last executing test programs: 7.241105208s ago: executing program 2 (id=1717): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000980), 0x40200, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@unspec, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) readv$auto(0x3, 0x0, 0x4) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) pipe$auto(0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0x14, 0x0, 0x7, 0xfffffffffffffffe) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap$auto(0x0, 0x100000001, 0xfd5, 0x12, r0, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) 6.789077442s ago: executing program 2 (id=1718): mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x10001, 0x6, 0x3, 0x15f4da07, 0x3, 0x8, 0x62, 0x8000001f, 0x7, 0x16d3b, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) bind$auto(r1, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x3) r2 = socket(0xa, 0x2, 0x73) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/ip_mr_cache\x00', 0x527883, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xc1}, 0x8, 0x4) symlink$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0xa, 0x1f) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x210, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_MODES={0xad, 0x2, 0x0, 0x1, [@generic="97b52361536fe24409fb323c11b8007c5076a4f0738c201930c5b9b3800a18bded7a4bde3b1174039cdaeb541d5137a4afa33ab3cf790013b4caeb002233b34d6d1918d3f850c77a5e0a4b59c442c07f592637d4cd1f97d00e6547a92355c24edd84b0ec93da810593d9f3c508316b74739f00b1e2a03260bf48e7f66051d793e371e26a9b0e55ba5103fcc2887bae2635f2ee8f7c47bfd66f60af089a0ec5f8c8aaa3908bc39e4b55"]}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x9}, @ETHTOOL_A_FEC_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_FEC_MODES={0xb8, 0x2, 0x0, 0x1, [@nested={0xaa, 0xe2, 0x0, 0x1, [@generic="e5cc84a0b8d5414f9548b3c416c3ce2a43c34c60c8f5ce1df6b1292674076f261a73abfac64a406a4ee54ded0d7b94d98fb186cd7007cd6a1aa10604adafa142a500a6ccb8b29e1cc42be9113ab112e8c5cf73e05adc2a5e23d2c4cc188eda6ebb90bc5c5b737cafac01cd12d8ed51131f05d354521470d67fab3bc7391eeff7c1d83ae3d46470c92cb9ee19390aa6f3b225b5704a812ef939f3", @nested={0x4, 0x10}, @nested={0x4, 0xec}, @nested={0x4, 0x1d}]}, @typed={0x8, 0xfc, 0x0, 0x0, @pid}]}, @ETHTOOL_A_FEC_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x20000010}, 0x80c4) getsockname$auto(0x3, 0x0, &(0x7f0000000d40)=0x4) 6.725694733s ago: executing program 1 (id=1719): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x200000000009, 0xb, 0xffff, 0x4, 0x200000000001, 0xb1, 0xb, 0x9, 0x10007, 0x7, 0x4, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8]}, 0x81, 0x968c) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd10, &(0x7f00000001c0)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) write$auto(r2, &(0x7f00000001c0)='\x00', 0xffffffff) mmap$auto(0x4000, 0x400008, 0x3, 0x9b72, 0x2, 0x7ffe) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, r3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) open(0x0, 0x7ffd, 0x12) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) read$auto(r4, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) prctl$auto(0x34, 0xffffffff, 0x0, 0x0, 0x4000800) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x8001, 0x9, 0x138) unshare$auto(0x40000080) socket(0x2, 0x2, 0x1) 5.733656851s ago: executing program 1 (id=1722): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r1, 0x8000) mmap$auto(0x3, 0x400008, 0xff, 0x9b72, 0xffffffffffffffff, 0x80000000008000) recvmmsg$auto(r0, &(0x7f0000000500)={{&(0x7f00000003c0)="0d0799cb0834ae3c6d5ef1572dc33e430ca532ba", 0x9, &(0x7f00000004c0)={&(0x7f0000000400)="f98893ea1cece41a381d4b7d91032aef99eba65d0af89520aea0b3911ca7343f47854bc05d4865c33ccabd2efe25c6c3a6bfab160e957ad9dfc302dc3824a5d51607f4882df2b93a3d94c3ea38049948765070289ad94aa1e7a0d89ab308115a9bec1969877640353d099421c61d62c8dc68b00dbd4f5b4f6fa9e1537cc8b06afaffedf33a122999d26931d0e5f7c518cfeae6ab7861280e2aad34deded4bc869a4132142c1bb75830b147c4955ba23a4ed6", 0x9}, 0x5, &(0x7f0000000840)="8f8f0758074e706085f77f9910ca7e8240e69fd97e5b84b3f1e742d04aa3f305d93f58599075b15e174c5926423fa0cfe53a17640977cefd1abf3c22ede50b45a10b2aed3e8338f120a1db2232393424d875a510e15fd5c494421e5048a18e22acfcbe2c3a0dab32121a1f77eaf8e3e8a21518a1e6e68daa0dad2597c915834d92192647d6feb95c4f80b635022b16672022dbb72b8a45b06e5f649d5d53d1c19c8b4748e34eb89e0c086fdd78518316d239edf724dc4b0c37844d0c2c9e018e549a8474ce24bc99fd81c7fa6027f6e558cb8e5b0b8ce68e7e9ca0ccc5e6f16dc06a30dc654bed193838628e00a4aca9479e36fea10feed2eb6f1bd9b67a4296866bbf1d28311dd95d0b8266b7e4b022ca22933e4dd1c5b82aa41c7fd57003056668b963c2715c62d98698961e2a6b9e94d271ec20a21440137b06b36c308458d85dd1cd3abc37122f4d73477b16a3221a58e4cafc9ed8dcaf74f9b7edbae93d31b9294720958e6f7eccac750a496cf8071f577a8d0a987da18f545bee5d977b01b03d2daeee7f58b3415c62042807db7b55576a547c3174f6fb673d75d068708cd31b634b15a63294889782e8dae5d4eb8c2433ee4159b0332cb71090096e2a4b11807342e5399471fac018ca5a9c265418414420e4325214d6608bfd3d5f1a8b2de1954f93b9d847b9da3490b01ff60609e0814c8ee6c764d92003679a58b4bba13a22180b96641221ad256dd74160f94e4727cd36ee6d34ad7a2b480b6078d3341c922b410cd8e1c47686b1a556fbca7f38a4496ee9bd8be7b046cbfc093f5b1b6db31f35ce30f86cabb8fb30c6e0fb12aca7b4d2b8fd7fd8e827b7a12333b122b1ec186dfe5dd32e0d0a826b3c2924d192a7a3a5488057c09cf619fe4e45386079e7ef3f68b0cafbb6979a8f2d7db6181446a57deb9918ef634947106ea9e6a54295ee8d6d5115d21e9a77aaf440e531e4fcc321da3b75b2d9e02376fd91d1aab85e4099736ccb53a3a10874f2114063b36659cf8f464196918a2d4ea82f407b601843d94181d2cb0c63b614a5803d66e50d2095432837ac5638886171bb814e51c3cf042cf2cfd4b79855eab12aeda8985ffe6417cde8602ed9c36e6696fa7ec3154c8ad0eceefca8db523ef0b943628f281f12d08b7582903c6da3131665fa5b9def368821f6ee75b1ea77a651de92190ec20e07ba9f134562333ec74c4bba2fd5d9d1ab1509013f9f0c68c4ed554560ffbede262902f0aee37b8571a392dd345518ff082106f057bb21859ce218aa4d9a89047f7c2bd1ae22c81fe805da87e54f03dc901be78c36df60eb328901cb703f33c6691dc50f890b5460e826fa0e780592529158082128e4298f6f05b128244569d91715fb1faf92ffa0eff3c17d916255d92842889ef896b33429248597e6b494744d377c390981341f84315459ca3122c7c8d8b1cf2e3f136d365c47a6813f0529b55f1e86e447a2c414fc3c6d1cdb4438f888c7a978f8346095bbae3bc2e3fa7edce5c24f87a519b2597ce625f7dfbbd8eb17444fb720ec8c991a1f457ba82bd6fdecfb17f2dc4c422b61f219b4311959731adb4d38b23a749ec09b93e2fd0cc83fe0c2842c87ab6ce1982272d88c40cab708ed79766089d1803b22ca817ec402bd9308b73723b72bc5f8fe855e6cd0583477e8d789aa538effe317872e9921bbda0ff3cfb4ee81841ee4abb2b889ad32243c4bd3190c77918a0df78cb51baadad2e919a51841e378d5a7652a0f1484d289e110b2b74a212c1da50cd6c437df40724032ece840a721dd10c9c82dd44201c662099ad3802c295f696238558d52fc033d8b8aaf52b510ff0707ff05c2d8789580b3c227ecbb94d55460f0d476abd37e3a1f5934a546dd90d5370e5305bc3bffafb0ceb23eb9be3296e2cc331875ff0123c49b873f825e481a6970094bac57c8cdc0b2af47c6fd6d190a8b78b39530265c7a0926fc21a00a993e5ea92e87dcb42ddc6a5f7fc59c2525fab29af79f11552c8a7eb6e4039ce8e6367d6871b44c24b4827e69219a5e7ca38a1793207ad712d48a2d39bce81ada4b9e475c086bcdd1e310326fc0574571742a0cb17667d35b272cfab79591e8341cea2ce2ce1bb2fcd9da70603ac67f5bee52b2c59918034eb5b2bfd57f690931f82cf125c713705b5acd69cb482bd9abdedc3a07619bab1e8c7293a628e0154f5a78db3ee7e0e4540b5eb36fd9e22415b0302c456e9bef8d91a06354268dab8896d2f252294fd41606d818f0e8da7001166d1dc3e87a09727ce8b950e65d3eef86efacfe56e03dd7b2f3f3da9aadb8bb90c1ebaf0e7561b7e753a5fa520bdbfaaa872767bceb8eb9ee06f2025b5db75cb8d50142a3ad64c1767c641078311e180c4bf29256d08a289a7b419fa2719db7072bb2259348b2391fcb745ab564c6c06fbd3f49ad7aedf2ee21c3e0733086db75df804468d0abad94673db91a2d39dd94e70298f2411fdb49a0a35b4066122456e76caaa7d0d8460591119318668b785974b01f95f14d7b378d3c69280d69ec487f5b8b4783ee7f4f2981574ccc4abe569194c3b593c0e86a5f8c9f1eb96b2247e72df7e8c2b2cd6eb077f45252b8cc7bdb4040ca4125d09e4457ad7653ab51956d9629326ac21448f2c058970ab781cbde9af205e9406c7c17bc397d0fbda852bf453a5053e37a633da34590abacc0c290c6ad88860ae26baa7b92b6e7e12f5b9a5c9d12906ac8d8483a984938ed8d93c72906fedead1372452fa2ca3763b4fad97e0b0755d1aeed3503812100b9b8207835fed2eb107ffad27bbc21b3d2dfcbfa36f3dfdda1496cf847c002143b2019d488afcb4584d88affc7bd7eb6535ed84681fa3803974b65c856885fdd4ef85ad44fde5ff4f48cc983fa322e76e22f027008d19a6d04210565c6f85242e8b58a8fdc63f71455d190819841af923ebee863430b2b88efe7156516213106ee880d73c9fb129bbf8ba7de10b1bbd2ada71e2ea0d959ce8fdb835d19d6177f84a37d87935d3da3c51ce1b1be098371b5965d05e6fc8db008ccde0fbde51a925f17202dfd2d1a34a8efd916ad7c28b5c15cf0eed5354977149c82ceffa21f626f77024ded85ece6a671a0f1382272ba3a04fab18a1180085029fc2c9615ff0826eaa3a6d7d4eb442d84a1e00f9e2edabc4a790c27437334a3f8d39fcdcdc8fcae7c66f261f3de6d978f4f5ffba31db970f4f51a162b5d3007fb55ee1040ee9dce60aacad8d7cac22c31c7a767f9f9fc9456240cf9e326122d14573edeb097f53752ed42bab54b875ff342c9463a29d91d5e940bd44534a2c2e939ce3bb26fe870d3a5ebfc354c4a633888b9c05787442a446f7a1d70ccebe2c41db8722817464a061bce4e35cba649c768bfc741e4816ccd23d912dae12b22144563090bd6cd2f0c27f1c89b8f4d98732c6aafdb9f85b5a6fe4e25e6efcd0216a0510affcee0813c37302fa0766f48b3e0d97b75f5cab304e4987720f0aefbef646149d02d293b05e295a38ffbc175cd41b9661325bdb179a9e9e12827cfbf90c144269f49da9a7eda3fb9b0ca7e160ea24e3184b4a92c0917c2907483493670d88af744db0b4604bb1e2115090a4379418491da775251c83929d5e02d9c711966cb2889fab3b5b5ce590acbce379128e6d2fa006369d5024d23359993ecd1cbec8a89484e65f937321cbb9f8ab87b4ce9008bba69c247481a27e63439e396c900df412034d63d8519bf587d65c077ab4817eba19ffa764d7723a0e8a3cfc84f2d2fb81984cc36f65d003d0aef36fdb396dea4b89d158c186f6afdf4237f35add8428be0e28d0ec319c84a3782af59aaf4b003c5d27c87a06bd809886e064bcc10f9b092f5796e318b77f6b4c3b5cbdda1226acd41e2c0980ac8913040048d54dcff9e80a684d4d1a7a716fb5dcfbe99a66ec04e550a368a6db0740327df1a98dca2f151e624212f5704487d5b2abad76111ad69fe160f41b54630a21e5a343fa6d79a91e39e3df56f11fdc1245a2112fa76695763b6fd2ec1f69d7e00723065c8b4a0c3fd12e63bf5af1714072a7c212ae72da701bf59ef51494718cf92b4d03bf9407a573722f112f3ffb1f766155d7168d83a1cc92c619112a27f8f92d4cfe926c78396d64d638f32d9eb6f02c30b197369e2f2a12aca02314571adb1203682d19113a10de832046ba0493e87b8bd67999a13240dd27d3d373816226473766267d91b0c1d83a26fb90ed42fb8cdb38bd83a94146147910a9e52d7e0e6ca1040aa2e409b71eee78ad364217ed977b9be8cdb3e065c2ad21fcc8d06c85fe55eeab16e8f2ed6476eba9c50ea737092fb725817e61b992906c7ce25382c571a1e38abe1da933a1bf2d659d62b63932775f90cebbf4e9417e6de50392590e3ebe2562016b331fd35d86e7ba667fc1680d2b4fa38546c2a1cfdfe86239b5d3e9a54ac222c09b348c4150e735e5122130cf555ccd3b7cda9005c1ae8d32d4d687f7c299af1d3eed27ffbbb9cde71b721bbbba2e4262bed6bd99a87c5cc6cd741ceaf95a3bbb847ecd95de7bdd0cf2928fd09370d8bfad6e855025aea9fd92dd551b89ca8b9cfea6192eb3c96b49dd69a0fbc8d4e097915826bfac60fa1b1a4f807fae243f1be614a57a49147a9410ddd9960eee563cb5527895d5288c788a0b38750fc4a6dbdcc141f449a6a0410b52109da0fed77410bb677b346c425bff1be3ca3f422eb0d6089cab57ebd83e8eef734bb41a27823bd53d325bb688a162ff1e70474988c92442265be8df54c97f54f7d9151176e6bbe6887a288e37fce4717af5d75a54b1e788e59730247037fc51715fc66598c2a1fc2897a5b3e157dab5653b2ccef5db6550a9e706d18a9f7886e7a7af293f15489ec0041f2581adee3e786836f42a7233ed3a7cf499ed9d4975463f997c34abd78a0db2ba62fd5a062ddf939037788e332f8da68f5599b96404333c32175e3d69916c324fede154330ab69f9e255d1a05063e6fa2da0fa11b46803216d4c25e4608c1559d5d7b857f32e131b3280f904d93d5a8dc9f2d1060f5871eeea965e91cb9e925c7bd380277429976c42e908835e8e59e66d54995477be71c87b2fb7ff6ea71bd553d09563ceb90874656fe31494ab3b5df91f8a08efa7aaa6904fd693ee6ff5858b1bfb15f6dbae6743c0a69d4206d7423ed8cef23ed91221b58d8c67b8a294204227802fd6df364da747341f643bb560d3316a7911d3cc4cbeb7afac4a6df17dc1a73e3adb7351d09a08462352bfc46fbc98c017f563ba3a7da796144d5ad1a6556d39361232a80f1bc3cdfd053cb6e99e0580f8b46ed24e05d72f568c3355f451c887e9ffc0bf5c5d1248d1a918127fc1dd50cd64ec660cdd0981bf0b2afd6dbff90cd253821799c429046dd039e9fc17a5a6e280f1384a29be7acfec2f40b47768ccffdb61110d96a46648f35e8acef22f7157c284e525bb4b631e06c9891ff50e063d4d7fb9540c6cee1949c64bad1cfd12a3406819f759c93a393b1e098ee5c1a72bbc77f8a7f1fe0da2a80db390ef8f2cb13600b5be54ba01b253b9b91d066398bfb07b7d0744a19aedf0825712dec5106f260a9b77f0206af273376170c95d489a6af8d740e54b49f4ceb02c7f720d3e338a5805a3e80874058bd9614d523c67082ea4c12fe0c9c60fa2a6cdd4ee58edff4e272e0f69a7eeedc08fb71127b4822c4e07209f3e638d85602aa3c30dfbc00f58793ab1ef4f67d2bea95904d8dcbb33b4ea6fd64e852dbf92b3f9470b", 0x1}, 0x81}, 0x6, 0x8, &(0x7f0000000580)={0xf, 0x6}) membarrier$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xebf, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@nl=@unspec, 0x400) socket(0x22, 0x3, 0x800002) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) memfd_create$auto(&(0x7f0000000600)='(.()]$\x9f.]\xbc*\xc7}%+%\x00', 0x4) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000005c0)='./file1/file0\x00') getxattrat$auto(r4, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000380)={0x10, 0x5, 0x4}, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(r4, 0xffffff01, &(0x7f0000000180)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f00000001c0)="2f718086ac223fc7f9070924d0f82503413c457ca44abf04768f1edcc19d291799c6e46743206b26e51c19807d4d46265fb11fab4cfe2c1d05540af9303dea75f3f947583f4bd5e6c7a3d600007495a7aae990d2e3a3ca9e6b94a2034c90e5b8f60bcf660fb025e71c7d6d6a4e9d130c7417e25e07f703f26224e7ee2cf957a42136e9dd7782eb899f9b33", 0xfffffffffffffffe) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b4d", 0x4) 5.582266445s ago: executing program 3 (id=1724): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x2b, 0xa, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/028/001\x00', 0x6c0902, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x0, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) 5.501067243s ago: executing program 0 (id=1725): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x183042, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00z_1\xbej8+\xda\xbd\xe5}\x96\x1a\x8e\r\xef\xf2\xef\xf8\x15\xce\xb3b\x9a\xe9\rB\x88\xf2G\xfe=\xe6l\x19\xb6\x1d\xf0\xb7x\x9b\n\'\x9a_\xcf\xcd\xe5K\xd8q', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto(0x3c, 0x807, 0x0, 0x1, 0x5) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x78, r2, 0x7a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) 4.460849053s ago: executing program 2 (id=1726): mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xffffffffffffffff, 0x4) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x242a82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x20009, 0x100000001, 0xeb1, 0x401, 0x8000) r1 = open(0x0, 0x80842, 0x91) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(r0, &(0x7f0000000700)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) timerfd_create$auto(0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x6, 0xd759) 3.847374055s ago: executing program 0 (id=1728): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.kmem.limit_in_bytes\x00', 0xc2302, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x40000, 0x0) shmctl$auto_IPC_SET(0x1, 0x1, &(0x7f0000000840)={{0x6000, 0x0, 0x0, 0x40, 0x4, 0xfff, 0x7}, 0x80000001, 0x5, 0x8, 0x6, @raw=0x3, @raw=0x8000, 0xb5c, 0x0, &(0x7f0000000780), &(0x7f0000000800)}) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x1, 0x84) r1 = socket(0x10, 0x2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x40102, 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x9, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0xc, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x72, 0x0, 0x0, 0xff]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) (fail_nth: 12) 3.736300192s ago: executing program 2 (id=1729): socket(0x11, 0x80003, 0x300) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x22) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getsid$auto(0xffffffffffffffff) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000780)={@siginfo_0_0={0x80000001, 0x7, 0xfff, @_kill={r2}}}) r3 = socket(0x18, 0xa, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/duplex\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000300)=""/77, 0x4d) connect$auto(r3, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0xf0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.592018487s ago: executing program 3 (id=1730): mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6b8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x80002) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/54, 0x36) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x9}, 0x6, 0x9, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec23\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='=\xc6\b\x1f\xf3\xd6*\xd1Vc\xff\x8be\xba\x1dVh=;\xc7\xa0\x16,8Jo\x84\x81r\v\xd4\x06\x009\aG\xe7\'\x12\x03\xb0cu\xb0\xa0\xacbL\xc9\xce\xf3\t', 0x100000a3d9) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f00000002c0)={{0x4, 0xee00, 0xffffffffffffffff, 0x7, 0x0, 0xf73f, 0x1}, &(0x7f0000000200)=0x80, &(0x7f0000000240)=0x7, 0x41, 0x5, 0x6, 0x9, 0x10, 0xfff, 0x2, 0x3, @raw=0x8, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0x0, 0x3, 0xd, 0x1, 0xd}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0xc7, 0x6, 0xe1, 0x9, 0x100, 0x8, 0x3, 0x40, 0x7f, @raw=0x4, @raw=0x10001}) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x8140aecc, 0x0) keyctl$auto(0x5, r4, 0xffffffffffffffff, r5, 0x4) 3.509849403s ago: executing program 0 (id=1731): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x4, 0xfffffffffffffff7, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x7, 0x4, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) inotify_init1$auto(0x401) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x4}, 0x3) (async) write$auto(r0, &(0x7f0000000280)='\x00', 0x2) (async) sendmsg$auto_IPVS_CMD_FLUSH(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="b2f40700", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="00bc576579826533b0bf28dd4ab3bcbd8ab5ba0fef7e0cc364fe58f8dce18c9872044366c6c84580eba54f8d10371bdd8d9c3b9cd34547896c43028f757e0ebcee414737920c57bdbfeb5dac56de76bbb8958687c8e6a28f2abc7cc8b762a5d35a6adf6b86f6c64098412ef2a1137df6118438a22b93d46511faa2adbedbeb746ee2febf170ea395f95cedf50bb882f27d931c0d42c0263d9e9b4b8ce9ffac38dcd248d43d327efaa1b5753cb899958a8e58816005f1070c4b7bef97d4d6ae8b03a52cddde678d47b2330642be41e367b50a91537e5dd302dd19b6b9bd1d5cab5ea5580f2578b1485e192a2ceb5e044e4124ca2f0c1e2aea865081c49ef300000008000400040000000800060000000000300101802901048004000d80040049800400488004002600ad5d079172db3691f31015fadd64b9c931790efa342d19514b7503daebc29a40309d5c7953853d16920c55059408001e00ac1414aa0500460000000000f746e4ceb215f9ad8a0b3d3c0291e872c69279e298f2763cecc21bca1d5023aa95adcffdd1d45d17d23664c07ccd27046599633761ae38dd2d1382aff1a1163982df04f1f23275332711104e421d771ddda8fcee19e1ed3f79f52e0fe787d2f2af50f256747bd0aaa67390631906ed21ba4bfd683b69ab229223cdc1f014e2c991d7213b162d3b7c4860fb679b7e0d5cea2b70b470b6f02ceb846f607067dcdd158a0d9afebd432fe560f985b78cb61d88d2b3145a74736efee47c57ec42c7cc71dd1e4f0e47807f02e40efbd83114a8032604911d92e4df0000000800050004000000"], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x3a) (async) socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000000), 0x3ff, 0x0, 0x9, 0x0, 0x3ff, 0x24000000}, 0xb6}, 0x2, 0x2) 2.683903044s ago: executing program 1 (id=1732): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x2, "8b00000000000000"}, 0x36c) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000100)=""/10, 0xa) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r2, 0xe5a, 0x5) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) utimensat$auto(r3, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3fffffff}, 0x1000) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000280)=0x3, 0x0, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0x3, 0x6498}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x800, 