering): Port device team_slave_1 removed [ 1616.896838][T22627] team0 (unregistering): Port device team_slave_0 removed [ 1617.758912][T22627] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.852399][T22627] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.926266][T22627] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.019460][T22627] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.247737][T22627] team0: left allmulticast mode [ 1618.258993][T22627] team_slave_0: left allmulticast mode [ 1618.267196][T22627] team_slave_1: left allmulticast mode [ 1618.274278][T22627] team0: left promiscuous mode [ 1618.279071][T22627] team_slave_0: left promiscuous mode [ 1618.285847][T22627] team_slave_1: left promiscuous mode [ 1618.292555][T22627] bridge0: port 3(team0) entered disabled state [ 1618.309914][T22627] bridge_slave_1: left allmulticast mode [ 1618.315602][T22627] bridge_slave_1: left promiscuous mode [ 1618.323153][T22627] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.337051][T22627] bridge_slave_0: left allmulticast mode [ 1618.350095][T22627] bridge_slave_0: left promiscuous mode [ 1618.356894][T22627] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.805423][T22627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.817921][T22627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.828448][T22627] bond0 (unregistering): Released all slaves [ 1619.236607][T22627] hsr_slave_0: left promiscuous mode [ 1619.250627][T22627] hsr_slave_1: left promiscuous mode [ 1619.271165][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.290593][T22627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.303254][T22627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.327224][T22627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.372910][T22627] veth1_macvtap: left promiscuous mode [ 1619.384387][T22627] veth0_macvtap: left promiscuous mode [ 1619.390074][T22627] veth1_vlan: left promiscuous mode [ 1619.413730][T22627] veth0_vlan: left promiscuous mode [ 1619.945911][T22627] team0 (unregistering): Port device team_slave_1 removed [ 1619.989933][T22627] team0 (unregistering): Port device team_slave_0 removed