0x7ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mincore$auto(0x8, 0x9, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0x4, 0x0, 0x2) socket(0x2, 0x1, 0x106) memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 2.648022574s ago: executing program 3 (id=1733): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002100), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf25870000008800d700ce663be44c2ab39c0a411e0c0f4b05dbb10589d60e416fbc3a4d1abf8f0d864fbac193f3c08aba6f5d956e517214235b5c7ceaebcfa8a83e7f198a70fa2fe46142609e753548ee63ec78a9d9f51699e50785a0bcb741abfcd02b606adb43948cfdbe0a4279ca405ec02f5ccb6f1357ecedd55958d3561e31084d93005819740016ba438004004600b1c53234ad6437e24fd178eaee4073a402bd86fd565abe"], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x24008054) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) unshare$auto(0x8000000) semtimedop$auto(0x7, &(0x7f0000000200)={0x3, 0x6, 0x1000}, 0x3, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto(0x3, 0xc0585605, 0x38) unshare$auto(0x8000000) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4}, 0x96) bpf$auto(0xffffffff, 0x0, 0xb) r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r4, &(0x7f0000000100)={&(0x7f0000000300)="eb81d016b806a1bb183efad8850200000000000086519c6309a4645b94dd000f000000000000", 0x82}, 0x8, 0xd62a, 0x5) socket(0x30, 0x4, 0x6) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="00004b1f0862340000", @ANYRES16=r3, @ANYBLOB="00042cbd7000f9db9f2502000000"], 0x2c}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) 2.497901887s ago: executing program 0 (id=1734): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x200000000009, 0xb, 0xffff, 0x4, 0x200000000001, 0xb1, 0xb, 0x9, 0x10007, 0x7, 0x4, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8]}, 0x81, 0x968c) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd10, &(0x7f00000001c0)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) write$auto(r2, &(0x7f00000001c0)='\x00', 0xffffffff) mmap$auto(0x4000, 0x400008, 0x3, 0x9b72, 0x2, 0x7ffe) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, r3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) open(0x0, 0x7ffd, 0x12) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) read$auto(r4, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) prctl$auto(0x34, 0xffffffff, 0x0, 0x0, 0x4000800) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x8001, 0x9, 0x138) unshare$auto(0x40000080) socket(0x2, 0x2, 0x1) 2.381647088s ago: executing program 2 (id=1735): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd59d3607000fddbdf250a00000a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x10000, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) 2.089736743s ago: executing program 3 (id=1736): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/workqueue/nvme-delete-wq/affinity_strict\x00', 0x583042, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000080)="d7351225de75ea3d896858391de393663f7c228bd89ece605085d3c70725731e99afe5c51867cc917b098f7d20473950323f2a96b3896cc8c936acf03131d98b8d5d9283efb1aa536cb35a568509aa49115eec1c2ec27a2c05bb18ffc84b01f982aa8b871f58d88056a31104607fbd187d22ac2c9f") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/bdi/7:14/max_bytes\x00', 0x182a02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) r2 = socket(0x10, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1f000000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) 1.59163909s ago: executing program 1 (id=1737): mlockall$auto(0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x300000000000000, 0x3, 0x4) 1.511237451s ago: executing program 0 (id=1738): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x200000000009, 0xb, 0xffff, 0x4, 0x200000000001, 0xb1, 0xb, 0x9, 0x10007, 0x7, 0x4, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x7, 0x6, 0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x1, 0x8000200000000001, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8]}, 0x81, 0x968c) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1441, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd10, &(0x7f00000001c0)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/bus/serio/drivers/pulse8-cec/bind_mode\x00', 0x1eb842, 0x0) write$auto(r2, &(0x7f00000001c0)='\x00', 0xffffffff) mmap$auto(0x4000, 0x400008, 0x3, 0x9b72, 0x2, 0x7ffe) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, r3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) open(0x0, 0x7ffd, 0x12) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) read$auto(r4, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) prctl$auto(0x34, 0xffffffff, 0x0, 0x0, 0x4000800) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x40000080) socket(0x2, 0x2, 0x1) 1.216258919s ago: executing program 1 (id=1739): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x2b, 0xa, 0xfffffffe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/028/001\x00', 0x6c0902, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r3, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x0, 0x40eb1, 0x401, 0x300000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) 1.2053409s ago: executing program 2 (id=1740): r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r0, &(0x7f0000000000)={0x8, 0x2, "8b00000000000000"}, 0x36c) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x48050) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000100)=""/10, 0xa) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = open(0x0, 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r2, 0xe5a, 0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r3, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x3fffffff}, 0x1000) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000280)=0x3, 0x0, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0x3, 0x6498}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x800, 0x7ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mincore$auto(0x8, 0x9, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0x4, 0x0, 0x2) socket(0x2, 0x1, 0x106) memfd_create$auto(&(0x7f00000008c0)='/sys/kernel/debug/x86/boot_params/data\x00', 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) 1.118796869s ago: executing program 3 (id=1741): mmap$auto(0x1, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6b8) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x80002) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/54, 0x36) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x9}, 0x6, 0x9, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec23\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='=\xc6\b\x1f\xf3\xd6*\xd1Vc\xff\x8be\xba\x1dVh=;\xc7\xa0\x16,8Jo\x84\x81r\v\xd4\x06\x009\aG\xe7\'\x12\x03\xb0cu\xb0\xa0\xacbL\xc9\xce\xf3\t', 0x100000a3d9) msgctl$auto_IPC_STAT(0x3, 0x2, &(0x7f00000002c0)={{0x4, 0xee00, 0xffffffffffffffff, 0x7, 0x0, 0xf73f, 0x1}, &(0x7f0000000200)=0x80, &(0x7f0000000240)=0x7, 0x41, 0x5, 0x6, 0x9, 0x10, 0xfff, 0x2, 0x3, @raw=0x8, @inferred=0xffffffffffffffff}) msgctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0x0, 0x3, 0xd, 0x1, 0xd}, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0xc7, 0x6, 0xe1, 0x9, 0x100, 0x8, 0x3, 0x40, 0x7f, @raw=0x4, @raw=0x10001}) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, r3, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x8140aecc, 0x0) keyctl$auto(0x5, r4, 0xffffffffffffffff, r5, 0x4) 465.956µs ago: executing program 0 (id=1742): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r1, 0x8000) mmap$auto(0x3, 0x400008, 0xff, 0x9b72, 0xffffffffffffffff, 0x80000000008000) recvmmsg$auto(r0, &(0x7f0000000500)={{&(0x7f00000003c0)="0d0799cb0834ae3c6d5ef1572dc33e430ca532ba", 0x9, &(0x7f00000004c0)={&(0x7f0000000400)="f98893ea1cece41a381d4b7d91032aef99eba65d0af89520aea0b3911ca7343f47854bc05d4865c33ccabd2efe25c6c3a6bfab160e957ad9dfc302dc3824a5d51607f4882df2b93a3d94c3ea38049948765070289ad94aa1e7a0d89ab308115a9bec1969877640353d099421c61d62c8dc68b00dbd4f5b4f6fa9e1537cc8b06afaffedf33a122999d26931d0e5f7c518cfeae6ab7861280e2aad34deded4bc869a4132142c1bb75830b147c4955ba23a4ed6", 0x9}, 0x5, &(0x7f0000000840)="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", 0x1}, 0x81}, 0x6, 0x8, &(0x7f0000000580)={0xf, 0x6}) membarrier$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xebf, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@nl=@unspec, 0x400) socket(0x22, 0x3, 0x800002) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) memfd_create$auto(&(0x7f0000000600)='(.()]$\x9f.]\xbc*\xc7}%+%\x00', 0x4) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x28) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000005c0)='./file1/file0\x00') getxattrat$auto(r4, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f0000000380)={0x10, 0x5, 0x4}, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) fsconfig$auto_SHMEM_HUGE_FORCE(r4, 0xffffff01, &(0x7f0000000180)='/sys/kernel/debug/check_wx_pages\x00', &(0x7f00000001c0)="2f718086ac223fc7f9070924d0f82503413c457ca44abf04768f1edcc19d291799c6e46743206b26e51c19807d4d46265fb11fab4cfe2c1d05540af9303dea75f3f947583f4bd5e6c7a3d600007495a7aae990d2e3a3ca9e6b94a2034c90e5b8f60bcf660fb025e71c7d6d6a4e9d130c7417e25e07f703f26224e7ee2cf957a42136e9dd7782eb899f9b33", 0xfffffffffffffffe) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b4d", 0x4) 213.706µs ago: executing program 1 (id=1743): mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xffffffffffffffff, 0x4) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/cmci_disabled\x00', 0x20102, 0x0) mmap$auto(0x0, 0x20009, 0x100000001, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x1) write$auto(0x3, 0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(r0, &(0x7f0000000700)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) timerfd_create$auto(0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x6, 0xd759) 0s ago: executing program 3 (id=1744): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) (rerun: 32) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) epoll_pwait$auto(r0, &(0x7f0000000000)={0xfffffffb, 0x3}, 0x1000, 0xff, &(0x7f0000000100)={0x6}, 0x8) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) (async) write$auto(0x3, 0x0, 0xffd8) sendto$auto(0x3, 0x0, 0x5, 0x5d9, 0x0, 0x8) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket(0xa, 0x5, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, &(0x7f0000000080)=0x49b) (async, rerun: 32) mmap$auto_usbdev_file_operations_usb(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x8010, r2, 0x40) (rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): options+0x76/0x190 [ 440.609964][T11897] __x64_sys_mount+0x1ac/0x310 [ 440.610000][T11897] ? __pfx___x64_sys_mount+0x10/0x10 [ 440.610041][T11897] do_syscall_64+0xcd/0x490 [ 440.610078][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.610106][T11897] RIP: 0033:0x7fbeb038ebe9 [ 440.610127][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.610155][T11897] RSP: 002b:00007fbeb12bc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.610182][T11897] RAX: ffffffffffffffda RBX: 00007fbeb05b6090 RCX: 00007fbeb038ebe9 [ 440.610200][T11897] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 00002000000000c0 [ 440.610217][T11897] RBP: 00007fbeb0411e19 R08: 0000200000000180 R09: 0000000000000000 [ 440.610234][T11897] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 440.610251][T11897] R13: 00007fbeb05b6128 R14: 00007fbeb05b6090 R15: 00007ffc8c49bb38 [ 440.610276][T11897] [ 441.611193][T11912] FAULT_INJECTION: forcing a failure. [ 441.611193][T11912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.626314][T11912] CPU: 1 UID: 0 PID: 11912 Comm: syz.1.1206 Not tainted syzkaller #0 PREEMPT(full) [ 441.626371][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 441.626391][T11912] Call Trace: [ 441.626402][T11912] [ 441.626414][T11912] dump_stack_lvl+0x16c/0x1f0 [ 441.626461][T11912] should_fail_ex+0x512/0x640 [ 441.626510][T11912] _copy_from_user+0x2e/0xd0 [ 441.626565][T11912] copy_msghdr_from_user+0x98/0x160 [ 441.626609][T11912] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 441.626656][T11912] ? kfree+0x24f/0x4d0 [ 441.626686][T11912] ? __pfx__kstrtoull+0x10/0x10 [ 441.626732][T11912] ___sys_sendmsg+0xfe/0x1d0 [ 441.626775][T11912] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.626823][T11912] ? rcu_is_watching+0x12/0xc0 [ 441.626866][T11912] ? __pfx___might_resched+0x10/0x10 [ 441.626905][T11912] __sys_sendmmsg+0x200/0x420 [ 441.626951][T11912] ? __pfx___sys_sendmmsg+0x10/0x10 [ 441.626993][T11912] ? lock_release+0x201/0x2f0 [ 441.627045][T11912] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 441.627099][T11912] ? fput+0x9b/0xd0 [ 441.627145][T11912] ? ksys_write+0x1ac/0x250 [ 441.627182][T11912] ? __pfx_ksys_write+0x10/0x10 [ 441.627225][T11912] __x64_sys_sendmmsg+0x9c/0x100 [ 441.627272][T11912] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 441.627326][T11912] do_syscall_64+0xcd/0x490 [ 441.627379][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.627412][T11912] RIP: 0033:0x7fbeb038ebe9 [ 441.627437][T11912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.627471][T11912] RSP: 002b:00007fbeb1259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.627502][T11912] RAX: ffffffffffffffda RBX: 00007fbeb05b6360 RCX: 00007fbeb038ebe9 [ 441.627525][T11912] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 441.627545][T11912] RBP: 00007fbeb1259090 R08: 0000000000000000 R09: 0000000000000000 [ 441.627566][T11912] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.627587][T11912] R13: 00007fbeb05b63f8 R14: 00007fbeb05b6360 R15: 00007ffc8c49bb38 [ 441.627619][T11912] [ 441.894416][T11915] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1209'. [ 442.064183][T11918] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 442.080465][T11921] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 443.702356][T11953] FAULT_INJECTION: forcing a failure. [ 443.702356][T11953] name failslab, interval 1, probability 0, space 0, times 0 [ 443.719815][T11953] CPU: 1 UID: 0 PID: 11953 Comm: syz.0.1216 Not tainted syzkaller #0 PREEMPT(full) [ 443.719860][T11953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.719881][T11953] Call Trace: [ 443.719891][T11953] [ 443.719903][T11953] dump_stack_lvl+0x16c/0x1f0 [ 443.719956][T11953] should_fail_ex+0x512/0x640 [ 443.720005][T11953] ? handler_new_ref+0x1b0/0xc60 [ 443.720049][T11953] should_failslab+0xc2/0x120 [ 443.720092][T11953] __kmalloc_noprof+0xd2/0x510 [ 443.720128][T11953] ? __asan_memcpy+0x3c/0x60 [ 443.720163][T11953] handler_new_ref+0x1b0/0xc60 [ 443.720211][T11953] v4l2_ctrl_new+0x1963/0x2180 [ 443.720262][T11953] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 443.720313][T11953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.720364][T11953] v4l2_ctrl_new_std+0x1be/0x290 [ 443.720415][T11953] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 443.720462][T11953] ? rcu_is_watching+0x12/0xc0 [ 443.720494][T11953] ? trace_kmalloc+0x2b/0xd0 [ 443.720538][T11953] ? __kvmalloc_node_noprof+0x298/0x620 [ 443.720575][T11953] ? v4l2_ctrl_handler_init_class+0x1fc/0x340 [ 443.720622][T11953] ? media_request_object_init+0x100/0x180 [ 443.720672][T11953] vicodec_open+0x1d0/0xf90 [ 443.720711][T11953] v4l2_open+0x225/0x490 [ 443.720748][T11953] ? __pfx_v4l2_open+0x10/0x10 [ 443.720791][T11953] chrdev_open+0x231/0x6a0 [ 443.720834][T11953] ? __pfx_apparmor_file_open+0x10/0x10 [ 443.720870][T11953] ? __pfx_chrdev_open+0x10/0x10 [ 443.720912][T11953] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 443.720962][T11953] do_dentry_open+0x97f/0x1530 [ 443.721003][T11953] ? __pfx_chrdev_open+0x10/0x10 [ 443.721049][T11953] vfs_open+0x82/0x3f0 [ 443.721098][T11953] path_openat+0x1de4/0x2cb0 [ 443.721142][T11953] ? __pfx_path_openat+0x10/0x10 [ 443.721187][T11953] do_filp_open+0x20b/0x470 [ 443.721223][T11953] ? __pfx_do_filp_open+0x10/0x10 [ 443.721276][T11953] ? alloc_fd+0x471/0x7d0 [ 443.721315][T11953] do_sys_openat2+0x11b/0x1d0 [ 443.721365][T11953] ? __pfx_do_sys_openat2+0x10/0x10 [ 443.721414][T11953] ? lock_release+0x201/0x2f0 [ 443.721462][T11953] __x64_sys_openat+0x174/0x210 [ 443.721513][T11953] ? __pfx___x64_sys_openat+0x10/0x10 [ 443.721573][T11953] do_syscall_64+0xcd/0x490 [ 443.721618][T11953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.721650][T11953] RIP: 0033:0x7f940db8ebe9 [ 443.721676][T11953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.721709][T11953] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 443.721740][T11953] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 443.721762][T11953] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 443.721784][T11953] RBP: 00007f940dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 443.721804][T11953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.721824][T11953] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 443.721855][T11953] [ 444.068947][T11955] ptrace attach of "./syz-executor exec"[5860] was attempted by ""[11955] [ 444.096304][T11959] ptrace attach of "./syz-executor exec"[5860] was attempted by ""[11959] [ 444.691831][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.698727][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.126100][T12009] random: crng reseeded on system resumption [ 447.775410][T12037] FAULT_INJECTION: forcing a failure. [ 447.775410][T12037] name failslab, interval 1, probability 0, space 0, times 0 [ 447.807906][T12037] CPU: 0 UID: 0 PID: 12037 Comm: syz.0.1233 Not tainted syzkaller #0 PREEMPT(full) [ 447.807939][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.807954][T12037] Call Trace: [ 447.807962][T12037] [ 447.807971][T12037] dump_stack_lvl+0x16c/0x1f0 [ 447.808005][T12037] should_fail_ex+0x512/0x640 [ 447.808041][T12037] ? tomoyo_encode2+0x100/0x3e0 [ 447.808075][T12037] should_failslab+0xc2/0x120 [ 447.808117][T12037] __kmalloc_noprof+0xd2/0x510 [ 447.808153][T12037] ? d_absolute_path+0x136/0x1a0 [ 447.808188][T12037] tomoyo_encode2+0x100/0x3e0 [ 447.808223][T12037] tomoyo_encode+0x29/0x50 [ 447.808255][T12037] tomoyo_realpath_from_path+0x18f/0x6e0 [ 447.808294][T12037] tomoyo_path_number_perm+0x245/0x580 [ 447.808323][T12037] ? tomoyo_path_number_perm+0x237/0x580 [ 447.808353][T12037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 447.808388][T12037] ? preempt_count_add+0x76/0x150 [ 447.808430][T12037] ? rcu_is_watching+0x12/0xc0 [ 447.808455][T12037] ? __fget_files+0x204/0x3c0 [ 447.808480][T12037] ? hook_file_ioctl_common+0x145/0x410 [ 447.808511][T12037] ? lock_release+0x201/0x2f0 [ 447.808543][T12037] ? __fget_files+0x20e/0x3c0 [ 447.808570][T12037] security_file_ioctl+0x9b/0x240 [ 447.808601][T12037] __x64_sys_ioctl+0xb7/0x210 [ 447.808639][T12037] do_syscall_64+0xcd/0x490 [ 447.808672][T12037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.808697][T12037] RIP: 0033:0x7f940db8ebe9 [ 447.808715][T12037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.808738][T12037] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.808760][T12037] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 447.808776][T12037] RDX: 0000200000000080 RSI: 0000000000004601 RDI: 0000000000000005 [ 447.808791][T12037] RBP: 00007f940ea3b090 R08: 0000000000000000 R09: 0000000000000000 [ 447.808805][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.808819][T12037] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 447.808841][T12037] [ 447.810370][T12037] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.312930][T12042] FAULT_INJECTION: forcing a failure. [ 448.312930][T12042] name failslab, interval 1, probability 0, space 0, times 0 [ 448.366962][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.3.1235 Not tainted syzkaller #0 PREEMPT(full) [ 448.367002][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.367020][T12042] Call Trace: [ 448.367029][T12042] [ 448.367040][T12042] dump_stack_lvl+0x16c/0x1f0 [ 448.367084][T12042] should_fail_ex+0x512/0x640 [ 448.367132][T12042] should_failslab+0xc2/0x120 [ 448.367172][T12042] __kvmalloc_node_noprof+0x137/0x620 [ 448.367207][T12042] ? seq_read_iter+0x826/0x12c0 [ 448.367240][T12042] ? seq_read_iter+0x826/0x12c0 [ 448.367268][T12042] seq_read_iter+0x826/0x12c0 [ 448.367297][T12042] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 448.367342][T12042] kernfs_fop_read_iter+0x40f/0x5a0 [ 448.367375][T12042] copy_splice_read+0x615/0xc20 [ 448.367409][T12042] ? __pfx_copy_splice_read+0x10/0x10 [ 448.367441][T12042] ? look_up_lock_class+0x59/0x150 [ 448.367482][T12042] ? lockdep_init_map_type+0x5c/0x280 [ 448.367524][T12042] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 448.367563][T12042] ? __pfx_copy_splice_read+0x10/0x10 [ 448.367593][T12042] do_splice_read+0x285/0x370 [ 448.367624][T12042] splice_direct_to_actor+0x2a1/0xa30 [ 448.367656][T12042] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.367693][T12042] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 448.367731][T12042] do_splice_direct+0x174/0x240 [ 448.367763][T12042] ? __pfx_do_splice_direct+0x10/0x10 [ 448.367803][T12042] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.367836][T12042] ? bpf_lsm_file_permission+0x9/0x10 [ 448.367881][T12042] ? security_file_permission+0x71/0x210 [ 448.367925][T12042] ? rw_verify_area+0xcf/0x6c0 [ 448.367959][T12042] do_sendfile+0xb06/0xe50 [ 448.367995][T12042] ? __pfx_do_sendfile+0x10/0x10 [ 448.368030][T12042] ? __fget_files+0x20e/0x3c0 [ 448.368065][T12042] __x64_sys_sendfile64+0x1d8/0x220 [ 448.368107][T12042] ? ksys_write+0x1ac/0x250 [ 448.368141][T12042] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 448.368191][T12042] do_syscall_64+0xcd/0x490 [ 448.368235][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.368266][T12042] RIP: 0033:0x7fe37a18ebe9 [ 448.368289][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.368321][T12042] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.368351][T12042] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 448.368371][T12042] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 448.368390][T12042] RBP: 00007fe37afc4090 R08: 0000000000000000 R09: 0000000000000000 [ 448.368409][T12042] R10: 000400007ffff001 R11: 0000000000000246 R12: 0000000000000001 [ 448.368429][T12042] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 448.368460][T12042] [ 449.223727][T12067] FAULT_INJECTION: forcing a failure. [ 449.223727][T12067] name failslab, interval 1, probability 0, space 0, times 0 [ 449.237333][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.2.1240 Not tainted syzkaller #0 PREEMPT(full) [ 449.237380][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.237400][T12067] Call Trace: [ 449.237411][T12067] [ 449.237422][T12067] dump_stack_lvl+0x16c/0x1f0 [ 449.237469][T12067] should_fail_ex+0x512/0x640 [ 449.237518][T12067] should_failslab+0xc2/0x120 [ 449.237553][T12067] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 449.237583][T12067] ? getname_flags.part.0+0x4c/0x550 [ 449.237626][T12067] getname_flags.part.0+0x4c/0x550 [ 449.237667][T12067] getname_flags+0x93/0xf0 [ 449.237694][T12067] user_path_at+0x24/0x60 [ 449.237729][T12067] __x64_sys_mount+0x1fc/0x310 [ 449.237762][T12067] ? __pfx___x64_sys_mount+0x10/0x10 [ 449.237800][T12067] do_syscall_64+0xcd/0x490 [ 449.237835][T12067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.237860][T12067] RIP: 0033:0x7f83dc18ebe9 [ 449.237879][T12067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.237905][T12067] RSP: 002b:00007f83da3cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.237928][T12067] RAX: ffffffffffffffda RBX: 00007f83dc3b6090 RCX: 00007f83dc18ebe9 [ 449.237945][T12067] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 00002000000000c0 [ 449.237961][T12067] RBP: 00007f83dc211e19 R08: 0000200000000180 R09: 0000000000000000 [ 449.237976][T12067] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 449.237991][T12067] R13: 00007f83dc3b6128 R14: 00007f83dc3b6090 R15: 00007ffec2746568 [ 449.238014][T12067] [ 449.497976][T12066] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 449.856597][T12077] Console: switching to colour VGA+ 80x25 [ 450.243560][T12086] FAULT_INJECTION: forcing a failure. [ 450.243560][T12086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.269691][T12086] CPU: 1 UID: 0 PID: 12086 Comm: syz.3.1244 Not tainted syzkaller #0 PREEMPT(full) [ 450.269731][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.269748][T12086] Call Trace: [ 450.269758][T12086] [ 450.269770][T12086] dump_stack_lvl+0x16c/0x1f0 [ 450.269811][T12086] should_fail_ex+0x512/0x640 [ 450.269859][T12086] _copy_to_user+0x32/0xd0 [ 450.269888][T12086] pagemap_read+0x52c/0x890 [ 450.269926][T12086] ? __pfx_pagemap_read+0x10/0x10 [ 450.269960][T12086] ? common_file_perm+0x1a9/0x340 [ 450.270001][T12086] ? bpf_lsm_file_permission+0x9/0x10 [ 450.270049][T12086] ? security_file_permission+0x71/0x210 [ 450.270090][T12086] ? rw_verify_area+0xcf/0x6c0 [ 450.270119][T12086] ? __pfx_pagemap_read+0x10/0x10 [ 450.270153][T12086] vfs_readv+0x5be/0x8b0 [ 450.270188][T12086] ? __pfx_vfs_readv+0x10/0x10 [ 450.270220][T12086] ? preempt_count_add+0x76/0x150 [ 450.270269][T12086] ? rcu_is_watching+0x12/0xc0 [ 450.270306][T12086] ? __fget_files+0x20e/0x3c0 [ 450.270340][T12086] ? do_preadv+0x1a6/0x270 [ 450.270368][T12086] do_preadv+0x1a6/0x270 [ 450.270400][T12086] ? __pfx_do_preadv+0x10/0x10 [ 450.270436][T12086] do_syscall_64+0xcd/0x490 [ 450.270477][T12086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.270507][T12086] RIP: 0033:0x7fe37a18ebe9 [ 450.270531][T12086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.270559][T12086] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 450.270588][T12086] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 450.270608][T12086] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0040000000000003 [ 450.270628][T12086] RBP: 00007fe37afc4090 R08: 0000000000000005 R09: 0000000000000000 [ 450.270656][T12086] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 450.270678][T12086] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 450.270709][T12086] [ 450.554353][T12094] FAULT_INJECTION: forcing a failure. [ 450.554353][T12094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.554389][T12094] CPU: 1 UID: 0 PID: 12094 Comm: syz.3.1246 Not tainted syzkaller #0 PREEMPT(full) [ 450.554419][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.554433][T12094] Call Trace: [ 450.554440][T12094] [ 450.554448][T12094] dump_stack_lvl+0x16c/0x1f0 [ 450.554482][T12094] should_fail_ex+0x512/0x640 [ 450.554519][T12094] _copy_from_user+0x2e/0xd0 [ 450.554558][T12094] get_timespec64+0x8b/0x1b0 [ 450.554588][T12094] ? __pfx_get_timespec64+0x10/0x10 [ 450.554622][T12094] __x64_sys_utimensat+0x17a/0x290 [ 450.554654][T12094] ? __do_sys_openat2+0x1c8/0x2d0 [ 450.554693][T12094] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 450.554730][T12094] do_syscall_64+0xcd/0x490 [ 450.554764][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.554788][T12094] RIP: 0033:0x7fe37a18ebe9 [ 450.554805][T12094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.554829][T12094] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 450.554851][T12094] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 450.554867][T12094] RDX: 0000200000001400 RSI: 0000000000000000 RDI: ffffffffffffffff [ 450.554883][T12094] RBP: 00007fe37a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 450.554897][T12094] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 450.554911][T12094] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 450.554934][T12094] [ 452.489981][T12138] FAULT_INJECTION: forcing a failure. [ 452.489981][T12138] name failslab, interval 1, probability 0, space 0, times 0 [ 452.537544][T12138] CPU: 0 UID: 0 PID: 12138 Comm: syz.1.1255 Not tainted syzkaller #0 PREEMPT(full) [ 452.537587][T12138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.537604][T12138] Call Trace: [ 452.537612][T12138] [ 452.537621][T12138] dump_stack_lvl+0x16c/0x1f0 [ 452.537660][T12138] should_fail_ex+0x512/0x640 [ 452.537702][T12138] should_failslab+0xc2/0x120 [ 452.537739][T12138] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 452.537772][T12138] ? _raw_spin_unlock+0x28/0x50 [ 452.537802][T12138] ? alloc_inode+0xc3/0x240 [ 452.537844][T12138] alloc_inode+0xc3/0x240 [ 452.537883][T12138] new_inode+0x22/0x1c0 [ 452.537923][T12138] simple_fill_super+0x306/0x720 [ 452.537955][T12138] ? __pfx_nfsd_fill_super+0x10/0x10 [ 452.537987][T12138] nfsd_fill_super+0x90/0x530 [ 452.538017][T12138] ? __pfx_set_anon_super_fc+0x10/0x10 [ 452.538044][T12138] ? __pfx_nfsd_fill_super+0x10/0x10 [ 452.538076][T12138] get_tree_keyed+0x10b/0x1d0 [ 452.538107][T12138] vfs_get_tree+0x8e/0x340 [ 452.538130][T12138] path_mount+0x1482/0x1fd0 [ 452.538166][T12138] ? __pfx_path_mount+0x10/0x10 [ 452.538201][T12138] ? kmem_cache_free+0x2d1/0x4d0 [ 452.538229][T12138] ? putname+0x154/0x1a0 [ 452.538279][T12138] ? putname+0x154/0x1a0 [ 452.538317][T12138] ? __x64_sys_mount+0x28d/0x310 [ 452.538352][T12138] __x64_sys_mount+0x28d/0x310 [ 452.538397][T12138] ? __pfx___x64_sys_mount+0x10/0x10 [ 452.538450][T12138] do_syscall_64+0xcd/0x490 [ 452.538488][T12138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.538517][T12138] RIP: 0033:0x7fbeb038ebe9 [ 452.538537][T12138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.538565][T12138] RSP: 002b:00007fbeb12dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.538591][T12138] RAX: ffffffffffffffda RBX: 00007fbeb05b5fa0 RCX: 00007fbeb038ebe9 [ 452.538609][T12138] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 452.538627][T12138] RBP: 00007fbeb0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.538643][T12138] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 452.538660][T12138] R13: 00007fbeb05b6038 R14: 00007fbeb05b5fa0 R15: 00007ffc8c49bb38 [ 452.538686][T12138] [ 454.602653][T12173] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 457.042204][T12216] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 457.842034][T12238] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 457.853091][T12238] Unable to find swap-space signature [ 459.282782][T12273] FAULT_INJECTION: forcing a failure. [ 459.282782][T12273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.301719][T12273] CPU: 1 UID: 0 PID: 12273 Comm: syz.0.1283 Not tainted syzkaller #0 PREEMPT(full) [ 459.301761][T12273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.301781][T12273] Call Trace: [ 459.301789][T12273] [ 459.301798][T12273] dump_stack_lvl+0x16c/0x1f0 [ 459.301833][T12273] should_fail_ex+0x512/0x640 [ 459.301878][T12273] _copy_from_iter+0x29f/0x16f0 [ 459.301918][T12273] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 459.301957][T12273] ? __pfx__copy_from_iter+0x10/0x10 [ 459.301996][T12273] ? alloc_pages_mpol+0x25a/0x550 [ 459.302030][T12273] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 459.302065][T12273] copy_page_from_iter+0xde/0x180 [ 459.302106][T12273] anon_pipe_write+0xbe7/0x1a90 [ 459.302142][T12273] ? get_pid_task+0xfc/0x250 [ 459.302191][T12273] ? rcu_is_watching+0x12/0xc0 [ 459.302222][T12273] ? __pfx_anon_pipe_write+0x10/0x10 [ 459.302263][T12273] ? common_file_perm+0x1a9/0x340 [ 459.302297][T12273] fifo_pipe_write+0x24/0x530 [ 459.302328][T12273] vfs_write+0x7d3/0x11d0 [ 459.302357][T12273] ? __pfx_fifo_pipe_write+0x10/0x10 [ 459.302389][T12273] ? __pfx_vfs_write+0x10/0x10 [ 459.302417][T12273] ? lock_release+0x201/0x2f0 [ 459.302456][T12273] ksys_write+0x1f8/0x250 [ 459.302484][T12273] ? __pfx_ksys_write+0x10/0x10 [ 459.302530][T12273] do_syscall_64+0xcd/0x490 [ 459.302578][T12273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.302604][T12273] RIP: 0033:0x7f940db8ebe9 [ 459.302623][T12273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.302648][T12273] RSP: 002b:00007f940e9f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.302673][T12273] RAX: ffffffffffffffda RBX: 00007f940ddb6180 RCX: 00007f940db8ebe9 [ 459.302690][T12273] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 459.302706][T12273] RBP: 00007f940e9f9090 R08: 0000000000000000 R09: 0000000000000000 [ 459.302722][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.302737][T12273] R13: 00007f940ddb6218 R14: 00007f940ddb6180 R15: 00007ffc29431ec8 [ 459.302761][T12273] [ 459.845544][T12292] block nbd9: NBD_DISCONNECT [ 459.853458][T12292] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 460.043653][T12297] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 460.156462][T12301] FAULT_INJECTION: forcing a failure. [ 460.156462][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 460.170770][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.3.1288 Not tainted syzkaller #0 PREEMPT(full) [ 460.170821][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.170840][T12301] Call Trace: [ 460.170850][T12301] [ 460.170862][T12301] dump_stack_lvl+0x16c/0x1f0 [ 460.170907][T12301] should_fail_ex+0x512/0x640 [ 460.170954][T12301] should_failslab+0xc2/0x120 [ 460.170996][T12301] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 460.171036][T12301] ? copy_process+0x4b6/0x7690 [ 460.171080][T12301] copy_process+0x4b6/0x7690 [ 460.171116][T12301] ? __pfx_kstrtouint+0x10/0x10 [ 460.171161][T12301] ? __pfx_copy_process+0x10/0x10 [ 460.171201][T12301] ? get_pid_task+0xfc/0x250 [ 460.171238][T12301] ? rcu_is_watching+0x12/0xc0 [ 460.171276][T12301] kernel_clone+0xfc/0x930 [ 460.171314][T12301] ? ksys_write+0x12a/0x250 [ 460.171349][T12301] ? rcu_is_watching+0x12/0xc0 [ 460.171381][T12301] ? __pfx_kernel_clone+0x10/0x10 [ 460.171429][T12301] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 460.171474][T12301] __do_sys_clone+0xce/0x120 [ 460.171514][T12301] ? __pfx___do_sys_clone+0x10/0x10 [ 460.171561][T12301] ? ksys_write+0x1ac/0x250 [ 460.171595][T12301] ? __pfx_ksys_write+0x10/0x10 [ 460.171638][T12301] do_syscall_64+0xcd/0x490 [ 460.171680][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.171712][T12301] RIP: 0033:0x7fe37a18ebe9 [ 460.171736][T12301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.171767][T12301] RSP: 002b:00007fe37af81fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 460.171805][T12301] RAX: ffffffffffffffda RBX: 00007fe37a3b6180 RCX: 00007fe37a18ebe9 [ 460.171826][T12301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.171843][T12301] RBP: 00007fe37af82090 R08: 0000000000000000 R09: 0000000000000000 [ 460.171862][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.171881][T12301] R13: 00007fe37a3b6218 R14: 00007fe37a3b6180 R15: 00007fff41da0f98 [ 460.171911][T12301] [ 460.193511][T12303] FAULT_INJECTION: forcing a failure. [ 460.193511][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 460.494940][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.0.1290 Not tainted syzkaller #0 PREEMPT(full) [ 460.494981][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.495000][T12303] Call Trace: [ 460.495009][T12303] [ 460.495019][T12303] dump_stack_lvl+0x16c/0x1f0 [ 460.495062][T12303] should_fail_ex+0x512/0x640 [ 460.495108][T12303] should_failslab+0xc2/0x120 [ 460.495151][T12303] __kvmalloc_node_noprof+0x137/0x620 [ 460.495187][T12303] ? kstrtouint_from_user+0x13c/0x1d0 [ 460.495226][T12303] ? seq_read_iter+0x826/0x12c0 [ 460.495259][T12303] ? seq_read_iter+0x826/0x12c0 [ 460.495286][T12303] seq_read_iter+0x826/0x12c0 [ 460.495313][T12303] ? lock_release+0x201/0x2f0 [ 460.495353][T12303] ? __mutex_trylock_common+0xe9/0x250 [ 460.495398][T12303] kernfs_fop_read_iter+0x40f/0x5a0 [ 460.495426][T12303] ? rw_verify_area+0xcf/0x6c0 [ 460.495457][T12303] vfs_read+0x8bf/0xcf0 [ 460.495491][T12303] ? __pfx___mutex_lock+0x10/0x10 [ 460.495543][T12303] ? __pfx_vfs_read+0x10/0x10 [ 460.495588][T12303] ksys_read+0x12a/0x250 [ 460.495622][T12303] ? __pfx_ksys_read+0x10/0x10 [ 460.495661][T12303] do_syscall_64+0xcd/0x490 [ 460.495719][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.495748][T12303] RIP: 0033:0x7f940db8ebe9 [ 460.495769][T12303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.495799][T12303] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 460.495828][T12303] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 460.495848][T12303] RDX: 000000000000101f RSI: 00002000000020c0 RDI: 0000000000000003 [ 460.495868][T12303] RBP: 00007f940ea3b090 R08: 0000000000000000 R09: 0000000000000000 [ 460.495887][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.495905][T12303] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 460.495935][T12303] [ 461.855654][T12329] FAULT_INJECTION: forcing a failure. [ 461.855654][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.909147][T12329] CPU: 0 UID: 0 PID: 12329 Comm: syz.2.1296 Not tainted syzkaller #0 PREEMPT(full) [ 461.909191][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.909210][T12329] Call Trace: [ 461.909219][T12329] [ 461.909231][T12329] dump_stack_lvl+0x16c/0x1f0 [ 461.909275][T12329] should_fail_ex+0x512/0x640 [ 461.909323][T12329] _copy_to_user+0x32/0xd0 [ 461.909354][T12329] simple_read_from_buffer+0xcb/0x170 [ 461.909388][T12329] proc_fail_nth_read+0x197/0x240 [ 461.909423][T12329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.909457][T12329] ? security_file_permission+0x71/0x210 [ 461.909503][T12329] ? rw_verify_area+0xcf/0x6c0 [ 461.909535][T12329] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.909569][T12329] vfs_read+0x1e1/0xcf0 [ 461.909605][T12329] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 461.909639][T12329] ? __pfx___mutex_lock+0x10/0x10 [ 461.909681][T12329] ? __pfx_vfs_read+0x10/0x10 [ 461.909717][T12329] ? __fget_files+0x204/0x3c0 [ 461.909759][T12329] ? rcu_is_watching+0x12/0xc0 [ 461.909797][T12329] ? __fget_files+0x20e/0x3c0 [ 461.909837][T12329] ksys_read+0x12a/0x250 [ 461.909874][T12329] ? __pfx_ksys_read+0x10/0x10 [ 461.909917][T12329] do_syscall_64+0xcd/0x490 [ 461.909962][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.909995][T12329] RIP: 0033:0x7f83dc18d5fc [ 461.910019][T12329] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.910051][T12329] RSP: 002b:00007f83da3ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.910082][T12329] RAX: ffffffffffffffda RBX: 00007f83dc3b5fa0 RCX: 00007f83dc18d5fc [ 461.910104][T12329] RDX: 000000000000000f RSI: 00007f83da3ee0a0 RDI: 0000000000000004 [ 461.910124][T12329] RBP: 00007f83da3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 461.910145][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.910165][T12329] R13: 00007f83dc3b6038 R14: 00007f83dc3b5fa0 R15: 00007ffec2746568 [ 461.910198][T12329] [ 463.213165][ T30] audit: type=1800 audit(4294969565.772:8): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1300" name="dbroot" dev="configfs" ino=43585 res=0 errno=0 [ 463.381847][T12326] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 463.589558][T12361] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 463.707221][T12367] netlink: 'syz.0.1307': attribute type 1 has an invalid length. [ 464.017482][T12380] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 464.108580][T12380] memcg:ffff888033539182 [ 464.151717][T12380] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 464.238313][T12380] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 464.268118][T12380] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 464.452096][T12380] page dumped because: unmovable page [ 464.458924][T12388] FAULT_INJECTION: forcing a failure. [ 464.458924][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 464.481807][T12380] page_owner tracks the page as allocated [ 464.505268][T12380] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 464.525235][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.2.1311 Not tainted syzkaller #0 PREEMPT(full) [ 464.525268][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 464.525283][T12388] Call Trace: [ 464.525291][T12388] [ 464.525299][T12388] dump_stack_lvl+0x16c/0x1f0 [ 464.525333][T12388] should_fail_ex+0x512/0x640 [ 464.525371][T12388] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 464.525409][T12388] should_failslab+0xc2/0x120 [ 464.525450][T12388] __kmalloc_noprof+0xd2/0x510 [ 464.525482][T12388] tomoyo_realpath_from_path+0xc2/0x6e0 [ 464.525522][T12388] tomoyo_check_open_permission+0x2ab/0x3c0 [ 464.525553][T12388] ? init_file+0x93/0x4c0 [ 464.525587][T12388] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 464.525618][T12388] ? do_sys_openat2+0x11b/0x1d0 [ 464.525655][T12388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.525683][T12388] ? rcu_is_watching+0x12/0xc0 [ 464.525716][T12388] ? do_raw_spin_lock+0x12c/0x2b0 [ 464.525754][T12388] ? path_get+0x61/0x80 [ 464.525786][T12388] ? rcu_is_watching+0x12/0xc0 [ 464.525812][T12388] tomoyo_file_open+0x6b/0x90 [ 464.525834][T12388] security_file_open+0x84/0x1e0 [ 464.525868][T12388] do_dentry_open+0x596/0x1530 [ 464.525901][T12388] vfs_open+0x82/0x3f0 [ 464.525938][T12388] path_openat+0x1de4/0x2cb0 [ 464.525971][T12388] ? __pfx_path_openat+0x10/0x10 [ 464.526003][T12388] do_filp_open+0x20b/0x470 [ 464.526031][T12388] ? __pfx_do_filp_open+0x10/0x10 [ 464.526069][T12388] ? alloc_fd+0x471/0x7d0 [ 464.526097][T12388] do_sys_openat2+0x11b/0x1d0 [ 464.526135][T12388] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.526185][T12388] __x64_sys_openat+0x174/0x210 [ 464.526225][T12388] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.526272][T12388] do_syscall_64+0xcd/0x490 [ 464.526306][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.526330][T12388] RIP: 0033:0x7f83dc18ebe9 [ 464.526348][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.526372][T12388] RSP: 002b:00007f83da3ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.526395][T12388] RAX: ffffffffffffffda RBX: 00007f83dc3b6180 RCX: 00007f83dc18ebe9 [ 464.526412][T12388] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 464.526433][T12388] RBP: 00007f83dc211e19 R08: 0000000000000000 R09: 0000000000000000 [ 464.526448][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.526463][T12388] R13: 00007f83dc3b6218 R14: 00007f83dc3b6180 R15: 00007ffec2746568 [ 464.526486][T12388] [ 464.526522][T12388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.575239][T12380] post_alloc_hook+0x1c0/0x230 [ 464.818227][T12380] get_page_from_freelist+0x132b/0x38e0 [ 464.865472][T12380] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 464.871900][T12380] alloc_pages_mpol+0x1fb/0x550 [ 464.927380][T12384] could not allocate digest TFM handle [ 464.947706][T12380] alloc_pages_noprof+0x131/0x390 [ 464.975692][T12380] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 464.981832][T12380] __vmalloc_node_noprof+0xad/0xf0 [ 464.987823][T12380] copy_process+0x2c70/0x7690 [ 464.995191][T12380] kernel_clone+0xfc/0x930 [ 464.999910][T12380] __do_sys_clone+0xce/0x120 [ 465.005699][T12380] do_syscall_64+0xcd/0x490 [ 465.011145][T12380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.017830][T12380] page last free pid 7560 tgid 7560 stack trace: [ 465.027907][T12380] __free_frozen_pages+0x7d5/0x10f0 [ 465.034917][T12380] tlb_finish_mmu+0x237/0x7c0 [ 465.040620][T12380] exit_mmap+0x403/0xb90 [ 465.046052][T12380] __mmput+0x12a/0x410 [ 465.050522][T12380] mmput+0x62/0x70 [ 465.056546][T12380] do_exit+0x7c7/0x2bf0 [ 465.061425][T12380] do_group_exit+0xd3/0x2a0 [ 465.067160][T12380] __x64_sys_exit_group+0x3e/0x50 [ 465.072785][T12380] x64_sys_call+0x14fa/0x1720 [ 465.078137][T12380] do_syscall_64+0xcd/0x490 [ 465.083236][T12380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.317941][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 465.350684][T12402] tc_dump_action: action bad kind [ 465.362753][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 465.504435][T12408] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 465.519330][T12408] memcg:ffff888033539182 [ 465.534643][T12408] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 465.547098][T12408] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 465.565277][T12408] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 465.576076][T12408] page dumped because: unmovable page [ 465.582339][T12408] page_owner tracks the page as allocated [ 465.588912][T12408] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 465.694246][T12408] post_alloc_hook+0x1c0/0x230 [ 465.725046][T12408] get_page_from_freelist+0x132b/0x38e0 [ 465.743232][T12408] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 465.757557][T12408] alloc_pages_mpol+0x1fb/0x550 [ 465.762992][T12408] alloc_pages_noprof+0x131/0x390 [ 465.768287][T12408] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 465.775182][T12413] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 465.775773][T12408] __vmalloc_node_noprof+0xad/0xf0 [ 465.797225][T12408] copy_process+0x2c70/0x7690 [ 465.805394][T12408] kernel_clone+0xfc/0x930 [ 465.812050][T12408] __do_sys_clone+0xce/0x120 [ 465.816904][T12408] do_syscall_64+0xcd/0x490 [ 465.821753][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.828555][T12408] page last free pid 7560 tgid 7560 stack trace: [ 465.835213][T12408] __free_frozen_pages+0x7d5/0x10f0 [ 465.840859][T12408] tlb_finish_mmu+0x237/0x7c0 [ 465.845957][T12408] exit_mmap+0x403/0xb90 [ 465.856560][T12408] __mmput+0x12a/0x410 [ 465.861562][T12408] mmput+0x62/0x70 [ 465.865357][T12408] do_exit+0x7c7/0x2bf0 [ 465.869857][T12408] do_group_exit+0xd3/0x2a0 [ 465.876108][T12408] __x64_sys_exit_group+0x3e/0x50 [ 465.883881][T12408] x64_sys_call+0x14fa/0x1720 [ 465.889587][T12408] do_syscall_64+0xcd/0x490 [ 465.905822][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.510733][T12446] FAULT_INJECTION: forcing a failure. [ 466.510733][T12446] name failslab, interval 1, probability 0, space 0, times 0 [ 466.530796][T12446] CPU: 1 UID: 0 PID: 12446 Comm: syz.0.1324 Not tainted syzkaller #0 PREEMPT(full) [ 466.530835][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.530850][T12446] Call Trace: [ 466.530858][T12446] [ 466.530866][T12446] dump_stack_lvl+0x16c/0x1f0 [ 466.530901][T12446] should_fail_ex+0x512/0x640 [ 466.530938][T12446] should_failslab+0xc2/0x120 [ 466.530970][T12446] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 466.530999][T12446] ? __alloc_skb+0x2b2/0x380 [ 466.531029][T12446] __alloc_skb+0x2b2/0x380 [ 466.531056][T12446] ? __pfx___alloc_skb+0x10/0x10 [ 466.531085][T12446] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 466.531120][T12446] netlink_alloc_large_skb+0x69/0x130 [ 466.531154][T12446] netlink_sendmsg+0x6a1/0xdd0 [ 466.531188][T12446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.531221][T12446] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 466.531249][T12446] ____sys_sendmsg+0xa95/0xc70 [ 466.531294][T12446] ? copy_msghdr_from_user+0x10a/0x160 [ 466.531325][T12446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.531362][T12446] ? __pfx_kstrtouint+0x10/0x10 [ 466.531394][T12446] ? kstrtouint_from_user+0x13c/0x1d0 [ 466.531425][T12446] ___sys_sendmsg+0x134/0x1d0 [ 466.531455][T12446] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.531491][T12446] ? rcu_is_watching+0x12/0xc0 [ 466.531526][T12446] __sys_sendmsg+0x16d/0x220 [ 466.531557][T12446] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.531596][T12446] do_syscall_64+0xcd/0x490 [ 466.531627][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.531652][T12446] RIP: 0033:0x7f940db8ebe9 [ 466.531670][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.531693][T12446] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.531720][T12446] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 466.531736][T12446] RDX: 0000000000000880 RSI: 0000200000000f80 RDI: 0000000000000003 [ 466.531751][T12446] RBP: 00007f940ea3b090 R08: 0000000000000000 R09: 0000000000000000 [ 466.531766][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.531779][T12446] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 466.531801][T12446] [ 468.373790][T12485] FAULT_INJECTION: forcing a failure. [ 468.373790][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 468.416553][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.0.1331 Not tainted syzkaller #0 PREEMPT(full) [ 468.416602][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.416624][T12485] Call Trace: [ 468.416635][T12485] [ 468.416647][T12485] dump_stack_lvl+0x16c/0x1f0 [ 468.416699][T12485] should_fail_ex+0x512/0x640 [ 468.416756][T12485] should_failslab+0xc2/0x120 [ 468.416806][T12485] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 468.416850][T12485] ? css_rstat_updated+0x1c2/0x510 [ 468.416897][T12485] ? sock_alloc_inode+0x25/0x1c0 [ 468.416955][T12485] ? __pfx_sock_alloc_inode+0x10/0x10 [ 468.417010][T12485] sock_alloc_inode+0x25/0x1c0 [ 468.417063][T12485] alloc_inode+0x61/0x240 [ 468.417115][T12485] sock_alloc+0x40/0x280 [ 468.417165][T12485] __sock_create+0xc1/0x8d0 [ 468.417202][T12485] __sys_socket+0x14d/0x260 [ 468.417235][T12485] ? lock_release+0x201/0x2f0 [ 468.417282][T12485] ? __pfx___sys_socket+0x10/0x10 [ 468.417318][T12485] ? do_user_addr_fault+0x843/0x1370 [ 468.417377][T12485] __x64_sys_socket+0x72/0xb0 [ 468.417413][T12485] do_syscall_64+0xcd/0x490 [ 468.417461][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.417498][T12485] RIP: 0033:0x7f940db90b07 [ 468.417524][T12485] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.417560][T12485] RSP: 002b:00007f940ea39fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 468.417594][T12485] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db90b07 [ 468.417618][T12485] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 468.417640][T12485] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 468.417662][T12485] R10: 00002000000013c0 R11: 0000000000000286 R12: 0000000000000000 [ 468.417685][T12485] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 468.417719][T12485] [ 468.417802][T12485] socket: no more sockets [ 468.853176][T12490] FAULT_INJECTION: forcing a failure. [ 468.853176][T12490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.876667][T12490] CPU: 1 UID: 0 PID: 12490 Comm: syz.1.1332 Not tainted syzkaller #0 PREEMPT(full) [ 468.876718][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.876738][T12490] Call Trace: [ 468.876748][T12490] [ 468.876760][T12490] dump_stack_lvl+0x16c/0x1f0 [ 468.876805][T12490] should_fail_ex+0x512/0x640 [ 468.876851][T12490] _copy_from_user+0x2e/0xd0 [ 468.876900][T12490] copy_msghdr_from_user+0x98/0x160 [ 468.876941][T12490] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 468.876986][T12490] ? kfree+0x24f/0x4d0 [ 468.877012][T12490] ? __pfx__kstrtoull+0x10/0x10 [ 468.877054][T12490] ___sys_sendmsg+0xfe/0x1d0 [ 468.877095][T12490] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.877142][T12490] ? rcu_is_watching+0x12/0xc0 [ 468.877196][T12490] ? __pfx___might_resched+0x10/0x10 [ 468.877232][T12490] __sys_sendmmsg+0x200/0x420 [ 468.877277][T12490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.877316][T12490] ? lock_release+0x201/0x2f0 [ 468.877362][T12490] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 468.877411][T12490] ? fput+0x9b/0xd0 [ 468.877455][T12490] ? ksys_write+0x1ac/0x250 [ 468.877490][T12490] ? __pfx_ksys_write+0x10/0x10 [ 468.877529][T12490] __x64_sys_sendmmsg+0x9c/0x100 [ 468.877570][T12490] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 468.877620][T12490] do_syscall_64+0xcd/0x490 [ 468.877662][T12490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.877695][T12490] RIP: 0033:0x7fbeb038ebe9 [ 468.877719][T12490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.877750][T12490] RSP: 002b:00007fbeb129b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 468.877781][T12490] RAX: ffffffffffffffda RBX: 00007fbeb05b6180 RCX: 00007fbeb038ebe9 [ 468.877802][T12490] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 468.877821][T12490] RBP: 00007fbeb129b090 R08: 0000000000000000 R09: 0000000000000000 [ 468.877839][T12490] R10: 0000000007fffffe R11: 0000000000000246 R12: 0000000000000002 [ 468.877859][T12490] R13: 00007fbeb05b6218 R14: 00007fbeb05b6180 R15: 00007ffc8c49bb38 [ 468.877889][T12490] [ 469.124147][T12498] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 469.135546][T12498] memcg:ffff888033539182 [ 469.140182][T12498] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 469.150175][T12498] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 469.158955][T12498] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 469.167727][T12498] page dumped because: unmovable page [ 469.176208][T12498] page_owner tracks the page as allocated [ 469.182151][T12498] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 469.203061][T12498] post_alloc_hook+0x1c0/0x230 [ 469.208291][T12498] get_page_from_freelist+0x132b/0x38e0 [ 469.214786][T12498] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 469.223121][T12498] alloc_pages_mpol+0x1fb/0x550 [ 469.228120][T12498] alloc_pages_noprof+0x131/0x390 [ 469.233883][T12498] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 469.240407][T12498] __vmalloc_node_noprof+0xad/0xf0 [ 469.245870][T12498] copy_process+0x2c70/0x7690 [ 469.251271][T12498] kernel_clone+0xfc/0x930 [ 469.255969][T12498] __do_sys_clone+0xce/0x120 [ 469.260667][T12498] do_syscall_64+0xcd/0x490 [ 469.265381][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.271534][T12498] page last free pid 7560 tgid 7560 stack trace: [ 469.278105][T12498] __free_frozen_pages+0x7d5/0x10f0 [ 469.283806][T12498] tlb_finish_mmu+0x237/0x7c0 [ 469.289512][T12498] exit_mmap+0x403/0xb90 [ 469.293875][T12498] __mmput+0x12a/0x410 [ 469.299253][T12498] mmput+0x62/0x70 [ 469.303282][T12498] do_exit+0x7c7/0x2bf0 [ 469.308690][T12498] do_group_exit+0xd3/0x2a0 [ 469.313901][T12498] __x64_sys_exit_group+0x3e/0x50 [ 469.320632][T12498] x64_sys_call+0x14fa/0x1720 [ 469.330199][T12498] do_syscall_64+0xcd/0x490 [ 469.334972][T12498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.516405][T12503] can: request_module (can-proto-0) failed. [ 470.134695][T12526] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 470.577423][T12533] FAULT_INJECTION: forcing a failure. [ 470.577423][T12533] name failslab, interval 1, probability 0, space 0, times 0 [ 470.638625][T12533] CPU: 1 UID: 0 PID: 12533 Comm: syz.1.1342 Not tainted syzkaller #0 PREEMPT(full) [ 470.638675][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.638697][T12533] Call Trace: [ 470.638708][T12533] [ 470.638721][T12533] dump_stack_lvl+0x16c/0x1f0 [ 470.638770][T12533] should_fail_ex+0x512/0x640 [ 470.638822][T12533] should_failslab+0xc2/0x120 [ 470.638868][T12533] __kvmalloc_node_noprof+0x137/0x620 [ 470.638908][T12533] ? fib4_semantics_init+0x25/0x100 [ 470.638950][T12533] ? fib4_semantics_init+0x25/0x100 [ 470.638986][T12533] fib4_semantics_init+0x25/0x100 [ 470.639033][T12533] fib_net_init+0x1fc/0x3f0 [ 470.639081][T12533] ? __pfx___register_sysctl_table+0x10/0x10 [ 470.639135][T12533] ? __pfx_fib_net_init+0x10/0x10 [ 470.639183][T12533] ? lockdep_init_map_type+0x5c/0x280 [ 470.639229][T12533] ? do_init_timer+0xc9/0x110 [ 470.639269][T12533] ? devinet_init_net+0x5c2/0x910 [ 470.639321][T12533] ? __pfx_fib_net_init+0x10/0x10 [ 470.639368][T12533] ops_init+0x1df/0x5f0 [ 470.639415][T12533] setup_net+0x10f/0x380 [ 470.639459][T12533] ? lockdep_init_map_type+0x5c/0x280 [ 470.639506][T12533] ? __pfx_setup_net+0x10/0x10 [ 470.639552][T12533] ? debug_mutex_init+0x37/0x70 [ 470.639588][T12533] copy_net_ns+0x2a6/0x5f0 [ 470.639644][T12533] create_new_namespaces+0x3ea/0xa90 [ 470.639687][T12533] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 470.639731][T12533] ksys_unshare+0x45b/0xa40 [ 470.639777][T12533] ? __pfx_ksys_unshare+0x10/0x10 [ 470.639825][T12533] ? xfd_validate_state+0x61/0x180 [ 470.639882][T12533] __x64_sys_unshare+0x31/0x40 [ 470.639929][T12533] do_syscall_64+0xcd/0x490 [ 470.639976][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.640019][T12533] RIP: 0033:0x7fbeb038ebe9 [ 470.640047][T12533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.640181][T12533] RSP: 002b:00007fbeb12dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 470.640216][T12533] RAX: ffffffffffffffda RBX: 00007fbeb05b5fa0 RCX: 00007fbeb038ebe9 [ 470.640238][T12533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 470.640256][T12533] RBP: 00007fbeb0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 470.640275][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.640295][T12533] R13: 00007fbeb05b6038 R14: 00007fbeb05b5fa0 R15: 00007ffc8c49bb38 [ 470.640327][T12533] [ 473.055841][T12564] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1349'. [ 473.103031][T12574] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1349'. [ 473.159114][T12564] netlink: 290 bytes leftover after parsing attributes in process `syz.3.1349'. [ 473.196600][T12564] veth0_macvtap: left promiscuous mode [ 473.318967][T12577] netlink: 'syz.1.1352': attribute type 11 has an invalid length. [ 473.328301][T12577] netlink: 'syz.1.1352': attribute type 11 has an invalid length. [ 473.347142][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 473.356759][T12577] netlink: 'syz.1.1352': attribute type 11 has an invalid length. [ 473.388979][T12577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1352'. [ 473.398438][T12577] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1352'. [ 473.586042][T12585] ubi0: attaching mtd0 [ 473.605975][T12585] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 474.583159][T12608] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1360'. [ 474.642571][T12608] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1360'. [ 474.702595][T12608] netlink: 290 bytes leftover after parsing attributes in process `syz.2.1360'. [ 474.763957][T12608] veth0_macvtap: left promiscuous mode [ 474.782239][T12608] FAULT_INJECTION: forcing a failure. [ 474.782239][T12608] name failslab, interval 1, probability 0, space 0, times 0 [ 474.837665][T12608] CPU: 0 UID: 0 PID: 12608 Comm: syz.2.1360 Not tainted syzkaller #0 PREEMPT(full) [ 474.837704][T12608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.837719][T12608] Call Trace: [ 474.837727][T12608] [ 474.837735][T12608] dump_stack_lvl+0x16c/0x1f0 [ 474.837768][T12608] should_fail_ex+0x512/0x640 [ 474.837801][T12608] ? __pfx_netdev_info+0x10/0x10 [ 474.837834][T12608] should_failslab+0xc2/0x120 [ 474.837865][T12608] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 474.837894][T12608] ? __alloc_skb+0x2b2/0x380 [ 474.837923][T12608] __alloc_skb+0x2b2/0x380 [ 474.837948][T12608] ? __pfx___alloc_skb+0x10/0x10 [ 474.837974][T12608] ? in_gate_area_no_mm+0x60/0x70 [ 474.838006][T12608] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 474.838045][T12608] rtnl_fdb_notify+0x9c/0x1c0 [ 474.838077][T12608] rtnl_fdb_del+0x882/0xc50 [ 474.838109][T12608] ? consume_skb+0xcc/0x100 [ 474.838140][T12608] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 474.838179][T12608] ? rtnetlink_rcv_msg+0x359/0xe90 [ 474.838209][T12608] ? rcu_is_watching+0x12/0xc0 [ 474.838233][T12608] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 474.838264][T12608] rtnetlink_rcv_msg+0x3c6/0xe90 [ 474.838297][T12608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.838340][T12608] ? ref_tracker_free+0x37c/0x830 [ 474.838376][T12608] netlink_rcv_skb+0x155/0x420 [ 474.838410][T12608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 474.838445][T12608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.838484][T12608] ? netlink_deliver_tap+0x1ae/0xd30 [ 474.838518][T12608] netlink_unicast+0x5aa/0x870 [ 474.838552][T12608] ? __pfx_netlink_unicast+0x10/0x10 [ 474.838590][T12608] ? __pfx___might_resched+0x10/0x10 [ 474.838618][T12608] netlink_sendmsg+0x8d1/0xdd0 [ 474.838651][T12608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.838684][T12608] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 474.838710][T12608] ____sys_sendmsg+0xa95/0xc70 [ 474.838745][T12608] ? copy_msghdr_from_user+0x10a/0x160 [ 474.838773][T12608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.838810][T12608] ? kfree+0x24f/0x4d0 [ 474.838828][T12608] ? __pfx__kstrtoull+0x10/0x10 [ 474.838857][T12608] ___sys_sendmsg+0x134/0x1d0 [ 474.838885][T12608] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.838919][T12608] ? rcu_is_watching+0x12/0xc0 [ 474.838946][T12608] ? __pfx___might_resched+0x10/0x10 [ 474.838970][T12608] __sys_sendmmsg+0x200/0x420 [ 474.839000][T12608] ? __pfx___sys_sendmmsg+0x10/0x10 [ 474.839027][T12608] ? lock_release+0x201/0x2f0 [ 474.839060][T12608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 474.839095][T12608] ? fput+0x9b/0xd0 [ 474.839125][T12608] ? ksys_write+0x1ac/0x250 [ 474.839149][T12608] ? __pfx_ksys_write+0x10/0x10 [ 474.839189][T12608] __x64_sys_sendmmsg+0x9c/0x100 [ 474.839228][T12608] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 474.839276][T12608] do_syscall_64+0xcd/0x490 [ 474.839317][T12608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.839357][T12608] RIP: 0033:0x7f83dc18ebe9 [ 474.839381][T12608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.839414][T12608] RSP: 002b:00007f83da3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.839443][T12608] RAX: ffffffffffffffda RBX: 00007f83dc3b5fa0 RCX: 00007f83dc18ebe9 [ 474.839464][T12608] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 474.839483][T12608] RBP: 00007f83da3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 474.839503][T12608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.839522][T12608] R13: 00007f83dc3b6038 R14: 00007f83dc3b5fa0 R15: 00007ffec2746568 [ 474.839553][T12608] [ 475.890353][T12621] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 477.703553][T12658] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 479.379816][T12690] Invalid ELF header magic: != ELF [ 479.449716][T12698] block nbd9: NBD_DISCONNECT [ 479.521432][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 483.059695][T12761] nvme_fcloop: unknown parameter or missing value 'Q¿Ú éî"' [ 484.016333][T12786] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 484.822337][T12798] MTRR 1 not used [ 485.304856][T12806] random: crng reseeded on system resumption [ 485.868054][T12795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.014198][T12795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.127260][T12851] FAULT_INJECTION: forcing a failure. [ 488.127260][T12851] name failslab, interval 1, probability 0, space 0, times 0 [ 488.142323][T12851] CPU: 1 UID: 0 PID: 12851 Comm: syz.3.1413 Not tainted syzkaller #0 PREEMPT(full) [ 488.142365][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.142385][T12851] Call Trace: [ 488.142395][T12851] [ 488.142407][T12851] dump_stack_lvl+0x16c/0x1f0 [ 488.142453][T12851] should_fail_ex+0x512/0x640 [ 488.142501][T12851] ? handler_new_ref+0x1b0/0xc60 [ 488.142546][T12851] should_failslab+0xc2/0x120 [ 488.142590][T12851] __kmalloc_noprof+0xd2/0x510 [ 488.142627][T12851] ? __asan_memcpy+0x3c/0x60 [ 488.142663][T12851] handler_new_ref+0x1b0/0xc60 [ 488.142711][T12851] v4l2_ctrl_new+0x1963/0x2180 [ 488.142761][T12851] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 488.142803][T12851] ? __kasan_kmalloc+0xaa/0xb0 [ 488.142837][T12851] ? v4l2_ctrl_new+0x97d/0x2180 [ 488.142880][T12851] ? v4l2_ctrl_new_std+0x1be/0x290 [ 488.142926][T12851] ? vicodec_open+0x2c4/0xf90 [ 488.142960][T12851] ? __mutex_trylock_common+0xe9/0x250 [ 488.143005][T12851] ? __pfx___mutex_trylock_common+0x10/0x10 [ 488.143049][T12851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.143100][T12851] v4l2_ctrl_new_std+0x1be/0x290 [ 488.143151][T12851] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 488.143209][T12851] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 488.143256][T12851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.143305][T12851] ? __asan_memcpy+0x3c/0x60 [ 488.143336][T12851] ? find_ref+0x20b/0x420 [ 488.143379][T12851] handler_new_ref+0x827/0xc60 [ 488.143429][T12851] v4l2_ctrl_new+0x1963/0x2180 [ 488.143481][T12851] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 488.143531][T12851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.143579][T12851] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 488.143630][T12851] v4l2_ctrl_new_std+0x1be/0x290 [ 488.143682][T12851] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 488.143732][T12851] ? trace_kmalloc+0x2b/0xd0 [ 488.143784][T12851] ? media_request_object_init+0x100/0x180 [ 488.143840][T12851] vicodec_open+0x2c4/0xf90 [ 488.143877][T12851] v4l2_open+0x225/0x490 [ 488.143917][T12851] ? __pfx_v4l2_open+0x10/0x10 [ 488.143956][T12851] chrdev_open+0x231/0x6a0 [ 488.143998][T12851] ? __pfx_apparmor_file_open+0x10/0x10 [ 488.144034][T12851] ? __pfx_chrdev_open+0x10/0x10 [ 488.144079][T12851] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 488.144119][T12851] do_dentry_open+0x97f/0x1530 [ 488.144160][T12851] ? __pfx_chrdev_open+0x10/0x10 [ 488.144212][T12851] vfs_open+0x82/0x3f0 [ 488.144263][T12851] path_openat+0x1de4/0x2cb0 [ 488.144307][T12851] ? __pfx_path_openat+0x10/0x10 [ 488.144351][T12851] do_filp_open+0x20b/0x470 [ 488.144387][T12851] ? __pfx_do_filp_open+0x10/0x10 [ 488.144442][T12851] ? alloc_fd+0x471/0x7d0 [ 488.144481][T12851] do_sys_openat2+0x11b/0x1d0 [ 488.144530][T12851] ? __pfx_do_sys_openat2+0x10/0x10 [ 488.144584][T12851] ? __fget_files+0x20e/0x3c0 [ 488.144622][T12851] __x64_sys_openat+0x174/0x210 [ 488.144673][T12851] ? __pfx___x64_sys_openat+0x10/0x10 [ 488.144725][T12851] ? ksys_write+0x1ac/0x250 [ 488.144770][T12851] do_syscall_64+0xcd/0x490 [ 488.144814][T12851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.144847][T12851] RIP: 0033:0x7fe37a18ebe9 [ 488.144872][T12851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.144904][T12851] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 488.144934][T12851] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 488.144955][T12851] RDX: 00000000000c0400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 488.144974][T12851] RBP: 00007fe37afc4090 R08: 0000000000000000 R09: 0000000000000000 [ 488.144994][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.145012][T12851] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 488.145043][T12851] [ 488.812107][T12867] blktrace: Concurrent blktraces are not allowed on ram7 [ 489.062948][T12870] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 489.182038][T12879] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 490.206425][T12900] FAULT_INJECTION: forcing a failure. [ 490.206425][T12900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.230801][T12900] CPU: 1 UID: 0 PID: 12900 Comm: syz.2.1422 Not tainted syzkaller #0 PREEMPT(full) [ 490.230842][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.230859][T12900] Call Trace: [ 490.230869][T12900] [ 490.230882][T12900] dump_stack_lvl+0x16c/0x1f0 [ 490.230925][T12900] should_fail_ex+0x512/0x640 [ 490.230971][T12900] _copy_from_user+0x2e/0xd0 [ 490.231020][T12900] copy_msghdr_from_user+0x98/0x160 [ 490.231073][T12900] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 490.231113][T12900] ? kfree+0x24f/0x4d0 [ 490.231139][T12900] ? __pfx__kstrtoull+0x10/0x10 [ 490.231177][T12900] ___sys_sendmsg+0xfe/0x1d0 [ 490.231216][T12900] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.231259][T12900] ? rcu_is_watching+0x12/0xc0 [ 490.231296][T12900] ? __pfx___might_resched+0x10/0x10 [ 490.231333][T12900] __sys_sendmmsg+0x200/0x420 [ 490.231375][T12900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 490.231412][T12900] ? lock_release+0x201/0x2f0 [ 490.231456][T12900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.231506][T12900] ? fput+0x9b/0xd0 [ 490.231547][T12900] ? ksys_write+0x1ac/0x250 [ 490.231578][T12900] ? __pfx_ksys_write+0x10/0x10 [ 490.231616][T12900] __x64_sys_sendmmsg+0x9c/0x100 [ 490.231653][T12900] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 490.231702][T12900] do_syscall_64+0xcd/0x490 [ 490.231744][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.231775][T12900] RIP: 0033:0x7f83dc18ebe9 [ 490.231799][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.231831][T12900] RSP: 002b:00007f83da36a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 490.231862][T12900] RAX: ffffffffffffffda RBX: 00007f83dc3b6360 RCX: 00007f83dc18ebe9 [ 490.231883][T12900] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 490.231918][T12900] RBP: 00007f83da36a090 R08: 0000000000000000 R09: 0000000000000000 [ 490.231938][T12900] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.231958][T12900] R13: 00007f83dc3b63f8 R14: 00007f83dc3b6360 R15: 00007ffec2746568 [ 490.231988][T12900] [ 490.888709][T12912] FAULT_INJECTION: forcing a failure. [ 490.888709][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 490.904959][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.2.1425 Not tainted syzkaller #0 PREEMPT(full) [ 490.905003][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.905023][T12912] Call Trace: [ 490.905033][T12912] [ 490.905045][T12912] dump_stack_lvl+0x16c/0x1f0 [ 490.905094][T12912] should_fail_ex+0x512/0x640 [ 490.905144][T12912] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 490.905195][T12912] should_failslab+0xc2/0x120 [ 490.905242][T12912] __kmalloc_noprof+0xd2/0x510 [ 490.905278][T12912] ? do_sys_openat2+0x11b/0x1d0 [ 490.905337][T12912] ? __x64_sys_open+0x153/0x1e0 [ 490.905389][T12912] ? do_syscall_64+0xcd/0x490 [ 490.905429][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.905461][T12912] tomoyo_realpath_from_path+0xc2/0x6e0 [ 490.905506][T12912] ? tomoyo_profile+0x47/0x60 [ 490.905531][T12912] tomoyo_path_number_perm+0x245/0x580 [ 490.905566][T12912] ? tomoyo_path_number_perm+0x237/0x580 [ 490.905602][T12912] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 490.905654][T12912] ? lock_release+0x201/0x2f0 [ 490.905692][T12912] ? current_check_access_path+0x33c/0x460 [ 490.905735][T12912] ? __pfx_current_check_access_path+0x10/0x10 [ 490.905776][T12912] ? do_sys_openat2+0x11b/0x1d0 [ 490.905819][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.905852][T12912] tomoyo_path_mknod+0x10c/0x190 [ 490.905878][T12912] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 490.905906][T12912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.905952][T12912] security_path_mknod+0x161/0x310 [ 490.905988][T12912] lookup_open.isra.0+0xc17/0x1580 [ 490.906020][T12912] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 490.906052][T12912] ? mnt_get_write_access+0x54/0x300 [ 490.906092][T12912] ? rcu_is_watching+0x12/0xc0 [ 490.906125][T12912] ? __pfx_down_write+0x10/0x10 [ 490.906164][T12912] ? mnt_get_write_access+0x20c/0x300 [ 490.906209][T12912] path_openat+0x893/0x2cb0 [ 490.906246][T12912] ? do_syscall_64+0xcd/0x490 [ 490.906282][T12912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.906318][T12912] ? __pfx_path_openat+0x10/0x10 [ 490.906356][T12912] do_filp_open+0x20b/0x470 [ 490.906390][T12912] ? __pfx_do_filp_open+0x10/0x10 [ 490.906436][T12912] ? _raw_spin_unlock+0x28/0x50 [ 490.906466][T12912] ? alloc_fd+0x471/0x7d0 [ 490.906500][T12912] do_sys_openat2+0x11b/0x1d0 [ 490.906543][T12912] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.906589][T12912] ? __fget_files+0x20e/0x3c0 [ 490.906623][T12912] __x64_sys_open+0x153/0x1e0 [ 490.906667][T12912] ? __pfx___x64_sys_open+0x10/0x10 [ 490.906716][T12912] ? rcu_is_watching+0x12/0xc0 [ 490.906746][T12912] do_syscall_64+0xcd/0x490 [ 490.906783][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.906811][T12912] RIP: 0033:0x7f83dc18ebe9 [ 490.906831][T12912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.906860][T12912] RSP: 002b:00007f83da3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 490.906887][T12912] RAX: ffffffffffffffda RBX: 00007f83dc3b5fa0 RCX: 00007f83dc18ebe9 [ 490.906905][T12912] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 490.906924][T12912] RBP: 00007f83da3ee090 R08: 0000000000000000 R09: 0000000000000000 [ 490.906941][T12912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.906957][T12912] R13: 00007f83dc3b6038 R14: 00007f83dc3b5fa0 R15: 00007ffec2746568 [ 490.906984][T12912] [ 490.907002][T12912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.423638][T12914] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 491.628684][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 491.961521][T12945] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 494.535252][T12992] FAULT_INJECTION: forcing a failure. [ 494.535252][T12992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 494.569169][T12992] CPU: 0 UID: 0 PID: 12992 Comm: syz.3.1445 Not tainted syzkaller #0 PREEMPT(full) [ 494.569211][T12992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.569229][T12992] Call Trace: [ 494.569240][T12992] [ 494.569250][T12992] dump_stack_lvl+0x16c/0x1f0 [ 494.569295][T12992] should_fail_ex+0x512/0x640 [ 494.569342][T12992] should_fail_alloc_page+0xe7/0x130 [ 494.569386][T12992] prepare_alloc_pages+0x3c2/0x610 [ 494.569429][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.569462][T12992] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 494.569503][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.569533][T12992] ? trace_mm_page_alloc+0x11f/0x1a0 [ 494.569579][T12992] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 494.569618][T12992] ? __pfx_stack_trace_save+0x10/0x10 [ 494.569654][T12992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 494.569693][T12992] ? stack_depot_save_flags+0x29/0x9c0 [ 494.569738][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.569774][T12992] ? alloc_vmap_area+0x645/0x29c0 [ 494.569818][T12992] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 494.569848][T12992] ? stack_map_alloc+0x3c6/0x650 [ 494.569879][T12992] ? map_create+0x58f/0x1f80 [ 494.569928][T12992] ? __sys_bpf+0x44d2/0x4de0 [ 494.569971][T12992] ? __x64_sys_bpf+0x78/0xc0 [ 494.570018][T12992] ? do_syscall_64+0xcd/0x490 [ 494.570059][T12992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.570098][T12992] alloc_pages_bulk_noprof+0x71c/0x1410 [ 494.570136][T12992] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 494.570183][T12992] ? policy_nodemask+0xea/0x4e0 [ 494.570223][T12992] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 494.570262][T12992] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 494.570304][T12992] kasan_populate_vmalloc+0xf1/0x1f0 [ 494.570336][T12992] alloc_vmap_area+0x959/0x29c0 [ 494.570381][T12992] ? __pfx_alloc_vmap_area+0x10/0x10 [ 494.570424][T12992] __get_vm_area_node+0x1ca/0x330 [ 494.570467][T12992] __vmalloc_node_range_noprof+0x271/0x14b0 [ 494.570494][T12992] ? stack_map_alloc+0x3c6/0x650 [ 494.570522][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.570550][T12992] ? stack_map_alloc+0x3c6/0x650 [ 494.570580][T12992] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 494.570606][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.570633][T12992] ? trace_kmalloc+0x2b/0xd0 [ 494.570674][T12992] ? stack_map_alloc+0x3c6/0x650 [ 494.570700][T12992] __bpf_map_area_alloc+0x12e/0x200 [ 494.570744][T12992] ? stack_map_alloc+0x3c6/0x650 [ 494.570772][T12992] stack_map_alloc+0x3c6/0x650 [ 494.570801][T12992] map_create+0x58f/0x1f80 [ 494.570839][T12992] ? kstrtouint_from_user+0x13c/0x1d0 [ 494.570875][T12992] ? __pfx_map_create+0x10/0x10 [ 494.570909][T12992] ? __might_fault+0x13b/0x190 [ 494.570945][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.570971][T12992] ? __might_fault+0xe3/0x190 [ 494.571000][T12992] ? lock_release+0x201/0x2f0 [ 494.571040][T12992] __sys_bpf+0x44d2/0x4de0 [ 494.571078][T12992] ? lock_release+0x201/0x2f0 [ 494.571113][T12992] ? __pfx___sys_bpf+0x10/0x10 [ 494.571152][T12992] ? ksys_write+0x190/0x250 [ 494.571181][T12992] ? rcu_is_watching+0x12/0xc0 [ 494.571207][T12992] ? lock_release+0x201/0x2f0 [ 494.571244][T12992] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 494.571291][T12992] ? fput+0x9b/0xd0 [ 494.571327][T12992] ? ksys_write+0x1ac/0x250 [ 494.571357][T12992] ? __pfx_ksys_write+0x10/0x10 [ 494.571389][T12992] __x64_sys_bpf+0x78/0xc0 [ 494.571429][T12992] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 494.571472][T12992] do_syscall_64+0xcd/0x490 [ 494.571507][T12992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.571533][T12992] RIP: 0033:0x7fe37a18ebe9 [ 494.571565][T12992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.571592][T12992] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.571618][T12992] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 494.571636][T12992] RDX: 00000000000004f4 RSI: 0000200000000100 RDI: 0000000000000000 [ 494.571653][T12992] RBP: 00007fe37afc4090 R08: 0000000000000000 R09: 0000000000000000 [ 494.571670][T12992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.571686][T12992] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 494.571712][T12992] [ 495.590974][T13022] FAULT_INJECTION: forcing a failure. [ 495.590974][T13022] name fail_futex, interval 1, probability 0, space 0, times 0 [ 495.794064][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.0.1450 Not tainted syzkaller #0 PREEMPT(full) [ 495.794110][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.794131][T13022] Call Trace: [ 495.794141][T13022] [ 495.794153][T13022] dump_stack_lvl+0x16c/0x1f0 [ 495.794200][T13022] should_fail_ex+0x512/0x640 [ 495.794251][T13022] get_futex_key+0x1d0/0x1560 [ 495.794295][T13022] ? __pfx_get_futex_key+0x10/0x10 [ 495.794343][T13022] futex_wait_setup+0x9d/0x550 [ 495.794400][T13022] __futex_wait+0x194/0x2f0 [ 495.794451][T13022] ? __pfx___futex_wait+0x10/0x10 [ 495.794507][T13022] ? __pfx_futex_wake_mark+0x10/0x10 [ 495.794560][T13022] ? lock_release+0x201/0x2f0 [ 495.794622][T13022] ? futex_private_hash_put+0x11c/0x300 [ 495.794662][T13022] futex_wait+0xe8/0x380 [ 495.794711][T13022] ? __pfx_futex_wait+0x10/0x10 [ 495.794767][T13022] ? do_vfs_ioctl+0x128/0x14f0 [ 495.794823][T13022] do_futex+0x229/0x350 [ 495.794868][T13022] ? __pfx_do_futex+0x10/0x10 [ 495.794912][T13022] ? rcu_is_watching+0x12/0xc0 [ 495.794951][T13022] __x64_sys_futex+0x1e0/0x4c0 [ 495.794997][T13022] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 495.795047][T13022] ? __pfx___x64_sys_futex+0x10/0x10 [ 495.795091][T13022] ? pipe_ioctl+0x7a/0x2b0 [ 495.795127][T13022] ? fput+0x9b/0xd0 [ 495.795174][T13022] do_syscall_64+0xcd/0x490 [ 495.795220][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.795256][T13022] RIP: 0033:0x7f940db8ebe9 [ 495.795281][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.795315][T13022] RSP: 002b:00007f940ea1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 495.795348][T13022] RAX: ffffffffffffffda RBX: 00007f940ddb6098 RCX: 00007f940db8ebe9 [ 495.795370][T13022] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f940ddb6098 [ 495.795409][T13022] RBP: 00007f940ddb6090 R08: 0000000000000000 R09: 0000000000000000 [ 495.795429][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.795449][T13022] R13: 00007f940ddb6128 R14: 00007ffc29431de0 R15: 00007ffc29431ec8 [ 495.795478][T13022] [ 496.144705][T13027] FAULT_INJECTION: forcing a failure. [ 496.144705][T13027] name failslab, interval 1, probability 0, space 0, times 0 [ 496.161743][T13027] CPU: 0 UID: 0 PID: 13027 Comm: syz.0.1454 Not tainted syzkaller #0 PREEMPT(full) [ 496.161793][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.161815][T13027] Call Trace: [ 496.161826][T13027] [ 496.161838][T13027] dump_stack_lvl+0x16c/0x1f0 [ 496.161888][T13027] should_fail_ex+0x512/0x640 [ 496.161953][T13027] should_failslab+0xc2/0x120 [ 496.161997][T13027] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 496.162035][T13027] ? __pfx_stack_trace_save+0x10/0x10 [ 496.162074][T13027] ? __d_alloc+0x32/0xae0 [ 496.162114][T13027] __d_alloc+0x32/0xae0 [ 496.162155][T13027] d_alloc_parallel+0x111/0x1480 [ 496.162204][T13027] ? do_filp_open+0x20b/0x470 [ 496.162238][T13027] ? do_sys_openat2+0x11b/0x1d0 [ 496.162285][T13027] ? do_syscall_64+0xcd/0x490 [ 496.162331][T13027] ? __d_lookup+0x25c/0x4a0 [ 496.162372][T13027] ? rcu_is_watching+0x12/0xc0 [ 496.162401][T13027] ? __pfx_d_alloc_parallel+0x10/0x10 [ 496.162452][T13027] ? __d_lookup+0x266/0x4a0 [ 496.162500][T13027] lookup_open.isra.0+0x665/0x1580 [ 496.162533][T13027] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 496.162567][T13027] ? mnt_get_write_access+0x54/0x300 [ 496.162606][T13027] ? rcu_is_watching+0x12/0xc0 [ 496.162640][T13027] ? __pfx_down_write+0x10/0x10 [ 496.162693][T13027] ? mnt_get_write_access+0x20c/0x300 [ 496.162739][T13027] path_openat+0x893/0x2cb0 [ 496.162780][T13027] ? __pfx_path_openat+0x10/0x10 [ 496.162822][T13027] do_filp_open+0x20b/0x470 [ 496.162859][T13027] ? __pfx_do_filp_open+0x10/0x10 [ 496.162911][T13027] ? alloc_fd+0x471/0x7d0 [ 496.162949][T13027] do_sys_openat2+0x11b/0x1d0 [ 496.163000][T13027] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.163055][T13027] __x64_sys_openat+0x174/0x210 [ 496.163102][T13027] ? __pfx___x64_sys_openat+0x10/0x10 [ 496.163161][T13027] do_syscall_64+0xcd/0x490 [ 496.163204][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.163238][T13027] RIP: 0033:0x7f940db8ebe9 [ 496.163264][T13027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.163299][T13027] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.163331][T13027] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 496.163352][T13027] RDX: 0000000000082942 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 496.163373][T13027] RBP: 00007f940dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 496.163392][T13027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.163412][T13027] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 496.163445][T13027] [ 497.065872][T13048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 497.954983][T13066] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 498.910203][T13078] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 499.403182][T13088] tipc: Started in network mode [ 499.417835][T13088] tipc: Node identity ee00, cluster identity 4711 [ 499.433013][T13088] tipc: Node number set to 60928 [ 499.505867][T13094] FAULT_INJECTION: forcing a failure. [ 499.505867][T13094] name failslab, interval 1, probability 0, space 0, times 0 [ 499.531664][T13094] CPU: 1 UID: 0 PID: 13094 Comm: syz.3.1467 Not tainted syzkaller #0 PREEMPT(full) [ 499.531704][T13094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 499.531723][T13094] Call Trace: [ 499.531730][T13094] [ 499.531738][T13094] dump_stack_lvl+0x16c/0x1f0 [ 499.531771][T13094] should_fail_ex+0x512/0x640 [ 499.531806][T13094] should_failslab+0xc2/0x120 [ 499.531838][T13094] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 499.531865][T13094] ? _raw_spin_unlock+0x28/0x50 [ 499.531890][T13094] ? alloc_inode+0xc3/0x240 [ 499.531925][T13094] alloc_inode+0xc3/0x240 [ 499.531957][T13094] new_inode+0x22/0x1c0 [ 499.531991][T13094] simple_fill_super+0x306/0x720 [ 499.532018][T13094] ? __pfx_nfsd_fill_super+0x10/0x10 [ 499.532046][T13094] nfsd_fill_super+0x90/0x530 [ 499.532071][T13094] ? __pfx_set_anon_super_fc+0x10/0x10 [ 499.532094][T13094] ? __pfx_nfsd_fill_super+0x10/0x10 [ 499.532120][T13094] get_tree_keyed+0x10b/0x1d0 [ 499.532145][T13094] vfs_get_tree+0x8e/0x340 [ 499.532165][T13094] path_mount+0x1482/0x1fd0 [ 499.532196][T13094] ? __pfx_path_mount+0x10/0x10 [ 499.532231][T13094] ? kmem_cache_free+0x2d1/0x4d0 [ 499.532258][T13094] ? putname+0x154/0x1a0 [ 499.532293][T13094] ? putname+0x154/0x1a0 [ 499.532327][T13094] ? __x64_sys_mount+0x28d/0x310 [ 499.532365][T13094] __x64_sys_mount+0x28d/0x310 [ 499.532393][T13094] ? __pfx___x64_sys_mount+0x10/0x10 [ 499.532435][T13094] do_syscall_64+0xcd/0x490 [ 499.532463][T13094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.532484][T13094] RIP: 0033:0x7fe37a18ebe9 [ 499.532500][T13094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.532526][T13094] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 499.532545][T13094] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 499.532559][T13094] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 499.532572][T13094] RBP: 00007fe37a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 499.532584][T13094] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 499.532597][T13094] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 499.532616][T13094] [ 499.883778][T13087] Process accounting resumed [ 500.092222][T13102] FAULT_INJECTION: forcing a failure. [ 500.092222][T13102] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 500.137743][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.3.1470 Not tainted syzkaller #0 PREEMPT(full) [ 500.137775][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.137790][T13102] Call Trace: [ 500.137797][T13102] [ 500.137805][T13102] dump_stack_lvl+0x16c/0x1f0 [ 500.137838][T13102] should_fail_ex+0x512/0x640 [ 500.137873][T13102] should_fail_alloc_page+0xe7/0x130 [ 500.137906][T13102] prepare_alloc_pages+0x3c2/0x610 [ 500.137941][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.137976][T13102] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 500.138002][T13102] ? do_raw_spin_unlock+0x172/0x230 [ 500.138035][T13102] ? _raw_spin_unlock+0x28/0x50 [ 500.138056][T13102] ? free_unref_folios+0x1107/0x16b0 [ 500.138079][T13102] ? css_rstat_updated+0x1c2/0x510 [ 500.138100][T13102] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 500.138125][T13102] ? do_raw_spin_lock+0x12c/0x2b0 [ 500.138156][T13102] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 500.138190][T13102] ? do_raw_spin_unlock+0x172/0x230 [ 500.138227][T13102] ? _raw_spin_unlock+0x28/0x50 [ 500.138247][T13102] ? __dquot_alloc_space+0x520/0xe20 [ 500.138274][T13102] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 500.138305][T13102] ? policy_nodemask+0xea/0x4e0 [ 500.138332][T13102] alloc_pages_mpol+0x1fb/0x550 [ 500.138359][T13102] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 500.138389][T13102] ? __folio_batch_add_and_move+0x602/0xc90 [ 500.138416][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.138435][T13102] ? lock_release+0x201/0x2f0 [ 500.138462][T13102] folio_alloc_mpol_noprof+0x36/0x2f0 [ 500.138493][T13102] shmem_alloc_folio+0x135/0x160 [ 500.138526][T13102] shmem_alloc_and_add_folio+0x499/0xc20 [ 500.138551][T13102] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 500.138575][T13102] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 500.138600][T13102] shmem_get_folio_gfp+0x67f/0x1600 [ 500.138624][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.138644][T13102] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 500.138668][T13102] ? filemap_map_pages+0xf58/0x1670 [ 500.138694][T13102] shmem_fault+0x1fe/0xa30 [ 500.138716][T13102] ? __pfx_shmem_fault+0x10/0x10 [ 500.138740][T13102] ? __pfx_filemap_map_pages+0x10/0x10 [ 500.138768][T13102] ? __pfx_filemap_map_pages+0x10/0x10 [ 500.138791][T13102] __do_fault+0x10d/0x490 [ 500.138816][T13102] ? __pfx_filemap_map_pages+0x10/0x10 [ 500.138840][T13102] do_pte_missing+0xf50/0x3ba0 [ 500.138860][T13102] ? __handle_mm_fault+0x14fd/0x2a50 [ 500.138879][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.138898][T13102] ? lock_release+0x201/0x2f0 [ 500.138925][T13102] __handle_mm_fault+0x152a/0x2a50 [ 500.138946][T13102] ? mt_find+0x3ef/0xa30 [ 500.138974][T13102] ? __pfx___handle_mm_fault+0x10/0x10 [ 500.138993][T13102] ? __pfx_mt_find+0x10/0x10 [ 500.139019][T13102] ? debug_check_no_obj_freed+0x31f/0x600 [ 500.139049][T13102] ? find_vma+0xbf/0x140 [ 500.139075][T13102] ? __pfx_find_vma+0x10/0x10 [ 500.139102][T13102] handle_mm_fault+0x589/0xd10 [ 500.139123][T13102] ? __bpf_trace_exceptions+0x1/0x40 [ 500.139155][T13102] do_user_addr_fault+0x7a6/0x1370 [ 500.139187][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.139206][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.139231][T13102] exc_page_fault+0x5c/0xb0 [ 500.139254][T13102] asm_exc_page_fault+0x26/0x30 [ 500.139274][T13102] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 500.139294][T13102] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 500.139314][T13102] RSP: 0018:ffffc90019b8fcf8 EFLAGS: 00050206 [ 500.139331][T13102] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000c000 [ 500.139343][T13102] RDX: 0000000000000000 RSI: 0000000000005000 RDI: ffff888046465000 [ 500.139356][T13102] RBP: 0000000000011000 R08: 0000000000000001 R09: ffffed1008c8e1ff [ 500.139369][T13102] R10: ffff888046470fff R11: 0000000000000000 R12: 0000000000000000 [ 500.139381][T13102] R13: ffff888046460000 R14: 0000000000000000 R15: 0000000000011000 [ 500.139401][T13102] _copy_from_user+0x98/0xd0 [ 500.139434][T13102] sctp_setsockopt+0x2045/0xb870 [ 500.139464][T13102] ? lock_release+0x201/0x2f0 [ 500.139491][T13102] ? __pfx_sctp_setsockopt+0x10/0x10 [ 500.139519][T13102] ? rcu_is_watching+0x12/0xc0 [ 500.139540][T13102] ? aa_sock_opt_perm+0xfd/0x1c0 [ 500.139559][T13102] ? sock_common_setsockopt+0x2e/0xf0 [ 500.139590][T13102] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 500.139622][T13102] do_sock_setsockopt+0xf3/0x1d0 [ 500.139654][T13102] __sys_setsockopt+0x120/0x1a0 [ 500.139680][T13102] __x64_sys_setsockopt+0xbd/0x160 [ 500.139704][T13102] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 500.139737][T13102] do_syscall_64+0xcd/0x490 [ 500.139765][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.139786][T13102] RIP: 0033:0x7fe37a18ebe9 [ 500.139806][T13102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.139832][T13102] RSP: 002b:00007fe37afc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.139855][T13102] RAX: ffffffffffffffda RBX: 00007fe37a3b5fa0 RCX: 00007fe37a18ebe9 [ 500.139874][T13102] RDX: 0000000000000002 RSI: 0000010000000084 RDI: 0000000000000003 [ 500.139890][T13102] RBP: 00007fe37afc4090 R08: 0000000040000008 R09: 0000000000000000 [ 500.139907][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.139923][T13102] R13: 00007fe37a3b6038 R14: 00007fe37a3b5fa0 R15: 00007fff41da0f98 [ 500.139949][T13102] [ 502.346106][T13147] batman_adv: Routing algorithm '' is not supported [ 502.406005][T13158] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1482'. [ 503.047839][T13185] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 504.934439][T13240] syz.3.1496 (13240) used obsolete PPPIOCDETACH ioctl [ 505.490687][T13247] FAULT_INJECTION: forcing a failure. [ 505.490687][T13247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.504730][T13247] CPU: 0 UID: 0 PID: 13247 Comm: syz.0.1499 Not tainted syzkaller #0 PREEMPT(full) [ 505.504762][T13247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.504777][T13247] Call Trace: [ 505.504783][T13247] [ 505.504791][T13247] dump_stack_lvl+0x16c/0x1f0 [ 505.504823][T13247] should_fail_ex+0x512/0x640 [ 505.504855][T13247] _copy_from_user+0x2e/0xd0 [ 505.504889][T13247] copy_msghdr_from_user+0x98/0x160 [ 505.504916][T13247] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 505.504946][T13247] ? kfree+0x24f/0x4d0 [ 505.504968][T13247] ___sys_recvmsg+0xdb/0x1a0 [ 505.504995][T13247] ? __pfx____sys_recvmsg+0x10/0x10 [ 505.505041][T13247] ? __pfx___might_resched+0x10/0x10 [ 505.505068][T13247] do_recvmmsg+0x2fe/0x750 [ 505.505100][T13247] ? __pfx_do_recvmmsg+0x10/0x10 [ 505.505129][T13247] ? ksys_write+0x190/0x250 [ 505.505155][T13247] ? rcu_is_watching+0x12/0xc0 [ 505.505182][T13247] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 505.505219][T13247] ? __fget_files+0x20e/0x3c0 [ 505.505248][T13247] __x64_sys_recvmmsg+0x22a/0x280 [ 505.505281][T13247] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 505.505318][T13247] do_syscall_64+0xcd/0x490 [ 505.505350][T13247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.505374][T13247] RIP: 0033:0x7f940db8ebe9 [ 505.505393][T13247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.505417][T13247] RSP: 002b:00007f940ea3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 505.505439][T13247] RAX: ffffffffffffffda RBX: 00007f940ddb5fa0 RCX: 00007f940db8ebe9 [ 505.505455][T13247] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 505.505469][T13247] RBP: 00007f940ea3b090 R08: 0000000000000000 R09: 0000000000000000 [ 505.505483][T13247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.505498][T13247] R13: 00007f940ddb6038 R14: 00007f940ddb5fa0 R15: 00007ffc29431ec8 [ 505.505520][T13247] [ 505.812523][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.819975][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.972094][T13255] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 507.125230][T13287] FAULT_INJECTION: forcing a failure. [ 507.125230][T13287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.153501][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.3.1510 Not tainted syzkaller #0 PREEMPT(full) [ 507.153545][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.153565][T13287] Call Trace: [ 507.153576][T13287] [ 507.153588][T13287] dump_stack_lvl+0x16c/0x1f0 [ 507.153638][T13287] should_fail_ex+0x512/0x640 [ 507.153687][T13287] should_fail_alloc_page+0xe7/0x130 [ 507.153735][T13287] prepare_alloc_pages+0x3c2/0x610 [ 507.153787][T13287] ? do_user_addr_fault+0x829/0x1370 [ 507.153847][T13287] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 507.153893][T13287] ? do_user_addr_fault+0x843/0x1370 [ 507.153949][T13287] ? rcu_is_watching+0x12/0xc0 [ 507.153995][T13287] ? rcu_is_watching+0x12/0xc0 [ 507.154029][T13287] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 507.154084][T13287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.154135][T13287] ? rep_movs_alternative+0x4a/0x90 [ 507.154168][T13287] ? _copy_from_iter+0x15d/0x16f0 [ 507.154218][T13287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.154269][T13287] ? policy_nodemask+0xea/0x4e0 [ 507.154312][T13287] alloc_pages_mpol+0x1fb/0x550 [ 507.154357][T13287] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 507.154406][T13287] alloc_pages_noprof+0x131/0x390 [ 507.154462][T13287] anon_pipe_write+0xbc2/0x1a90 [ 507.154511][T13287] ? get_pid_task+0xfc/0x250 [ 507.154554][T13287] ? rcu_is_watching+0x12/0xc0 [ 507.154585][T13287] ? __pfx_anon_pipe_write+0x10/0x10 [ 507.154629][T13287] ? common_file_perm+0x1a9/0x340 [ 507.154674][T13287] fifo_pipe_write+0x24/0x530 [ 507.154717][T13287] vfs_write+0x7d3/0x11d0 [ 507.154773][T13287] ? __pfx_fifo_pipe_write+0x10/0x10 [ 507.154817][T13287] ? __pfx_vfs_write+0x10/0x10 [ 507.154856][T13287] ? lock_release+0x201/0x2f0 [ 507.154907][T13287] ksys_write+0x1f8/0x250 [ 507.154942][T13287] ? __pfx_ksys_write+0x10/0x10 [ 507.154995][T13287] do_syscall_64+0xcd/0x490 [ 507.155040][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.155074][T13287] RIP: 0033:0x7fe37a18ebe9 [ 507.155098][T13287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.155129][T13287] RSP: 002b:00007fe37af82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.155160][T13287] RAX: ffffffffffffffda RBX: 00007fe37a3b6180 RCX: 00007fe37a18ebe9 [ 507.155181][T13287] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 507.155199][T13287] RBP: 00007fe37af82090 R08: 0000000000000000 R09: 0000000000000000 [ 507.155218][T13287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 507.155236][T13287] R13: 00007fe37a3b6218 R14: 00007fe37a3b6180 R15: 00007fff41da0f98 [ 507.155267][T13287] [ 509.174052][T13317] FAULT_INJECTION: forcing a failure. [ 509.174052][T13317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.190000][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.1.1515 Not tainted syzkaller #0 PREEMPT(full) [ 509.190031][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.190046][T13317] Call Trace: [ 509.190053][T13317] [ 509.190062][T13317] dump_stack_lvl+0x16c/0x1f0 [ 509.190095][T13317] should_fail_ex+0x512/0x640 [ 509.190129][T13317] _copy_to_iter+0x29f/0x16f0 [ 509.190150][T13317] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 509.190181][T13317] ? __pfx__copy_to_iter+0x10/0x10 [ 509.190200][T13317] ? rcu_is_watching+0x12/0xc0 [ 509.190223][T13317] ? lock_release+0x201/0x2f0 [ 509.190250][T13317] ? module_attr_show+0x58/0x80 [ 509.190271][T13317] ? kernfs_put_active+0x86/0xe0 [ 509.190304][T13317] seq_read_iter+0xcf8/0x12c0 [ 509.190354][T13317] kernfs_fop_read_iter+0x40f/0x5a0 [ 509.190376][T13317] ? rw_verify_area+0xcf/0x6c0 [ 509.190402][T13317] vfs_read+0x8bf/0xcf0 [ 509.190430][T13317] ? __pfx___mutex_lock+0x10/0x10 [ 509.190463][T13317] ? __pfx_vfs_read+0x10/0x10 [ 509.190505][T13317] ksys_read+0x12a/0x250 [ 509.190532][T13317] ? __pfx_ksys_read+0x10/0x10 [ 509.190563][T13317] do_syscall_64+0xcd/0x490 [ 509.190598][T13317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.190623][T13317] RIP: 0033:0x7fbeb038ebe9 [ 509.190641][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.190666][T13317] RSP: 002b:00007fbeb12dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.190689][T13317] RAX: ffffffffffffffda RBX: 00007fbeb05b5fa0 RCX: 00007fbeb038ebe9 [ 509.190706][T13317] RDX: 000000000000101f RSI: 00002000000020c0 RDI: 0000000000000003 [ 509.190721][T13317] RBP: 00007fbeb12dd090 R08: 0000000000000000 R09: 0000000000000000 [ 509.190739][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.190753][T13317] R13: 00007fbeb05b6038 R14: 00007fbeb05b5fa0 R15: 00007ffc8c49bb38 [ 509.190776][T13317] [ 509.771802][T13315] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1513'. [ 511.458951][T13354] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 512.351040][T13366] block2mtd: illegal erase size [ 512.474654][ T30] audit: type=1804 audit(4294969615.289:9): pid=13366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1525" name="/newroot/374/file0" dev="tmpfs" ino=1966 res=1 errno=0 [ 512.536191][ T30] audit: type=1800 audit(4294969615.289:10): pid=13366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1525" name="file0" dev="tmpfs" ino=1966 res=0 errno=0 [ 512.559010][ T30] audit: type=1800 audit(4294969615.289:11): pid=13366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1525" name="file0" dev="tmpfs" ino=1966 res=0 errno=0 [ 513.351854][T13388] ptrace attach of "./syz-executor exec"[5865] was attempted by ""[13388] [ 513.463794][T13393] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 513.847010][T13401] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 514.131522][T13406] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 514.160680][T13408] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 514.178285][T13406] memcg:ffff888033539182 [ 514.199441][T13406] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 514.317745][T13406] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 514.386002][T13406] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 514.491303][T13406] page dumped because: unmovable page [ 514.500615][T13406] page_owner tracks the page as allocated [ 514.508758][T13406] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 514.538970][T13406] post_alloc_hook+0x1c0/0x230 [ 514.544471][T13406] get_page_from_freelist+0x132b/0x38e0 [ 514.554892][T13406] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 514.581248][T13406] alloc_pages_mpol+0x1fb/0x550 [ 514.626765][T13406] alloc_pages_noprof+0x131/0x390 [ 514.632063][T13406] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 514.704266][T13406] __vmalloc_node_noprof+0xad/0xf0 [ 514.715596][T13406] copy_process+0x2c70/0x7690 [ 514.749110][T13406] kernel_clone+0xfc/0x930 [ 514.763973][T13406] __do_sys_clone+0xce/0x120 [ 514.768914][T13406] do_syscall_64+0xcd/0x490 [ 514.773778][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.783966][T13406] page last free pid 7560 tgid 7560 stack trace: [ 514.799827][T13406] __free_frozen_pages+0x7d5/0x10f0 [ 514.813296][T13406] tlb_finish_mmu+0x237/0x7c0 [ 514.826225][T13406] exit_mmap+0x403/0xb90 [ 514.842059][T13406] __mmput+0x12a/0x410 [ 514.871432][T13406] mmput+0x62/0x70 [ 514.898420][T13406] do_exit+0x7c7/0x2bf0 [ 514.967711][T13406] do_group_exit+0xd3/0x2a0 [ 514.992889][T13406] __x64_sys_exit_group+0x3e/0x50 [ 515.000798][T13406] x64_sys_call+0x14fa/0x1720 [ 515.043475][T13406] do_syscall_64+0xcd/0x490 [ 515.048934][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.452111][T13426] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 516.201530][T13444] FAULT_INJECTION: forcing a failure. [ 516.201530][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 516.214888][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.0.1543 Not tainted syzkaller #0 PREEMPT(full) [ 516.214932][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.214952][T13444] Call Trace: [ 516.214962][T13444] [ 516.214973][T13444] dump_stack_lvl+0x16c/0x1f0 [ 516.215022][T13444] should_fail_ex+0x512/0x640 [ 516.215072][T13444] should_failslab+0xc2/0x120 [ 516.215125][T13444] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 516.215167][T13444] ? xas_split_alloc+0x11c/0x490 [ 516.215213][T13444] xas_split_alloc+0x11c/0x490 [ 516.215262][T13444] __folio_split+0xdd0/0x4a80 [ 516.215324][T13444] ? rcu_is_watching+0x12/0xc0 [ 516.215359][T13444] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 516.215417][T13444] ? __pfx___folio_split+0x10/0x10 [ 516.215474][T13444] ? zero_user_segments.constprop.0+0x278/0x340 [ 516.215532][T13444] truncate_inode_partial_folio+0x7ab/0xdb0 [ 516.215587][T13444] shmem_undo_range+0x6eb/0x1150 [ 516.215634][T13444] ? __pfx_shmem_undo_range+0x10/0x10 [ 516.215693][T13444] ? zap_page_range_single+0xc7/0x120 [ 516.215745][T13444] ? __pfx_zap_page_range_single+0x10/0x10 [ 516.215796][T13444] ? timestamp_truncate+0x21e/0x2d0 [ 516.215864][T13444] ? __pfx_unmap_mapping_range+0x10/0x10 [ 516.215912][T13444] ? shmem_fallocate+0x9a7/0xf50 [ 516.215968][T13444] ? lock_release+0x201/0x2f0 [ 516.216013][T13444] shmem_fallocate+0x9e7/0xf50 [ 516.216051][T13444] ? rcu_is_watching+0x12/0xc0 [ 516.216085][T13444] ? aa_file_perm+0x28f/0x12e0 [ 516.216139][T13444] ? rcu_is_watching+0x12/0xc0 [ 516.216179][T13444] ? __pfx_shmem_fallocate+0x10/0x10 [ 516.216223][T13444] ? __pfx_aa_file_perm+0x10/0x10 [ 516.216275][T13444] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 516.216321][T13444] ? lock_acquire+0x2cd/0x350 [ 516.216361][T13444] ? __pfx___might_resched+0x10/0x10 [ 516.216392][T13444] ? common_file_perm+0x1a9/0x340 [ 516.216434][T13444] ? __pfx_shmem_fallocate+0x10/0x10 [ 516.216474][T13444] vfs_fallocate+0x5b1/0x10e0 [ 516.216515][T13444] ? __pfx_vfs_fallocate+0x10/0x10 [ 516.216553][T13444] ? madvise_vma_behavior+0x2b20/0x2d60 [ 516.216603][T13444] ? lock_release+0x201/0x2f0 [ 516.216647][T13444] madvise_vma_behavior+0x2ad7/0x2d60 [ 516.216699][T13444] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 516.216750][T13444] ? __pfx_mt_find+0x10/0x10 [ 516.216798][T13444] ? find_vma_prev+0xda/0x160 [ 516.216846][T13444] ? __pfx_find_vma_prev+0x10/0x10 [ 516.216897][T13444] ? find_vma+0xbf/0x140 [ 516.216940][T13444] ? __pfx_find_vma+0x10/0x10 [ 516.216985][T13444] ? kstrtouint+0xdd/0x130 [ 516.217026][T13444] madvise_walk_vmas+0x31f/0x9c0 [ 516.217077][T13444] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 516.217142][T13444] ? rcu_is_watching+0x12/0xc0 [ 516.217179][T13444] madvise_do_behavior+0x1e2/0x530 [ 516.217229][T13444] ? __pfx_madvise_do_behavior+0x10/0x10 [ 516.217278][T13444] ? down_read+0x13d/0x480 [ 516.217326][T13444] ? preempt_count_add+0x76/0x150 [ 516.217379][T13444] do_madvise+0x176/0x240 [ 516.217425][T13444] ? __pfx_do_madvise+0x10/0x10 [ 516.217470][T13444] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 516.217520][T13444] ? __fget_files+0x20e/0x3c0 [ 516.217562][T13444] ? __pfx_ksys_write+0x10/0x10 [ 516.217603][T13444] __x64_sys_madvise+0xa9/0x110 [ 516.217659][T13444] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 516.217709][T13444] do_syscall_64+0xcd/0x490 [ 516.217752][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.217785][T13444] RIP: 0033:0x7f940db8ebe9 [ 516.217809][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.217842][T13444] RSP: 002b:00007f940e9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 516.217873][T13444] RAX: ffffffffffffffda RBX: 00007f940ddb6360 RCX: 00007f940db8ebe9 [ 516.217894][T13444] RDX: 0000000000000009 RSI: 000000000020499d RDI: 0000000000000000 [ 516.217912][T13444] RBP: 00007f940e9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 516.217932][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.217950][T13444] R13: 00007f940ddb63f8 R14: 00007f940ddb6360 R15: 00007ffc29431ec8 [ 516.217981][T13444] [ 516.780433][T13453] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 517.461648][T13466] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 517.529280][T13466] memcg:ffff888033539182 [ 517.543685][T13466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 517.551368][T13466] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 517.782868][T13466] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 517.887297][T13466] page dumped because: unmovable page [ 517.894397][T13466] page_owner tracks the page as allocated [ 517.982546][T13466] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 518.031976][T13466] post_alloc_hook+0x1c0/0x230 [ 518.134645][T13466] get_page_from_freelist+0x132b/0x38e0 [ 518.140687][T13466] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 518.176250][T13466] alloc_pages_mpol+0x1fb/0x550 [ 518.196072][T13466] alloc_pages_noprof+0x131/0x390 [ 518.213149][T13466] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 518.232397][T13466] __vmalloc_node_noprof+0xad/0xf0 [ 518.265145][T13466] copy_process+0x2c70/0x7690 [ 518.275284][T13466] kernel_clone+0xfc/0x930 [ 518.303224][T13466] __do_sys_clone+0xce/0x120 [ 518.308822][T13466] do_syscall_64+0xcd/0x490 [ 518.316058][T13466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.322354][T13466] page last free pid 7560 tgid 7560 stack trace: [ 518.330603][T13466] __free_frozen_pages+0x7d5/0x10f0 [ 518.340673][T13466] tlb_finish_mmu+0x237/0x7c0 [ 518.346896][T13466] exit_mmap+0x403/0xb90 [ 518.352242][T13466] __mmput+0x12a/0x410 [ 518.357003][T13466] mmput+0x62/0x70 [ 518.361035][T13466] do_exit+0x7c7/0x2bf0 [ 518.366734][T13466] do_group_exit+0xd3/0x2a0 [ 518.372947][T13466] __x64_sys_exit_group+0x3e/0x50 [ 518.378956][T13466] x64_sys_call+0x14fa/0x1720 [ 518.383924][T13466] do_syscall_64+0xcd/0x490 [ 518.389278][T13466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.294327][T13496] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 519.826439][T13513] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 521.673063][T13541] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 521.697337][T13541] memcg:ffff888033539182 [ 521.709697][T13541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 521.720980][T13544] openvswitch: netlink: IPv6 tunnel dst address is zero [ 521.737695][T13541] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 521.756839][T13541] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 521.781163][T13541] page dumped because: unmovable page [ 521.811942][T13541] page_owner tracks the page as allocated [ 521.824396][T13541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 521.844523][T13541] post_alloc_hook+0x1c0/0x230 [ 521.850005][T13541] get_page_from_freelist+0x132b/0x38e0 [ 521.856089][T13541] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 521.880181][T13541] alloc_pages_mpol+0x1fb/0x550 [ 521.892016][T13541] alloc_pages_noprof+0x131/0x390 [ 521.907464][T13541] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 521.918944][T13541] __vmalloc_node_noprof+0xad/0xf0 [ 521.935288][T13541] copy_process+0x2c70/0x7690 [ 521.947150][T13541] kernel_clone+0xfc/0x930 [ 521.957881][T13541] __do_sys_clone+0xce/0x120 [ 521.966532][T13541] do_syscall_64+0xcd/0x490 [ 521.971567][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.984282][T13541] page last free pid 7560 tgid 7560 stack trace: [ 521.991950][T13541] __free_frozen_pages+0x7d5/0x10f0 [ 522.005827][T13541] tlb_finish_mmu+0x237/0x7c0 [ 522.021233][T13541] exit_mmap+0x403/0xb90 [ 522.030308][T13541] __mmput+0x12a/0x410 [ 522.034745][T13541] mmput+0x62/0x70 [ 522.039591][T13541] do_exit+0x7c7/0x2bf0 [ 522.055055][T13541] do_group_exit+0xd3/0x2a0 [ 522.061317][T13541] __x64_sys_exit_group+0x3e/0x50 [ 522.066888][T13541] x64_sys_call+0x14fa/0x1720 [ 522.071705][T13541] do_syscall_64+0xcd/0x490 [ 522.079597][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.484514][T13555] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 522.754045][T13561] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 524.122396][T13585] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 524.541095][T13596] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 526.650375][T13624] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 527.595923][T13644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1591'. [ 527.606461][T13644] macvlan0: left allmulticast mode [ 527.613078][T13644] veth1_vlan: left allmulticast mode [ 527.618787][T13644] macvlan0: left promiscuous mode [ 527.624093][T13644] bridge0: port 3(macvlan0) entered disabled state [ 527.633562][T13644] bridge_slave_1: left allmulticast mode [ 527.642060][T13644] bridge_slave_1: left promiscuous mode [ 527.661085][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.904421][T13644] bridge_slave_0: left allmulticast mode [ 528.025197][T13644] bridge_slave_0: left promiscuous mode [ 528.052496][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.981269][T13662] Process accounting paused [ 532.941845][T13720] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 534.826085][T13747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 534.977021][T13747] bridge_slave_0: left allmulticast mode [ 535.016522][T13747] bridge_slave_0: left promiscuous mode [ 535.069208][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.869790][T13787] FAULT_INJECTION: forcing a failure. [ 536.869790][T13787] name failslab, interval 1, probability 0, space 0, times 0 [ 536.894630][T13787] CPU: 1 UID: 0 PID: 13787 Comm: syz.2.1602 Not tainted syzkaller #0 PREEMPT(full) [ 536.894671][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.894687][T13787] Call Trace: [ 536.894696][T13787] [ 536.894704][T13787] dump_stack_lvl+0x16c/0x1f0 [ 536.894740][T13787] should_fail_ex+0x512/0x640 [ 536.894777][T13787] should_failslab+0xc2/0x120 [ 536.894811][T13787] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 536.894843][T13787] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 536.894883][T13787] ? fib_notifier_ops_register+0x32/0x270 [ 536.894921][T13787] kmemdup_noprof+0x29/0x60 [ 536.894951][T13787] fib_notifier_ops_register+0x32/0x270 [ 536.894986][T13787] fib4_notifier_init+0x4f/0xd0 [ 536.895021][T13787] fib_net_init+0xbf/0x3f0 [ 536.895055][T13787] ? __pfx___register_sysctl_table+0x10/0x10 [ 536.895094][T13787] ? __pfx_fib_net_init+0x10/0x10 [ 536.895129][T13787] ? lockdep_init_map_type+0x5c/0x280 [ 536.895167][T13787] ? do_init_timer+0xc9/0x110 [ 536.895194][T13787] ? devinet_init_net+0x5c2/0x910 [ 536.895233][T13787] ? __pfx_fib_net_init+0x10/0x10 [ 536.895268][T13787] ops_init+0x1df/0x5f0 [ 536.895302][T13787] setup_net+0x10f/0x380 [ 536.895334][T13787] ? lockdep_init_map_type+0x5c/0x280 [ 536.895368][T13787] ? __pfx_setup_net+0x10/0x10 [ 536.895413][T13787] ? debug_mutex_init+0x37/0x70 [ 536.895438][T13787] copy_net_ns+0x2a6/0x5f0 [ 536.895477][T13787] create_new_namespaces+0x3ea/0xa90 [ 536.895509][T13787] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 536.895540][T13787] ksys_unshare+0x45b/0xa40 [ 536.895574][T13787] ? __pfx_ksys_unshare+0x10/0x10 [ 536.895609][T13787] ? xfd_validate_state+0x61/0x180 [ 536.895650][T13787] __x64_sys_unshare+0x31/0x40 [ 536.895684][T13787] do_syscall_64+0xcd/0x490 [ 536.895718][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.895744][T13787] RIP: 0033:0x7f83dc18ebe9 [ 536.895763][T13787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.895788][T13787] RSP: 002b:00007f83da3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 536.895812][T13787] RAX: ffffffffffffffda RBX: 00007f83dc3b5fa0 RCX: 00007f83dc18ebe9 [ 536.895828][T13787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 536.895844][T13787] RBP: 00007f83dc211e19 R08: 0000000000000000 R09: 0000000000000000 [ 536.895860][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.895876][T13787] R13: 00007f83dc3b6038 R14: 00007f83dc3b5fa0 R15: 00007ffec2746568 [ 536.895900][T13787] [ 537.259576][T13786] vivid-003: ================= START STATUS ================= [ 537.267395][T13786] vivid-003: Radio HW Seek Mode: Bounded [ 537.273231][T13786] vivid-003: Radio Programmable HW Seek: false [ 537.279714][T13786] vivid-003: RDS Rx I/O Mode: Block I/O [ 537.285345][T13786] vivid-003: Generate RBDS Instead of RDS: false [ 537.292405][T13786] vivid-003: RDS Reception: true [ 537.297455][T13786] vivid-003: RDS Program Type: 0 inactive [ 537.304762][T13786] vivid-003: RDS PS Name: inactive [ 537.310882][T13786] vivid-003: RDS Radio Text: inactive [ 537.316855][T13786] vivid-003: RDS Traffic Announcement: false inactive [ 537.323840][T13786] vivid-003: RDS Traffic Program: false inactive [ 537.330391][T13786] vivid-003: RDS Music: false inactive [ 537.336147][T13786] vivid-003: ================== END STATUS ================== [ 537.474544][T13789] FAULT_INJECTION: forcing a failure. [ 537.474544][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.488719][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.1.1601 Not tainted syzkaller #0 PREEMPT(full) [ 537.488754][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.488770][T13789] Call Trace: [ 537.488778][T13789] [ 537.488787][T13789] dump_stack_lvl+0x16c/0x1f0 [ 537.488826][T13789] should_fail_ex+0x512/0x640 [ 537.488864][T13789] _copy_from_user+0x2e/0xd0 [ 537.488904][T13789] copy_msghdr_from_user+0x98/0x160 [ 537.488938][T13789] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 537.488973][T13789] ? kfree+0x24f/0x4d0 [ 537.489003][T13789] ? __pfx__kstrtoull+0x10/0x10 [ 537.489034][T13789] ___sys_sendmsg+0xfe/0x1d0 [ 537.489065][T13789] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.489102][T13789] ? rcu_is_watching+0x12/0xc0 [ 537.489134][T13789] ? __pfx___might_resched+0x10/0x10 [ 537.489163][T13789] __sys_sendmmsg+0x200/0x420 [ 537.489195][T13789] ? __pfx___sys_sendmmsg+0x10/0x10 [ 537.489226][T13789] ? lock_release+0x201/0x2f0 [ 537.489263][T13789] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.489303][T13789] ? fput+0x9b/0xd0 [ 537.489343][T13789] ? ksys_write+0x1ac/0x250 [ 537.489381][T13789] ? __pfx_ksys_write+0x10/0x10 [ 537.489420][T13789] __x64_sys_sendmmsg+0x9c/0x100 [ 537.489456][T13789] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 537.489506][T13789] do_syscall_64+0xcd/0x490 [ 537.489549][T13789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.489580][T13789] RIP: 0033:0x7fbeb038ebe9 [ 537.489604][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.489634][T13789] RSP: 002b:00007fbeb127a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 537.489665][T13789] RAX: ffffffffffffffda RBX: 00007fbeb05b6270 RCX: 00007fbeb038ebe9 [ 537.489687][T13789] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 537.489706][T13789] RBP: 00007fbeb127a090 R08: 0000000000000000 R09: 0000000000000000 [ 537.489725][T13789] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.489743][T13789] R13: 00007fbeb05b6308 R14: 00007fbeb05b6270 R15: 00007ffc8c49bb38 [ 537.489772][T13789] [ 538.685717][T13806] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 539.432967][T13815] nvme_fcloop: unknown parameter or missing value '/proc/bus' [ 540.110591][T13834] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 540.144477][T13837] ecryptfs_miscdev_write: Error while inspecting packet size [ 541.146728][T13860] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 542.045552][T13882] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 542.143854][T13885] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1628'. [ 543.326939][T13900] ecryptfs_miscdev_write: Error while inspecting packet size [ 543.706951][T13909] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 543.963836][T13917] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 545.293455][T13939] Invalid ELF header magic: != ELF [ 545.865152][T13945] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 547.835348][T13972] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 548.376843][T13991] random: crng reseeded on system resumption [ 548.879211][T13996] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1652'. [ 548.898025][T13997] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 549.057434][T14000] Invalid ELF header magic: != ELF [ 552.456591][T14061] nvme_fcloop: unknown parameter or missing value '/proc/bus' [ 553.196895][T14070] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 553.222137][T14074] random: crng reseeded on system resumption [ 555.466631][T14090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 556.240573][T14116] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 558.194702][T14149] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 558.297912][T14150] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 559.385696][T14162] : entered promiscuous mode [ 559.921845][T14184] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 560.862732][T14197] Invalid ELF header magic: != ELF [ 561.030928][T14187] Process accounting resumed [ 561.104113][T14200] FAULT_INJECTION: forcing a failure. [ 561.104113][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 561.169639][T14205] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 561.337504][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.3.1692 Not tainted syzkaller #0 PREEMPT(full) [ 561.337539][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.337555][T14200] Call Trace: [ 561.337563][T14200] [ 561.337572][T14200] dump_stack_lvl+0x16c/0x1f0 [ 561.337610][T14200] should_fail_ex+0x512/0x640 [ 561.337670][T14200] ? mempool_init_node+0x305/0x6e0 [ 561.337708][T14200] should_failslab+0xc2/0x120 [ 561.337742][T14200] __kmalloc_noprof+0xd2/0x510 [ 561.337774][T14200] ? __pfx_mempool_kmalloc+0x10/0x10 [ 561.337810][T14200] mempool_init_node+0x305/0x6e0 [ 561.337850][T14200] ? __pfx_mempool_kmalloc+0x10/0x10 [ 561.337885][T14200] ? __pfx_mempool_kfree+0x10/0x10 [ 561.337921][T14200] mempool_init_noprof+0x3a/0x50 [ 561.337960][T14200] do_fanotify_mark+0x2db2/0x3600 [ 561.338007][T14200] ? __pfx_do_fanotify_mark+0x10/0x10 [ 561.338049][T14200] ? __x64_sys_futex+0x1e9/0x4c0 [ 561.338083][T14200] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 561.338119][T14200] ? syscall_user_dispatch+0x78/0x140 [ 561.338162][T14200] __x64_sys_fanotify_mark+0xbd/0x160 [ 561.338202][T14200] ? syscall_trace_enter+0x5e/0x240 [ 561.338241][T14200] do_syscall_64+0xcd/0x490 [ 561.338275][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.338302][T14200] RIP: 0033:0x7fe37a18ebe9 [ 561.338320][T14200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.338354][T14200] RSP: 002b:00007fe37af82038 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 561.338377][T14200] RAX: ffffffffffffffda RBX: 00007fe37a3b6180 RCX: 00007fe37a18ebe9 [ 561.338394][T14200] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 561.338409][T14200] RBP: 00007fe37a211e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.338423][T14200] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 561.338438][T14200] R13: 00007fe37a3b6218 R14: 00007fe37a3b6180 R15: 00007fff41da0f98 [ 561.338462][T14200] [ 562.762055][T14226] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 564.302631][T14253] FAULT_INJECTION: forcing a failure. [ 564.302631][T14253] name failslab, interval 1, probability 0, space 0, times 0 [ 564.365994][T14253] CPU: 1 UID: 0 PID: 14253 Comm: syz.2.1703 Not tainted syzkaller #0 PREEMPT(full) [ 564.366038][T14253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.366058][T14253] Call Trace: [ 564.366069][T14253] [ 564.366081][T14253] dump_stack_lvl+0x16c/0x1f0 [ 564.366128][T14253] should_fail_ex+0x512/0x640 [ 564.366181][T14253] should_failslab+0xc2/0x120 [ 564.366223][T14253] __kvmalloc_node_noprof+0x137/0x620 [ 564.366279][T14253] ? fib4_semantics_init+0x25/0x100 [ 564.366318][T14253] ? fib4_semantics_init+0x25/0x100 [ 564.366352][T14253] fib4_semantics_init+0x25/0x100 [ 564.366386][T14253] fib_net_init+0x1fc/0x3f0 [ 564.366431][T14253] ? __pfx___register_sysctl_table+0x10/0x10 [ 564.366479][T14253] ? __pfx_fib_net_init+0x10/0x10 [ 564.366521][T14253] ? lockdep_init_map_type+0x5c/0x280 [ 564.366566][T14253] ? do_init_timer+0xc9/0x110 [ 564.366601][T14253] ? devinet_init_net+0x5c2/0x910 [ 564.366649][T14253] ? __pfx_fib_net_init+0x10/0x10 [ 564.366690][T14253] ops_init+0x1df/0x5f0 [ 564.366733][T14253] setup_net+0x10f/0x380 [ 564.366775][T14253] ? lockdep_init_map_type+0x5c/0x280 [ 564.366821][T14253] ? __pfx_setup_net+0x10/0x10 [ 564.366868][T14253] ? debug_mutex_init+0x37/0x70 [ 564.366909][T14253] copy_net_ns+0x2a6/0x5f0 [ 564.366955][T14253] create_new_namespaces+0x3ea/0xa90 [ 564.366993][T14253] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 564.367028][T14253] ksys_unshare+0x45b/0xa40 [ 564.367067][T14253] ? __pfx_ksys_unshare+0x10/0x10 [ 564.367106][T14253] ? xfd_validate_state+0x61/0x180 [ 564.367155][T14253] __x64_sys_unshare+0x31/0x40 [ 564.367200][T14253] do_syscall_64+0xcd/0x490 [ 564.367245][T14253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.367279][T14253] RIP: 0033:0x7f83dc18ebe9 [ 564.367304][T14253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.367337][T14253] RSP: 002b:00007f83da3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 564.367370][T14253] RAX: ffffffffffffffda RBX: 00007f83dc3b5fa0 RCX: 00007f83dc18ebe9 [ 564.367393][T14253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 564.367414][T14253] RBP: 00007f83dc211e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.367436][T14253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.367457][T14253] R13: 00007f83dc3b6038 R14: 00007f83dc3b5fa0 R15: 00007ffec2746568 [ 564.367490][T14253] [ 564.823937][T14262] FAULT_INJECTION: forcing a failure. [ 564.823937][T14262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.898850][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.3.1704 Not tainted syzkaller #0 PREEMPT(full) [ 564.898887][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.898903][T14262] Call Trace: [ 564.898912][T14262] [ 564.898921][T14262] dump_stack_lvl+0x16c/0x1f0 [ 564.898957][T14262] should_fail_ex+0x512/0x640 [ 564.898997][T14262] _copy_from_user+0x2e/0xd0 [ 564.899039][T14262] memdup_user+0x6b/0xe0 [ 564.899073][T14262] strndup_user+0x78/0xe0 [ 564.899106][T14262] __x64_sys_mount+0x180/0x310 [ 564.899140][T14262] ? __pfx___x64_sys_mount+0x10/0x10 [ 564.899178][T14262] do_syscall_64+0xcd/0x490 [ 564.899212][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.899239][T14262] RIP: 0033:0x7fe37a18ebe9 [ 564.899257][T14262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.899295][T14262] RSP: 002b:00007fe37afa3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.899319][T14262] RAX: ffffffffffffffda RBX: 00007fe37a3b6090 RCX: 00007fe37a18ebe9 [ 564.899336][T14262] RDX: 0000200000000140 RSI: 0000000000000000 RDI: 00002000000000c0 [ 564.899352][T14262] RBP: 00007fe37a211e19 R08: 0000200000000180 R09: 0000000000000000 [ 564.899368][T14262] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 564.899383][T14262] R13: 00007fe37a3b6128 R14: 00007fe37a3b6090 R15: 00007fff41da0f98 [ 564.899406][T14262] [ 565.408936][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1713'. [ 565.462363][T14265] tc_dump_action: action bad kind [ 565.470718][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 565.938315][T14280] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 566.935447][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.941978][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.153669][T14301] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1711'. [ 568.215192][T14323] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880780020f0 pfn:0x78002 [ 568.265950][T14323] memcg:ffff888033539182 [ 568.270352][T14323] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 568.278110][T14323] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 568.287595][T14323] raw: ffff8880780020f0 0000000000000000 00000001ffffffff ffff888033539182 [ 568.296745][T14323] page dumped because: unmovable page [ 568.302228][T14323] page_owner tracks the page as allocated [ 568.308643][T14323] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7567, tgid 7566 (syz.3.314), ts 200673485060, free_ts 200142654008 [ 568.328433][T14323] post_alloc_hook+0x1c0/0x230 [ 568.333546][T14323] get_page_from_freelist+0x132b/0x38e0 [ 568.344152][T14323] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 568.380912][T14323] alloc_pages_mpol+0x1fb/0x550 [ 568.414881][T14323] alloc_pages_noprof+0x131/0x390 [ 568.420431][T14323] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 568.491026][T14323] __vmalloc_node_noprof+0xad/0xf0 [ 568.525669][T14323] copy_process+0x2c70/0x7690 [ 568.584167][T14323] kernel_clone+0xfc/0x930 [ 568.589023][T14323] __do_sys_clone+0xce/0x120 [ 568.594726][T14323] do_syscall_64+0xcd/0x490 [ 568.599803][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.607117][T14323] page last free pid 7560 tgid 7560 stack trace: [ 568.631413][T14323] __free_frozen_pages+0x7d5/0x10f0 [ 568.640514][T14329] netlink: 'syz.3.1716': attribute type 11 has an invalid length. [ 568.661454][T14329] netlink: 'syz.3.1716': attribute type 11 has an invalid length. [ 568.670654][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1716'. [ 568.679805][T14329] netlink: 'syz.3.1716': attribute type 11 has an invalid length. [ 568.689440][T14329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1716'. [ 568.708353][T14323] tlb_finish_mmu+0x237/0x7c0 [ 568.723727][T14323] exit_mmap+0x403/0xb90 [ 568.728196][T14323] __mmput+0x12a/0x410 [ 568.732390][T14323] mmput+0x62/0x70 [ 568.743634][T14323] do_exit+0x7c7/0x2bf0 [ 568.750272][T14329] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1716'. [ 568.764243][T14323] do_group_exit+0xd3/0x2a0 [ 568.773245][T14323] __x64_sys_exit_group+0x3e/0x50 [ 568.783473][T14323] x64_sys_call+0x14fa/0x1720 [ 568.807317][T14323] do_syscall_64+0xcd/0x490 [ 568.832033][T14323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.186101][T14338] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 569.312801][T14341] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 572.156165][T14382] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1728'. [ 572.171981][T14381] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1728'. [ 572.235214][T14382] netlink: 290 bytes leftover after parsing attributes in process `syz.0.1728'. [ 572.252289][T14382] veth0_macvtap: left promiscuous mode [ 572.797725][T14362] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 573.452817][T14407] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 574.124344][T14422] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1736'. [ 574.496179][T14426] device-mapper: ioctl: only supply one of name or uuid, cmd(16) [ 576.098911][T14459] ================================================================== [ 576.098930][T14459] BUG: KASAN: slab-out-of-bounds in do_con_write+0x3839/0x8280 [ 576.098972][T14459] Write of size 2 at addr ffff888079119f60 by task syz.0.1742/14459 [ 576.099000][T14459] [ 576.099018][T14459] CPU: 0 UID: 0 PID: 14459 Comm: syz.0.1742 Not tainted syzkaller #0 PREEMPT(full) [ 576.099056][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.099075][T14459] Call Trace: [ 576.099086][T14459] [ 576.099099][T14459] dump_stack_lvl+0x116/0x1f0 [ 576.099138][T14459] print_report+0xcd/0x630 [ 576.099182][T14459] ? __virt_addr_valid+0x81/0x610 [ 576.099214][T14459] ? __phys_addr+0xe8/0x180 [ 576.099245][T14459] ? do_con_write+0x3839/0x8280 [ 576.099279][T14459] kasan_report+0xe0/0x110 [ 576.099311][T14459] ? do_con_write+0x3839/0x8280 [ 576.099356][T14459] do_con_write+0x3839/0x8280 [ 576.099389][T14459] ? srcu_gp_start_if_needed+0xdc0/0xe70 [ 576.099437][T14459] ? __pfx___mutex_lock+0x10/0x10 [ 576.099481][T14459] ? __pfx_do_con_write+0x10/0x10 [ 576.099530][T14459] ? n_tty_write+0x1e8/0x11e0 [ 576.099559][T14459] ? rcu_is_watching+0x12/0xc0 [ 576.099596][T14459] con_write+0x23/0xb0 [ 576.099641][T14459] n_tty_write+0x41f/0x11e0 [ 576.099680][T14459] ? __pfx_n_tty_write+0x10/0x10 [ 576.099711][T14459] ? rcu_is_watching+0x12/0xc0 [ 576.099745][T14459] ? __pfx_woken_wake_function+0x10/0x10 [ 576.099800][T14459] ? kfree+0x24f/0x4d0 [ 576.099830][T14459] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 576.099883][T14459] ? __pfx_n_tty_write+0x10/0x10 [ 576.099916][T14459] file_tty_write.constprop.0+0x504/0x9b0 [ 576.099971][T14459] redirected_tty_write+0xd4/0x150 [ 576.100017][T14459] vfs_write+0x7d3/0x11d0 [ 576.100057][T14459] ? __pfx_redirected_tty_write+0x10/0x10 [ 576.100115][T14459] ? __pfx_vfs_write+0x10/0x10 [ 576.100167][T14459] ? lock_release+0x201/0x2f0 [ 576.100221][T14459] ksys_write+0x12a/0x250 [ 576.100260][T14459] ? __pfx_ksys_write+0x10/0x10 [ 576.100304][T14459] do_syscall_64+0xcd/0x490 [ 576.100350][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.100385][T14459] RIP: 0033:0x7f940db8ebe9 [ 576.100411][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.100445][T14459] RSP: 002b:00007f940ea1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.100475][T14459] RAX: ffffffffffffffda RBX: 00007f940ddb6090 RCX: 00007f940db8ebe9 [ 576.100496][T14459] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 576.100515][T14459] RBP: 00007f940dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 576.100535][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.100554][T14459] R13: 00007f940ddb6128 R14: 00007f940ddb6090 R15: 00007ffc29431ec8 [ 576.100585][T14459] [ 576.100597][T14459] [ 576.100606][T14459] Allocated by task 12277: [ 576.100622][T14459] kasan_save_stack+0x33/0x60 [ 576.100658][T14459] kasan_save_track+0x14/0x30 [ 576.100692][T14459] __kasan_kmalloc+0xaa/0xb0 [ 576.100724][T14459] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 576.100764][T14459] kmalloc_reserve+0xef/0x2c0 [ 576.100811][T14459] __alloc_skb+0x166/0x380 [ 576.100844][T14459] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 576.100889][T14459] process_one_work+0x9cf/0x1b70 [ 576.100935][T14459] worker_thread+0x6c8/0xf10 [ 576.100970][T14459] kthread+0x3c2/0x780 [ 576.101013][T14459] ret_from_fork+0x5d4/0x6f0 [ 576.101058][T14459] ret_from_fork_asm+0x1a/0x30 [ 576.101093][T14459] [ 576.101101][T14459] Freed by task 12277: [ 576.101115][T14459] kasan_save_stack+0x33/0x60 [ 576.101161][T14459] kasan_save_track+0x14/0x30 [ 576.101197][T14459] kasan_save_free_info+0x3b/0x60 [ 576.101224][T14459] __kasan_slab_free+0x60/0x70 [ 576.101259][T14459] kfree+0x2b4/0x4d0 [ 576.101284][T14459] skb_free_head+0x114/0x210 [ 576.101314][T14459] skb_release_data+0x795/0x9e0 [ 576.101351][T14459] consume_skb+0xbf/0x100 [ 576.101391][T14459] nsim_dev_trap_report_work+0x8bd/0xcf0 [ 576.101442][T14459] process_one_work+0x9cf/0x1b70 [ 576.101488][T14459] worker_thread+0x6c8/0xf10 [ 576.101513][T14459] kthread+0x3c2/0x780 [ 576.101553][T14459] ret_from_fork+0x5d4/0x6f0 [ 576.101598][T14459] ret_from_fork_asm+0x1a/0x30 [ 576.101638][T14459] [ 576.101645][T14459] The buggy address belongs to the object at ffff888079118000 [ 576.101645][T14459] which belongs to the cache kmalloc-4k of size 4096 [ 576.101671][T14459] The buggy address is located 3936 bytes to the right of [ 576.101671][T14459] allocated 4096-byte region [ffff888079118000, ffff888079119000) [ 576.101703][T14459] [ 576.101711][T14459] The buggy address belongs to the physical page: [ 576.101726][T14459] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79118 [ 576.101760][T14459] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 576.101788][T14459] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 576.101817][T14459] page_type: f5(slab) [ 576.101844][T14459] raw: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 576.101879][T14459] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 576.101913][T14459] head: 00fff00000000040 ffff88801b842140 dead000000000100 dead000000000122 [ 576.101941][T14459] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 576.101970][T14459] head: 00fff00000000003 ffffea0001e44601 00000000ffffffff 00000000ffffffff [ 576.101998][T14459] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 576.102016][T14459] page dumped because: kasan: bad access detected [ 576.102031][T14459] page_owner tracks the page as allocated [ 576.102043][T14459] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 49, tgid 49 (kworker/u8:3), ts 108977261943, free_ts 107143244344 [ 576.102119][T14459] post_alloc_hook+0x1c0/0x230 [ 576.102161][T14459] get_page_from_freelist+0x132b/0x38e0 [ 576.102196][T14459] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 576.102233][T14459] alloc_pages_mpol+0x1fb/0x550 [ 576.102277][T14459] new_slab+0x247/0x330 [ 576.102303][T14459] ___slab_alloc+0xcf2/0x1740 [ 576.102330][T14459] __slab_alloc.constprop.0+0x56/0xb0 [ 576.102359][T14459] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 576.102404][T14459] kmalloc_reserve+0xef/0x2c0 [ 576.102450][T14459] __alloc_skb+0x166/0x380 [ 576.102483][T14459] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 576.102530][T14459] process_one_work+0x9cf/0x1b70 [ 576.102577][T14459] worker_thread+0x6c8/0xf10 [ 576.102602][T14459] kthread+0x3c2/0x780 [ 576.102644][T14459] ret_from_fork+0x5d4/0x6f0 [ 576.102689][T14459] ret_from_fork_asm+0x1a/0x30 [ 576.102726][T14459] page last free pid 5231 tgid 5231 stack trace: [ 576.102743][T14459] __free_frozen_pages+0x7d5/0x10f0 [ 576.102772][T14459] __put_partials+0x165/0x1c0 [ 576.102802][T14459] qlist_free_all+0x4d/0x120 [ 576.102833][T14459] kasan_quarantine_reduce+0x195/0x1e0 [ 576.102873][T14459] __kasan_slab_alloc+0x69/0x90 [ 576.102916][T14459] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 576.102951][T14459] getname_flags.part.0+0x4c/0x550 [ 576.102996][T14459] getname_flags+0x93/0xf0 [ 576.103026][T14459] do_readlinkat+0xb4/0x3a0 [ 576.103066][T14459] __x64_sys_readlink+0x78/0xc0 [ 576.103090][T14459] do_syscall_64+0xcd/0x490 [ 576.103127][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.103165][T14459] [ 576.103173][T14459] Memory state around the buggy address: [ 576.103190][T14459] ffff888079119e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.103214][T14459] ffff888079119e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.103237][T14459] >ffff888079119f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.103256][T14459] ^ [ 576.103275][T14459] ffff888079119f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 576.103306][T14459] ffff88807911a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 576.103325][T14459] ================================================================== [ 576.118456][T14459] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 576.118484][T14459] CPU: 0 UID: 0 PID: 14459 Comm: syz.0.1742 Not tainted syzkaller #0 PREEMPT(full) [ 576.118525][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.118546][T14459] Call Trace: [ 576.118559][T14459] [ 576.118573][T14459] dump_stack_lvl+0x3d/0x1f0 [ 576.118630][T14459] vpanic+0x6e8/0x7a0 [ 576.118681][T14459] ? __pfx_vpanic+0x10/0x10 [ 576.118729][T14459] ? __pfx_vprintk_emit+0x10/0x10 [ 576.118770][T14459] ? do_con_write+0x3839/0x8280 [ 576.118822][T14459] panic+0xca/0xd0 [ 576.118882][T14459] ? __pfx_panic+0x10/0x10 [ 576.118933][T14459] ? do_con_write+0x3839/0x8280 [ 576.118978][T14459] ? preempt_schedule_common+0x44/0xc0 [ 576.119020][T14459] ? preempt_schedule_thunk+0x16/0x30 [ 576.119067][T14459] check_panic_on_warn+0xab/0xb0 [ 576.119125][T14459] end_report+0x107/0x170 [ 576.119169][T14459] kasan_report+0xee/0x110 [ 576.119214][T14459] ? do_con_write+0x3839/0x8280 [ 576.119274][T14459] do_con_write+0x3839/0x8280 [ 576.119322][T14459] ? srcu_gp_start_if_needed+0xdc0/0xe70 [ 576.119383][T14459] ? __pfx___mutex_lock+0x10/0x10 [ 576.119429][T14459] ? __pfx_do_con_write+0x10/0x10 [ 576.119478][T14459] ? n_tty_write+0x1e8/0x11e0 [ 576.119506][T14459] ? rcu_is_watching+0x12/0xc0 [ 576.119542][T14459] con_write+0x23/0xb0 [ 576.119586][T14459] n_tty_write+0x41f/0x11e0 [ 576.119626][T14459] ? __pfx_n_tty_write+0x10/0x10 [ 576.119656][T14459] ? rcu_is_watching+0x12/0xc0 [ 576.119691][T14459] ? __pfx_woken_wake_function+0x10/0x10 [ 576.119745][T14459] ? kfree+0x24f/0x4d0 [ 576.119775][T14459] ? file_tty_write.constprop.0+0x6ef/0x9b0 [ 576.119825][T14459] ? __pfx_n_tty_write+0x10/0x10 [ 576.119857][T14459] file_tty_write.constprop.0+0x504/0x9b0 [ 576.119919][T14459] redirected_tty_write+0xd4/0x150 [ 576.119966][T14459] vfs_write+0x7d3/0x11d0 [ 576.120005][T14459] ? __pfx_redirected_tty_write+0x10/0x10 [ 576.120062][T14459] ? __pfx_vfs_write+0x10/0x10 [ 576.120104][T14459] ? lock_release+0x201/0x2f0 [ 576.120158][T14459] ksys_write+0x12a/0x250 [ 576.120197][T14459] ? __pfx_ksys_write+0x10/0x10 [ 576.120243][T14459] do_syscall_64+0xcd/0x490 [ 576.120296][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.120332][T14459] RIP: 0033:0x7f940db8ebe9 [ 576.120360][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.120397][T14459] RSP: 002b:00007f940ea1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.120432][T14459] RAX: ffffffffffffffda RBX: 00007f940ddb6090 RCX: 00007f940db8ebe9 [ 576.120456][T14459] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 576.120482][T14459] RBP: 00007f940dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 576.120503][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.120524][T14459] R13: 00007f940ddb6128 R14: 00007f940ddb6090 R15: 00007ffc29431ec8 [ 576.120556][T14459] [ 576.120955][T14459] Kernel Offset: disabled